feat(mcp): add search read tools

Add read-only search tools: platform_search_team_resources and
platform_search_instances, covering team-wide resource search and
instance-scoped search.

Closes #7677

Author: andypalmi

forge/ee/lib/mcp/tools/search.js

@@ -0,0 +1,41 @@
+const { z } = require('zod')
+
+module.exports = [
+    {
+        name: 'platform_search_team_resources',
+        title: 'Search Team Resources',
+        description: `FlowFuse platform automation tool:
+            Searches across a team's resources: applications, hosted instances, and remote instances (devices).
+            Use this when the user wants to find something by name across the whole team, or when you have a name
+            but not the ID of the resource you need.
+            An empty or blank query returns an empty result set.
+            To search only instances (hosted and remote), use platform_search_instances instead.`,
+        annotations: { readOnlyHint: true, destructiveHint: false },
+        inputSchema: {
+            teamId: z.string().describe('The ID or hashid of the team to search within'),
+            query: z.string().describe('The search term')
+        },
+        handler: async (args, { inject }) => {
+            const response = await inject({ method: 'GET', url: `/api/v1/search?team=${args.teamId}&query=${encodeURIComponent(args.query)}` })
+            return response
+        }
+    },
+    {
+        name: 'platform_search_instances',
+        title: 'Search Instances',
+        description: `FlowFuse platform automation tool:
+            Searches the hosted instances and remote instances (devices) of a team.
+            Use this when the user wants to find an instance by name and you do not already have its ID.
+            An empty or blank query returns an empty result set.
+            To search across all resource types (including applications), use platform_search_team_resources instead.`,
+        annotations: { readOnlyHint: true, destructiveHint: false },
+        inputSchema: {
+            teamId: z.string().describe('The ID or hashid of the team to search within'),
+            query: z.string().describe('The search term')
+        },
+        handler: async (args, { inject }) => {
+            const response = await inject({ method: 'GET', url: `/api/v1/search/instances?team=${args.teamId}&query=${encodeURIComponent(args.query)}` })
+            return response
+        }
+    }
+]

forge/routes/auth/permissions.js

@@ -48,6 +48,8 @@ const IMPLICIT_TOKEN_SCOPES = {
         // teams
         'user:team:list', // list teams
         'team:read', // get team details
+        // search
+        'team:search', // search team resources, search team instances
         // platform
         'stack:list',
         'flow-blueprint:list',