| name | preset-admin |
| description | Manage Preset teams, workspaces, memberships, invites, role identifiers, seat checks, and audit logs through direct Management API calls. Use only for direct API workflows; Do not use for MCP-only work. |
preset-admin
Use for Preset Management API administration beyond read-only workspace discovery.
Always
- Auth and conventions come from
preset-api (JWT exchange, base URLs, Rison); resolve the workspace hostname through the Management API when it is not already known.
- Default to read-only preflight and ID/role lookup.
- Resolve team, workspace, user, invite, and role identifiers from API responses before mutations.
- Get explicit confirmation before role changes, invites, member removals, workspace lifecycle actions, audit downloads, or any write.
- Use
preset-roles-permissions for permission-sensitive role/access changes.
Decision Rules
- Classify membership role and invite changes as approval-gated mutations.
- Use metadata reads for membership, role, invite, and audit inspection.
- Require target and effect summary before any access change.
- Avoid applying invite or member role changes until approval is explicit.
Workflow Order
- Identify team, workspace, user, invite, member, and role identifiers.
- Inspect membership, role, invite, and audit metadata.
- Prepare approval summary with target and expected effect.
- Stop before invite, member role, removal, or workspace change.
Retrieve
Do Not
- Do not use internal
/api-internal/*, billing/payment, SCIM, API key CRUD, permission/DAR/RLS, or database connection mutation routes from this skill.
