scenario-team-admin
Scenario Team Administration
Overview
Enterprise teams govern Scenario from the same agent that generates on it: which models anyone may
run, who is on the team and in which projects, how much each member may spend, and which API keys
exist with which roles. Every tool here is catalog-only: scenario_tools_search returns the schema
and lane, and scenario_tool_execute_read / write / delete runs it with {name, parameters},
scope ids inside parameters (see the scenario skill). Two facts decide most failures before any
argument does: the identity behind the call, since team-level writes need a human team admin over
OAuth and refuse API keys, and the list mode the team runs, since the same model-access edit means
the opposite thing in blocklist and allowlist mode. teams_list already tells you both: each team
row carries modelsManagement, its model lists, plan, and context.userRole. A credential that
reaches one team and one project has its scope; more than one is a stop-and-list, per the scenario
skill. If a sibling skill named here is missing from your available skills, load it with skill_get
(Scenario MCP) or ask the user to install it (https://github.com/scenario-labs/skills#install);
unattended, proceed from tool schemas and flag the gap.