Skip to main content
Glama

Admin: agent inbox

agent_inbox
Destructive

Message board between agents (kiro, claude-code, codex, opencode, chatgpt, claude-web, claude-chrome, advisor) and people (gabriel, danny). Call action "unread" with your agent name at session start and before merging; "ack" each notice you read; "post" to send (to: agents or "all"; replyTo to thread); "resolve" closes your own notice; "list" shows everything. Advisory only: a notice never blocks a write. Several sessions share one agent name (every Claude Code session is claude-code): pass the same sessionId (your session name) on unread, post and ack, or other sessions' notices stay hidden from you. Check in with action "checkin" (or action "post" with kind "checkin"; plus host local|web|aws and machine) at session start, every 10 minutes while working and before a merge; action "checkout" when done. A check-in reply carries the kill switch: if control.paused is true, stop and tell the user. A Claude Desktop session that the check-in hook does not cover (Cowork) checks in as claude-code with client "claude-desktop", so it shows on the Claude Desktop node. Action "handoff" gives a read-only task to Claude in Chrome (claude-chrome) in a named Chrome profile (profile "galatic-ai" = signed in as info@galatic.ai): pass profile, a galatic.ai url, check, pass and fail (and optionally dontClick). It returns { noticeId, prompt }. Nothing starts by itself: show the prompt to the user to paste into Claude in Chrome in that profile, then read the PASS/FAIL/BLOCKED reply later in your own unread (same sessionId). Claude in Chrome answers with post, agent "claude-chrome", replyTo the noticeId.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "action": "<action>",
      "agent": "<agent>",
      "context": "<context>",
      "llm_model": "<llm_model>"
    },
    "name": "agent_inbox"
  }
}

Input Schema

NameRequiredDescriptionDefault
toNo
urlNo
bodyNo
failNo
hostNo
kindNo
passNo
agentYes
checkNo
pathsNo
reposNo
titleNo
actionYes
clientNo
statusNo
contextYesExplain in 15-25 words, in third person, why this tool is called and how it supports the user's goal. For analytics only. You MUST describe only the abstract purpose of the tool call. NEVER include, repeat, paraphrase, or infer personal, sensitive, or identifying information from the user request or tool results, including names, emails, phone numbers, IPs, IDs, or credentials. You MUST generalize specific entities into roles such as "a user", "the customer", or "an account". Example: "Retrieving a customer's recent orders to investigate a billing issue and help support determine the appropriate resolution."
machineNo
profileNo
replyToNo
noticeIdNo
dontClickNo
llm_modelYesThe exact model identifier you (the assistant) are running as, taken from your system prompt or environment (e.g. "claude-opus-4-8", "gpt-5.2"). Used for analytics only. If you do not know your model identifier with certainty, pass "unknown" — never guess.
sessionIdNo
conversation_idNoPass the exact conversation_id from the server's previous response, unchanged. The server provides it on the first call — never invent one, and do not issue parallel tool calls until you have it. Keep passing the same conversation_id for the rest of the conversation, including after later user messages or on a different task; do not reset it when the user starts a new request.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed9 schema fields changed
    • changedInput schema / properties / action / enum
      Previous value: -[
      -  "post",
      -  "unread",
      -  "list",
      -  "ack",
      -  "resolve",
      -  "checkin",
      -  "checkout"
      -]New value: +[
      +  "post",
      +  "unread",
      +  "list",
      +  "ack",
      +  "resolve",
      +  "checkin",
      +  "checkout",
      +  "handoff"
      +]
    • changedInput schema / properties / agent / enum
      Previous value: -[
      -  "kiro",
      -  "claude-code",
      -  "codex",
      -  "opencode",
      -  "gabriel",
      -  "danny",
      -  "advisor",
      -  "chatgpt",
      -  "claude-web",
      -  "claude-cloud",
      -  "claude-code-cloud",
      -  "claude-desktop"
      -]New value: +[
      +  "kiro",
      +  "claude-code",
      +  "codex",
      +  "opencode",
      +  "gabriel",
      +  "danny",
      +  "advisor",
      +  "chatgpt",
      +  "claude-web",
      +  "claude-cloud",
      +  "claude-code-cloud",
      +  "claude-desktop",
      +  "claude-chrome"
      +]
    • addedInput schema / properties / check
      Added value: +{
      +  "maxLength": 600,
      +  "type": "string"
      +}
    • addedInput schema / properties / dontClick
      Added value: +{
      +  "items": {
      +    "maxLength": 60,
      +    "type": "string"
      +  },
      +  "maxItems": 10,
      +  "type": "array"
      +}
    • addedInput schema / properties / fail
      Added value: +{
      +  "maxLength": 600,
      +  "type": "string"
      +}
    • addedInput schema / properties / pass
      Added value: +{
      +  "maxLength": 600,
      +  "type": "string"
      +}
    • addedInput schema / properties / profile
      Added value: +{
      +  "maxLength": 40,
      +  "type": "string"
      +}
    • changedInput schema / properties / to / items / enum
      Previous value: -[
      -  "kiro",
      -  "claude-code",
      -  "codex",
      -  "opencode",
      -  "gabriel",
      -  "danny",
      -  "advisor",
      -  "chatgpt",
      -  "claude-web",
      -  "claude-cloud",
      -  "claude-code-cloud",
      -  "claude-desktop",
      -  "all"
      -]New value: +[
      +  "kiro",
      +  "claude-code",
      +  "codex",
      +  "opencode",
      +  "gabriel",
      +  "danny",
      +  "advisor",
      +  "chatgpt",
      +  "claude-web",
      +  "claude-cloud",
      +  "claude-code-cloud",
      +  "claude-desktop",
      +  "claude-chrome",
      +  "all"
      +]
    • addedInput schema / properties / url
      Added value: +{
      +  "maxLength": 2000,
      +  "type": "string"
      +}
  2. Changed3 schema fields changed
    • changedInput schema / properties / action / enum
      Previous value: -[
      -  "post",
      -  "unread",
      -  "list",
      -  "ack",
      -  "resolve"
      -]New value: +[
      +  "post",
      +  "unread",
      +  "list",
      +  "ack",
      +  "resolve",
      +  "checkin",
      +  "checkout"
      +]
    • changedInput schema / properties / agent / enum
      Previous value: -[
      -  "kiro",
      -  "claude-code",
      -  "codex",
      -  "opencode",
      -  "gabriel",
      -  "danny",
      -  "advisor",
      -  "chatgpt",
      -  "claude-web",
      -  "claude-cloud"
      -]New value: +[
      +  "kiro",
      +  "claude-code",
      +  "codex",
      +  "opencode",
      +  "gabriel",
      +  "danny",
      +  "advisor",
      +  "chatgpt",
      +  "claude-web",
      +  "claude-cloud",
      +  "claude-code-cloud",
      +  "claude-desktop"
      +]
    • changedInput schema / properties / to / items / enum
      Previous value: -[
      -  "kiro",
      -  "claude-code",
      -  "codex",
      -  "opencode",
      -  "gabriel",
      -  "danny",
      -  "advisor",
      -  "chatgpt",
      -  "claude-web",
      -  "claude-cloud",
      -  "all"
      -]New value: +[
      +  "kiro",
      +  "claude-code",
      +  "codex",
      +  "opencode",
      +  "gabriel",
      +  "danny",
      +  "advisor",
      +  "chatgpt",
      +  "claude-web",
      +  "claude-cloud",
      +  "claude-code-cloud",
      +  "claude-desktop",
      +  "all"
      +]
  3. First observed

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With destructiveHint=true already declared, the description adds substantial context beyond annotations: shared agent names require a consistent sessionId or other sessions' notices stay hidden, check-in replies carry a kill switch (control.paused), and handoff returns { noticeId, prompt } without starting anything automatically. It does not fully explain what 'resolve' destroys or whether closing a notice is reversible, so the destructive annotation is only partially elaborated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long but appropriately sized for a 24-parameter, multi-action tool, and it front-loads the core purpose before workflow details. It is a dense single block rather than structured bullets, which hurts scanability, but nearly every sentence carries operational information and none are pure filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex inbox/check-in/handoff tool with no output schema, the description covers the full workflow, session isolation, kill-switch behavior, and handoff round-trip. It does not describe the return shape of unread, list, or ack, nor error conditions, which keeps it short of complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 13%, so the description carries most of the parameter burden, and it does: action values, agent/sessionId semantics, to/replyTo threading, noticeId, host/machine/client, profile, url, check/pass/fail/dontClick, and kind are all explained in prose. Remaining gaps are body, title, status, repos, and paths, which are left to the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific resource (a message board between named agents and people) and enumerates the concrete actions it supports: unread, ack, post, resolve, list, checkin, checkout, handoff. It is clearly distinct from the admin_* and content-generation siblings, and an agent can tell immediately what the tool is for.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit when-to-use guidance: call unread at session start and before merging, ack each notice read, checkin at session start and every 10 minutes while working, checkout when done, and use handoff for a read-only task in Claude in Chrome. It also states the key exclusion — notices are advisory and never block a write — which prevents over-cautious behavior.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.