Skip to main content

Willow Admin

Willow Admin exposes Willow's own Admin API as an MCP server. Adding it lets an AI client read and change your Willow organization the same way an admin would in the dashboard: users, groups, MCP servers, commands, skills, toolkits, guards, policies, background agents, and audit logs.

This is the one connector whose upstream service is Willow itself. Treat it accordingly: a caller with the write tools enabled can reconfigure the gateway that governs every other integration.

Add it​

  1. Open Build > MCP Servers > Add MCP Server.
  2. Search for Willow Admin and hover the card.
  3. Select Use.
  4. Review the risk level and the tool list, then select Create.

The connector is scored Medium Risk by default. At that level Willow enables 43 of its 51 tools and holds back the eight delete tools. Raising the risk level in the add modal includes them; see Manage tools to change the selection later.

Available tools​

The connector exposes 51 tools. They divide cleanly by what they do to your organization.

Read-only​

List Users, List Groups, List MCP Servers, List Commands, List Skills, List Toolkits, List Guards, Query Logs, Query Admin Logs, List Discovered MCP Servers, List Discovered Skills, List Discovered Agent Memory, List Devices, List AI Agents, Get Discovery Statistics, Get Enforcement Policy, List Background Agents, Get Background Agent, Get Background Agent by Slug, List Background Agent Sessions, Get Background Agent Session Events

Create and update​

Create User, Update User, Create Group, Update Group, Add Integrations to Group, Create MCP Server, Update MCP Server, Create Command, Update Command, Create Skill, Update Skill, Create Toolkit, Update Toolkit, Promote Toolkit, Create Guard, Update Guard, Update Enforcement Policy, Create Background Agent, Update Background Agent, Sync Background Agent, Invoke Background Agent, Rotate Background Agent Secret

Delete​

Delete User, Delete Group, Delete MCP Server, Delete Command, Delete Skill, Delete Toolkit, Delete Guard, Delete Background Agent

These eight are classified high risk and are excluded at the default Medium Risk level.

Recommendations​

Start read-only. The List and Query tools cover most of what people actually want from this connector, such as asking which servers have no guards attached or which groups a user belongs to, and none of them can change anything.

Assign it to a narrow group. Connected groups control who can call it through the gateway, so scope it to admins rather than All Users. See Groups.

Attach a guard. Because the write tools mutate your governance configuration, this is a good candidate for a runtime guard that requires approval. See Guards.

On this page