Skip to main content
Glama

Okam

Connect a running site and get its verify command

storefront_connect

Store key: call when the site is served from a process that keeps running (background, fixed port) and menu items show at that origin. Use http://localhost:, not 127.0.0.1: the sandbox key allows only localhost. Returns whether the origin is allowed, a runId and the exact verify command; run it as returned while the site runs. Sign-in and every check after it WAIT until the sandbox guest exists: report them, never stub sign-in. If originAllowed is false, read kit_docs_get topic onboarding. Each call starts a new run; use the latest runId. Example: {"storefrontKey":"pk_test_…","origin":"http://localhost:5173"}.

Input Schema

NameRequiredDescriptionDefault
pathNoOptional path the site is served under, for example /sandbox/, when origin has none.
originNoThe site's origin or full URL, for example http://localhost:4321 or https://test.okam.no/sandbox/. A path in it goes into the verify command's --url.
storefrontKeyNoThe site's publishable storefront key (pk_test_… or pk_live_…).

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no output schema, the description carries the return contract: originAllowed, runId, and the exact verify command. It also discloses non-obvious traits the annotations don't cover: each call starts a new run (reinforcing non-idempotency), only the latest runId is valid, sign-in and later checks block until the sandbox guest exists, and the key only accepts localhost, not 127.0.0.1.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense and front-loads the trigger condition and the localhost constraint, with the example at the end. A few clauses are compressed to the point of terseness ("Store key:", the runId sentence), which costs a point against a clean 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a non-destructive-but-stateful connect tool with no output schema, the description explains what the call returns, how to use the result (run the verify command as returned while the site runs), how to recover from originAllowed=false, and the run lifecycle. Nothing an agent needs to invoke it correctly appears missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description earns credit by adding constraints the schema omits: the origin must use http://localhost:<port> (not 127.0.0.1), and a worked example shows the storefrontKey/origin shape. It does not add much about the optional `path` parameter beyond what the schema says.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening fragment "Store key:" is terse, but the sentence that follows states the specific action: connecting a site served from a persistent process and obtaining its verify command. It is distinguishable from siblings like storefront_verify_result and checkout_verify because it produces the verify command rather than reporting a result.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit precondition ("call when the site is served from a process that keeps running (background, fixed port) and menu items show at that origin") and names the fallback route: "If originAllowed is false, read kit_docs_get topic onboarding." Use of the returned verify command vs. stubbing sign-in is also spelled out.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources