Skip to main content
Glama

Final POS – Custom POS Builder

Build and deploy a flow

flow_deploy_flow
Destructive

Direct deploy for CI/agent workflows: builds the app in a server sandbox (npm install + vite build) and publishes the dist to Final web-hosting as a new live version. Two things stop a deploy: a failing build, and a hardcoded credential (a build is distributable to other companies, so a baked-in secret would ship to all of them — use request_secret). Guardrail and type findings do NOT block; run validate_flow first if you want them. Omit changelog and the release notes are drafted for you from what changed since your last deploy — call log_message (or pass note on write_flow_files) as you work so those notes describe intent rather than just file names. Uses your organization's provisioned hub credential automatically (the same long-term org JWT the extension tools use) — no token argument needed once you've connected. Pass hostingToken only as an escape hatch to override it; if no credential is available, reconnect via the Connect dialog or use open_in_builder and deploy from the Launch tool instead.

Input Schema

NameRequiredDescriptionDefault
flowIdYes
versionYes
changelogNo
hostingTokenNoOrganization JWT accepted by hosting.finalpos.com. Optional escape hatch — omit to use your organization's stored hub credential (the same long-term org JWT the extension tools use).

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: enumerates exactly what blocks a deploy (failing build, hardcoded credential), what does not (guardrail/type findings), the reason credentials block (build is redistributable), the implicit credential provisioning behavior, and the changelog auto-draft side effect. Annotations only give the generic destructive/openWorld flags; this text supplies the operational reality.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action, then blockers, then credential mechanics, then changelog. Dense but every clause carries information; the final credential-fallback sentence is slightly long but justified for a tool whose main failure mode is missing auth.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive publish with no output schema and partial param coverage, it covers prerequisites, blockers, side effects and auth. It does not say what a successful deploy returns (version identifier/URL) or whether the previous live version is replaced, which are minor but real omissions.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 25% (only hostingToken documented), so the description must compensate — and it does for changelog ('omit and the release notes are drafted for you') and hostingToken (escape-hatch semantics beyond the schema's wording). flowId and version are left to the schema/pattern, which is the one small gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('builds the app in a server sandbox ... publishes the dist to Final web-hosting as a new live version'), with the two constituent steps spelled out. It routes the agent away from sibling tools by naming validate_flow, request_secret, log_message, open_in_builder and write_flow_files where relevant.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use (CI/agent workflows, direct deploy), when-not (guardrail/type findings don't block; run validate_flow first if you care), and alternatives (open_in_builder + Launch tool when no credential is available). The hostingToken escape hatch is framed as an override, not the default path.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.