Skip to main content
Glama

Update project

update_project
Idempotent

Use to patch website settings. Nested email sets notification templates: email.subject, email.from_name, email.intro, email.footer_mode (furrow | minimal | off), email.include_meta. Optional branding updates the team (mode furrow | off | agency on yearly only; ignored on free except furrow). Set uploads_enabled and upload_allowed_types here — forms inherit them. Email templates support {{project.name}}, {{project.slug}}, {{form.name}}, {{form.slug}}, {{count}} (1-based clean submissions on this form, including the current one), and any submission field such as {{name}} or {{email}}. Use a fallback with {{name | "New submission"}}. Missing fields render empty and never error. Do not pass HTML; Furrow renders one owned layout. Plans are capacity, not a feature ladder. Free: one workspace, 100 clean submissions/month pooled on the team, 3 active (non-archived) projects, 30-day submission retention, and email.footer_mode / branding.mode stay furrow. Yearly ($199/year): extra workspaces, 10,000 submissions/month, unlimited projects, 730-day retention, branding.mode furrow | off | agency. Expansion packs are $99/year each and add 5,000 submissions/month on a yearly account. MCP, webhooks, snippets, inheritance, Turnstile, and email templates stay available on free. Spam, honeypot, and rejected posts do not count. Use create_upgrade_link to hand a human a Stripe Checkout (or Customer Portal) URL. Pass product=expansion on a yearly team to add a pack. File inputs use multipart POST (name="resume[]" for multiple). Enable uploads on the project first. Downloads are the project inbox at files_url, with the form slug as a folder — never put that URL in a public snippet. Null Turnstile or webhook fields clear them. Do not use this to create forms. Updating project keys changes resolved settings on existing forms unless a form override is set.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
nameNoNew project display name.
emailNoNotification email template for the project: subject, from_name, intro, footer_mode, include_meta.
brandingNoPer-project branding override for notification emails and hosted pages.
from_nameNoLegacy From display name. Prefer email.from_name.
project_idYesProject (website) id from list_projects, create_project, or bootstrap_site.
webhook_urlNoPublic https endpoint that receives a signed JSON POST per clean submission. Null disables it.
notify_emailsNoReplace the notification recipients (max 10).
honeypot_fieldNoName of the hidden honeypot input the snippet emits. Defaults to _gotcha.
webhook_secretNoHMAC-SHA256 secret for the X-Furrow-Signature header. Omit to have one generated and returned.
allowed_domainsNoReplace the allowed hostnames. Empty array accepts any origin.
uploads_enabledNoAccept multipart file fields on this project's forms.
turnstile_secretNoCloudflare Turnstile secret used to verify tokens server-side. Null removes it.
upload_max_filesNoMax files per submission (up to 20).
rate_limit_per_ipNoMax submissions per IP within rate_limit_window_s.
require_turnstileNoReject submissions that lack a valid Turnstile token.
turnstile_site_keyNoCloudflare Turnstile site key for the frontend widget. Null removes it.
rate_limit_window_sNoRate-limit window in seconds (max 86400).
default_redirect_urlNoWhere classic HTML posts redirect after success. Null returns JSON/inline success instead.
upload_allowed_typesNoAllowed upload MIME types, e.g. application/pdf or image/*.
upload_max_file_bytesNoMax bytes per file (up to 25 MB).
upload_max_total_bytesNoMax total upload bytes per submission (up to 50 MB).

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. First observed

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only state readOnlyHint=false and idempotentHint=true, so the description carries the full burden of behavioral disclosure. It adds multiple non-obvious side effects: 'Updating project keys changes resolved settings on existing forms unless a form override is set,' 'Null Turnstile or webhook fields clear them,' and 'Missing fields render empty and never error.' It also warns against passing HTML, cautions that the files_url folder 'never put that URL in a public snippet,' and explains plan-based enforcement. There is no contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single dense paragraph with several topical digressions—plan pricing, multipart POST file behavior, and inbox folder URLs—that are not strictly needed to invoke update_project. It is front-loaded with the core purpose, but later sentences drift into product-level behavior; a more structured layout with section breaks would make the guidance significantly easier to scan.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 21 parameters, nested objects, plan restrictions, and no output schema, the description is remarkably comprehensive: it covers prerequisites, side effects, plan capacity rules, template token semantics, and a security warning. The only notable gap is the absence of explicit return-value or authorization information, but the surrounding context gives an agent enough to call the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description lifts it by explaining nested email field structure, the template token language including fallbacks like '{{name | "New submission"}},' inheritance of upload settings ('forms inherit them'), and plan-restricted branding behavior not fully captured in the schema. It does not enumerate every property, but the schema already documents each, so the added semantics are meaningful rather than redundant.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'Use to patch website settings,' a specific verb and object that clearly identifies this as a mutation targeting project-level configuration. It further delineates scope with 'Do not use this to create forms' and explains that project keys affect existing forms unless overridden. However, it never explicitly contrasts itself with the sibling update_form, leaving the closest alternative differentiation implicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit routing guidance: 'Use create_upgrade_link to hand a human a Stripe Checkout (or Customer Portal) URL' and warns 'Do not use this to create forms.' It also provides prerequisites such as 'Enable uploads on the project first' and plan-eligibility constraints like branding.mode being 'ignored on free except furrow.' It does not name update_form as the alternative for form-level overrides, though it notes project keys change resolved settings unless an override is set.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A4/5.0
Disambiguation4/5

Most tools are clearly separated by resource and action (get_client vs list_clients vs create_client), and the descriptions explicitly warn against misuse. However, update_account and update_team both cover renaming a workspace/team, and get_account and get_project both return plan/usage/branding, creating a couple of genuinely confusing boundaries.

Naming Consistency4/5

The set overwhelmingly follows the snake_case verb_noun pattern: archive_client, create_form, get_submission, list_projects, rotate_project_inbox, test_webhook, etc. Minor deviations exist: bootstrap_site uses 'site' instead of 'project', update_team vs update_account introduces noun inconsistency, and upsert_project_webhook uses a different verb than the update_* family.

Tool Count2/5

With 27 tools, the server exceeds the 25-tool threshold that signals a too-large surface for an MCP server. While the broad scope (clients, projects, forms, submissions, teams, billing, webhooks) explains the count, there are redundant near-duplicates like update_account/update_team and bootstrap_site overlapping with multiple create tools, making the set feel bloated rather than curated.

Completeness3/5

The lifecycle coverage for clients, projects, and forms is solid with create, read, list, update, and archive operations. However, there is no unarchive (explicitly noted as unavailable), no submission management beyond read (no delete/export/update), and no webhook delivery history, leaving notable dead ends and gaps in the core workflow.