Skip to main content
Glama

add_connection

Get a secure one-time link to register a new database connection with ThinAir Data (postgres, mysql, or mssql). This tool does NOT take a connection string as input — you'll open the returned link and paste the connection string into a secure web form; it is never sent through chat. The response includes connection_string_format and auth_note for the chosen dialect — surface both to the user verbatim. IMPORTANT for mssql: Azure SQL uses Microsoft Entra, so the connection string is HOST/DATABASE only (no credentials) and the tenant/client/secret go in the form's separate fields — never construct or suggest an mssql://CLIENT_ID:CLIENT_SECRET@host string (client secrets break URL parsing).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
nameYesA short name for this connection, e.g. 'prod-postgres' or 'analytics-mysql'.
dialectYesDatabase engine for the new connection.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
capNo
nameNo
planNo
statusYes
dialectNo
auth_noteNo
expires_in_sNo
add_database_urlNo
connection_string_formatNo

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description reveals behavioral traits beyond the annotations: the tool generates a one-time link, does not transmit the connection string via chat, and returns dialect-specific instructions. The mssql caveat about Entra authentication and the prohibition on constructing mssql:// URLs are non-obvious behaviors. This goes well beyond the basic readOnly/destructive hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is four sentences and covers purpose, input caveat, response handling, and an important dialect-specific warning. It is front-loaded with the core purpose and avoids any redundant or filler content. Every sentence contributes necessary information, though the mssql section is somewhat lengthy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (two-step registration, dialect-specific auth, output fields to surface), the description is thorough. It explains the workflow, the security property, the response fields, and the mssql edge case. The presence of an output schema and clear annotations further fills in any remaining details, making the description complete enough for an agent to use the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already documents both parameters thoroughly (name with example, dialect as enum with description), giving 100% coverage. The description adds some parameter-specific behavior for mssql (Azure SQL uses Entra, so the connection string excludes credentials), which is extra semantic context beyond the schema. However, most of the description focuses on the response and workflow rather than defining parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: obtaining a secure one-time link to register a new database connection, and lists supported dialects (postgres, mysql, mssql). It also explicitly distinguishes from siblings by clarifying that it does not accept a connection string, making its scope unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides strong usage guidance: it explains the two-step flow (get link, then paste connection string in a web form), warns that the connection string is never sent through chat, and instructs the agent to surface specific response fields verbatim. It also includes a critical warning for mssql to avoid constructing an mssql:// URL. While it doesn't explicitly name alternative tools, the guidance is sufficient for an agent to know when to use this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.9/5.0
Disambiguation4/5

Each tool targets a distinct resource/action, though some overlap exists between analyze_table and data_profile (both profile tables) and between pii_scan and configure_allowlist (both deal with PII). Clear descriptions and separation of quick vs. full analysis mitigate confusion.

Naming Consistency3/5

Most tools follow verb_noun (add_connection, describe_schema, generate_migration), but a notable minority use noun phrases (data_profile, pii_scan, query_firewall, saved_queries, quota, impact_analysis). This mixed convention creates inconsistency, though the naming is still readable.

Tool Count3/5

26 tools is slightly over the 16-25 heavy threshold, but each tool addresses a distinct need across connection management, querying, analysis, security, and performance. While the count feels high, the breadth justifies it; however, it's approaching the 'too many' range.

Completeness5/5

The tool set covers the full lifecycle: connections (add/remove/list/test), querying (query_sql, saved_queries, cross_db_query), schema exploration/migration (describe_schema, generate_migration, impact_analysis), data quality/compliance (analyze_table, data_profile, pii_scan), performance (explain_query, optimize_query, show_locks), and monitoring (watch_table, detect_anomalies). Any gaps are minor, such as no update_connection, but that's not a core need.

Resources