Delete User

Description

Deletes an existing AttackForge user. This is a write operation, and a soft delete: the user record is kept, the account is blocked and stops appearing in the normal user listings, and every access token the user holds is revoked, so any session they have is ended and they cannot sign in again. It is reversible - restore_user brings the account back.

The shape of args is declared inline (see Building args for Write Tools), so no preparatory call is needed. A deleted user is hidden from find_users and count_users unless include_deleted is set.

Preconditions: the caller must be an administrator, the target cannot be the calling user, and the last remaining active administrator cannot be deleted. On success the user id is returned together with an updated flag.

How To Enable

1. Go to Users

2. Select the user you would like to provide access to this tool

3. Click on Access > MCP

4. Click on Add Tools

5. Select the tool delete_user and click Add

Example Prompts

• Delete the user [e-mail].

• Remove Bob's account - he has left the company.

• Delete every client user that has never logged in.

Parameters

Parameter	Type	Required	Description
args	object	Yes	The user-deletion payload - see the keys below.

args keys:

Key	Type	Required	Description
user_id	string	Yes	Id (24-hex) of the user to delete. Source: find_users. The calling user cannot be deleted, and neither can the last remaining active administrator.

updated is true when the user was actually deleted by this call. false means the call succeeded but changed nothing because the user was already deleted - it is not an error and the call should not be retried.

Example Response

{
  "user_id": "65a440c08cade68ca7bc7192",
  "updated": true
}