Support inviting organization members via MCP
维护者通常 1 天内回复
还没有人认领这个 Issue。
评估
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 新手友好度
- 48/100
- Issue 类型
- 功能
- 描述清晰度
- 基本清楚
- 活跃度
- 活跃
- 技术栈
- typescript
- 领域
- api, authentication
调研方向
Start with the MCP tools and API client in mcp-core, then read mcp-core/src/permissions.ts and mcp-core/src/scopes.ts alongside the hosted OAuth route at mcp-cloudflare/src/server/oauth/routes/authorize.ts. Trace how existing tools make authenticated requests and check the organization member endpoint’s permission and invite constraints. Done means an invite tool is available with the required scope and permission handling, and tests cover successful invitations and relevant errors, including disabled invites and conflicts.
由索引模型根据 Issue 内容生成。
描述
The Sentry MCP server has no way to invite or add members to an organization. So when a user asks their agent to invite people by email, the agent gets stuck. One agent hit this and sent in user feedback (MCP-SERVER-GKS): the user asked to invite three emails to their org, and the agent found nothing that could do it.
Current state
- No tool in the catalog invites, adds or lists org members.
mcp-corehas no API client calls to/organizations/{org}/members/. - Sentry already exposes
POST /api/0/organizations/{org}/members/(email,orgRole,teamRoles,sendInvite).MemberPermissionallows POST withmember:invite,member:writeormember:admin. - The hosted OAuth flow (
mcp-cloudflare/src/server/oauth/routes/authorize.ts) asks for a fixed set of scopes frommcp-core/src/scopes.ts:org:read project:write team:write event:write alerts:write. None of those are member scopes, so existing hosted tokens can't call the endpoint. member:inviteis not in the MCPScopetype inmcp-core/src/permissions.ts, which only hasmember:read/write/admin.
Constraints the backend already enforces
- The
organizations:invite-membersfeature can turn invites off for an org (403). - The assigned role must be one the inviter is allowed to grant. It defaults to
member. - When open team membership is off, members with
member:invitecan only invite into teams they belong to. - Invites are rate-limited per org, email and inviter (429). Existing invites or invite requests return conflict errors.
Why it matters
- Inviting teammates is a common setup step. Adding members can also lead orgs to a paid plan.
- An invite sends a real email to an outside address. That's a new kind of side effect for the MCP, and it should be guarded against agent mistakes.
Related: #927 (org member / assignee lookup tools).
via Dhrumil.
--
- 主要语言
- TypeScript
- 星标
- 957
- 派生
- 174
- 平均合并
- 13 小时 16 分钟
- 30 天内合并 PR
- 407
环境准备
这个项目没有提供开发容器、Dockerfile 或贡献指南，环境需要你自己搭建：先看它的 README，通用步骤见我们的新手贡献指南。
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
getsentry/toolkit 的其他 Issue
-
CLI enhancement MCP
难度 2/5 1-3 小时 新手友好度 63/100
getsentry/toolkit#1908 · 1 条评论 ·
维护者通常 1 天内回复
-
Docs MCP URL normalization retains query strings and fragments可能已有人在做 @pcbeingused333 于 8 天前认领。 未关闭bug MCP
难度 2/5 1-3 小时 新手友好度 73/100
getsentry/toolkit#1618 · 1 条评论 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 72/100
getsentry/toolkit#1471 · 1 条评论 ·
维护者通常 1 天内回复
-
难度 4/5 3-5 天 新手友好度 48/100
getsentry/toolkit#2065 · 7 条评论 ·
维护者通常 1 天内回复
-
Release v4 as the Sentry CLI, replacing sentry-cli可能已有人在做 @BYK 于 3 天前认领。 未关闭
getsentry/toolkit#1965 · 1 条评论 · 已指派 1 人 ·
维护者通常 1 天内回复
查看 getsentry/toolkit 的全部 Issue
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 78/100
microsoft/vscode-containers#655 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 77/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 72/100
dsh-tauri-desk/deepseek-harness-desktop#1477 · 1 条评论 ·
-
[docs] RELEASE.md: wrong branch name, no check that the prepare PR merged with the right subject, manual publish step可能已有人在做 @albertteoh 今天认领。 未关闭documentation
难度 2/5 1-3 小时 新手友好度 85/100
jaegertracing/jaeger-ui#4739 ·
维护者通常 1 天内回复
-
check:passed streams:add
难度 2/5 1-3 小时 新手友好度 64/100
维护者通常 1 天内回复