Skip to main content
Glama

Ginta

Who can manage a website at its /admin

manage_admins
Destructive

Use when the owner says who should keep the website up to date (e.g. "add maria@salon.lt as admin"), for example after building a site with parts the owner fills in. Admin users sign in at /admin with their email and a password (no Ginta account) and change its lists, menu, bookings… and read its messages; never the design or code. add: with a password the owner chose, or without one (they get an email to choose their own). set_password: for an admin user, or the owner's own email to give the owner a password for this site. send_setup_link: a new "choose your password" email.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
emailNoTheir email address (every action but list).
actionYesWhat to do: list the admin users, add or remove one, set_password, or send_setup_link (a new choose-your-password email).
site_idYesThe site id: the first part of the site URL, e.g. "bella-roma" for https://bella-roma.ginta.page (see list_sites).
passwordNoOnly if the owner gave one (8+ characters; add, set_password). Never invent one; never repeat it in the chat.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
sentNoWhether an email went out.
emailNoThe email acted on.
limitNolist: admin users allowed on this plan.
adminsNolist: the admin users.
admin_urlNoThe website's /admin address.
has_adminNoWhether the site has anything to manage at /admin.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructive=true and openWorld=true, so the bar is lower, yet the description adds real context: what admins can change (lists, menu, bookings, messages) versus what they never touch (design, code), and concrete password rules (owner-chosen or emailed invite, 8+ chars, never invent or repeat in chat). It does not, however, describe the consequence of the destructive remove action. This is useful added behavior beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The text is dense and mostly front-loaded, with the usage trigger first and action semantics after. It uses compact fragments ("add: ...", "set_password: ...") which are scannable, though the long capability sentence and run-on punctuation slightly reduce readability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values are covered elsewhere; the description covers when to use, per-action meaning, password handling, and admin capability boundaries, which is sufficient for a multi-action mutation tool. The main gap is the absence of any note on the destructive remove behavior or required permissions.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description genuinely enriches action semantics: it explains what each action does, the two modes of add (with a password vs. an email-invite), and that set_password can target the owner's own email. This adds meaning about parameter interplay beyond the schema text.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly establishes the resource (admin users who sign in at <website>/admin) and the operations via per-action notes (add, remove, set_password, send_setup_link, list). It is readily distinguishable from siblings like manage_secrets or manage_connections, though it never names a sibling to differentiate against. The opening frames usage rather than the action itself, leaving purpose slightly implicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit when-to-use trigger with a concrete example ("add maria@salon.lt as admin") and the situation that motivates it (after building a site with owner-filled parts). Per-action conditions are also described (add with/without password, set_password for admin or owner's email). No when-not-use or explicit alternative is stated, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources