Expose sentry api and sentry schema through the MCP #1893

Part of #1357. Plan: cli-first-mcp task 4.1 (design, tasks). Depends on #1890.

Why

This is how agents reach every published API route with no extra tools: sentry schema to search the API, sentry api to call it.

Scope

• Mark both commands exposed.
• A sentry api call's permission class comes from its HTTP method, so GET goes through the read tool and anything else through the write tool.
• Hosted checks the path against the published operation list with ref(toolkit-core): Share API path template matching between CLI and Code Mode #1807's shared matcher.

Related: #1803 (route sentry api by org), #1476.

Done when

• Tests for a raw read, a raw write refused under --read-only, and an unpublished path refused on hosted.

via @BYK.

--

View Session in Sentry