`get_org_admin_by_orgid_members`

Read-only

Calls GET /api/org-admin/{orgId}/members as the signed-in person · REST reference

The organization's members, what each holds there, and where it comes from

With the caller's own token; requires admin.users.view in the organization (every member holds it). An invited member is listed and holds nothing until they join.

Arguments

Argument	Type		Description
`orgId`path	string (uuid)	required

Example call

A client sends this over the MCP session; Claude and other agents build it for you. The values are placeholders — the shape is real.

json

{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "get_org_admin_by_orgid_members",
    "arguments": {
      "orgId": "11111111-1111-4111-8111-111111111111"
    }
  }
}

Result

On success (HTTP 200) the tool returns one text item holding the API's JSON, pretty-printed.

The organization's current members, the owner first.

json

{
  "data": [
    {
      "directGrantIds": [],
      "grants": [],
      "groups": [],
      "isOwner": true,
      "joined": true,
      "userId": "11111111-1111-4111-8111-111111111111",
      "email": "string",
      "firstName": "string",
      "lastName": "string"
    }
  ],
  "success": true
}

Fields

Field	Type	Description
`data`	array of object
`data[].directGrantIds`	array of string (uuid)	The member's direct grants (OrgPermission ids), held or not yet.
`data[].email`	string \| null
`data[].firstName`	string \| null
`data[].grants`	array of object	What the member HOLDS here and where each comes from — empty until joined.
`data[].grants[].permission`	object	One organization's instance of a catalog feature — something its roles and members can be granted. An organization has one per feature its TYPE is entitled to, so this is also the ceiling of what can be delegated there. `name`, `category`, `description` and `riskLevel` come from the DAL's feature catalog.
`data[].grants[].sources`	array of object
`data[].groups`	array of object
`data[].groups[].id`	string (uuid)
`data[].groups[].name`	string
`data[].groups[].status`	"INVITED" \| "REQUESTED" \| "ACCEPTED" \| "APPROVED" \| "ACTIVE" \| "DECLINED" \| … (8 values)
`data[].groups[].type`	string \| null
`data[].isOwner`	boolean
`data[].joined`	boolean	True once a membership of the organization confers authority; false while only invited.
`data[].lastName`	string \| null
`data[].userId`	string (uuid)
`success`	true

When it fails

A failed call returns isError: true with the API's message as text.

400: The request was malformed or failed a guard.
403: Authenticated, but the caller holds none of the required permissions.

What the model is shown

This is the tool exactly as the server lists it in tools/list. The description starts with the REST call it makes.

json

{
  "name": "get_org_admin_by_orgid_members",
  "description": "GET /api/org-admin/{orgId}/members — With the caller's own token; requires `admin.users.view` in the organization (every member holds it). An invited member is listed and holds nothing until they join.",
  "inputSchema": {
    "type": "object",
    "properties": {
      "orgId": {
        "type": "string"
      }
    },
    "required": [
      "orgId"
    ]
  },
  "annotations": {
    "readOnlyHint": true,
    "openWorldHint": false
  }
}