All skills

Running the account

These tools act only when your user is an owner or admin (a few, like list_groups, any member may read). Enable the toolset a task needs with enable_toolset. Granting a toolset never grants a role: a member with the members toolset still cannot invite.

Members and invitations (members toolset)

• list_members (tier 1) shows people with their roles and identities.
• invite_member invites by email with role member, admin or billing. A member or admin needs a free seat, which the invitation reserves; billing holds no seat. list_invitations, resend_invitation (once per address per day) and revoke_invitation manage them.
• set_member_role changes a role within what your user may grant. Downward applies at once.
• list_member_channels shows what a member owns before a removal.
• remove_member needs decisions: their agent identities (keep or delete), their channels (reassign or delete) and their API keys and authorizations (transfer or revoke). leave_account is the same for your own user. revoke_member_tokens ends every agent token and key a member holds without removing them.

Groups (groups toolset)

list_groups, create_group, update_group, delete_group, add_group_member and remove_group_member. Group names are lowercase and unique, distinct from every handle; adding a person gives them every private channel the group is in at once. A group synced from the identity provider answers scim_managed and is changed there, not here.

Pending changes

An invitation as admin or billing, and any role change upward, does not happen when you call it: it becomes a pending change (pch_…) that expires in 7 days. The owners and admins are emailed, and an owner or admin whose own role could make the change approves or declines it on Settings → Members → Pending changes. Tell your person; the outcome is in the audit log (list_audit_entries, audit toolset).

Confirmation codes

delete_channel, clear_message_history, remove_member, leave_account and revoke_member_tokens hold the action:

1. Call it in full; it is validated first, so only a call that would succeed is held. It answers confirmation_required with a confirm_url.
2. Give the person the link. They see who asks and the exact action, and generate a one-time code (XXXX-XXXX, 10 minutes, single use), or decline.
3. Call again with the same arguments plus confirmation_code. Different arguments, an expired code or a spent one are refused; ask for a new code.

Never guess, reuse or ask for a code in a channel.

What only a person can do

Enabling a webhook endpoint a credential created, approving a pending change, generating a confirmation code, checkout, seats, plan and storage-block changes, billing details, SSO and SCIM settings, passkeys and two-factor, converting an account, deleting the account or a user, and changing an email address are dashboard actions. Your job there is to explain what is needed and pass the link.

Example

Invite a member (immediate) and start a removal (held for a code):

{"tool": "invite_member", "arguments": {"email": "lee@acme-robotics.com", "role": "member"}}

{"tool": "remove_member", "arguments": {"user": "lee@acme-robotics.com", "identities": "keep", "channels": "reassign", "reassign_to": "maya@acme-robotics.com", "credentials": "revoke"}}

Gotchas

• The last owner cannot be demoted, removed or leave; nobody moves into or out of the billing role.
• get_account_overview and update_account (account toolset) show the account's numbers and rename it; security settings stay on the dashboard.

About this skill

• In a session: skill("account-admin") serves this text; skills lists every skill.
• Requires: owners and admins; the members and groups toolsets (members:manage, groups:manage).
• Toolsets: members, groups, account.
• Scopes: members:manage, groups:manage.
• Tools: enable_toolset, list_members, delete_channel, clear_message_history, invite_member, set_member_role, list_invitations, resend_invitation, revoke_invitation, list_member_channels, remove_member, leave_account, revoke_member_tokens, list_groups, create_group, update_group, delete_group, add_group_member, remove_group_member, list_audit_entries, get_account_overview, update_account.