Add missing resources to CLI, MCP, and n8n surfaces

Audit all three API surfaces against the console GraphQL schema and add
missing resources: asset, audit, datum, dpia, evidence upload, measure,
obligation, processing activity, rights request, snapshot, task, tia,
trust center (with references/files), and vendor management CLI
commands; MCP tools for deletes, rights requests, trust center, vendor
contacts/services, and compliance external URLs; n8n nodes for
obligation, finding, task, evidence, processing activity, dpia, tia,
rights request, snapshot, audit log, access review, organization
context, trust center, and additional control/measure/vendor operations.

Include MCP e2e test infrastructure (testutil MCP client with API key
auth and JSON-RPC session management) and tests covering all new MCP
tools.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

packages/n8n-node/nodes/Probo/actions/tia/create.operation.ts

@@ -0,0 +1,152 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
+import { proboApiRequest } from '../../GenericFunctions';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'Processing Activity ID',
+		name: 'processingActivityId',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['create'],
+			},
+		},
+		default: '',
+		description: 'The ID of the processing activity',
+		required: true,
+	},
+	{
+		displayName: 'Data Subjects',
+		name: 'dataSubjects',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['create'],
+			},
+		},
+		default: '',
+		description: 'The data subjects involved in the transfer',
+		required: true,
+	},
+	{
+		displayName: 'Legal Mechanism',
+		name: 'legalMechanism',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['create'],
+			},
+		},
+		default: '',
+		description: 'The legal mechanism for the transfer',
+		required: true,
+	},
+	{
+		displayName: 'Transfer',
+		name: 'transfer',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['create'],
+			},
+		},
+		default: '',
+		description: 'The transfer details',
+		required: true,
+	},
+	{
+		displayName: 'Local Law Risk',
+		name: 'localLawRisk',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['create'],
+			},
+		},
+		default: '',
+		description: 'The local law risk assessment',
+		required: true,
+	},
+	{
+		displayName: 'Supplementary Measures',
+		name: 'supplementaryMeasures',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['create'],
+			},
+		},
+		default: '',
+		description: 'The supplementary measures for the transfer',
+		required: true,
+	},
+];
+
+export async function execute(
+	this: IExecuteFunctions,
+	itemIndex: number,
+): Promise<INodeExecutionData> {
+	const processingActivityId = this.getNodeParameter('processingActivityId', itemIndex) as string;
+	const dataSubjects = this.getNodeParameter('dataSubjects', itemIndex) as string;
+	const legalMechanism = this.getNodeParameter('legalMechanism', itemIndex) as string;
+	const transfer = this.getNodeParameter('transfer', itemIndex) as string;
+	const localLawRisk = this.getNodeParameter('localLawRisk', itemIndex) as string;
+	const supplementaryMeasures = this.getNodeParameter('supplementaryMeasures', itemIndex) as string;
+
+	const query = `
+		mutation CreateTransferImpactAssessment($input: CreateTransferImpactAssessmentInput!) {
+			createTransferImpactAssessment(input: $input) {
+				transferImpactAssessmentEdge {
+					node {
+						id
+						dataSubjects
+						legalMechanism
+						transfer
+						localLawRisk
+						supplementaryMeasures
+						createdAt
+						updatedAt
+					}
+				}
+			}
+		}
+	`;
+
+	const variables = {
+		input: {
+			processingActivityId,
+			dataSubjects,
+			legalMechanism,
+			transfer,
+			localLawRisk,
+			supplementaryMeasures,
+		},
+	};
+
+	const responseData = await proboApiRequest.call(this, query, variables);
+
+	return {
+		json: responseData,
+		pairedItem: { item: itemIndex },
+	};
+}

packages/n8n-node/nodes/Probo/actions/tia/delete.operation.ts

@@ -0,0 +1,55 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
+import { proboApiRequest } from '../../GenericFunctions';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'TIA ID',
+		name: 'transferImpactAssessmentId',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['delete'],
+			},
+		},
+		default: '',
+		description: 'The ID of the TIA to delete',
+		required: true,
+	},
+];
+
+export async function execute(
+	this: IExecuteFunctions,
+	itemIndex: number,
+): Promise<INodeExecutionData> {
+	const transferImpactAssessmentId = this.getNodeParameter('transferImpactAssessmentId', itemIndex) as string;
+
+	const query = `
+		mutation DeleteTransferImpactAssessment($input: DeleteTransferImpactAssessmentInput!) {
+			deleteTransferImpactAssessment(input: $input) {
+				deletedTransferImpactAssessmentId
+			}
+		}
+	`;
+
+	const responseData = await proboApiRequest.call(this, query, { input: { transferImpactAssessmentId } });
+
+	return {
+		json: responseData,
+		pairedItem: { item: itemIndex },
+	};
+}

packages/n8n-node/nodes/Probo/actions/tia/get.operation.ts

@@ -0,0 +1,68 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
+import { proboApiRequest } from '../../GenericFunctions';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'TIA ID',
+		name: 'transferImpactAssessmentId',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['get'],
+			},
+		},
+		default: '',
+		description: 'The ID of the TIA',
+		required: true,
+	},
+];
+
+export async function execute(
+	this: IExecuteFunctions,
+	itemIndex: number,
+): Promise<INodeExecutionData> {
+	const transferImpactAssessmentId = this.getNodeParameter('transferImpactAssessmentId', itemIndex) as string;
+
+	const query = `
+		query GetTransferImpactAssessment($transferImpactAssessmentId: ID!) {
+			node(id: $transferImpactAssessmentId) {
+				... on TransferImpactAssessment {
+					id
+					dataSubjects
+					legalMechanism
+					transfer
+					localLawRisk
+					supplementaryMeasures
+					createdAt
+					updatedAt
+				}
+			}
+		}
+	`;
+
+	const variables = {
+		transferImpactAssessmentId,
+	};
+
+	const responseData = await proboApiRequest.call(this, query, variables);
+
+	return {
+		json: responseData,
+		pairedItem: { item: itemIndex },
+	};
+}

packages/n8n-node/nodes/Probo/actions/tia/getAll.operation.ts

@@ -0,0 +1,117 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties, IExecuteFunctions, INodeExecutionData, IDataObject } from 'n8n-workflow';
+import { proboApiRequestAllItems } from '../../GenericFunctions';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'Organization ID',
+		name: 'organizationId',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['getAll'],
+			},
+		},
+		default: '',
+		description: 'The ID of the organization',
+		required: true,
+	},
+	{
+		displayName: 'Return All',
+		name: 'returnAll',
+		type: 'boolean',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['getAll'],
+			},
+		},
+		default: false,
+		description: 'Whether to return all results or only up to a given limit',
+	},
+	{
+		displayName: 'Limit',
+		name: 'limit',
+		type: 'number',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['getAll'],
+				returnAll: [false],
+			},
+		},
+		typeOptions: {
+			minValue: 1,
+		},
+		default: 50,
+		description: 'Max number of results to return',
+	},
+];
+
+export async function execute(
+	this: IExecuteFunctions,
+	itemIndex: number,
+): Promise<INodeExecutionData> {
+	const organizationId = this.getNodeParameter('organizationId', itemIndex) as string;
+	const returnAll = this.getNodeParameter('returnAll', itemIndex) as boolean;
+	const limit = this.getNodeParameter('limit', itemIndex, 50) as number;
+
+	const query = `
+		query GetTransferImpactAssessments($organizationId: ID!, $first: Int, $after: CursorKey) {
+			node(id: $organizationId) {
+				... on Organization {
+					transferImpactAssessments(first: $first, after: $after) {
+						edges {
+							node {
+								id
+								dataSubjects
+								legalMechanism
+								transfer
+								localLawRisk
+								supplementaryMeasures
+								createdAt
+								updatedAt
+							}
+						}
+						pageInfo {
+							hasNextPage
+							endCursor
+						}
+					}
+				}
+			}
+		}
+	`;
+
+	const transferImpactAssessments = await proboApiRequestAllItems.call(
+		this,
+		query,
+		{ organizationId },
+		(response) => {
+			const data = response?.data as IDataObject | undefined;
+			const node = data?.node as IDataObject | undefined;
+			return node?.transferImpactAssessments as IDataObject | undefined;
+		},
+		returnAll,
+		limit,
+	);
+
+	return {
+		json: { transferImpactAssessments },
+		pairedItem: { item: itemIndex },
+	};
+}

packages/n8n-node/nodes/Probo/actions/tia/index.ts

@@ -0,0 +1,74 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties } from 'n8n-workflow';
+import * as createOp from './create.operation';
+import * as updateOp from './update.operation';
+import * as deleteOp from './delete.operation';
+import * as getOp from './get.operation';
+import * as getAllOp from './getAll.operation';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'Operation',
+		name: 'operation',
+		type: 'options',
+		noDataExpression: true,
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+			},
+		},
+		options: [
+			{
+				name: 'Create',
+				value: 'create',
+				description: 'Create a new TIA',
+				action: 'Create a TIA',
+			},
+			{
+				name: 'Delete',
+				value: 'delete',
+				description: 'Delete a TIA',
+				action: 'Delete a TIA',
+			},
+			{
+				name: 'Get',
+				value: 'get',
+				description: 'Get a TIA',
+				action: 'Get a TIA',
+			},
+			{
+				name: 'Get Many',
+				value: 'getAll',
+				description: 'Get many TIAs',
+				action: 'Get many tias',
+			},
+			{
+				name: 'Update',
+				value: 'update',
+				description: 'Update an existing TIA',
+				action: 'Update a TIA',
+			},
+		],
+		default: 'create',
+	},
+	...createOp.description,
+	...updateOp.description,
+	...deleteOp.description,
+	...getOp.description,
+	...getAllOp.description,
+];
+
+export { createOp as create, updateOp as update, deleteOp as delete, getOp as get, getAllOp as getAll };

packages/n8n-node/nodes/Probo/actions/tia/update.operation.ts

@@ -0,0 +1,141 @@
+// Copyright (c) 2025-2026 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+import type { INodeProperties, IExecuteFunctions, INodeExecutionData } from 'n8n-workflow';
+import { proboApiRequest } from '../../GenericFunctions';
+
+export const description: INodeProperties[] = [
+	{
+		displayName: 'TIA ID',
+		name: 'id',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['update'],
+			},
+		},
+		default: '',
+		description: 'The ID of the TIA to update',
+		required: true,
+	},
+	{
+		displayName: 'Data Subjects',
+		name: 'dataSubjects',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['update'],
+			},
+		},
+		default: '',
+		description: 'The data subjects involved in the transfer',
+	},
+	{
+		displayName: 'Legal Mechanism',
+		name: 'legalMechanism',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['update'],
+			},
+		},
+		default: '',
+		description: 'The legal mechanism for the transfer',
+	},
+	{
+		displayName: 'Transfer',
+		name: 'transfer',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['update'],
+			},
+		},
+		default: '',
+		description: 'The transfer details',
+	},
+	{
+		displayName: 'Local Law Risk',
+		name: 'localLawRisk',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['update'],
+			},
+		},
+		default: '',
+		description: 'The local law risk assessment',
+	},
+	{
+		displayName: 'Supplementary Measures',
+		name: 'supplementaryMeasures',
+		type: 'string',
+		displayOptions: {
+			show: {
+				resource: ['tia'],
+				operation: ['update'],
+			},
+		},
+		default: '',
+		description: 'The supplementary measures for the transfer',
+	},
+];
+
+export async function execute(
+	this: IExecuteFunctions,
+	itemIndex: number,
+): Promise<INodeExecutionData> {
+	const id = this.getNodeParameter('id', itemIndex) as string;
+	const dataSubjects = this.getNodeParameter('dataSubjects', itemIndex, '') as string;
+	const legalMechanism = this.getNodeParameter('legalMechanism', itemIndex, '') as string;
+	const transfer = this.getNodeParameter('transfer', itemIndex, '') as string;
+	const localLawRisk = this.getNodeParameter('localLawRisk', itemIndex, '') as string;
+	const supplementaryMeasures = this.getNodeParameter('supplementaryMeasures', itemIndex, '') as string;
+
+	const query = `
+		mutation UpdateTransferImpactAssessment($input: UpdateTransferImpactAssessmentInput!) {
+			updateTransferImpactAssessment(input: $input) {
+				transferImpactAssessment {
+					id
+					dataSubjects
+					legalMechanism
+					transfer
+					localLawRisk
+					supplementaryMeasures
+					createdAt
+					updatedAt
+				}
+			}
+		}
+	`;
+
+	const input: Record<string, string> = { id };
+	if (dataSubjects) input.dataSubjects = dataSubjects;
+	if (legalMechanism) input.legalMechanism = legalMechanism;
+	if (transfer) input.transfer = transfer;
+	if (localLawRisk) input.localLawRisk = localLawRisk;
+	if (supplementaryMeasures) input.supplementaryMeasures = supplementaryMeasures;
+
+	const responseData = await proboApiRequest.call(this, query, { input });
+
+	return {
+		json: responseData,
+		pairedItem: { item: itemIndex },
+	};
+}