Skip to main content
Glama

Update secret

secrets_update
Destructive

Renames a secret or replaces its metadata, and returns the updated secret without its value. The value, kind, and owner can't be changed here. References use the secret ID, so renaming doesn't break them.

Input Schema

NameRequiredDescriptionDefault
nameNoHuman-readable name. Spaces and punctuation are allowed; leading or trailing whitespace and invisible or control characters are not.
orgIDYesOrganization ID (org_...).
metadataNoArbitrary key-value metadata. Maximum 16 pairs, keys up to 64 characters, values must be strings of up to 512 characters.
secretIDYesSecret ID (sec_...).

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed2 schema fields changed
    • addedInput schema / properties / orgID / description
      Added value: +"Organization ID (org_...)."
    • addedInput schema / properties / secretID / description
      Added value: +"Secret ID (sec_...)."
  2. First observed

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds real context beyond the annotations: the response omits the secret value, and references by secret ID survive a rename. It also discloses that metadata is replaced rather than merged, which aligns with destructiveHint=true. It doesn't state permission requirements or what happens to unlisted metadata keys on partial updates.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences: purpose first, constraints second, reference-safety consequence last. No filler and nothing repeated from the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers mutation scope, immutability of sensitive fields, and response shape (value omitted) despite there being no output schema. Minor gaps remain: metadata merge-vs-replace semantics for omitted keys and error behavior for invalid IDs are unstated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds semantics the schema does not: only name and metadata are mutable, and name changes are safe because references key on secretID. That directly informs how to use the two optional parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource and narrows scope precisely: 'Renames a secret or replaces its metadata.' It also names what the tool cannot touch (value, kind, owner), which cleanly separates it from secrets_create, secrets_delete, and secrets_get.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear when-to-use context (rename or metadata change) and an implicit when-not by stating that value, kind, and owner are immutable here — meaning those require a different tool. It doesn't explicitly name the alternative sibling (e.g., secrets_create/delete) for changing a value, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.