Grouper MCP server - user guide
- 1 Introduction
- 2 UI info page
- 3 Client setup examples
- 4 Available MCP tools
- 4.1 admin_config_search
- 4.2 admin_daemon_job_message
- 4.3 admin_daemon_job_run
- 4.4 admin_daemon_logs
- 4.5 admin_daemon_names
- 4.6 admin_external_system_get
- 4.6.1 Action: listExternalSystems
- 4.6.2 Action: getUser
- 4.7 attribute_assignment_get
- 4.8 attribute_assignment_save
- 4.9 attribute_def_name_find
- 4.10 audit_get
- 4.11 doc_search
- 4.12 entity_get
- 4.13 entity_get_groups
- 4.14 entity_whoami
- 4.15 folder_delete
- 4.15.1 Parameters
- 4.16 folder_find
- 4.17 folder_save
- 4.17.1 Parameters
- 4.18 group_add_member
- 4.19 group_delete
- 4.19.1 Parameters
- 4.20 group_find
- 4.21 group_get_members
- 4.22 group_get_permissions
- 4.23 group_has_member
- 4.24 group_remove_member
- 4.25 group_rename
- 4.25.1 Parameters
- 4.26 group_save
- 4.26.1 Parameters
- 4.26.2 Actions
- 4.26.3 Scripted (JEXL) groups
- 4.27 institutional_tools
- 4.27.1 Action: schema
- 4.27.2 Action: execute
- 5 The deployer controls which templates are available via MCP through the mcpEnabled configuration property on each GSH template. All security run types (wheel, specifiedGroup, privilegeOnObject, and everyone) are supported. The mcpReadonly flag determines whether readonly MCP users can see and execute the template, and the per-input mcpScopeType setting enables OAuth scope validation on non-readonly templates. See the admin guide for configuration details.
- 5.1 ldap
- 5.1.1 Parameters
- 5.1.2 Response (listExternalSystems)
- 5.1.3 Response (filter)
- 5.1.4 Limits
- 5.2 memberships_get
- 5.2.1 Parameters
- 5.2.2 Response
- 5.3 privilege_assign
- 5.4 privilege_get
- 5.5 sql_get_schema
- 5.6 sql_select
- 5.1 ldap