Skip to main content
Glama

ThinAir Data

by co.thinair.data
OverviewDiscussionsAdmin

issue_api_key

Read-onlyIdempotent

Get the link to the ThinAir DATA console where you create and manage your API keys (ta_data_*), plus your current plan. This tool does NOT create, rotate or return a key: you create the key yourself in the console, where it is shown to you once, and every key you already have keeps working unchanged. Use it when an integration needs a key and you want to point the user at the right place. NOTE: keys created in this console work ONLY against ThinAir Data - they do NOT authenticate against ThinAir Geo, which has its own console and an identically-named issue_api_key tool.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
planNoThe account's current plan. Existing keys keep working on it, unchanged.
errorNo
statusYes
console_urlNoThe ThinAir Data console page where you create and manage API keys. Open it, sign in, and create a key there; it is shown to you once, in the console. This tool never creates, rotates or returns a key.
instructionsNoPlain-language next step for the user, including which product this is: a key created in this console works ONLY against ThinAir Data, not ThinAir Geo.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed13 schema fields changed
    • removedOutput schema / properties / api_key
      Removed value: -{
-  "description": "One-time API key secret. Returned only on successful creation, in both structuredContent.api_key and content[0].text. Save this key now. It is shown once. ThinAir authenticates using a hash of the key. Matches AWS IAM / Stripe / GitHub PAT one-time-reveal semantics.",
-  "type": "string"
-}
    • addedOutput schema / properties / console_url
      Added value: +{
+  "description": "The ThinAir Data console page where you create and manage API keys. Open it, sign in, and create a key there; it is shown to you once, in the console. This tool never creates, rotates or returns a key.",
+  "type": "string"
+}
    • removedOutput schema / properties / credential_returned_once
      Removed value: -{
-  "type": "boolean"
-}
    • addedOutput schema / properties / instructions
      Added value: +{
+  "description": "Plain-language next step for the user, including which product this is: a key created in this console works ONLY against ThinAir Data, not ThinAir Geo.",
+  "type": "string"
+}
    • removedOutput schema / properties / key_id
      Removed value: -{
-  "description": "Non-secret fingerprint of the issued key. Safe to log and surface in UI.",
-  "type": "string"
-}
    • removedOutput schema / properties / note
      Removed value: -{
-  "type": "string"
-}
    • addedOutput schema / properties / plan / description
      Added value: +"The account's current plan. Existing keys keep working on it, unchanged."
    • removedOutput schema / properties / previous_keys_retire_at
      Removed value: -{
-  "description": "ISO 8601 instant when the previous keys stop working (one hour after this mint). Present only when previous_keys_retiring > 0. Update anything still using them before this time.",
-  "type": "string"
-}
    • removedOutput schema / properties / previous_keys_retiring
      Removed value: -{
-  "description": "How many previously-live keys this mint scheduled to retire. issue_api_key rotates: after the grace window the returned key is the only live key on the tenant. 0 means there was nothing else.",
-  "minimum": 0,
-  "type": "integer"
-}
    • removedOutput schema / properties / retry_after_s
      Removed value: -{
-  "type": "number"
-}
    • removedOutput schema / properties / tenantId
      Removed value: -{
-  "type": "string"
-}
    • removedOutput schema / properties / usage
      Removed value: -{
-  "type": "string"
-}
    • removedOutput schema / properties / user
      Removed value: -{
-  "type": "string"
-}
  2. Changed1 schema field changed
    • changedOutput schema / properties / api_key / description
      Previous value: -"One-time API key secret. Returned only on successful creation, in both structuredContent.api_key and content[0].text — save it immediately. The server stores only sha-256 of the secret; once this response is lost, the key is unrecoverable and must be rotated. Matches AWS IAM / Stripe / GitHub PAT one-time-reveal semantics."New value: +"One-time API key secret. Returned only on successful creation, in both structuredContent.api_key and content[0].text. Save this key now. It is shown once. ThinAir authenticates using a hash of the key. Matches AWS IAM / Stripe / GitHub PAT one-time-reveal semantics."
  3. Changed3 schema fields changed
    • addedOutput schema / properties / previous_keys_retire_at
      Added value: +{
+  "description": "ISO 8601 instant when the previous keys stop working (one hour after this mint). Present only when previous_keys_retiring > 0. Update anything still using them before this time.",
+  "type": "string"
+}
    • addedOutput schema / properties / previous_keys_retiring
      Added value: +{
+  "description": "How many previously-live keys this mint scheduled to retire. issue_api_key rotates: after the grace window the returned key is the only live key on the tenant. 0 means there was nothing else.",
+  "minimum": 0,
+  "type": "integer"
+}
    • removedOutput schema / properties / revoked_previous
      Removed value: -{
-  "description": "How many previously-live keys this mint revoked. issue_api_key rotates: the returned key is the only live key on the tenant. 0 means there was nothing else to revoke.",
-  "minimum": 0,
-  "type": "integer"
-}
  4. Changed1 schema field changed
    • addedOutput schema / properties / revoked_previous
      Added value: +{
+  "description": "How many previously-live keys this mint revoked. issue_api_key rotates: the returned key is the only live key on the tenant. 0 means there was nothing else to revoke.",
+  "minimum": 0,
+  "type": "integer"
+}
  5. Changed1 schema field changed
    • changedOutput schema / properties / api_key / description
      Previous value: -"One-time API key secret. Returned only on successful creation. Treat as a credential — never log, echo, or render in text channels."New value: +"One-time API key secret. Returned only on successful creation, in both structuredContent.api_key and content[0].text — save it immediately. The server stores only sha-256 of the secret; once this response is lost, the key is unrecoverable and must be rotated. Matches AWS IAM / Stripe / GitHub PAT one-time-reveal semantics."
  6. Changed1 schema field changed
    • changedOutput schema / (root)
      Previous value: -nullNew value: +{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": true,
+  "properties": {
+    "api_key": {
+      "description": "One-time API key secret. Returned only on successful creation. Treat as a credential — never log, echo, or render in text channels.",
+      "type": "string"
+    },
+    "credential_returned_once": {
+      "type": "boolean"
+    },
+    "error": {
+      "additionalProperties": false,
+      "properties": {
+        "code": {
+          "type": "string"
+        },
+        "message": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "code",
+        "message"
+      ],
+      "type": "object"
+    },
+    "key_id": {
+      "description": "Non-secret fingerprint of the issued key. Safe to log and surface in UI.",
+      "type": "string"
+    },
+    "note": {
+      "type": "string"
+    },
+    "plan": {
+      "type": "string"
+    },
+    "retry_after_s": {
+      "type": "number"
+    },
+    "status": {
+      "enum": [
+        "success",
+        "error"
+      ],
+      "type": "string"
+    },
+    "tenantId": {
+      "type": "string"
+    },
+    "usage": {
+      "type": "string"
+    },
+    "user": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "status"
+  ],
+  "type": "object"
+}
  7. First observed

TDQS

Score is being calculated.

All ThinAir Data toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources