# Lumos MCP connector

The Lumos connector brings your apps, users, accounts, groups, roles, and activity logs into Claude, ChatGPT, Cursor, and the Elaichi Agent, so anyone on your team can ask who has access to what and get an answer from Lumos itself.

Source: https://elaichi.ai/connectors/lumos/

## Facts

| | |
| --- | --- |
| Application | Lumos |
| Category | Compliance |
| AI tools | 88 |
| Authentication | Connects with an API key |
| Needs your own OAuth app | No |
| MCP endpoint | https://api.elaichi.ai/mcp |
| Works with | Claude, ChatGPT, Cursor, any MCP client, and the Elaichi Agent |
| Tools advertised by name | No. 88 tools is past the 30-tool threshold, so clients use `search_tools` and `execute_tool` |

## What you can ask once Lumos is connected

- List Lumos apps added in the last 30 days.
- Which Lumos users have accounts in the finance apps?
- Summarize app settings changed across Lumos this week.

## Connect Lumos in Elaichi

This happens once for the organization, before any client is involved.

1. Open Connections, choose Add connection, and pick Lumos.
2. Optionally set Share with, then press Connect.
3. Paste a Lumos API key. One person generates a token in Lumos and pastes it once. Everyone else works through Share with, and never sees it.

Credentials are vaulted and nobody, including the AI, reads them back. The connection becomes a toolbox immediately, so you can curate which Lumos tools are exposed, rename them, or freeze arguments before anyone points a client at it.

## Connect Lumos to Claude

Endpoint: https://api.elaichi.ai/mcp

1. Open Customize, then Connectors.
2. Press Add.
3. Name it, paste the MCP server URL, then Continue.
4. Sign in and approve.

On Team and Enterprise, an Owner adds it once. Everyone else turns it on for themselves.

## Connect Lumos to ChatGPT

Endpoint: https://api.elaichi.ai/mcp

1. Open Plugins, then press the + button.
2. Name it and paste the endpoint into Server URL.
3. Leave Authentication on OAuth, then tick the risk acknowledgement.
4. Press Create, then sign in and approve.

Works on the web today. The plugin directory lives at chatgpt.com/plugins.

## Connect Lumos to Cursor

Endpoint: https://api.elaichi.ai/mcp

1. Open `~/.cursor/mcp.json`.
2. Add the endpoint under `mcpServers`.
3. Reload Cursor, then sign in and approve.

Set up per machine, so repeat it on each computer you work from.

## Connect Lumos to any MCP client

Endpoint: https://api.elaichi.ai/mcp

1. Add the endpoint as a remote MCP server.
2. Sign in and approve.

The Elaichi Agent already has these tools, with nothing to set up.

## What the consent screen decides

Only Read is granted by default, which is not enough to call a Lumos tool. Over MCP there is no trusted place to confirm a write in the moment, so the consent screen is the standing approval rather than a formality. Grant Read and Run tools. Think hard before granting Delete, which reaches into connected apps and cannot be undone.

## What teams do with Lumos through Elaichi

### Answer who has access to what

IT. Ask which accounts a person holds across every app in Lumos, or which people hold accounts in one app, without opening a single admin console.

### Trace identity events after an alert

Security. Pull the identity events and activity logs around a suspicious sign-in, then ask for the sequence in plain language so the picture is clear before anyone escalates.

### Gather evidence for an access review

Compliance. List every account and role in a system that is in scope for an audit, group the results by team, and hand the reviewer a ready list instead of a spreadsheet exercise.

### Add a new app to the Lumos catalog

IT. When the business adopts a tool, create the app in Lumos, put it in the right category, and adjust its settings from the same conversation.

### Confirm a leaver's accounts are closed

People Ops. On someone's last day, check every account still attached to them in Lumos and flag anything that has not been removed yet.

### See which apps are really in use

Procurement. Before a renewal, pull the app, its category, and how many accounts exist in it, so the conversation with the vendor starts from real numbers.

## Frequently asked questions

### How do I connect Lumos to Claude?

First connect Lumos in Elaichi, which asks for a Lumos API key and nothing else, so there is no OAuth application to register and no client ID or secret to generate. Then open Claude, go to Customize, then Connectors, then Add, and paste https://api.elaichi.ai/mcp as the endpoint. Claude will ask you to sign in to Elaichi, and from then on your Lumos apps, users, and accounts are available in the conversation.

### Does Lumos work with ChatGPT and Cursor as well as Claude?

Yes. Once Lumos is connected in Elaichi, the same endpoint, https://api.elaichi.ai/mcp, works in Claude, ChatGPT, Cursor, any other MCP client, and the Elaichi Agent. You connect Lumos once and every client sees it.

### What can an AI agent actually do with my Lumos data?

With Lumos connected, an agent can look up a person and list the accounts, groups, and roles they hold, list the apps in your catalog and their categories, and read identity events and activity logs to explain what happened and when. It can also create and update apps and their settings, and upload account lists for systems Lumos does not reach on its own. Because Lumos exposes a lot of capabilities, short concrete asks such as "list Jane's accounts" work better than long paragraphs.

### Does connecting Lumos give the AI access to everything in my Lumos workspace?

No. Every call into Lumos runs as the person who signed in, so the agent sees only the apps, users, and accounts that person's Lumos permissions already allow. Elaichi can narrow that further with restrictions, but it can never widen it beyond what Lumos itself grants.

### Can my team share one Lumos connection?

Yes. One administrator connects Lumos in Elaichi and shares the connection with a team, and nobody else ever sees or handles the API key. Each teammate still signs in to Elaichi as themselves, so every action against Lumos is recorded under their own name in the audit log.

### Can I stop an agent from changing things in Lumos?

Yes. Restrictions in Elaichi are set per action, so you can allow reading users, accounts, and activity logs from Lumos while blocking the ability to create or update apps and settings. A blocked action is never shown to Claude, ChatGPT, Cursor, or any other client, so no prompt, however worded, can reach it.

### What happens to a Lumos connection when someone leaves?

Offboarding that person in Elaichi ends their access to Lumos through every AI client at once. If they were using a shared Lumos connection, it keeps working for everyone else on the team. If you want the connection gone entirely, disconnecting Lumos once in Elaichi removes it from Claude, ChatGPT, Cursor, and every other client at the same time.

## All 88 Lumos tools

Every tool below is callable through https://api.elaichi.ai/mcp once Lumos is connected, subject to the toolbox it is in and the restrictions on the caller.

- **List all Lumos apps** (List). List all apps in your Lumos company catalog. Returns a collection of app records each including id, name, and optionally custom_attributes when expanded. Supports filtering by name_search and exact_match.
- **Create a Lumos app** (Create). Create a new app in Lumos. Returns the created app object including id and name.
- **Get single Lumos app by ID** (Get). Get a single Lumos app by id. Returns the app object including id, name, and optionally custom_attributes when the expand parameter is provided. Required: id.
- **Update a Lumos app by ID** (Update). Update domain-specific metadata overrides for a Lumos app instance. This updates the app in your domain, not the shared Lumos app catalog. Returns the updated app object including id and name. Required: id.
- **List all Lumos apps categories** (List). List all app categories available in Lumos. Returns an array of category name strings. No required parameters.
- **List all Lumos app settings** (List). Get app settings for a Lumos application. Returns the AppSettingOutput object whose field set is schema-defined in Lumos; consult the upstream docs for the field-level breakdown. Required: app_id.
- **Update a Lumos app setting by ID** (Update). Update app settings for a Lumos application. Returns the updated AppSettingOutput object whose field set is schema-defined in Lumos; consult the upstream docs for the field-level breakdown. Required: app_id.
- **Lumos app settings list 2** (List). Get AppStore app settings for a Lumos application using the deprecated AppStore endpoint. Returns the app settings object (attributes). Required: app_id.
- **Lumos app settings update 2** (Update). Update AppStore app settings for a Lumos application using the deprecated AppStore endpoint. Returns the updated app settings object (attributes). Required: app_id.
- **List all Lumos users** (List). List all users in lumos. Returns: id, email, given_name, family_name, status, custom_attributes, name. Optionally filter by search_term (use exact_match to restrict to exact name/email matches) and expand the custom_attributes field via the expand parameter.
- **Get single Lumos user by ID** (Get). Get a single user in Lumos. Returns: id, email, given_name, family_name, status, custom_attributes. Required: id.
- **List all Lumos user accounts** (List). List accounts for a lumos user. Returns account objects including id, app_id, unique_identifier, status, and created_at. Required: user_id.
- **List all Lumos inline webhooks** (List). List all Inline Webhooks configured in Lumos. Returns: id, hook_type, name, description. Lumos supports four webhook types: Provisioning, Deprovisioning, Pre-Approval, and Request Validation.
- **List all Lumos accounts** (List). List all accounts in Lumos associated with your company's apps. Returns: id, app_id, status, sources. Optionally filter by app_id, discovery date range, sources, or status; expand related app data with the expand parameter.
- **List all Lumos group users** (List). List user members belonging to a Lumos group by group ID. Returns a paginated collection of user member objects. Returns: id, email, given_name, family_name, status. Required: group_id.
- **Get single Lumos group by ID** (Get). Get a single group by ID in Lumos. Returns the group object including its id, name, app_id, integration_specific_id, created_at, and updated_at. Required: id.
- **List all Lumos groups** (List). List groups synced from connected integrations in Lumos. Returns: id, app_id, integration_specific_id, name, description, group_lifecycle, source_app_id, created_at, updated_at. Optionally filter results by integration_specific_id, name, exact_match, or app_id.
- **Get single Lumos accounts upload by ID** (Get). Get the state of an account upload job in lumos by its job ID. Returns the job state object including job_id and state. Required: id.
- **Create a Lumos accounts upload** (Create). Upload accounts to an app in lumos and initiate an asynchronous upload job. Returns the resulting job state object including job_id and state. Required: app_id.
- **List all Lumos activity logs** (List). List activity logs in lumos. Returns: event_hash, event_type, event_type_user_friendly, outcome, targets, actor, event_began_at, event_metadata. Optionally narrow results to a time window using the since and until date-time parameters. Max 100 records per page.
- **List all Lumos identity events** (List). List user identity events in Lumos. Returns a cursor-paginated collection of events, each including id, identity_id, and changed_fields. Optionally filter by identity_ids (user UUIDs), changed_fields (field names such as 'title' or 'team'), start_time, and end_time.
- **Create a Lumos activity record** (Create). Update last_login or last_activity for a given account in Lumos by posting activity record data. The request and response field schemas are not enumerated in the available source documentation; consult the Lumos API reference for the full ActivityRecordInput and ActivityRecordOutput field details.
- **Get single Lumos activity records job by ID** (Get). Get the state of an activity records post-processing job in lumos. Returns: job_id, state, id. Required: id.
- **List all Lumos user roles** (List). List roles assigned to a lumos user. Returns role objects including role_name for the specified user. Required: user_id.
- **Create a Lumos user role** (Create). Add a role to a lumos user, ensuring the user belongs to the specified domain. Returns a 201 response on success with no documented response body. Required: user_id, role_name.
- **Delete a Lumos user role by ID** (Delete). Remove a role from a lumos user, ensuring the user belongs to the specified domain. Returns an empty 204 response on success. Required: user_id, role_name.
- **List all Lumos app requestable permissions** (List). List requestable permissions for a specific app in the lumos AppStore. Returns a collection of permission records, each including an id and permission-specific attributes. Required: app_id.
- **List all Lumos appstore requestable permissions** (List). List requestable permissions in the lumos AppStore. Returns: id, label, app_id, app_class_id, app_instance_id, request_config.
- **Create a Lumos appstore requestable permission** (Create). Create a requestable permission attached to an App in the lumos AppStore. Returns the created permission including id, label, and request_config. Required: label, and either app_id or both app_class_id and app_instance_id.
- **Lumos appstore requestable permissions get 2** (Get). Get a single AppStore requestable permission by id in lumos. This is a deprecated endpoint. Returns id, label, and request_config. Required: id.
- **Update a Lumos appstore requestable permission by ID** (Update). Update an AppStore requestable permission by id in lumos. All provided fields override existing data; omitted fields are unchanged. Returns the updated permission including id, label, and request_config. Required: id. Non-updatable: request_config.request_fulfillment_config.provisioning_group.
- **Delete a Lumos appstore requestable permission by ID** (Delete). Delete a requestable permission by id in lumos. Only permissions of type NATIVE can be deleted. Returns an empty 204 response on success. Required: id.
- **Get single Lumos appstore requestable permission by ID** (Get). Get a single requestable permission by id in lumos. Returns the permission record including its id, label, app_id, app_class_id, app_instance_id, request_config, and in_app_store visibility status. Required: id.
- **List all Lumos appstore pre approval rules** (List). List all AppStore pre-approval rules in Lumos. Returns: justification, time_based_access, id, app_id, app_class_id, app_instance_id, preapproved_groups, preapproved_users_by_attribute, preapproved_permissions, preapproval_webhooks.
- **Create a Lumos appstore pre approval rule** (Create). Create a pre-approval rule attached to an App in the Lumos AppStore. Returns: justification, time_based_access, id, app_id, app_class_id, app_instance_id, preapproved_groups, preapproved_users_by_attribute, preapproved_permissions, preapproval_webhooks.
- **Lumos appstore pre approval rules get 2** (Get). Get a single Lumos AppStore pre-approval rule by id. This endpoint path is deprecated. Returns: id. Required: id.
- **Update a Lumos appstore pre approval rule by ID** (Update). Update a pre-approval rule in the Lumos AppStore by id. Fields present in the payload override existing values; missing fields are disregarded. Returns: justification, time_based_access, id, app_id, app_class_id, app_instance_id, preapproved_groups, preapproved_users_by_attribute, preapproved_permissions, preapproval_webhooks. Required: id.
- **Delete a Lumos appstore pre approval rule by ID** (Delete). Delete a Lumos AppStore pre-approval rule by id. Returns an empty 204 response on success. Required: id.
- **Get single Lumos appstore pre approval rule by ID** (Get). Get a single AppStore pre-approval rule in Lumos by id. Returns: justification, time_based_access, id, app_id, app_class_id, app_instance_id, preapproved_groups, preapproved_users_by_attribute, preapproved_permissions, preapproval_webhooks, attributes. Required: id.
- **List all Lumos appstore apps** (List). List all apps in the lumos AppStore. Returns: id, app_class_id, instance_id, user_friendly_label, status, sources, allow_multiple_permission_selection, logo_url, website_url, request_instructions, description, category, links, custom_attributes. Optionally filter by app_id, name_search, exact_match, and all_visibilities.
- **Create a Lumos appstore app** (Create). Add an app to the lumos AppStore with given settings. Returns: custom_request_instructions, redirect_url, request_flow, provisioning, id.
- **Get single Lumos appstore app by ID** (Get). Get a single AppStore app from lumos by id. Returns: id, app_class_id, instance_id, user_friendly_label, status, sources, allow_multiple_permission_selection, logo_url, website_url, request_instructions, description, category, links, custom_attributes. Required: id.
- **Delete a Lumos appstore app by ID** (Delete). Remove an app from the lumos AppStore by id. Returns an empty 204 response on success. Required: id.
- **Get single Lumos appstore access request by ID** (Get). Get a lumos access request by id. Returns the access request object including id, status, target_user_id, requester_user_id, tasks, and custom_fields. Required: id.
- **Delete a Lumos appstore access request by ID** (Delete). Cancel a lumos access request by id. Returns an empty 204 response on success. Required: id.
- **Create a Lumos appstore access request** (Create). Create a lumos access request for a specific appstore permission. Returns: id, app_id, app_name, requester_user, target_user, supporter_user, status, notes, expires_at, expiration_in_seconds, requestable_permissions, requested_at, tasks, custom_fields, target_user_id, requester_user_id.
- **List all Lumos appstore access requests** (List). List all lumos access requests for the current organization. Returns: id, app_id, app_name, requester_user, target_user, supporter_user, status, notes, expires_at, expiration_in_seconds, requestable_permissions, requested_at, tasks, custom_fields, target_user_id, requester_user_id, created_at. Filter by target_user_id, requester_user_id, user_id, or statuses; sort ascending or descending by…
- **List all Lumos access policies** (List). List all access policies in lumos, sorted by created time descending. Returns: name, business_justification, id, status, is_enabled, apps, access_condition, is_everyone_condition, created_at, updated_at. Optionally filter results by policy name (case insensitive).
- **Create a Lumos access policy** (Create). Create a new access policy in lumos. Returns the created access policy object including id, name, status, created_at, and updated_at.
- **Get single Lumos access policy by ID** (Get). Get a single access policy by id in lumos. Returns: name, business_justification, id, status, is_enabled, apps, access_condition, is_everyone_condition, created_at, updated_at. Required: id.
- **Update a Lumos access policy by ID** (Update). Update an access policy by id in lumos. Returns the updated access policy object including id, name, status, created_at, and updated_at. Required: id.
- **Delete a Lumos access policy by ID** (Delete). Delete an access policy by id in lumos. Returns an empty 204 response on success. Required: id.
- **List all Lumos access reviews** (List). List access reviews for your organization in lumos. Returns each review's id, status, and apps. Page size is capped at 100 per request.
- **Create a Lumos access review** (Create). Create a new access review campaign in lumos. Returns: access_review, errors, id, status, apps. If apps are provided the review starts in IN_PREPARATION while account and entitlement snapshots are taken, then transitions automatically to IN_PROGRESS once snapshotting completes; without apps it starts directly in IN_PROGRESS.
- **Get single Lumos access review by ID** (Get). Get a lumos access review by id. Returns: id, name, status, creation_path, owner_id, created_by_id, deadline_at, started_at, completed_at, target_launch_date, recurrence_config, recurrence_days_frequency, created_at, updated_at, apps. Required: id.
- **Update a Lumos access review by ID** (Update). Update an existing lumos access review campaign by id. Returns: id, name, status, creation_path, owner_id, created_by_id, deadline_at, started_at, completed_at, target_launch_date, recurrence_config, recurrence_days_frequency, created_at, updated_at, apps. Required: id. Top-level fields are editable on any non-COMPLETED review; apps[].scope_filters edits are only accepted while the review is in…
- **Delete a Lumos access review by ID** (Delete). Soft-delete a lumos access review campaign by id. Returns an empty 204 response on success. Required: id. Fails with 400 if a review duplication is currently in progress.
- **Create a Lumos access review app** (Create). Add apps to an existing lumos access review campaign. Allowed on any review not yet COMPLETED; invalid or duplicate domain app UUIDs result in soft errors returned in the errors array rather than raising an exception. Returns: added_apps, errors. Required: access_review_id.
- **Delete a Lumos access review app by ID** (Delete). Soft-delete an app from a lumos access review campaign by id. Returns an empty 204 response on success. Required: access_review_id, id. Fails with 400 if the review is already COMPLETED.
- **List all Lumos access reviews scope options** (List). List available scope filter option groups for a domain app or ARDA in Lumos. Returns scope filter groups, each including name, items (scope filter entries capped at 1000 per group), truncated (true when the bucket exceeds the cap), and entitlement_type_label (for ACCOUNT_ENTITLEMENT groups, e.g. 'Roles', 'Groups'). Copy an item's value and name verbatim into scope_filters on access review…
- **List all Lumos knowledge contexts** (List). List knowledge context entries in lumos with optional filters and cursor pagination. Returns a collection of entries where each item includes id, title, product_scopes, created_at, and updated_at. Optional: title_search, product_scopes.
- **Create a Lumos knowledge context** (Create). Create a new knowledge context entry in lumos. Returns the created entry including id, title, product_scopes, created_at, and updated_at. Optionally include a file attachment — omit the file field to create an entry without one.
- **Get single Lumos knowledge context by ID** (Get). Get a single lumos knowledge context entry by id. Returns id, title, product_scopes, created_at, and updated_at. Required: id.
- **Update a Lumos knowledge context by ID** (Update). Patch an existing lumos knowledge context entry by id. Only supplied fields are updated; tag and scope lists replace existing values entirely. Returns the updated entry including id, title, product_scopes, created_at, and updated_at. Required: id.
- **Delete a Lumos knowledge context by ID** (Delete). Archive (soft-delete) a lumos knowledge context entry by id. The entry is marked ARCHIVED and no longer appears in list results. Returns an empty 204 response on success. Required: id.
- **List all Lumos vendor agreements** (List). List all vendor agreements for your company in lumos. Returns vendor agreement records from the paginated items collection. Returns: id, vendor, label, start_date, end_date, opt_out_date, renewal_stage, pricing_model, contract_length_months, projected_annualized_cost, renewal_owners, total_contract_cost, line_items, custom_attributes.
- **Update a Lumos vendor agreement custom attribute by ID** (Update). Update a custom attribute attached to a vendor agreement in Lumos. Returns the updated custom attribute record including id and label. Required: vendor_agreement_id, id.
- **Create a Lumos found document** (Create). Upload a newly discovered document (e.g. Order Form, Quote) to Lumos for review. Sends document metadata and file URLs to Lumos and returns a 200 acknowledgment with no documented response body fields. Required: unique_identifier, files.
- **Create a Lumos order** (Create). Upload a newly discovered order document (e.g. Order Form, Quote) to Lumos. Accepts a required JSON body conforming to the OrderInput schema; the individual field definitions are not enumerated in the available source documentation. Returns a 201 status on success with no documented response body fields.
- **List all Lumos tasks** (List). List lumos tasks visible to the current user. Returns task objects including id, task_type, task_category, status, and product_area. Filter by task_category, status, product_area, search text, or access_request_id; pass expand=actions or expand=assignees to hydrate those fields on each result. Admins may pass show_all_tasks=true to list tasks across the entire domain.
- **Lumos tasks get 2** (Get). Get a lumos task by id using the deprecated endpoint; prefer the non-deprecated get method instead. Returns task details including id, task_type, task_category, status, product_area, actions, assignees, and comments. Required: id.
- **Lumos tasks attach comment** (Action). Add a comment to a lumos task. The request body accepts an AddCommentInput payload; the specific body fields are not enumerated in the source documentation. Returns a 201 response on success with no documented response body. Required: id.
- **Lumos tasks complete** (Complete). Complete a lumos task, transitioning it to COMPLETED status. For approval tasks (task_category=APPROVAL), this performs the approve action on behalf of the caller, who must be an assignee or domain admin. Tasks with multiple possible completion actions should use the perform-action endpoint instead. Returns an empty 204 response on success. Required: id.
- **Get single Lumos task by ID** (Get). Get a single lumos task by id. Returns task details including id, task_type, task_category, status, product_area, app, target_user, created_at, actions, assignees, comments, and access_request_id. Pass expand=actions, expand=assignees, or expand=comments to hydrate those nested fields. Required: id.
- **Lumos tasks perform action** (Action). Perform an action on a Lumos task by task id. Returns an empty 204 response on success. Required: id.
- **Lumos tasks reassign** (Action). Reassign a Lumos task to another user by task id. Returns an empty 204 response on success. Required: id.
- **Lumos tasks dismiss** (Action). Dismiss a Lumos task by task id. Returns an empty 204 response on success. Required: id.
- **List all Lumos task actions** (List). List all actions associated with a specific task in Lumos. Returns action records including id, created_at, and updated_at. Required: task_id.
- **Create a Lumos task perform action** (Create). Perform a custom workflow action on a lumos task (deprecated endpoint). Use this only when the task exposes non-standard actions beyond approve/deny; discover available actions with GET /tasks/{task_id}/actions first, then supply the returned action_type in the request body. The optional transition_to field is inferred when the action has exactly one possible target status. Returns an empty 204…
- **Create a Lumos task reassign** (Create). Reassign a task in Lumos using this deprecated endpoint. Returns an empty 204 response on success. Required: task_id.
- **Create a Lumos task dismise** (Create). Dismiss a Lumos task by transitioning it to the DISMISSED state, acting as a deny/reject for approval tasks or a cancellation for non-approval tasks. Returns an empty 204 response on success. Required: task_id.
- **List all Lumos arts** (List). Get Lumos ASCII art to verify the API is working. Returns a plain text string containing ASCII art. No parameters required.
- **List all Lumos info** (List). Get current git revision information from Lumos. Returns an unstructured JSON object whose response fields are not enumerated in the API schema (the response shape is deployment-specific and not documented by the upstream API).
- **Create a Lumos airbase purchase request approved** (Create). Send an Airbase purchase request approved webhook event for a specific domain app, triggering workflow milestone transition processing. Returns an opaque acknowledgment response whose shape is not enumerated by the upstream API. Required: domain_app_uuid.
- **Create a Lumos vendr request completed** (Create). Send a Vendr request completed webhook event to Lumos for a specific domain app. Accepts an arbitrary JSON object representing the Vendr event payload. Returns an opaque webhook acknowledgment response. Required: domain_app_uuid.
- **List all Lumos appstore app settings** (List). List settings for a Lumos AppStore app. Returns the app settings object with app-specific configuration fields whose shape depends on the app's configuration in Lumos. Required: app_id.
- **Update a Lumos appstore app setting by ID** (Update). Update settings for a Lumos AppStore app via a partial PATCH. Returns the updated app settings object with app-specific configuration fields whose shape depends on the app's configuration in Lumos. Required: app_id.
- **List all Lumos current user** (List). Get the current authenticated user in Lumos. Returns the authenticated user's profile including id, email, created_at, and updated_at.