Skip to main content
Glama

Store Secret

store_secret

Store an encrypted secret in a target's vault. Common keys: LOGIN_EMAIL, LOGIN_PASSWORD (B2B shop auth), ga4_service_account (GA4 monitoring). Values are AES-256-GCM encrypted at rest.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
keyYesSecret key (e.g. LOGIN_EMAIL)
labelYesHuman-readable label
valueYesSecret value (will be encrypted)
targetIdYesThe target ID
descriptionNoOptional description
environmentNoEnvironment scopePRODUCTION

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It adds an important fact—values are AES-256-GCM encrypted at rest—which is non-obvious and useful. However, it does not mention whether storing a secret overwrites an existing one, required permissions, or any side effects, leaving notable gaps for a mutation tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, immediately front-loads the core purpose, and every word earns its place. It avoids fluff and technical repetition while providing useful context about keys and encryption.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 6 parameters and no output schema, the description covers the core purpose, encryption, and common usage examples. It does not explain return values or address optional parameters like environment, but the schema descriptions fill some gaps, making it reasonably complete for a store operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema covers 100% of parameters with descriptions, so the baseline is 3. The description adds value by explaining common key names and their contexts (e.g., LOGIN_PASSWORD for B2B shop auth), which helps users choose appropriate parameter values beyond what the schema states.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool stores an encrypted secret in a target's vault, using a specific verb ('store') and resource ('encrypted secret' in 'target's vault'). This distinguishes it from sibling tools like delete_secret and rotate_secret, and the mention of common keys adds further clarity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool (storing secrets) and gives common key examples with context ('B2B shop auth', 'GA4 monitoring'), but it does not explicitly name alternatives or state when not to use it. Since no exclusions or comparisons to siblings are provided, it only offers implied usage guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.5/5.0
Disambiguation4/5

Most tools are clearly separated by resource (targets, runs, findings, incidents, etc.) and action. A few close pairs like active_runs/list_runs and mute_finding/create_muting_rule could confuse, but descriptions clarify the distinctions.

Naming Consistency4/5

The majority of tools follow verb_noun naming (create_target, get_target, delete_journey). A few outliers use noun phrases (active_runs, daily_trends, system_health, team_stats) which slightly breaks the pattern, but overall the convention is predictable.

Tool Count1/5

74 tools is extreme for any MCP server. Even for a comprehensive monitoring platform, this overwhelms agents with too many granular operations (e.g., enable_all_tests vs disable_all_tests vs update_test, or import_targets duplicating create_target). A more consolidated set would be appropriate.

Completeness5/5

The tool surface is remarkably complete for the monitoring domain: full CRUD for targets, journeys, rules, reports, secrets, and fragments; plus run triggering, incident management, findings handling, SEO tracking, guest scans, and admin tools. Only maintenance windows lack an update operation, which is minor.

Resources