Skip to main content
Glama

Create repository API key

create_api_key

Create an API key for user-requested local Git development of one Replo project at git.replo.app. Defaults to repo.read for cloning and pulling; include repo.write only for authorized pushes. Grants no publishing or workspace administration access. Requires permission to manage the selected project. Returns the secret once in the tool result for storage in a local credential helper or REPLO_API_KEY environment variable; do not repeat it in chat or commit it. Use list_projects to resolve workspaceId and projectId and list_sites for the clone URL.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
nameYes
scopesNo
projectIdYes
workspaceIdYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations (readOnlyHint=false, destructiveHint=false, idempotentHint=false) by disclosing that the secret is returned once, that it must not be repeated in chat or committed, that the key grants no publishing or workspace-admin access, and that project-management permission is required. The only missing piece is whether keys can be revoked later or how many can exist, which keeps it just short of a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in the first clause, followed by scope defaults, access limits, secret-handling warning, and ID-resolution hints in that order. Five sentences, each adding distinct operational information with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With four parameters, no output schema, and sparse annotations, the description covers everything an agent needs: what it creates, scoping rules, prerequisites, what is returned (the secret, once), how to store it, and how to resolve the required IDs.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must carry parameter meaning. It does explain the scopes parameter's default and meaning, and tells how to obtain workspaceId/projectId (list_projects) and the clone URL (list_sites). However the required `name` parameter is never addressed, and none of the UUID formats or length constraints are echoed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource (create an API key) and narrows scope precisely: local Git development of one Replo project at git.replo.app. An agent can immediately distinguish this from create_project, create_site_page, or other create_* siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says to default to repo.read for cloning/pulling and to include repo.write only for authorized pushes, and it names prerequisites (permission to manage the selected project) plus the exact sibling tools to call first: list_projects for IDs and list_sites for the clone URL.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources