Administer a Cube tenant

The widest surface in this plugin, and the one where mistakes affect other people. Everything here is real: removing a user removes their access.

CLI-only. The Cube MCP tools do not administer users, groups or access. Without a terminal and the Cube CLI, say so, and point the user to Admin in the Cube console.

Preflight

command -v cube >/dev/null || echo "Cube CLI not installed: curl -fsSL https://raw.githubusercontent.com/cube-js/cube/master/install-cli.sh | sh"
cube whoami || echo "Not authenticated. Interactive: cube login. Headless: set CUBE_API_URL + CUBE_API_KEY."
cube context list   # the wrong tenant here changes the wrong company's access

Read before you write