shd-mcp-plugin/plugins/shd-mcp-plugin/skills/shd-organizations-acl/references/organization-acl.md

Organization and ACL contract

Read with shd_list_organization_members, shd_list_organization_invitations, shd_list_organization_audit and shd_get_organization_two_factor_policy. Resolve users and organizations from server-returned IDs.

Mutations include invitation operations, member add/update/remove, organization create/update/archive/restore and shd_update_organization_two_factor_policy. Every mutation needs explicit authorization, the latest relevant state, and final server/audit readback when available. Do not disclose invitation secrets or use an email/name match as a substitute for a returned user identity.