capsid_admin_set_site_key
Set a site key, on Capsid Admin. Needs the admin identity and the write grant.
What it does
Admin only, and needs a recent sign-in from a signed-in session.
Mint a new key for the namespace's site API and set it as a secret on both sides: the site's Worker as CARREL_SITE_KEY, and Carrel as SITE_<NAMESPACE>_KEY. The value is never returned, logged or audited. The site first, then Carrel; when only the site takes it, the answer says the two differ and that calling again mints a fresh key and sets both. Needs CF_SECRETS_TOKEN with Workers Scripts Edit, and from a signed-in session a sign-in or step-up action in the last 2 hours (at most 12 hours after the sign-in).
What a client is told
The MCP hints it carries, so a client can ask before it acts (src/tool-annotations.ts).
- Writes: some action changes state.
- Can overwrite or remove what exists.
- A repeat can change things again.
- Reaches GitHub, Cloudflare or a live site.
Arguments
| Argument | Type | Needed | What it is |
|---|---|---|---|
namespace | string | always |