opbox

The profile.* family (2 verbs). Every verb enters through the one front door: it is capability-checked, permission-checked, scope-checked and audited before it runs (see Security & permissions). Each entry below lists its capability, risk class (which fixes the minimum autonomy level), the minimum caller permission, its availability tier, whether it is idempotent, and any outbound egress.

Deleteprofile.preset.delete

PropertyValue
Capabilityother.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

Delete by (workspace_id,entity_type,tab_id).

Call POST /v/profile.preset.delete with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool profile.preset.delete.

Setprofile.preset.set

PropertyValue
Capabilityother.write
Risk classWrite - autonomy L1
Min. permissionMember
AvailabilityOn demand (MCP tier 2)
IdempotentYes
EgressNone - in-box (pure Postgres, no outbound call)

(route gates OWNER/ADMIN). Upsert on (workspace_id,entity_type,tab_id).

Call POST /v/profile.preset.set with a JSON body; returns JSON (or { error, code }). Also exposed as the MCP tool profile.preset.set.