Creates a new account: a client organization under this agency workspace. It is always created dormant (no members of its own, managed from the workspace, no charge); activating it with its own modules and billing is done in the app. Takes a name and an optional profile (industry, website, country as an ISO code, notes, reporting currency and time zone) and values for the workspace's account custom fields, keyed by slug (child_orgs.custom_fields.list). The URL slug is generated from the name. Fails with limit_reached (409, details.resource accounts, with the limit and how many are active and available) when the plan's cap of active accounts is full (archived and deleted accounts do not count). With dry_run it checks the same (who, the custom field values, the plan's cap: the 409 comes already in the dry run) and says the URL slug it would get and how many slots are left, without creating anything; running it does not need the confirm_token. Only a direct owner or admin of the agency workspace (403 role_required, details.scope direct). Returns the new account id and the account.
Instrucciones para agentes
Tell the person the account was created dormant: to give it modules and billing of its own, they activate it from Accounts in the app.
Alcance
child_orgs:write
Permiso
Editar en el módulo · Solo owner, admin
Tool del MCP
child_orgs_accounts_createEn la superficie completa; en la compacta, mb_execute_operation con id: "child_orgs.accounts.create".
Create several accounts at once (dormant, no charge)
child_orgs.accounts.bulk.create
EscrituraMasiva · hasta 100Desde 2026-11-01
Creates up to 100 dormant accounts in one atomic step (all or none), each with its name and optional profile (industry, website, country, notes, reporting currency and time zone), like the CSV import of Accounts. Each gets its own URL slug. Fails with limit_reached (409, details.resource accounts and details.available: how many fit) if they do not all fit in the plan's cap of active accounts. Outside the app it requires a dry run (which lists the accounts with the slug each would get, as items of type account_slug, and the slots left) and a confirm_token. Only a direct owner or admin of the agency workspace. Returns the created ids in input order.
Instrucciones para agentes
Tell the person how many accounts were created; they are dormant until activated from Accounts in the app.
Pide confirmación: primero dry_run: true (vista previa y confirm_token, que vale 10 minutos y una sola vez), después el mismo cuerpo con confirm_token. En unas pocas, solo con ciertos datos: la descripción dice cuándo. Por qué y cómo: Vista previa y confirmación.
Alcance
child_orgs:write
Permiso
Editar en el módulo · Solo owner, admin
Tool del MCP
child_orgs_accounts_bulk_createEn la superficie completa; en la compacta, mb_execute_operation con id: "child_orgs.accounts.bulk.create".
Archives an account of the workspace: its users lose access, its scheduled work (alerts, site audits, rank tracking, flows, deliveries) is paused, it stops being billed to the workspace if the workspace paid for it, and it frees a slot of the plan. Reversible with child_orgs.accounts.restore. Refused (409) while the account pays its own subscription and it is live (account_has_active_subscription) or while it has phone lines billed to the workspace (account_has_billed_phone_lines). Archiving an archived account changes nothing (changed: false). Only a direct owner or admin of the agency workspace.
Alcance
child_orgs:write
Permiso
Editar en el módulo · Solo owner, admin
Tool del MCP
child_orgs_accounts_archiveEn la superficie completa; en la compacta, mb_execute_operation con id: "child_orgs.accounts.archive".
curl-X POST "https://api.mb-suite.com/v1/accounts/{account_id}/archive" \
-H"Authorization: Bearer $MB_API_KEY"
Probar con tu API key de prueba
Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.
curl-X POST "https://api.mb-suite.com/v1/accounts/{account_id}/archive" \
-H"Authorization: Bearer $MB_TEST_KEY"
POST/v1/accounts/{account_id}/restore
Restore an archived account
child_orgs.accounts.restore
EscrituraIdempotenteDesde 2026-11-01
Brings an archived account back to active: it takes a slot of the plan again (limit_reached, 409, details.resource accounts, when the cap is full) and what archiving paused starts again. An account paid by the workspace (billing_mode parent_pays) goes back on the workspace's invoice, so through the API it is refused with account_restore_requires_app and is restored from Accounts in the app. Restoring an account that is not archived changes nothing (changed: false). Deleted accounts cannot be restored here. Only a direct owner or admin of the agency workspace.
Alcance
child_orgs:write
Permiso
Editar en el módulo · Solo owner, admin
Tool del MCP
child_orgs_accounts_restoreEn la superficie completa; en la compacta, mb_execute_operation con id: "child_orgs.accounts.restore".
curl-X POST "https://api.mb-suite.com/v1/accounts/{account_id}/restore" \
-H"Authorization: Bearer $MB_API_KEY"
Probar con tu API key de prueba
Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.
curl-X POST "https://api.mb-suite.com/v1/accounts/{account_id}/restore" \
-H"Authorization: Bearer $MB_TEST_KEY"
DELETE/v1/accounts/{account_id}
Delete an account
child_orgs.accounts.delete
IrreversibleDesde 2026-11-01
Deletes an account of the workspace: it disappears from the app, its own integration secrets are purged, it stops being billed to the workspace and it frees its slot of the plan. It cannot be undone from the app (only MB Suite support can bring the account back, without its secrets). Refused (409) while the account pays its own subscription and it is live, while that subscription has unpaid invoices (account_has_outstanding_debt; checked in Stripe: 503 external_unavailable, details.platform stripe, if Stripe does not answer, and nothing is deleted) or while it has phone lines billed to the workspace. Outside the app it always needs a dry run and a confirm_token, and a key allowed to delete. Only a direct owner or admin of the agency workspace.
Pide confirmación: primero dry_run: true (vista previa y confirm_token, que vale 10 minutos y una sola vez), después el mismo cuerpo con confirm_token. En unas pocas, solo con ciertos datos: la descripción dice cuándo. Por qué y cómo: Vista previa y confirmación.
Alcance
child_orgs:writey «Permitir eliminar» (child_orgs:delete en OAuth)
Permiso
Editar en el módulo · Solo owner, admin
Tool del MCP
child_orgs_accounts_deleteEn la superficie completa; en la compacta, mb_execute_operation con id: "child_orgs.accounts.delete".
Costo declarado: hasta 12 lecturas y 2 escrituras por llamada (cuentan en el cupo diario). Toca una plataforma externa (stripe): cuenta en el cupo de operaciones externas.
Parámetros
account_idstringrutarequerido
Account id: a child organization of this workspace (the ids of platform.orgs.list).
Con una API key de prueba el pedido va siempre a tu organización de práctica: datos de ejemplo que puedes reiniciar.En la práctica esta operación no se simula (toca otra plataforma): responde 409 sandbox_external_unavailable.
GET/v1/accounts/{account_id}/config
Get an account's module access caps
child_orgs.accounts.get_config
LecturaIdempotenteDesde 2026-11-01
Returns, for each module active in an account, its access cap (hidden, view_only or full_access) and who sets it: the workspace when it pays for the account (parent_pays: the cap applies to the account's own users), the account when it pays for itself (self_pays: the cap applies to the agency's users) or nobody (dormant). Modules without a cap read full_access. Needs to see the account (members only see their assigned ones).
Alcance
child_orgs:read
Permiso
Ver el módulo
Tool del MCP
child_orgs_accounts_get_configEn la superficie completa; en la compacta, mb_execute_operation con id: "child_orgs.accounts.get_config".
Costo declarado: hasta 1 lecturas y 0 escrituras por llamada (cuentan en el cupo diario).
Parámetros
account_idstringrutarequerido
Account id: a child organization of this workspace (the ids of platform.orgs.list).
Sets the access cap (hidden, view_only or full_access) of one or more modules active in an account that the workspace pays for (billing_mode parent_pays): what the account's own users can do in each module. Modules not listed keep their cap. Refused (409 account_config_not_managed_by_workspace) for an account that pays for itself (its caps are set by the account) or a dormant one; module_not_enabled (400) for a module the account does not have. Only a direct owner or admin of the agency workspace. Returns the caps after the change.
Alcance
child_orgs:write
Permiso
Editar en el módulo · Solo owner, admin
Tool del MCP
child_orgs_accounts_update_configEn la superficie completa; en la compacta, mb_execute_operation con id: "child_orgs.accounts.update_config".
Costo declarado: hasta 1 lecturas y 1 escrituras por llamada (cuentan en el cupo diario).
Parámetros
account_idstringrutarequerido
Account id: a child organization of this workspace (the ids of platform.orgs.list).
modulesarray<object>cuerporequerido
The modules to change; the ones not listed keep their access level.
The census of the workspace's accounts in one paginated call: every account the caller can see, archived ones included (status archived), each with the modules on in it and the platform accounts linked in its Data sources (Google Analytics property, Search Console site, Google Ads customer, Meta ad account, Facebook page, Instagram, TikTok, LinkedIn, Business Profile location, YouTube channel, WhatsApp number). Each row is the account's public profile (id, name, slug, status, child_org_status, billing_mode, industry, website, country, notes, reporting, custom_fields, created_at) plus modules: the modules on in the account as the app resolves them for it (MB Suite's switch for each module in this account, the account's own modules, the base platform and what it inherits from the workspace), each with state (active, or maintenance: shown in the app but not usable for a while, the API answers 503) and inherited (true when the account has it only through its workspace); modules MB Suite keeps off or only for its own team are not listed, and what a person can do in each one still depends on their role and, in an account that pays for itself, on the access it gives the agency (child_orgs.accounts.get_config). And data_sources: the rows integrations.data_sources.list gives for that account (platform, id, composite_id, name, is_default, fields), with inherited and source_org_id resolved from the account's billing mode and integration settings (inherited: read with the workspace's connection) and connection_status: active, error (the connection has to be reconnected), missing (no active or failing connection of that platform in the organization that reads it; for google_analytics, google_search_console and google_business_profile MB Suite may still read it with its own service account if the property granted access) or unknown (too many connections to check). Reads only MB Suite: no platform is called and no token or secret is returned. Who sees what, as in Accounts: owners and admins of the workspace see every account, members and viewers only their assigned ones, a key only the accounts of its child scope. Where the caller cannot see Integrations in an account (the module hidden or under maintenance for it), its row comes without data_sources and with data_sources_hidden: true, and its connections are not read. Needs view access to Accounts and to Integrations in the workspace (a key needs child_orgs:read and integrations:read: 403 scope_insufficient or module_access_denied otherwise). Filter with status (all by default, active, archived) and platforms. Ordered by account id; limit up to 200, follow next_cursor while has_more. A page is filled up to limit (deleted accounts and the ones the status filter leaves out are skipped while reading); it only brings fewer rows when it reached the end or read 200 accounts, and then has_more says whether more follow. An archived account cannot be operated through the API until it is restored (child_orgs.accounts.restore). The workspace's own data sources: integrations.data_sources.list on the workspace. Cost: one read per account read to fill the page (up to 200) plus one query per organization whose connections the page checks (the modules add no reads). With Google Ads, Google Business Profile, LinkedIn, TikTok or YouTube, their terms limit it through the API and the MCP: what they do not allow answers 403 platform_terms_restricted, and their records are left out of the response (the permissions guide lists what each platform allows).
Alcance
child_orgs:read
Permiso
Ver el módulo
Tool del MCP
child_orgs_accounts_list_with_sourcesEn la superficie completa; en la compacta, mb_execute_operation con id: "child_orgs.accounts.list_with_sources".
Costo declarado: hasta 2250 lecturas y 0 escrituras por llamada (cuentan en el cupo diario).
Parámetros
limitintegerqueryopcional
How many items this page brings at most (see the maximum and the default in the schema).
Por defecto: 50
cursorstringqueryopcional
The next_cursor of the previous page, exactly as it came (only for the same list and filters); without it, the first page.
statusenumqueryopcional
all (default): active and archived accounts, each with its status; active: only the active ones; archived: only the archived ones.
Valores: all, active, archived · Por defecto: "all"
platformsarray<enum>queryopcional
Only report the data sources of these platforms (google_analytics, google_search_console, google_ads…). Every account is still listed, with an empty data_sources when it has none of them.
