Skip to main content
Glama

ThinAir Geo

by co.thinair.geo
OverviewDiscussionsAdmin

issue_api_key

Read-onlyIdempotent

Get the link to create a ThinAir GEO (geocoding/routing) API key. Returns console_url (the signed-in ThinAir Geo console) and instructions; it does NOT return a key and does not create, rotate or revoke any key. The owner signs in, creates the key there and sees it once in their own browser, then sends it as an Authorization: Bearer header. Existing keys keep working. Counts as 1 query against your daily quota. NOTE: keys created there work ONLY against ThinAir Geo — they do NOT authenticate against ThinAir Data, which issues its own ta_data_* keys from its own identically-named tool.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
noteNo
planNo
errorNo
statusYes
console_urlNoLink to the signed-in ThinAir Geo console, where the owner creates an API key and sees it once in their own browser. This tool never returns a key.
instructionsNoHow to create the key in the console and send it (Authorization: Bearer). Surface to the user as written.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed9 schema fields changed
    • removedOutput schema / properties / api_key
      Removed value: -{
-  "description": "One-time API key secret. Returned only on successful creation, in both structuredContent.api_key and content[0].text. Save this key now. It is shown once. ThinAir authenticates using a hash of the key. Matches AWS IAM / Stripe / GitHub PAT one-time-reveal semantics.",
-  "type": "string"
-}
    • addedOutput schema / properties / console_url
      Added value: +{
+  "description": "Link to the signed-in ThinAir Geo console, where the owner creates an API key and sees it once in their own browser. This tool never returns a key.",
+  "type": "string"
+}
    • removedOutput schema / properties / credential_returned_once
      Removed value: -{
-  "type": "boolean"
-}
    • addedOutput schema / properties / instructions
      Added value: +{
+  "description": "How to create the key in the console and send it (Authorization: Bearer). Surface to the user as written.",
+  "type": "string"
+}
    • removedOutput schema / properties / key_id
      Removed value: -{
-  "description": "Non-secret fingerprint of the issued key. Safe to log and surface in UI.",
-  "type": "string"
-}
    • removedOutput schema / properties / previous_keys_retire_at
      Removed value: -{
-  "description": "ISO 8601 instant when the previous keys stop working (one hour after this mint). Present only when previous_keys_retiring > 0. Update anything still using them before this time.",
-  "type": "string"
-}
    • removedOutput schema / properties / previous_keys_retiring
      Removed value: -{
-  "description": "How many previously-live keys this mint scheduled to retire. issue_api_key rotates: after the grace window the returned key is the only live key on the account. 0 means there was nothing else.",
-  "minimum": 0,
-  "type": "integer"
-}
    • removedOutput schema / properties / usage
      Removed value: -{
-  "type": "string"
-}
    • removedOutput schema / properties / user
      Removed value: -{
-  "type": "string"
-}
  2. Changed1 schema field changed
    • changedOutput schema / properties / api_key / description
      Previous value: -"One-time API key secret. Returned only on successful creation, in both structuredContent.api_key and content[0].text — save it immediately. The server stores only sha-256 of the secret; once this response is lost, the key is unrecoverable and must be rotated. Matches AWS IAM / Stripe / GitHub PAT one-time-reveal semantics."New value: +"One-time API key secret. Returned only on successful creation, in both structuredContent.api_key and content[0].text. Save this key now. It is shown once. ThinAir authenticates using a hash of the key. Matches AWS IAM / Stripe / GitHub PAT one-time-reveal semantics."
  3. Changed2 schema fields changed
    • addedOutput schema / properties / previous_keys_retire_at
      Added value: +{
+  "description": "ISO 8601 instant when the previous keys stop working (one hour after this mint). Present only when previous_keys_retiring > 0. Update anything still using them before this time.",
+  "type": "string"
+}
    • addedOutput schema / properties / previous_keys_retiring
      Added value: +{
+  "description": "How many previously-live keys this mint scheduled to retire. issue_api_key rotates: after the grace window the returned key is the only live key on the account. 0 means there was nothing else.",
+  "minimum": 0,
+  "type": "integer"
+}
  4. Changed2 schema fields changed
    • changedOutput schema / additionalProperties
      Previous value: -falseNew value: +true
    • changedOutput schema / properties / api_key / description
      Previous value: -"One-time API key secret. Returned only on successful creation. Treat as a credential — never log, echo, or render in text channels."New value: +"One-time API key secret. Returned only on successful creation, in both structuredContent.api_key and content[0].text — save it immediately. The server stores only sha-256 of the secret; once this response is lost, the key is unrecoverable and must be rotated. Matches AWS IAM / Stripe / GitHub PAT one-time-reveal semantics."
  5. Changed1 schema field changed
    • changedOutput schema / (root)
      Previous value: -nullNew value: +{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": false,
+  "properties": {
+    "api_key": {
+      "description": "One-time API key secret. Returned only on successful creation. Treat as a credential — never log, echo, or render in text channels.",
+      "type": "string"
+    },
+    "credential_returned_once": {
+      "type": "boolean"
+    },
+    "error": {
+      "additionalProperties": false,
+      "properties": {
+        "code": {
+          "type": "string"
+        },
+        "message": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "code",
+        "message"
+      ],
+      "type": "object"
+    },
+    "key_id": {
+      "description": "Non-secret fingerprint of the issued key. Safe to log and surface in UI.",
+      "type": "string"
+    },
+    "note": {
+      "type": "string"
+    },
+    "plan": {
+      "type": "string"
+    },
+    "status": {
+      "enum": [
+        "success",
+        "error"
+      ],
+      "type": "string"
+    },
+    "usage": {
+      "type": "string"
+    },
+    "user": {
+      "type": "string"
+    }
+  },
+  "required": [
+    "status"
+  ],
+  "type": "object"
+}
  6. First observed

TDQS

Score is being calculated.

All ThinAir Geo toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources