# Users and invitations with DIDWW MCP Use DIDWW MCP to review who can access the active DIDWW account and manage supported user invitations through a connected MCP client. Note Users and invitations are available through DIDWW MCP only to users with the **Admin** role. MCP responses return this role under its internal name, `SuperAdmin`. ## What you can do Describe the information or result you want in plain language. When possible, identify the active DIDWW account, user, invitation email address, or required roles. ### Review account access | Action | What you can request | | --- | --- | | Review account users | List users who can access the active DIDWW account and review their email addresses and assigned roles. | | Review access information | Review whether a user is the account owner, whether two-factor authentication is enabled, and the available last-login information. | | Review invitation roles | Review the supported roles that can be assigned when preparing a new invitation. | | Review pending invitations | List pending invitations for the active account and review their email addresses, assigned roles, and statuses. | ### Manage invitations | Action | What you can request | | --- | --- | | Prepare a new invitation | Prepare an invitation for an email address with one or more supported roles. DIDWW shows the email address, assigned roles, and active account before sending the invitation. | | Cancel a pending invitation | Cancel an invitation that is still pending. An invitation that has already been accepted or canceled cannot be canceled again. | ## How users and invitations relate A user-access record represents a user who can already access the active DIDWW account. The user's assigned roles determine which account information and actions are available to them. A pending invitation does not provide account access until the recipient accepts it. Canceling a pending invitation prevents it from being used to join the account. User access and invitations belong to a specific DIDWW account. If you can access multiple accounts, verify the active account before reviewing users or preparing an invitation. ## Before inviting a user Before asking the MCP client to prepare an invitation, verify: - the active DIDWW account - the recipient's email address - the roles the recipient requires - the account access those roles will provide Assign only the roles required for the recipient's work. For detailed role permissions, see [Users and roles](../../account-settings/adding-new-roles.html). ## Permissions and confirmations Only a user with the **Admin** role can review account users or manage invitations through DIDWW MCP. Reviewing account users, roles, and pending invitations does not change the account. Creating an invitation uses DIDWW two-step confirmation. The MCP client first presents a preview containing the active account, recipient email address, and assigned roles. DIDWW sends the invitation email only after you confirm the preview. A confirmation applies only to the invitation shown in the preview. If the email address, active account, or assigned roles change, DIDWW requires a new preview and confirmation. Canceling an invitation is available only while the invitation is pending. Review the email address, roles, status, and active account before requesting cancellation. ## Privacy and security User and invitation information returned through DIDWW MCP is processed by the connected AI provider under its terms and privacy policy. Depending on the request, this information can include: - user and invitation email addresses - assigned roles - account-owner status - two-factor authentication status - last-login information Request only the information needed for the account-access task. Verify the recipient's email address before confirming an invitation because DIDWW sends the invitation to that address. DIDWW MCP does not expose API keys or other account secrets. Do not enter API keys, passwords, or two-factor authentication codes in an AI conversation. ## Product requirements A user or invitation request may be unavailable because: - your DIDWW user does not have the **Admin** role - the selected user or invitation belongs to another DIDWW account - an invitation is no longer pending - the email address or selected roles are not accepted When possible, the response identifies the applicable requirement or explains which action must be completed in the DIDWW User Panel. ## Current limitations DIDWW MCP does not support: - changing the roles assigned to an existing user - revoking an existing user's account access - listing invitations that are no longer pending - canceling an invitation that has already been accepted or canceled - listing, creating, editing, exposing, or deleting API keys Use the DIDWW User Panel to change an existing user's roles or revoke their account access. ## Example requests Review account users ``` Show the users who can access the active DIDWW account. Include their roles, owner status, two-factor authentication status, and available last-login information. Do not make any changes. ``` Review invitation roles ``` Show the roles that can be assigned in a new DIDWW user invitation. Do not create or send an invitation. ``` Review pending invitations ``` Show the pending invitations for the active DIDWW account. Include each email address, assigned roles, and invitation status. Do not cancel or send any invitations. ``` Prepare a user invitation ``` Prepare an invitation for ops@example.com with the Technical role. Show the active account, email address, and assigned role. Do not send the invitation until I confirm it. ``` Cancel a pending invitation ``` Find the pending invitation for ops@example.com. Show its active account, assigned roles, and current status. Explain what cancellation will do and wait for my instruction. ``` On this page