Skip to main content
Glama

apply_actions

Destructive

Validate and apply a batch of flow-builder actions — the single write path for editing flows, blocks, variables, broadcasts, sequences, and folders. Call this directly; a separate validate_actions call beforehand is unnecessary. Broadcasts have no dedicated tool and are managed here: create_broadcast makes a DRAFT (it owns its flow via data.flowId — add the message blocks in the same batch, no separate create_flow), optionally with create_recurrence_schedule + attach_recurrence_to_broadcast for recurring; a later update_broadcast with status SCHEDULED (and scheduledAt for one-shots) is what actually schedules/sends it. The full recipe is in get_action_schema under broadcasts. DESTRUCTIVE: the batch may include delete_block, delete_link, delete_flow, delete_variable, delete_operation, and delete_broadcast. Confirm with the user before applying deletions. delete_operation also removes the operation's hidden graph flow and run history; delete_broadcast also removes the broadcast's delivery history and its content flow, and neither can be undone. IRREVERSIBLE SIDE EFFECTS: run_operation starts a real operation run, which may send broadcasts to real contacts and write application variables. It cannot be undone or recalled, is not idempotent, and is available only through this tool — confirm with the user before applying a batch containing one, and never blindly retry a timed-out call that did. Validation always runs first and an invalid batch applies nothing. Execution is NOT atomic, however: if an action fails mid-batch, the actions before it stay applied and execution stops — re-read state with get_flow_context before retrying rather than blindly resending the batch. Not idempotent — resending a batch of create_* actions creates duplicates. Read get_action_schema for the action contract and get_design_guidelines before any structural edit. Returns { success, changes, errors, warnings, actionId } plus an idRemap mapping placeholder ids to the real ids that were created. Applying does NOT publish. Edits land on the draft graph and connected bots keep serving the previously published version until deploy_application runs — finish a round of edits, then deploy.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
flowIdNoDefault flow id for actions in the batch that do not carry their own. Optional when every action targets an explicit flow.
actionsYesOrdered batch of at least one action, applied in array order. An invalid batch is rejected up front and applies nothing, but execution itself is NOT atomic: if an action fails mid-batch, execution stops there and the actions before it stay applied — re-read state before retrying.
applicationIdNoApplication (workspace) id. Optional: an application-scoped key (app_...) defaults to its own application, but a personal key (usr_...) has no default and omitting it fails with MCP_APPLICATION_REQUIRED. Call list_applications to get the id.
conversationIdNoOptional id used to group the resulting audit records under one editing session.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and idempotentHint=false, but the description greatly enriches these with concrete consequences: which delete_* actions are included, that delete_operation removes the hidden graph flow and run history, that delete_broadcast removes delivery history and content flow, that run_operation sends real broadcasts and writes app variables and cannot be undone, that execution is non-atomic (earlier actions stay applied on mid-batch failure), that resending creates duplicates, and that applying does not publish (draft graph only). It also explains the return shape ({ success, changes, errors, warnings, actionId } plus idRemap). This far exceeds what annotations alone provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long (about 40 sentences), but almost every sentence earns its place given the tool's complexity: 26 action kinds, non-atomic execution, destructive side effects, and non-idempotent behavior. It front-loads the core purpose and the validation/atomicity caveats before drilling into the broadcast recipe and deletion warnings. The main structural weakness is that the broadcast recipe and destructive/irreversible sections are packed densely; a top-level 'when NOT to use' or 'destructive actions' heading would improve skimmability, but the content itself is high-value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a high-complexity write tool with a large action enum, no output schema, and no separate validation steps described elsewhere. The description covers: the action contract (via get_action_schema reference), the exact broadcast workflow including scheduling, the full destructive set, the non-idempotency and non-atomicity behavior, the retry guidance, the draft-vs-published distinction (deploy_application), the return shape, and the applicationId scoping rule. There is no missing information an agent would need to select and invoke this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3 and the bar is lower. The description still adds meaning beyond the schema: it defines the placeholder id convention (flow_1, block_1, var_1, broadcast_1, etc.) for cross-referencing batch items, and it explains the applicationId default behavior ('an application-scoped key defaults to its own application, but a personal key has no default and omitting it fails with MCP_APPLICATION_REQUIRED'). It also clarifies that actions is ordered and non-atomic, complementing the schema's description. Minor gap: it doesn't enumerate every per-action payload rule, but it explicitly defers those to get_action_schema, which is the correct division of labor.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb-resource pair: 'Validate and apply a batch of flow-builder actions' and immediately names it 'the single write path' for editing flows, blocks, variables, broadcasts, sequences, and folders. It clearly distinguishes itself from siblings like validate_actions ('Call this directly; a separate validate_actions call beforehand is unnecessary') and from broadcast-specific tools ('Broadcasts have no dedicated tool and are managed here'). This is a textbook example of purpose clarity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit when-to-use guidance: it names validate_actions as an unnecessary precursor, tells the agent to read get_action_schema and get_design_guidelines before structural edits, and gives a concrete broadcast recipe ('create_broadcast makes a DRAFT ... a later update_broadcast with status SCHEDULED is what actually schedules/sends it'). It also provides explicit when-not-to-use / caution guidance: confirm deletions with the user, confirm run_operation with the user, never blindly retry a timed-out call that contained run_operation, and re-read state before retrying a failed batch. This goes well beyond any sibling or schema information.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A4.1/5.0
Disambiguation4/5

Each get_/list_ tool targets a distinct resource and the descriptions carefully separate similar pairs like get_application_context vs get_workspace_summary and get_broadcast_details vs get_broadcast_analytics. The main ambiguity is apply_actions vs validate_actions, since one runs the other's validation, but the descriptions make that relationship explicit.

Naming Consistency4/5

Names consistently follow verb_object snake_case and use familiar verbs like create, get, list, and update. Minor deviations such as read_messages instead of list_messages, apply_actions/validate_actions with plural nouns, and run_flow_autotest are still predictable and readable.

Tool Count2/5

33 tools exceeds the 25-tool threshold and makes the surface feel heavy, even though the domain is broad. Many of the read-only getters are individually useful but could be consolidated, such as merging module catalog/details or workspace/application context.

Completeness4/5

Core workflows are covered: application lifecycle, flow editing through apply_actions, deployment, contacts, broadcasts, modules, and message/event reads. Minor gaps exist, such as no dedicated delete for contacts, applications, or broadcasts, and no rollback for deployments, but agents can work around or avoid these.