# Access reviews MCP tools

This page documents **27 tools** in the access reviews group. Return to the [complete MCP tool reference](/docs/developers/api/mcp/tools) to browse another group.

Select a tool to inspect its schemas and behavior. Schema links open the exact definition in GitHub.

### `listAccessReviewCampaigns` — List Access Review Campaigns

List access review campaigns for an organization.

- **Input:** [`ListAccessReviewCampaignsInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10787-L10803)
- **Output:** [`ListAccessReviewCampaignsOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10805-L10816)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L19976–L19987 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L19976-L19987)

### `listAccessEntries` — List Access Entries

List access entries for a campaign with optional filters (decision, flag, is_admin, active, auth_method, account_type).

- **Input:** [`ListAccessEntriesInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10818-L10856)
- **Output:** [`ListAccessEntriesOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10858-L10869)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L19988–L19999 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L19988-L19999)

### `getAccessReviewStatistics` — Get Access Review Statistics

Get statistics for an access review campaign including counts by decision and flag.

- **Input:** [`GetAccessReviewStatisticsInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10871-L10878)
- **Output:** [`GetAccessReviewStatisticsOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10880-L10886)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20000–L20011 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20000-L20011)

### `recordAccessReviewEntryDecision` — Record Access Review Entry Decision

Record a decision on an access entry (APPROVED, REVOKE, DEFER, or ESCALATE). Non-APPROVED decisions require a decision_note.

- **Input:** [`RecordAccessReviewEntryDecisionMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10888-L10902)
- **Output:** [`RecordAccessReviewEntryDecisionMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10904-L10910)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L20012–L20023 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20012-L20023)

### `recordAccessReviewEntryDecisions` — Record Access Review Entry Decisions

Record decisions on multiple access entries in a single batch. Non-APPROVED decisions require a decision_note.

- **Input:** [`RecordAccessReviewEntryDecisionsMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10912-L10933)
- **Output:** [`RecordAccessReviewEntryDecisionsMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10935-L10943)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L20024–L20035 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20024-L20035)

### `flagAccessReviewEntry` — Flag Access Review Entry

Flag an access entry with one or more flags during review (ORPHANED, INACTIVE, EXCESSIVE, ROLE_MISMATCH, NEW, etc.). Optionally provide reasons.

- **Input:** [`FlagAccessReviewEntryMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10945-L10963)
- **Output:** [`FlagAccessReviewEntryMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10965-L10971)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L20036–L20047 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20036-L20047)

### `closeAccessReviewCampaign` — Close Access Review Campaign

Close an access review campaign. All entries must have been decided (no PENDING entries).

- **Input:** [`CloseAccessReviewCampaignMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10973-L10980)
- **Output:** [`CloseAccessReviewCampaignMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L10982-L10988)
- **Behavior:** Writes data · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20048–L20059 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20048-L20059)

### `listAccessReviewSources` — List Access Review Sources

List access sources for an organization.

- **Input:** [`ListAccessReviewSourcesInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11051-L11067)
- **Output:** [`ListAccessReviewSourcesOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11069-L11080)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20060–L20071 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20060-L20071)

### `createAccessReviewSources` — Create Access Review Sources

Create access sources for an organization. Connect the provider in the console first, then pass that connector id here. This operation does not collect credentials. A CSV source is the path with no provider. One call accepts the whole list and skips an account that already has a source.

- **Input:** [`CreateAccessReviewSourcesMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11100-L11114)
- **Output:** [`CreateAccessReviewSourcesMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11131-L11139)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L20072–L20087 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20072-L20087)

### `updateAccessReviewSource` — Update Access Review Source

Update an existing access source.

- **Input:** [`UpdateAccessReviewSourceMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11141-L11163)
- **Output:** [`UpdateAccessReviewSourceMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11165-L11171)
- **Behavior:** Writes data · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20088–L20099 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20088-L20099)

### `deleteAccessReviewSource` — Delete Access Review Source

Delete an access source.

- **Input:** [`DeleteAccessReviewSourceMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11173-L11180)
- **Output:** [`DeleteAccessReviewSourceMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11182-L11189)
- **Behavior:** Writes data · Destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20100–L20111 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20100-L20111)

### `awsConnectorSetup` — AWS Connector Setup

Return issuer, subject, audience and deploy artifacts for connecting an AWS account.

- **Input:** [`AWSConnectorSetupMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11344-L11351)
- **Output:** [`AWSConnectorSetupMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11353-L11359)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20112–L20123 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20112-L20123)

### `gcpConnectorSetup` — GCP Connector Setup

Return issuer, subject, audience template and deploy artifacts for connecting a GCP project.

- **Input:** [`GCPConnectorSetupMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11386-L11393)
- **Output:** [`GCPConnectorSetupMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11395-L11401)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20124–L20135 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20124-L20135)

### `azureConnectorSetup` — Azure Connector Setup

Return issuer, subject, audience and deploy artifacts for connecting an Azure subscription.

- **Input:** [`AzureConnectorSetupMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11428-L11435)
- **Output:** [`AzureConnectorSetupMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11437-L11443)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20136–L20147 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20136-L20147)

### `listConnectorProviders` — List Connector Providers

List connector providers and which connection methods each one supports. Creating a connector is not available on this API. Connect the provider in the console.

- **Input:** [`ListConnectorProvidersMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11301-L11303)
- **Output:** [`ListConnectorProvidersMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11305-L11313)
- **Behavior:** Read only · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20148–L20162 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20148-L20162)

### `listConnectors` — List Connectors

List connectors for an organization.

- **Input:** [`ListConnectorsMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11490-L11497)
- **Output:** [`ListConnectorsMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11499-L11507)
- **Behavior:** Read only · Non-destructive · Idempotent · Open world
- **Source:** [specification.yaml · L20163–L20174 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20163-L20174)

### `getConnector` — Get Connector

Get a connector by ID.

- **Input:** [`GetConnectorMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11509-L11516)
- **Output:** [`GetConnectorMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11518-L11524)
- **Behavior:** Read only · Non-destructive · Idempotent · Open world
- **Source:** [specification.yaml · L20175–L20186 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20175-L20186)

### `updateConnector` — Update Connector

Rename a connector.

- **Input:** [`UpdateConnectorMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11526-L11539)
- **Output:** [`UpdateConnectorMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11541-L11547)
- **Behavior:** Writes data · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20187–L20198 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20187-L20198)

### `discoverConnectorAccounts` — Discover Connector Accounts

List vendor accounts a connector can enable.

- **Input:** [`DiscoverConnectorAccountsMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11549-L11555)
- **Output:** [`DiscoverConnectorAccountsMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11557-L11565)
- **Behavior:** Read only · Non-destructive · Idempotent · Open world
- **Source:** [specification.yaml · L20199–L20210 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20199-L20210)

### `enableConnectorAccounts` — Enable Connector Accounts

Enable vendor accounts on a connector without creating an access source.

- **Input:** [`EnableConnectorAccountsMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11579-L11590)
- **Output:** [`EnableConnectorAccountsMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11592-L11600)
- **Behavior:** Writes data · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20211–L20222 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20211-L20222)

### `createAccessReviewCampaign` — Create Access Review Campaign

Create a new access review campaign for an organization.

- **Input:** [`CreateAccessReviewCampaignMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11602-L11621)
- **Output:** [`CreateAccessReviewCampaignMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11623-L11629)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L20223–L20234 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20223-L20234)

### `updateAccessReviewCampaign` — Update Access Review Campaign

Update an existing access review campaign.

- **Input:** [`UpdateAccessReviewCampaignMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11631-L11644)
- **Output:** [`UpdateAccessReviewCampaignMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11645-L11651)
- **Behavior:** Writes data · Non-destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20235–L20246 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20235-L20246)

### `deleteAccessReviewCampaign` — Delete Access Review Campaign

Delete an access review campaign.

- **Input:** [`DeleteAccessReviewCampaignMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11653-L11660)
- **Output:** [`DeleteAccessReviewCampaignMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11662-L11669)
- **Behavior:** Writes data · Destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20247–L20258 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20247-L20258)

### `startAccessReviewCampaign` — Start Access Review Campaign

Start an access review campaign. Triggers data fetching from all configured scope sources.

- **Input:** [`StartAccessReviewCampaignMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11671-L11678)
- **Output:** [`StartAccessReviewCampaignMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11680-L11686)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L20259–L20270 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20259-L20270)

### `cancelAccessReviewCampaign` — Cancel Access Review Campaign

Cancel an in-progress access review campaign.

- **Input:** [`CancelAccessReviewCampaignMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11688-L11695)
- **Output:** [`CancelAccessReviewCampaignMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11697-L11703)
- **Behavior:** Writes data · Destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20271–L20282 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20271-L20282)

### `addAccessReviewCampaignSource` — Add Access Review Campaign Source

Add an access source to an access review campaign's scope.

- **Input:** [`AddAccessReviewCampaignSourceMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11705-L11716)
- **Output:** [`AddAccessReviewCampaignSourceMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11718-L11724)
- **Behavior:** Writes data · Non-destructive · Non-idempotent · Closed world
- **Source:** [specification.yaml · L20283–L20294 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20283-L20294)

### `removeAccessReviewCampaignSource` — Remove Access Review Campaign Source

Remove an access source from an access review campaign's scope.

- **Input:** [`RemoveAccessReviewCampaignSourceMCPInput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11726-L11737)
- **Output:** [`RemoveAccessReviewCampaignSourceMCPOutput`](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L11739-L11745)
- **Behavior:** Writes data · Destructive · Idempotent · Closed world
- **Source:** [specification.yaml · L20295–L20306 ↗](https://github.com/getprobo/probo/blob/main/pkg/server/api/mcp/v1/specification.yaml#L20295-L20306)