> ## Documentation Index
> Fetch the complete documentation index at: https://veryfront.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Update upload grant

> Grant one user read, write or admin access to an upload or folder, or change that grant, and leave the other grants unchanged.

`veryfront__update_upload_grant`

Requires project.uploads.admin.

## Access

No external-service connection is required. Use a Veryfront credential with access to the requested resources.

**Call type:** Can change resources.

## Arguments

| Field | Type | Required | Description and constraints |
| - | - | - | - |
| `upload_path` | `string` | Yes | Upload UUID for grants on that upload, or an upload path or folder prefix resolved to the folder setting that governs it. Do not URL-encode it. Minimum length: `1`. |
| `user_id` | `string` | Yes | UUID of the user the grant is for. Format: `uuid`. |
| `permission` | `string` | No | Access to give: read (default), write or admin. Default: `"read"`. Values: `"read"`, `"write"`, `"admin"`. |
| `project_reference` | `string` | No | Project UUID, slug or configured domain; optional when the selected context supplies a project. |

## Example request

Send this JSON-RPC request through an initialized MCP client. Replace sample identifiers and values before calling the tool. See [MCP client setup](https://veryfront.com/docs/cloud/getting-started/connect-mcp.md).

```json title="request.json" theme={null}
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "veryfront__update_upload_grant",
    "arguments": {
      "upload_path": "example",
      "user_id": "00000000-0000-4000-8000-000000000000"
    }
  }
}
```

## Result

The published output shape is summarized below. Inspect both the MCP response content and `isError` when handling a call.

| Field | Type | Required | Description and constraints |
| - | - | - | - |
| `user_id` | `string` | Yes | UUID of the user the grant is for. |
| `permission` | `string` | Yes | Access the grant gives: read, write or admin. Values: `"read"`, `"write"`, `"admin"`. |
| `created_at` | `string` | Yes | Creation time, RFC 3339. |

## Full schemas

```json title="input-schema.json" theme={null}
{
  "type": "object",
  "properties": {
    "upload_path": {
      "type": "string",
      "minLength": 1,
      "description": "Upload UUID for grants on that upload, or an upload path or folder prefix resolved to the folder setting that governs it. Do not URL-encode it."
    },
    "user_id": {
      "type": "string",
      "format": "uuid",
      "description": "UUID of the user the grant is for."
    },
    "permission": {
      "type": "string",
      "enum": [
        "read",
        "write",
        "admin"
      ],
      "description": "Access to give: read (default), write or admin.",
      "default": "read"
    },
    "project_reference": {
      "type": "string",
      "description": "Project UUID, slug or configured domain; optional when the selected context supplies a project."
    }
  },
  "required": [
    "upload_path",
    "user_id"
  ],
  "additionalProperties": false,
  "description": "Arguments for the update_upload_grant tool.",
  "$schema": "http://json-schema.org/draft-07/schema#"
}
```

```json title="output-schema.json" theme={null}
{
  "type": "object",
  "properties": {
    "user_id": {
      "type": "string",
      "description": "UUID of the user the grant is for."
    },
    "permission": {
      "type": "string",
      "enum": [
        "read",
        "write",
        "admin"
      ],
      "description": "Access the grant gives: read, write or admin."
    },
    "created_at": {
      "type": "string",
      "description": "Creation time, RFC 3339."
    }
  },
  "required": [
    "user_id",
    "permission",
    "created_at"
  ],
  "additionalProperties": false,
  "description": "Structured result returned by the update_upload_grant tool.",
  "$schema": "http://json-schema.org/draft-07/schema#"
}
```

<details>
  <summary>Try this tool</summary>

  Replace sample arguments with values for your project or connected account. Calls run only when you select Run tool.

  MCP tool call

  Call `veryfront__update_upload_grant` against the Veryfront MCP endpoint.

  Bearer token or API key

  Arguments (JSON)

  Run this tool with these arguments.

  Run tool

  Output JSON

  <pre />
</details>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.