Skip to main content
Glama

InvoiceParser Pro

Change a required-approval rule

update_approval_rule
DestructiveIdempotent

Apply only the exact change returned by preview_update_approval_rule, after the user confirms that preview. Accepts its confirmation_token only; changed or expired records require a new preview. Prepare a sparse change to an exact approval rule. Existing pending requests remain. Named-person chain routing uses IPP. Requires approval-scope confirmation.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "input": "<input>"
    },
    "name": "update_approval_rule"
  }
}

Input Schema

NameRequiredDescriptionDefault
inputYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructive=true and idempotent=true, yet the description still adds real value: side effects on existing pending requests, single-use token expiry semantics, and an approval-scope confirmation requirement. The 'requires approval-scope confirmation' phrasing stays vague about exactly which permission/scope is needed, and the return behavior is unstated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The critical gate is front-loaded in the first sentence, which is good, but the body is a stack of terse fragments ('Named-person chain routing uses IPP', 'Prepare a sparse change to an exact approval rule') whose relevance and meaning are not self-evident. Some sentences duplicate the apply-only contract rather than adding new information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter destructive mutation with rich annotations and no output schema, the description covers the precondition, token lifecycle, and a notable side effect. Gaps remain around what the call returns or confirms and what 'approval-scope confirmation' entails, which an agent would need before promising the user a result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Reported schema coverage is 0% for the sole 'input' parameter, so the description carries the burden — and it does explain that only the confirmation_token from the corresponding preview is accepted and that stale tokens are rejected. It does not describe token format or the min/max length constraints, but the operational meaning is covered.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening verb-and-resource pair ('Apply ... change ... to an exact approval rule') plus the explicit reference to preview_update_approval_rule makes it distinguishable from the preview, create, and delete siblings. The sentence 'Prepare a sparse change to an exact approval rule' is muddier and slightly blurs whether the tool authors or only applies a change.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives a hard precondition (only call after preview_update_approval_rule and user confirmation of that preview) and a recovery rule (changed or expired records require a new preview), which effectively names the alternative tool. It stops short of contrasting against create_approval_rule/delete_approval_rule, but the gating condition is unambiguous for the primary path.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources