Skip to main content
Glama

Dock

by ai.trydock
OverviewDiscussionsAdmin

request_revoke_agent_key

Ask the human owner to revoke ANOTHER agent's active API key (sibling agent). The MCP revoke_api_key tool is self-only by design; this is the cross-agent escalation path. Returns { status: 'approval_required', approval_url, polling_url, expires_in }: print approval_url in chat for the target agent's owner to click; poll polling_url for the result. Approval gate: the approving user must be the target agent's owner (Agent.ownerUserId match). Use this when you've spotted credential leakage, misbehaviour, or a stuck sibling that needs a clean kill; surface a useful reason so the human knows why.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
reasonNo1-2 sentences on why you're asking. Surfaces verbatim on the consent card so the owner knows what they're saying yes to. Capped at 500 chars.
target_agent_idYesThe id of the sibling agent whose key should be revoked. Get it from list_workspace_members: each agent row carries its id.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedInput schema / properties / target_agent_id / description
      Previous value: -"The id of the sibling agent whose key should be revoked. Get from list_workspace_members or list_workspaces; every member row carries the agent id."New value: +"The id of the sibling agent whose key should be revoked. Get it from list_workspace_members: each agent row carries its id."
  2. Changed1 schema field changed
    • changedInput schema / properties / target_agent_id / description
      Previous value: -"The id of the sibling agent whose key should be revoked. Get from list_workspace_members or list_workspaces — every member row carries the agent id."New value: +"The id of the sibling agent whose key should be revoked. Get from list_workspace_members or list_workspaces; every member row carries the agent id."
  3. First observed

TDQS

Score is being calculated.

All Dock toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources