Add missing resources to CLI, MCP, and n8n surfaces

Audit all three API surfaces against the console GraphQL schema and add
missing resources: asset, audit, datum, dpia, evidence upload, measure,
obligation, processing activity, rights request, snapshot, task, tia,
trust center (with references/files), and vendor management CLI
commands; MCP tools for deletes, rights requests, trust center, vendor
contacts/services, and compliance external URLs; n8n nodes for
obligation, finding, task, evidence, processing activity, dpia, tia,
rights request, snapshot, audit log, access review, organization
context, trust center, and additional control/measure/vendor operations.

Include MCP e2e test infrastructure (testutil MCP client with API key
auth and JSON-RPC session management) and tests covering all new MCP
tools.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

packages/n8n-node/nodes/Probo/actions/dpia/create.operation.ts

@@ -0,0 +1,166 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
+import { proboApiRequest } from '../../GenericFunctions';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'Processing Activity ID',
+		name: 'processingActivityId',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['create'],
+			},
+		},
+		default: '',
+		description: 'The ID of the processing activity',
+		required: true,
+	},
+	{
+		displayName: 'Description',
+		name: 'description',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['create'],
+			},
+		},
+		default: '',
+		description: 'The description of the DPIA',
+		required: true,
+	},
+	{
+		displayName: 'Necessity and Proportionality',
+		name: 'necessityAndProportionality',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['create'],
+			},
+		},
+		default: '',
+		description: 'The necessity and proportionality assessment',
+		required: true,
+	},
+	{
+		displayName: 'Potential Risk',
+		name: 'potentialRisk',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['create'],
+			},
+		},
+		default: '',
+		description: 'The potential risk assessment',
+		required: true,
+	},
+	{
+		displayName: 'Mitigations',
+		name: 'mitigations',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['create'],
+			},
+		},
+		default: '',
+		description: 'The mitigations for the identified risks',
+		required: true,
+	},
+	{
+		displayName: 'Residual Risk',
+		name: 'residualRisk',
+		type: 'options',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['create'],
+			},
+		},
+		options: [
+			{
+				name: 'Low',
+				value: 'LOW',
+			},
+			{
+				name: 'Medium',
+				value: 'MEDIUM',
+			},
+			{
+				name: 'High',
+				value: 'HIGH',
+			},
+		],
+		default: 'LOW',
+		description: 'The residual risk level',
+		required: true,
+	},
+];
+
+export async function execute(
+	this: IExecuteFunctions,
+	itemIndex: number,
+): Promise<INodeExecutionData> {
+	const processingActivityId = this.getNodeParameter('processingActivityId', itemIndex) as string;
+	const description = this.getNodeParameter('description', itemIndex) as string;
+	const necessityAndProportionality = this.getNodeParameter('necessityAndProportionality', itemIndex) as string;
+	const potentialRisk = this.getNodeParameter('potentialRisk', itemIndex) as string;
+	const mitigations = this.getNodeParameter('mitigations', itemIndex) as string;
+	const residualRisk = this.getNodeParameter('residualRisk', itemIndex) as string;
+
+	const query = `
+		mutation CreateDataProtectionImpactAssessment($input: CreateDataProtectionImpactAssessmentInput!) {
+			createDataProtectionImpactAssessment(input: $input) {
+				dataProtectionImpactAssessmentEdge {
+					node {
+						id
+						description
+						necessityAndProportionality
+						potentialRisk
+						mitigations
+						residualRisk
+						createdAt
+						updatedAt
+					}
+				}
+			}
+		}
+	`;
+
+	const variables = {
+		input: {
+			processingActivityId,
+			description,
+			necessityAndProportionality,
+			potentialRisk,
+			mitigations,
+			residualRisk,
+		},
+	};
+
+	const responseData = await proboApiRequest.call(this, query, variables);
+
+	return {
+		json: responseData,
+		pairedItem: { item: itemIndex },
+	};
+}

packages/n8n-node/nodes/Probo/actions/dpia/delete.operation.ts

@@ -0,0 +1,55 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
+import { proboApiRequest } from '../../GenericFunctions';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'DPIA ID',
+		name: 'dataProtectionImpactAssessmentId',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['delete'],
+			},
+		},
+		default: '',
+		description: 'The ID of the DPIA to delete',
+		required: true,
+	},
+];
+
+export async function execute(
+	this: IExecuteFunctions,
+	itemIndex: number,
+): Promise<INodeExecutionData> {
+	const dataProtectionImpactAssessmentId = this.getNodeParameter('dataProtectionImpactAssessmentId', itemIndex) as string;
+
+	const query = `
+		mutation DeleteDataProtectionImpactAssessment($input: DeleteDataProtectionImpactAssessmentInput!) {
+			deleteDataProtectionImpactAssessment(input: $input) {
+				deletedDataProtectionImpactAssessmentId
+			}
+		}
+	`;
+
+	const responseData = await proboApiRequest.call(this, query, { input: { dataProtectionImpactAssessmentId } });
+
+	return {
+		json: responseData,
+		pairedItem: { item: itemIndex },
+	};
+}

packages/n8n-node/nodes/Probo/actions/dpia/get.operation.ts

@@ -0,0 +1,68 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
+import { proboApiRequest } from '../../GenericFunctions';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'DPIA ID',
+		name: 'dataProtectionImpactAssessmentId',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['get'],
+			},
+		},
+		default: '',
+		description: 'The ID of the DPIA',
+		required: true,
+	},
+];
+
+export async function execute(
+	this: IExecuteFunctions,
+	itemIndex: number,
+): Promise<INodeExecutionData> {
+	const dataProtectionImpactAssessmentId = this.getNodeParameter('dataProtectionImpactAssessmentId', itemIndex) as string;
+
+	const query = `
+		query GetDataProtectionImpactAssessment($dataProtectionImpactAssessmentId: ID!) {
+			node(id: $dataProtectionImpactAssessmentId) {
+				... on DataProtectionImpactAssessment {
+					id
+					description
+					necessityAndProportionality
+					potentialRisk
+					mitigations
+					residualRisk
+					createdAt
+					updatedAt
+				}
+			}
+		}
+	`;
+
+	const variables = {
+		dataProtectionImpactAssessmentId,
+	};
+
+	const responseData = await proboApiRequest.call(this, query, variables);
+
+	return {
+		json: responseData,
+		pairedItem: { item: itemIndex },
+	};
+}

packages/n8n-node/nodes/Probo/actions/dpia/getAll.operation.ts

@@ -0,0 +1,117 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties, IExecuteFunctions, INodeExecutionData, IDataObject } from 'n8n-workflow';
+import { proboApiRequestAllItems } from '../../GenericFunctions';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'Organization ID',
+		name: 'organizationId',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['getAll'],
+			},
+		},
+		default: '',
+		description: 'The ID of the organization',
+		required: true,
+	},
+	{
+		displayName: 'Return All',
+		name: 'returnAll',
+		type: 'boolean',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['getAll'],
+			},
+		},
+		default: false,
+		description: 'Whether to return all results or only up to a given limit',
+	},
+	{
+		displayName: 'Limit',
+		name: 'limit',
+		type: 'number',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['getAll'],
+				returnAll: [false],
+			},
+		},
+		typeOptions: {
+			minValue: 1,
+		},
+		default: 50,
+		description: 'Max number of results to return',
+	},
+];
+
+export async function execute(
+	this: IExecuteFunctions,
+	itemIndex: number,
+): Promise<INodeExecutionData> {
+	const organizationId = this.getNodeParameter('organizationId', itemIndex) as string;
+	const returnAll = this.getNodeParameter('returnAll', itemIndex) as boolean;
+	const limit = this.getNodeParameter('limit', itemIndex, 50) as number;
+
+	const query = `
+		query GetDataProtectionImpactAssessments($organizationId: ID!, $first: Int, $after: CursorKey) {
+			node(id: $organizationId) {
+				... on Organization {
+					dataProtectionImpactAssessments(first: $first, after: $after) {
+						edges {
+							node {
+								id
+								description
+								necessityAndProportionality
+								potentialRisk
+								mitigations
+								residualRisk
+								createdAt
+								updatedAt
+							}
+						}
+						pageInfo {
+							hasNextPage
+							endCursor
+						}
+					}
+				}
+			}
+		}
+	`;
+
+	const dataProtectionImpactAssessments = await proboApiRequestAllItems.call(
+		this,
+		query,
+		{ organizationId },
+		(response) => {
+			const data = response?.data as IDataObject | undefined;
+			const node = data?.node as IDataObject | undefined;
+			return node?.dataProtectionImpactAssessments as IDataObject | undefined;
+		},
+		returnAll,
+		limit,
+	);
+
+	return {
+		json: { dataProtectionImpactAssessments },
+		pairedItem: { item: itemIndex },
+	};
+}

packages/n8n-node/nodes/Probo/actions/dpia/index.ts

@@ -0,0 +1,74 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties } from 'n8n-workflow';
+import * as createOp from './create.operation';
+import * as updateOp from './update.operation';
+import * as deleteOp from './delete.operation';
+import * as getOp from './get.operation';
+import * as getAllOp from './getAll.operation';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'Operation',
+		name: 'operation',
+		type: 'options',
+		noDataExpression: true,
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+			},
+		},
+		options: [
+			{
+				name: 'Create',
+				value: 'create',
+				description: 'Create a new DPIA',
+				action: 'Create a DPIA',
+			},
+			{
+				name: 'Delete',
+				value: 'delete',
+				description: 'Delete a DPIA',
+				action: 'Delete a DPIA',
+			},
+			{
+				name: 'Get',
+				value: 'get',
+				description: 'Get a DPIA',
+				action: 'Get a DPIA',
+			},
+			{
+				name: 'Get Many',
+				value: 'getAll',
+				description: 'Get many DPIAs',
+				action: 'Get many dpias',
+			},
+			{
+				name: 'Update',
+				value: 'update',
+				description: 'Update an existing DPIA',
+				action: 'Update a DPIA',
+			},
+		],
+		default: 'create',
+	},
+	...createOp.description,
+	...updateOp.description,
+	...deleteOp.description,
+	...getOp.description,
+	...getAllOp.description,
+];
+
+export { createOp as create, updateOp as update, deleteOp as delete, getOp as get, getAllOp as getAll };

packages/n8n-node/nodes/Probo/actions/dpia/update.operation.ts

@@ -0,0 +1,159 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
+import { proboApiRequest } from '../../GenericFunctions';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'DPIA ID',
+		name: 'id',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['update'],
+			},
+		},
+		default: '',
+		description: 'The ID of the DPIA to update',
+		required: true,
+	},
+	{
+		displayName: 'Description',
+		name: 'description',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['update'],
+			},
+		},
+		default: '',
+		description: 'The description of the DPIA',
+	},
+	{
+		displayName: 'Necessity and Proportionality',
+		name: 'necessityAndProportionality',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['update'],
+			},
+		},
+		default: '',
+		description: 'The necessity and proportionality assessment',
+	},
+	{
+		displayName: 'Potential Risk',
+		name: 'potentialRisk',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['update'],
+			},
+		},
+		default: '',
+		description: 'The potential risk assessment',
+	},
+	{
+		displayName: 'Mitigations',
+		name: 'mitigations',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['update'],
+			},
+		},
+		default: '',
+		description: 'The mitigations for the identified risks',
+	},
+	{
+		displayName: 'Residual Risk',
+		name: 'residualRisk',
+		type: 'options',
+		displayOptions: {
+			show: {
+				resource: ['dpia'],
+				operation: ['update'],
+			},
+		},
+		options: [
+			{
+				name: '(Unchanged)',
+				value: '',
+			},
+			{
+				name: 'Low',
+				value: 'LOW',
+			},
+			{
+				name: 'Medium',
+				value: 'MEDIUM',
+			},
+			{
+				name: 'High',
+				value: 'HIGH',
+			},
+		],
+		default: '',
+		description: 'The residual risk level',
+	},
+];
+
+export async function execute(
+	this: IExecuteFunctions,
+	itemIndex: number,
+): Promise<INodeExecutionData> {
+	const id = this.getNodeParameter('id', itemIndex) as string;
+	const description = this.getNodeParameter('description', itemIndex, '') as string;
+	const necessityAndProportionality = this.getNodeParameter('necessityAndProportionality', itemIndex, '') as string;
+	const potentialRisk = this.getNodeParameter('potentialRisk', itemIndex, '') as string;
+	const mitigations = this.getNodeParameter('mitigations', itemIndex, '') as string;
+	const residualRisk = this.getNodeParameter('residualRisk', itemIndex, '') as string;
+
+	const query = `
+		mutation UpdateDataProtectionImpactAssessment($input: UpdateDataProtectionImpactAssessmentInput!) {
+			updateDataProtectionImpactAssessment(input: $input) {
+				dataProtectionImpactAssessment {
+					id
+					description
+					necessityAndProportionality
+					potentialRisk
+					mitigations
+					residualRisk
+					createdAt
+					updatedAt
+				}
+			}
+		}
+	`;
+
+	const input: Record<string, string> = { id };
+	if (description) input.description = description;
+	if (necessityAndProportionality) input.necessityAndProportionality = necessityAndProportionality;
+	if (potentialRisk) input.potentialRisk = potentialRisk;
+	if (mitigations) input.mitigations = mitigations;
+	if (residualRisk) input.residualRisk = residualRisk;
+
+	const responseData = await proboApiRequest.call(this, query, { input });
+
+	return {
+		json: responseData,
+		pairedItem: { item: itemIndex },
+	};
+}