Skip to main content
Glama

Create a job (start registration)

create_job

Step 1. Register your webhook and schedule (no account, no API key). Returns job_id and a one-time setup_token, and POSTs a url_verification challenge to webhook_url. Your webhook must answer it (echo: reply 2xx {"challenge":""}) — then call claim_credentials. Or reply 2xx and call verify_challenge with the value (callback). Nothing triggers before verification. (REST: POST /v1/jobs)

Input Schema

NameRequiredDescriptionDefault
nameNo
payloadNoSent unchanged in every trigger (≤ 8 KB).
max_runsNoComplete after this many dispatched runs; null = unlimited.
scheduleYesExactly one of {cron, timezone?}, {interval_sec}, {run_at}. Minimum spacing 60 s.
timeout_msNo
webhook_urlYesPublic https URL of your agent. It receives the challenge now and the signed triggers later.
outgoing_authNoOptional header your webhook requires (e.g. a Grok routine webhook that needs Authorization). Sent on the url_verification POST and every trigger; never overrides the X-Cronjob-* headers.
catchup_policyNo
retry_base_secNo
signature_in_bodyNoDefault false. true = every trigger body also carries cronjob_signature {version, timestamp, delivery_id, signatures[], signature} (HMAC over "v1b:{timestamp}:{delivery_id}:" + canonical JSON of the body without cronjob_signature). Use it when your webhook platform drops the X-Cronjob-* headers (e.g. Grok Bot routines).
verification_modeNoInformational; both answers work. Default echo.
catchup_window_secNo
retry_max_attemptsNo
retry_max_backoff_secNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already flag readOnlyHint=false and openWorldHint=true, so the description's added value is real: no account or API key needed, a one-time setup_token is returned, no triggers fire until verification, and outgoing_auth secrets are stored encrypted and never shown back. It stops short of stating behavior on repeated calls even though idempotentHint=false, leaving duplicate-job consequences unstated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Dense but front-loaded: the step number, the no-auth promise, and the return values come first, then the challenge protocol. Nearly every clause carries weight; the trailing "(REST: POST /v1/jobs)" is the only low-value addition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 14-parameter tool with nested objects and no output schema, the description does explain the important return values and the full handshake sequence. But half the configuration surface (retry and catchup tuning) is left entirely to undocumented schema fields, so an agent cannot reason about those knobs from the definition.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50% with 14 parameters, and seven top-level params (name, timeout_ms, catchup_policy, catchup_window_sec, retry_base_sec, retry_max_attempts, retry_max_backoff_sec) have no description in the schema and no mention in the description. Only webhook_url, the schedule forms, verification_mode, and signature_in_body get any narrative treatment, so the description does little to close the coverage gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ("Register your webhook and schedule" → creates a job) and goes further by naming the exact outputs (job_id, setup_token) and the side effect (POSTs a url_verification challenge). It is unambiguously distinguishable from siblings like get_job or update_job because it is framed as "Step 1" of a registration flow.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly routes the agent: answer the challenge by echoing (then call claim_credentials) or reply 2xx and call verify_challenge (callback), and it warns that nothing triggers before verification. This is a clear when-to-use-which-sibling map with a stated precondition, not just implied context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources