`delete_org_admin_members_by_userid_permissions_by_orgpermissionid`

Changes data · you confirm first Idempotent

Calls DELETE /api/org-admin/members/{userId}/permissions/{orgPermissionId} as the signed-in person · REST reference

Revoke a member's direct grant of one of the organization's permissions

With the caller's own token. Requires admin.roles.assign in the permission's organization. Removes the one direct grant; what the member holds through a role is untouched. Not idempotent: a grant that is not there is a 404.

Arguments

Argument	Type		Description
`userId`path	string (uuid)	required
`orgPermissionId`path	string (uuid)	required

Example call

A client sends this over the MCP session; Claude and other agents build it for you. The values are placeholders — the shape is real.

json

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "delete_org_admin_members_by_userid_permissions_by_orgpermissionid",
    "arguments": {
      "userId": "11111111-1111-4111-8111-111111111111",
      "orgPermissionId": "11111111-1111-4111-8111-111111111111"
    }
  }
}

Confirmation

The client shows the person the exact request and waits. Nothing runs until they tick Make this change. See Reading and changing.

Result

On success (HTTP 200) the tool returns one text item holding the API's JSON, pretty-printed.

The direct grant was revoked.

json

{
  "success": true,
  "data": {},
  "message": "string"
}

Fields

Field	Type	Description
`data`	any	The payload; absent when the operation returns nothing.
`message`	string
`success`	true

When it fails

A failed call returns isError: true with the API's message as text. A change the person declines, or lets time out, also comes back this way and nothing changes.

400: The request was malformed or failed a guard.
403: Authenticated, but the caller holds none of the required permissions.
404: No such resource — or none this caller may see.

What the model is shown

This is the tool exactly as the server lists it in tools/list. The description starts with the REST call it makes.

json

{
  "name": "delete_org_admin_members_by_userid_permissions_by_orgpermissionid",
  "description": "DELETE /api/org-admin/members/{userId}/permissions/{orgPermissionId} — With the caller's own token. Requires `admin.roles.assign` in the permission's organization. Removes the one direct grant; what the member holds through a role is untouched. Not idempotent: a grant that is not there is a 404.\n\nThis changes data. The person is asked to confirm it before it runs, and nothing happens if they decline.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "userId": {
        "type": "string"
      },
      "orgPermissionId": {
        "type": "string"
      }
    },
    "required": [
      "userId",
      "orgPermissionId"
    ]
  },
  "annotations": {
    "readOnlyHint": false,
    "destructiveHint": true,
    "idempotentHint": true,
    "openWorldHint": false
  }
}