Skip to main content
Glama

create_upload_handoff

Create a one-time upload link. The person who has the file opens it and drops the file in their browser, where it is encrypted before it uploads. With notify_email (and notify_message), their browser emails that person the full link the moment the upload completes, and get_handoff_status then lists them under emailed_to. The file's key never reaches the service or this connection.

Tool call template

This tool declares no required parameters. Add optional parameters from the input schema as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {},
    "name": "create_upload_handoff"
  }
}

Input Schema

NameRequiredDescriptionDefault
noteNoShown to the person uploading.
labelNo
one_timeNo
expiry_daysNo
notify_emailNoThe recipient. The upload page emails them the full link from the uploader's browser the moment the upload completes, so you never handle the key. Set this whenever the human wants the file sent to someone.
max_downloadsNo
notify_messageNoThe body of that email, in the human's words (up to 2000 characters).
password_requiredNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A3.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations (which only state it is a non-idempotent write) by disclosing that encryption happens in the uploader's browser, that the notify email is sent client-side at completion, that get_handoff_status will show the recipient under emailed_to, and that the key never reaches the service. These are exactly the non-obvious traits an agent must reason about.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The what-it-does sentence is front-loaded and each subsequent sentence adds a distinct fact rather than restating the title. Slightly dense run-on phrasing in the notify_email sentence keeps it from being maximally clean.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an 8-parameter, zero-required, security-sensitive creation tool with no output schema, the description covers the conceptual model well but leaves half the parameters unexplained and never states what the tool returns (presumably the link itself). Adequate, not complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is only 38%, so the description needs to carry more weight; it meaningfully explains notify_email and notify_message but says nothing about expiry_days, max_downloads, password_required, label, or one_time. Worse, it calls the link "one-time" while the one_time parameter defaults to false, sending mixed signals about a security-relevant setting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence gives a specific verb and resource ("Create a one-time upload link") and the following sentences make the file flow concrete. It never names or contrasts the closest sibling (create_secret_handoff), so an agent still has to infer which direction each tool moves files.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied through the workflow description (the file holder opens the link and drops the file), and notify_email carries explicit guidance: "Set this whenever the human wants the file sent to someone." There is no explicit when-not or named alternative, so the agent gets context but no routing rule.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources