Version
READ

get_role

Read one role by UUID — its team, code, name and the permission codes it grants. Read-only.

Fetch one role, the same row list_roles emits: id, team_id, code, name, the permissions codes it grants and created_at. Read it before update_role to change the permission list from what actually stands rather than from memory.

Read-only. Never mutates anything.

Requires ability

The token behind the MCP session must hold it, or the call is refused with TOKEN_MISSING_ABILITY.

Runs the same action as

The REST endpoint and this tool share one action, so validation, permissions and events are identical.

Annotations

Read-only

It reads and never changes anything.

Arguments

role_id*string

UUID of the role to fetch.

How it fails

RESOURCE_NOT_FOUND

the id is unknown, or the role belongs to a team the caller is not a member of.

TOKEN_MISSING_ABILITY

token lacks role:view.

Arguments

  • role_id (required) — UUID of the role, from list_roles.

How is this guide?

Last updated on