Skip to main content
Glama

update_access_key

Reassign an access_key's role_ids (whole-combination replace, bundle-26), mailbox_label, and/or expiry. Omitted fields are left unchanged. Requires an admin owner_key.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
idYesThe access_key's id (not the raw ak_... key material).
expiryNoNew RFC3339 expiry, or omit to leave unchanged.
role_idsNoNew full set of role ids to bind (replaces the existing combination), or omit to leave unchanged.
owner_keyNoOwner key. Must belong to an admin member. Optional. If omitted, defaults to the owner_key resolved from the connection's `Authorization: Bearer <owner_key>` header.
mailbox_labelNoNew mailbox_label, or omit to leave unchanged.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the behavioral disclosure burden. It clearly discloses partial-update semantics ('Omitted fields are left unchanged'), the admin owner_key requirement, and that role_ids is a whole-combination replacement. It does not describe the response or explicit-null behavior, but the core mutation behavior is transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences with no filler. The action and target fields are front-loaded, and the key behavioral notes are stated directly afterward.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is sufficient for a focused update tool: it names all updatable fields, states partial-update behavior, and notes the auth requirement. Minor gaps are the unexplained 'bundle-26' reference and the lack of response/return information, but the schema covers all parameters.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents each parameter's meaning. The description adds useful grouping and reinforces the replace-versus-omit behavior, but it does not introduce significant new parameter-level detail beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ('Reassign') and resource ('access_key'), and lists the exact updatable attributes: role_ids, mailbox_label, and expiry. This clearly distinguishes it from sibling tools like create_access_key, revoke_access_key, and list_access_keys.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description makes the usage context clear: this tool updates an existing access key's attributes, with omitted fields left unchanged. It states an important prerequisite (admin owner_key required) but does not explicitly say when to prefer create_access_key or revoke_access_key over this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources