Agent actions
deploy_codedeploy.runDeploy a service version to an environment
Who may call: Engineering
Input schema
{
"type": "object",
"required": [
"service",
"version",
"environment"
],
"properties": {
"service": {
"type": "string"
},
"version": {
"type": "string"
},
"environment": {
"type": "string",
"enum": [
"staging",
"production"
]
}
},
"additionalProperties": false
}reset_user_passwordusers.reset_passwordReset a user's password and send a reset link
Who may call: IT Helpdesk
Input schema
{
"type": "object",
"required": [
"user_id"
],
"properties": {
"user_id": {
"type": "string"
}
},
"additionalProperties": false
}Connect an AI agent
Agents sign in with their company identity and connect over the Model Context Protocol (MCP).
| MCP endpoint | https://brightwater.work/mcp/it |
|---|---|
| Token endpoint | https://brightwater.work/oauth/it/token |
| Authorization server metadata | https://brightwater.work/.well-known/oauth-authorization-server/it |
| Protected resource metadata | https://brightwater.work/.well-known/oauth-protected-resource/mcp/it |
| JWKS | https://brightwater.work/oauth/it/jwks.json |
| Issuer | https://brightwater.work/oauth/it |
| Audience (resource) | https://brightwater.work/mcp/it |
| Scopes | deploy.run users.reset_password |
| Grant type | Identity Assertion JWT Authorization Grant (urn:ietf:params:oauth:grant-type:jwt-bearer) |