Skip to main content
Glama

Password generator

random_password

Use when an agent must mint a secret and be able to justify its strength: strong random passwords from the platform CSPRNG, returned with their entropy in bits so the strength is a number and not an opinion. Four alphabets, one with no look-alike characters for anything a human has to read back or dictate. Do not use for ids that only need to be unique (/v1/util/uuid). $0.005 per call, paid over x402 (USDC).

Input Schema

NameRequiredDescriptionDefault
countNoHow many to generate, 1-50. Defaults to 1.
lengthNoCharacters per secret, 8-256. Defaults to 20.
alphabetNoalnum | legible | hex | completo. Defaults to legible.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and discloses key traits: CSPRNG source, entropy return, four alphabets including a legible one for human readability, and per-call cost with payment method. It omits minor details like error handling or rate limits, but covers the essential behavior for a generator.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences, front-loaded with the primary use case, and every sentence adds distinct value: purpose, key features, alternative, and cost. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema and no annotations, the description sufficiently covers what the tool does, its output (entropy in bits), alphabets, and cost. It could be slightly more explicit about the exact return format (e.g., array of objects with password and entropy fields), but it is largely complete for an agent to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the parameter meanings are already fully documented. The description adds only a small clarification about the legible alphabet having no look-alike characters, but otherwise does not expand on count or length beyond what the schema provides. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb (mint) and resource (strong random passwords), and explicitly distinguishes from util_uuid for unique IDs. It also highlights the unique value of returning entropy in bits, making the tool's purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides explicit when-to-use (mint a secret and justify its strength) and when-not-to-use (IDs that only need uniqueness, with a named alternative /v1/util/uuid). This leaves no ambiguity about tool selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources