Skip to main content
Glama

Tracklution

create_login_link

Create a one-time dashboard handoff URL after AI setup. MAIN SERVER CONTAINERS ONLY: containers on any other connected server hand off manually — tell the user to open that server's dashboard (see data.manual_handoff on the verify/next-steps response). Calling this for a container that was just verified on another server is refused (container_pinned_to_other_server). The login URL contains a single-use token. Do not write it to disk or echo it back. Pass it directly to the user. Returns login_link_consume_disabled (HTTP 503) when the feature flag is off — in that case, ask the user to log in manually. target_page: "dns" requires admin permission on the company; other target pages need view. Every response includes _request_id in structuredContent.

DO NOT use this tool to answer analytics or stats questions. It is a single-use dashboard handoff URL for post-install navigation only. For data questions, call the analytics tools directly (get_summary / get_report / list_containers / etc.); the MCP host will automatically open an OAuth dialog inline if the user has not authenticated yet, and will retry the call once authentication completes.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
auth_tokenNo
target_pageYes
container_idYes
container_hashNoSECRET: required when auth_token is omitted. See get_installation_scripts for the rationale.
idempotency_keyYes
expires_in_minutesNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
dataNo
fieldNo
errorsNo
statusNo
detailsNo
warningsNo
rate_limitNo
_request_idNo
http_statusNo
next_actionNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden and does it well. It discloses the single-use token nature, tells the agent not to write to disk or echo the URL, describes the container_pinned_to_other_server refusal, the login_link_consume_disabled 503 when the flag is off, and the admin-permission requirement for target_page: 'dns'. This is rich, actionable behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long but information-dense, with critical warnings front-loaded and no filler. The second paragraph clearly separates exclusions/alternatives. It could be lightly restructured for scannability, but every sentence earns its place given the tool's complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no annotations, 6 parameters, and a complex usage context, the description covers the main flow, error/refusal cases, feature-flag behavior, permission requirements, and security handling. The presence of an output schema reduces the need to describe return structure, and the description even mentions _request_id in structuredContent. This is complete for an agent to call correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 17% (container_hash is the only parameter documented in the schema). The description adds meaningful semantics for target_page (admin vs. view permission) but does not explain the purpose, constraints, or interplay of idempotency_key, container_id, auth_token, or expires_in_minutes. Since the schema leaves most parameters undocumented, the description should have compensated more.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description states a specific verb and resource: 'Create a one-time dashboard handoff URL after AI setup.' It clearly distinguishes this from analytics siblings by explicitly saying it is for 'post-install navigation only' and not for data questions. An agent can immediately tell this is a discrete authentication/handoff tool rather than a query tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit when-to-use and when-not-to-use guidance: 'MAIN SERVER CONTAINERS ONLY' versus manual handoff on other servers, and 'DO NOT use this tool to answer analytics or stats questions' with named alternatives (get_summary, get_report, list_containers). It also covers the feature-flag-off fallback and permission requirements, leaving no ambiguity about routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources