Skip to main content
Glama

create_saved_card_link

Get a link for the holder to save their own card

Returns a single-use link where the account holder types a card they already own and locks it with their passkey. The card is encrypted on their device; Laso never sees the number.

Send the url to your human. Do not open it yourself. Saving a card is the holder's step, like identity verification: the page asks for the card and a passkey, with no account to create and no code to type.

Poll GET /get-saved-cards until the card appears. Each link works once and expires at expires_at; mint a new one if it lapses.

This route is free and needs no identity verification or prior setup: the holder's first saved card creates their card account.

Input Schema

NameRequiredDescriptionDefault

No arguments

Output Schema

NameRequiredDescriptionDefault
urlNoThe single-use page where the holder saves their card. Send it to them.
noteNoHow to hand the link over and what to poll.
expires_atNoWhen the link stops working, in milliseconds since the epoch.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds substantial context beyond the annotations: single-use semantics (consistent with idempotentHint=false), expiry at expires_at, client-side encryption where Laso never sees the card number, and zero prerequisite setup. These are non-obvious behavioral traits an agent cannot infer from the annotation block.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the purpose, then bold callouts for the critical agent action and the polling loop, then prerequisites. Well ordered and mostly every sentence earns its place, though the aside comparing the page to identity verification is slightly more color than instruction.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value detail is delegated appropriately; the description still calls out url and expires_at to tie the polling instruction to a field. For a zero-parameter tool it covers the full agent workflow: how to deliver the link, what the holder does, how to detect completion, and what happens if the link lapses.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema is empty with zero parameters, so the baseline is 4. The description correctly implies no inputs are needed and instead surfaces the relevant return fields (url, expires_at), but there is no parameter semantics to add meaning to.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — minting a single-use link that lets a holder save their own card — and elaborates on exactly what the link is for. An agent can distinguish it from get_saved_cards (listing existing cards) and buy_with_saved_card (spending) without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit operational guidance: send the url to the human rather than opening it, poll GET /get-saved-cards until the card appears, and re-mint if the link expires. It also states the route is free and needs no identity verification or prior setup. It stops short of explicitly contrasting this link flow against sibling link generators like get_auth_link or get_kyc_link, so it doesn't reach the full when/when-not/alternatives bar.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources