The first tool list
Eight named operations for release one, all read-only
This is the artefact the blueprint produces and the PLM owner signs. Names and fields are adapted to your instance; the shape stays. No tool takes free OData or runs as anyone but the person asking.
# windchill-mcp, release 1: read-only, per-user identity
# Every call runs with the asking user's OAuth token (WRS authorization code flow).
identity: per_user # no shared service account
config_spec: explicit # every structure tool states which one it uses
writes: none # drafts for change requests come in release 2
tools:
search_parts(query, context?) # number, name, version, state, context
get_bom(part, config_spec, levels<=3) # structure as this user may see it
where_used(part, config_spec) # parent assemblies, per product context
compare_bom(part, from_version, to_version) # added, removed, quantity changed
get_open_changes(part) # problem reports, change requests, notices
get_change_impact(change_number) # affected items, their parents, documents
get_documents(part, type?) # related documents, metadata only
compare_to_sap(part, plant) # eBOM vs SAP BOM delta, via the SAP server
audit: user, tool, arguments, result_count, duration # one line per call
If a tool here would need a right the asking user does not have in Windchill, the call fails with Windchill's own error. That failure is the test that the identity model works.