Helix Admin MCP

Use the Admin MCP server only when the user explicitly requests an in-scope resource mutation. Interactive principals use WorkOS OAuth. Headless automation may use a project-scoped service credential. Application database keys do not authenticate MCP.

Tools and operations

• helix_list_database_keys: read customer-owned keys; operational keys are never exposed.
• helix_prepare_admin_operation: validate and prepare one exact typed mutation.
• helix_execute_admin_operation: atomically consume and dispatch it once.

Supported operation identifiers:

• create_tenant (creates a default read-write application key and returns its raw token once)
• delete_tenant
• create_database_key (read_only or read_write; raw token returns once)
• revoke_database_key