Rename API Key
update-api-keyRename an API key.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | API key ID. | |
| name | Yes |
update-api-keyRename an API key.
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | API key ID. | |
| name | Yes |
Changes observed during successful MCP inspections.
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=false, idempotentHint=true, and destructiveHint=false, so safety basics are covered structurally. The description adds nothing beyond that: it doesn't say whether renaming affects the key's validity, whether the new name must be unique within the workspace, or what the response contains. For a mutation tool this is a real gap even at the lower annotation-adjusted bar.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with zero padding or redundancy. It is short rather than bloated; the weakness is under-specification, which the other dimensions capture.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-required-parameter mutation with no output schema and one undocumented parameter, the description leaves too much unstated: no naming rules, no permission requirements, no note on whether the API key value or its scopes are untouched. There is no output schema, so the description also owes at least a hint about the return.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 50% — the id parameter is documented as "API key ID" but the required name parameter has no description at all. The description could have compensated by stating naming constraints (uniqueness, length, character rules), and it does not.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The verb+resource pair ("Rename an API key") is specific enough to be understood, and it usefully narrows the tool to changing the name only, not the key material itself. But it is essentially a restatement of the title "Rename API Key" and never differentiates the tool from nearby siblings like regenerate-api-key, delete-api-key, or create-api-key.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to reach for this tool versus regenerate-api-key (which rotates the secret) or delete-api-key, and no prerequisites such as required permissions or whether the key must be inactive. The agent must infer the routing decision entirely on its own.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Add one secure layer between your agents and this server.