UpdateGroupMCPTools

Grant a group access to MCP tools, or revoke it.

Only an Administrator can call this route, and it cannot be run as another user. The MCP module must be enabled.

Tools are named as in the MCP server, e.g. 'find_projects'. Get Available MCP Tools lists every name that is accepted, and Get Group MCP Tools lists the ones the group has now. A later operation on the same tool wins.

The access is held by the group, as on its Other Access page in the application, and every member of the group who has an API key has it on top of their own. No member is changed or given an API key, so a member without one gets no tools from the group. A tool that a member has been given directly, or by another group, stays available to them after it is removed here.

Headers

PATCH /api/ss/group/:id/mcp-tools HTTP/1.1
Host: demo.attackforge.com
X-SSAPI-KEY: APIKey
Content-Type: application/json

Request

Path Parameters

id - string | required

ID of the group. Must be a 24-character hexadecimal id.

Body

operations - list of objects | required

Delegations to grant or revoke. At least one operation is required.

• tools - list of strings | required

  • List of tool names. At least one is required.

• type - string | required

  • Must be either 'add' or 'remove'

Example

Request

curl --request PATCH \
	--url https://demo.attackforge.com/api/ss/group/5eacb8450c8d520a8281e539/mcp-tools \
	--header 'content-type: application/json' \
	--header 'x-ssapi-key: ************' \
	--data '{
		"operations":[
			{
				"type":"add",
				"tools":[
					"find_projects",
					"find_vulnerabilities"
				]
			},
			{
				"type":"remove",
				"tools":[
					"create_project"
				]
			}
		]
	}'

Response

{
  "status": "ok | error",
  "error": "..."
}

Access and failures

Errors are returned in error:

• Unauthorized - the caller is not an Administrator.

• Group Not Found or Error Finding Group - the group could not be found. An archived group is not found.

• Unknown tools: a, b - a tool is not one of the MCP tools. Nothing is applied.

• Error Granting MCP Tools or Error Revoking MCP Tools - the change could not be saved. Tools are granted before any are revoked, so a revoking error means the grants were applied.