scenario-team-admin
Scenario Team Administration
Overview
Enterprise teams govern Scenario from the same agent that generates on it: which models anyone may run, who is on the team and in which projects, how much each member may spend, and which API keys exist with which roles. Every tool here is catalog-only: scenario_tools_search returns the schema and lane, and scenario_tool_execute_read / write / delete runs it with {name, parameters}, scope ids inside parameters (see the scenario skill). Two facts decide most failures before any argument does: the identity behind the call, since team-level writes need a human team admin over OAuth and refuse API keys, and the list mode the team runs, since the same model-access edit means the opposite thing in blocklist and allowlist mode. teams_list already tells you both: each team row carries modelsManagement, its model lists, plan, and context.userRole. A credential that reaches one team and one project has its scope; more than one is a stop-and-list, per the scenario skill. If a sibling skill named here is missing from your available skills, ask the user to install it (npx skills add scenario-labs/skills --skill <name>); unattended, proceed from tool schemas and flag the gap.
Quick reference
| Task | Tool | Lane | Notes |
|---|---|---|---|
| Read model access | model_access_get |
read | Mode plus the team's active list; project_id adds that project's list alongside it |
| Change model access | model_access_update |
write | level team or project; exactly one of add_models, remove_models |
| Team roster | team_members_list |
read | Members and pending invitations |
| Invite | team_members_add |
write | 1 to 32 emails, role, optional project_ids joined on acceptance |
| Roles and spend caps | team_members_update |
write | member_ids 1 to 32; role and/or max_consumption |
| Remove from the team | team_members_remove |
delete | Also withdraws invitations; access ends immediately |
| Project roster | project_members_list, _add, _update, _remove |
read, write, delete | Roles admin (Owner), editor (Contributor), reader (Viewer) |
| API keys | api_keys_list, api_key_get, api_key_update, api_key_delete |
read, write, delete | Project scope; api_key_create returns the portal link and nothing else |
| Who spent what | usage |
read (default tools) | Per-user and per-model consumption in the default response |