Management Groups
Read as MarkdownChoose an action to read its inputs, results, and usage guidance. Your connection determines which tools are available to you.
Management Group branding is shared by its Portals. Start with management_groups.get_branding and use its current revision for each change. Keep the scope to the requested whitelabelling.
Complete the setup
- Upload the supplied logo and save the color. Review the requested portals with
review_branding_application, thenapply_branding_to_portals. Verify the branding was applied; saving group assets alone is not completion. - Use
prepare_domainsfor the requested web addresses. For standard addresses, supplybase_domainonly to getportal.<base_domain>andapply.<base_domain>. When branded email is requested, configure the sender separately throughupdate_brandingusingchanges.sender_domain,sender_display_name,sender_local_part, andreply_to_email. - Read
get_brandingagain, including after hostname corrections. Give every record fromdomains[].dns_recordsandemail_sender.dns_recordsin an easy-to-copy format showing type, name, and target. Include the same complete records in any zone file. Include email records when branded email is requested or configured. If requested sender records are missing, finish sender setup before calling that plan complete. Domain-only setup does not require email. - Once the user adds DNS,
refresh_branding_statusand callchange_domain_lifecyclewithlifecycle_action: "activate", the currentrevision,user_confirmed: true, and a uniqueclient_request_id. An explicit whitelabelling request authorizes applying the supplied branding to the requested portal selection and activating the requested addresses when the reviewed scope matches. Domain activation affects the Management Group, so check that shared scope is covered; do not implicitly include other portals. Do not ask again just because setup is ready. Clarify changed or unclear scope; a status question alone does not authorize a new action. - Inspect
branding.domain_activation. Only active means the addresses are live. For waiting, allowretry_after_seconds, read again, and retry with a freshrevisionand request ID within the session. Reuse an ID only for a lost response or the same completed attempt. Waiting does not schedule activation. If user action is needed or the session cannot keep waiting, explain what remains incomplete and the next step. Email verification does not block web activation; an unverified sender stays disabled. - Once active, offer
branding.frontend_links.open_portalunchanged. The link uses the browser's session to continue to the branded portal. A signed-out browser logs in first; never transfer MCP credentials into a browser URL.
Make DNS easy to copy
Keep names and targets exact and individually copyable. Never invent records or substitute targets. Honor returned proxied: false as DNS only.
If the DNS editor appends its zone to Name, give a relative name only for the confirmed DNS zone. The setup base domain may differ from that zone. For example, in the customer.example zone, portal.customer.example may need Name portal. The final saved hostname must be portal.customer.example, never portal.customer.example.customer.example. Keep the CNAME target unchanged.
For zone files, use full record names and CNAME targets with trailing dots, such as portal.customer.example., so imports cannot append the zone. Preserve TXT values with valid quoting. Identify the import zone only when confirmed; do not guess or replace unrelated records.
