Skip to main content
Glama

elaichi__toolbox__list

Read-onlyIdempotent

List the toolboxes the caller can see or run: their own, plus every one explicitly shared with them, with one of their teams, or with the whole organization — and nothing else. No permission widens it. toolbox:view and toolbox:manage add nothing here: unlike connections/templates/connectors, toolboxes have NO org-wide oversight listing at all, neither here nor GET /toolbox in the REST API (no visibility parameter exists for them), so this cannot answer "how many toolboxes does the organization have" and must not be reported as if it could — a caller who owns none and has been shared none gets an empty list however privileged they are. Always includes the virtual toolbox global:{the caller’s usr_… id} ("All tools"), which holds every tool they can run across every active connection and is the right default for execution; plus one connection:{conn_…} toolbox per active connection; plus every stored tbx_… toolbox. Ids here are therefore usually NOT tbx_… — pass whatever id you read back verbatim to toolbox.get and toolbox.execute. Only the stored tbx_… rows have grants and a lifecycle (toolbox.update/set_entries/share/unshare/delete); the global:/connection: ids are recomputed from scratch on every call and refuse mutation. A connection needing reauthentication contributes no tools; a stored toolbox whose entry has no connection pinned reports it in needs_connection_count. Returns { result: [...], nextCursor, prevCursor } — camelCase here, unlike the REST API’s next_cursor. Unlike the other lists in this catalog limit defaults to 200 rather than 50, so one call is the entire set for almost every organization. It is still a PAGE: a non-null nextCursor means there are more rows, and the only way to reach them is to send it back as cursor until it comes back null. A page whose nextCursor is not null is never a total.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
limitNoRows per page, 1–200. Defaults to 200 — the whole set in one call for almost every organization — rather than the 50 the other lists here default to. Larger values are clamped, not rejected.
cursorNoOpaque cursor taken verbatim from a previous call’s `nextCursor`. Omit for the first page.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With annotations already declaring readOnlyHint, idempotentHint, and destructiveHint, the description goes well beyond by disclosing that no permission widens the result, that unprivileged callers get an empty list, that global:/connection: toolboxes are recomputed and refuse mutation, that reauthentication removes tools, and that needs_connection_count appears. It also clarifies pagination is a page, not a total, and that a non-null nextCursor means more rows.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long but densely informative and logically organized; the core purpose and scope are front-loaded, followed by permissions, id semantics, lifecycle, and pagination. Some redundancy (e.g., 'A page whose nextCursor is not null is never a total' restates prior pagination text) makes it slightly less concise, but no sentence is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex list tool with no output schema, the description is remarkably complete: it specifies the return shape (result, nextCursor, prevCursor), camelCase vs REST, pagination mechanics, default page size, included toolbox types, id semantics, mutation refusal, reauthentication effects, and the needs_connection_count field. An agent has enough to call it correctly and interpret results.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the schema already documents limit's default, min/max, and clamping, as well as cursor being opaque and passed from nextCursor. The description adds comparative context—limit defaults to 200 'rather than the 50 the other lists here default to'—and reinforces cursor usage in a pagination loop, which helps an agent choose values appropriately.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and precise scope: 'List the toolboxes the caller can see or run: their own, plus every one explicitly shared with them, with one of their teams, or with the whole organization — and nothing else.' It explicitly distinguishes itself from other list tools by stating there is no org-wide oversight listing and that it cannot answer organizational counts, and it names related tools (toolbox.get, toolbox.execute) making the resource boundary clear.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit when-to-use and when-not-to-use guidance: it can list a caller's visible toolboxes but 'must not be reported as if it could' answer org-wide counts. It also directs the agent to pass returned ids verbatim to toolbox.get and toolbox.execute, identifies which toolboxes are mutable via the toolbox.* lifecycle tools, and explains pagination via cursor, which is actionable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources