Skip to main content
Glama

viaSocket

get_viasocket_embed_secret

Gets the viaSocket organization's embed signing secret (VIASOCKET_EMBED_SECRET) into the developer's .env encrypted, so you never see it. Use it in SDK setup. Get orgId with get_org_details_by_token first. Before calling, run docstar-cli key request in the project folder and pass its publicKey; then run the save command this tool returns, then its emit command (the developer can choose another .env file). Never ask for, print or repeat the secret.

Input Schema

NameRequiredDescriptionDefault
orgIdYesThe orgId the key is created for
publicKeyYesThe publicKey printed by `docstar-cli key request`, exactly as printed

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With readOnlyHint=false and openWorldHint=true already given, the description adds real context: the secret is written encrypted and never surfaced, a shell command must precede the call, and the returned commands must be executed in sequence. It does not address whether repeated calls create or rotate a key (relevant given idempotentHint=false) or what happens to an existing secret, which is the main remaining gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose and the never-print constraint lead, followed by the prerequisite chain in execution order. Every clause maps to an action the agent must take; there is no filler despite the density.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter tool with no output schema, the description covers prerequisites, the call sequence, the return shape in functional terms (commands to run), and a security constraint. It stops short of error conditions or post-call verification steps the agent might need.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is already 100%, yet the description still adds provenance: publicKey must come verbatim from `docstar-cli key request` and orgId from get_org_details_by_token. That is genuine meaning beyond the schema strings, though it doesn't cover format/validation of either value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a concrete verb and resource ('Gets the viaSocket organization's embed signing secret') and scopes the outcome to writing an encrypted .env entry. It is clearly distinct from siblings like get_org_details_by_token, though the parenthetical variable name and side-effect framing make it slightly denser than a one-line purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says the context ('Use it in SDK setup'), names the prerequisite tool ('Get orgId with get_org_details_by_token first'), and lays out the ordered steps: run `docstar-cli key request`, call this tool with the publicKey, then run the returned `save` and `emit` commands. It even notes the developer may target a different .env file, leaving almost nothing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources