Service accounts

Back to the MCP tool reference.

list_service_accounts

List accounts whose defaults match one exact resolved context.

Operation type: Read-only

Annotations: read-only true, destructive false, idempotent true, open-world true

Input schema:

{
  "properties": {
    "cluster": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Cluster"
    },
    "limit": {
      "default": 50,
      "title": "Limit",
      "type": "integer"
    },
    "org": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Org"
    },
    "project": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Project"
    }
  },
  "title": "list_service_accountsArguments",
  "type": "object"
}

Output schema:

{
  "additionalProperties": true,
  "title": "list_service_accountsDictOutput",
  "type": "object"
}

get_service_account

Get safe service-account metadata in one exact default context.

Operation type: Read-only

Annotations: read-only true, destructive false, idempotent true, open-world true

Input schema:

{
  "properties": {
    "account_id_or_name": {
      "title": "Account Id Or Name",
      "type": "string"
    },
    "cluster": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Cluster"
    },
    "org": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Org"
    },
    "project": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Project"
    }
  },
  "required": [
    "account_id_or_name"
  ],
  "title": "get_service_accountArguments",
  "type": "object"
}

Output schema:

{
  "additionalProperties": true,
  "title": "get_service_accountDictOutput",
  "type": "object"
}

create_service_account

Create an account and sink its token without returning token material. File sinks are protected local files. Secret sinks do not use the local filesystem.

Operation type: Write

Annotations: read-only false, destructive false, idempotent false, open-world true

Input schema:

{
  "properties": {
    "cluster": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Cluster"
    },
    "destination_name": {
      "title": "Destination Name",
      "type": "string"
    },
    "destination_type": {
      "enum": [
        "file",
        "secret"
      ],
      "title": "Destination Type",
      "type": "string"
    },
    "name": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Name"
    },
    "org": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Org"
    },
    "project": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Project"
    }
  },
  "required": [
    "destination_type",
    "destination_name"
  ],
  "title": "create_service_accountArguments",
  "type": "object"
}

Output schema:

{
  "additionalProperties": true,
  "title": "create_service_accountDictOutput",
  "type": "object"
}

delete_service_account

Delete one exact immutable account ID after context verification.

Operation type: Destructive write

Annotations: read-only false, destructive true, idempotent true, open-world true

Input schema:

{
  "properties": {
    "account_id": {
      "title": "Account Id",
      "type": "string"
    },
    "cluster": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Cluster"
    },
    "org": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Org"
    },
    "project": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "null"
        }
      ],
      "default": null,
      "title": "Project"
    }
  },
  "required": [
    "account_id"
  ],
  "title": "delete_service_accountArguments",
  "type": "object"
}

Output schema:

{
  "additionalProperties": true,
  "title": "delete_service_accountDictOutput",
  "type": "object"
}