Skip to main content
Glama

merjax_list_variables

Read-onlyIdempotent

List Actions configuration variables (${{ vars.NAME }}) with their values. Pass owner + repo for a repository variable, owner + repo + environment for an environment variable, or org for an organisation variable (organisation variables need an admin-scoped token). Admin of the repository or organisation only. Paged: limit (≤100, default 30) / offset. Mirrors GET …/actions/variables. Returns {scope, total, limit, offset, nextOffset, variables:[{name, value, createdAt, updatedAt}]}.

Input Schema

NameRequiredDescriptionDefault
orgNoOrganisation slug
repoNoRepo name
limitNoPage size, 1–100 (default 30)
ownerNoRepo owner — username or organisation slug (omit when passing org)
offsetNoRows to skip (default 0)
environmentNoEnvironment name (or id)

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only, idempotent and non-destructive; the description adds materially more: an admin permission requirement, the need for an admin-scoped token on org scope, pagination bounds with a default page size, and the upstream endpoint it mirrors. These are exactly the operational constraints an agent cannot infer from hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the action and the scope routing, then pagination, then the return shape. It is dense and slightly telegraphic ("Mirrors GET …/actions/variables") but every clause carries information; nothing is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description supplies the return envelope itself ({scope, total, limit, offset, nextOffset, variables:[…]}), plus pagination and permission prerequisites. For a six-parameter, all-optional listing tool, an agent has everything needed to call it correctly and interpret the response.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds meaning the schema does not carry: how owner/repo/environment/org combine to select a scope, and that org must be passed instead of owner. That scope-resolution logic is the main source of misuse risk for this tool and is spelled out clearly.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ("List Actions configuration variables with their values") and immediately enumerates the three scopes it covers (repository, environment, organisation), which distinguishes it from merjax_get_variable, merjax_set_variable and merjax_delete_variable without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit invocation routing: owner+repo for repo variables, owner+repo+environment for environment variables, org alone for organisation variables. It stops short of naming alternatives (e.g. use merjax_get_variable for a single variable by name, or merjax_list_repo_secrets for secrets), so the when-not guidance is absent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources