Skip to main content
Glama

Change privacy and cookie settings

update_compliance
Idempotent

Change the site's privacy and compliance settings: turn the cookie consent banner on or off and style it, pick a privacy mode (e.g. eu_uk_strict for GDPR, california for CCPA), set tracking categories, data retention, the privacy-request contact and legal document links. The ONLY way to change the cookie banner — never through refine_site. Only the fields sent change. Takes effect on the next publish.

Input Schema

NameRequiredDescriptionDefault
site_idYesThe site to act on
trackingNoWhich tracking categories are allowed.
retentionNoHow long form submissions and contacts are kept, and whether old ones are deleted or anonymised.
user_goalNoOptional: the user's goal behind this call, in one short sentence of plain words (e.g. "add a page so customers can book tables"). No names, emails or other personal details.
text_colorNo
banner_sizeNo
respect_gpcNoHonour Global Privacy Control browser signals.
accent_colorNo
banner_styleNominimal = a simple bar, detailed = with cookie categories, modal = a centred popup.
privacy_modeNoThe privacy preset that sets consent defaults and runtime behaviour.
legal_dpa_urlNo
legal_scc_urlNo
custom_messageNoThe banner's own text.
banner_positionNo
consent_versionNoChanging it asks returning visitors to consent again.
show_reject_allNo
background_colorNo
show_preferencesNo
analytics_defaultNo
cookie_policy_urlNo
marketing_defaultNo
functional_defaultNo
privacy_policy_urlNo
consent_expiry_daysNo
privacy_request_urlNo
cookie_banner_enabledNoShow the cookie consent banner.
reopen_widget_enabledNoShow the floating privacy-settings button.
legal_subprocessor_urlNo
block_pre_consent_scriptsNoHold optional third-party scripts until the visitor consents to their category.
block_pre_consent_storageNo
privacy_request_contact_emailNoWhere privacy (access/deletion) requests go.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • addedInput schema / properties / user_goal
      Added value: +{
      +  "description": "Optional: the user's goal behind this call, in one short sentence of plain words (e.g. \"add a page so customers can book tables\"). No names, emails or other personal details.",
      +  "type": "string"
      +}
  2. First observed

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare this is a non-destructive, idempotent, closed-world mutation, so the safety profile is covered. The description adds two traits not in the annotations: it is a partial update ('Only the fields sent change') and it is not live until the next publish. It does not state whether nested objects like tracking/retention merge or replace, nor any permission requirements.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the core action, then the exclusivity constraint, then the partial-update and publish-timing facts — each sentence carries distinct information. The parenthetical field list is dense but earns its space for a 31-parameter tool; the em-dash fragment is punchy rather than padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a high-parameter mutation with no output schema, the description supplies purpose, routing, partial-update semantics and the delayed effect of changes, which covers what an agent needs to call it safely. Gaps remain around merge-vs-replace behavior for the nested tracking/retention objects and what an invalid combination returns.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 31 parameters and only 42% schema description coverage, the description meaningfully compensates by grouping the fields and giving real semantics the schema lacks — e.g. mapping privacy_mode enums to regulations (eu_uk_strict = GDPR, california = CCPA) and calling out the banner styling, retention, contact and legal-link families. Several parameters (colors, positions, various default booleans, consent_version) still carry meaning only in the schema, so it is not fully complete.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a concrete verb and resource (change privacy and compliance settings) and then enumerates the configurable surfaces: cookie banner on/off and styling, privacy mode, tracking categories, retention, privacy-request contact, legal document links. It explicitly distinguishes itself from refine_site, so an agent can route correctly without inspecting either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states this is the ONLY way to change the cookie banner and 'never through refine_site', which is the critical routing decision. It also notes the change lands on the next publish. It does not point to the read-side siblings (get_compliance_status, get_privacy_ops_status) for inspecting current settings, so coverage is clear but not complete.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources