Merge pull request #312 from ShipSecAI/feat/studio-mcp-tools

feat(studio-mcp): add 25+ MCP tools for full agent coverage

Author: betterclever

backend/src/api-keys/dto/api-key.dto.ts

@@ -19,6 +19,36 @@ export const ApiKeyPermissionsSchema = z.object({
   audit: z.object({
     read: z.boolean(),
   }),
+  artifacts: z
+    .object({
+      read: z.boolean().optional(),
+      delete: z.boolean().optional(),
+    })
+    .optional(),
+  schedules: z
+    .object({
+      list: z.boolean().optional(),
+      read: z.boolean().optional(),
+      create: z.boolean().optional(),
+      update: z.boolean().optional(),
+      delete: z.boolean().optional(),
+    })
+    .optional(),
+  secrets: z
+    .object({
+      list: z.boolean().optional(),
+      read: z.boolean().optional(),
+      create: z.boolean().optional(),
+      update: z.boolean().optional(),
+      delete: z.boolean().optional(),
+    })
+    .optional(),
+  'human-inputs': z
+    .object({
+      read: z.boolean().optional(),
+      resolve: z.boolean().optional(),
+    })
+    .optional(),
 });
 
 export const CreateApiKeySchema = z.object({

backend/src/auth/auth.guard.ts

@@ -135,6 +135,28 @@ export class AuthGuard implements CanActivate {
       audit: {
         read: Boolean(permissions.audit?.read),
       },
+      artifacts: {
+        read: Boolean(permissions.artifacts?.read),
+        delete: Boolean(permissions.artifacts?.delete),
+      },
+      schedules: {
+        list: Boolean(permissions.schedules?.list),
+        read: Boolean(permissions.schedules?.read),
+        create: Boolean(permissions.schedules?.create),
+        update: Boolean(permissions.schedules?.update),
+        delete: Boolean(permissions.schedules?.delete),
+      },
+      secrets: {
+        list: Boolean(permissions.secrets?.list),
+        read: Boolean(permissions.secrets?.read),
+        create: Boolean(permissions.secrets?.create),
+        update: Boolean(permissions.secrets?.update),
+        delete: Boolean(permissions.secrets?.delete),
+      },
+      'human-inputs': {
+        read: Boolean(permissions['human-inputs']?.read),
+        resolve: Boolean(permissions['human-inputs']?.resolve),
+      },
     };
 
     return {

backend/src/database/schema/api-keys.ts

@@ -26,6 +26,28 @@ export interface ApiKeyPermissions {
   audit: {
     read: boolean;
   };
+  artifacts?: {
+    read?: boolean;
+    delete?: boolean;
+  };
+  schedules?: {
+    list?: boolean;
+    read?: boolean;
+    create?: boolean;
+    update?: boolean;
+    delete?: boolean;
+  };
+  secrets?: {
+    list?: boolean;
+    read?: boolean;
+    create?: boolean;
+    update?: boolean;
+    delete?: boolean;
+  };
+  'human-inputs'?: {
+    read?: boolean;
+    resolve?: boolean;
+  };
 }
 
 export const apiKeys = pgTable(

backend/src/schedules/schedules.module.ts

@@ -11,5 +11,6 @@ import { SchedulesService } from './schedules.service';
   imports: [DatabaseModule, TemporalModule, WorkflowsModule],
   controllers: [SchedulesController],
   providers: [SchedulesService, ScheduleRepository],
+  exports: [SchedulesService],
 })
 export class SchedulesModule {}