List members

curl "https://herculeradar.com/api/v1/members" \
  --header "Authorization: Bearer hr_live_…"

Tool name list_project_members. It takes the same input and returns the same { data, meta } envelope as REST, because both call the same function.

Seats on this project: members and pending invites. The owner is not in the list.

{
  "data": {
    "members": [],
    "invites": [],
    "seats": {
      "used": 0,
      "max": 10
    }
  },
  "meta": {
    "capability": "list_project_members",
    "requestId": "req_9f2b4a8c1d0e",
    "idempotencyReplayed": false,
    "docs": "https://herculeradar.com/docs/reference/list_project_members"
  }
}

Requires the projects:read scope. A credential without it gets 403 FORBIDDEN. Resources in projects the credential cannot reach answer 404 NOT_FOUND rather than 403, so ids cannot be probed across tenants.