Team tools
Team access lets a domain owner delegate specific operational capabilities without transferring ownership.
list_team
Lists active members. Domain owners also see pending invitations.
Scope: teams.read
{
"domain": "example.com"
}Owner-only mutations
The following tools require teams.write and domain ownership:
| Tool | Purpose |
|---|---|
invite_team_member | Invite an existing Marque account with explicit capabilities |
update_team_member | Replace an invited or active member’s capabilities |
cancel_team_invite | Cancel a pending invitation |
remove_team_member | Remove an active member and revoke the portable grant |
An invitation identifies the member by their existing Marque handle:
{
"domain": "example.com",
"handle": "alice.example.net",
"capabilities": [
"dns.records.write"
]
}Updates and removals use the membershipId returned by list_team.
Delegated capabilities
| Capability | Allows |
|---|---|
dns.records.write | Add, remove, and update managed DNS records |
dns.nameservers.write | Change nameserver hosts |
dns.dnssec.write | Change DNSSEC state |
OAuth consent and team delegation are independent. A member needs the relevant OAuth scope in the connected client and the matching capability for the domain.