Skip to main content
Glama

approvals_list

Read-only

List what waits for an owner. approvals: promotes held above the app's policy band (hold id, release, band, proposer, age). challenges: owner commands waiting for the owner to approve in the admin (id, command, plan, expiry, approval_url). Agents cannot approve either. Needs an owner token.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "app": "<app>"
    },
    "name": "approvals_list"
  }
}

Input Schema

NameRequiredDescriptionDefault
appYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnlyHint=true, destructiveHint=false), and the description adds useful context: an owner token is required and agents are barred from approving. However, the terse Telegram-style field lists ('hold id, release, band, proposer, age') are a partial substitute for an output schema rather than a behavioral disclosure, and nothing is said about pagination, ordering, or what an empty result means.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The scoping statement is front-loaded in one sentence, and the two resource categories are laid out in a compact parallel structure with zero filler. The telegraphic parenthetical field lists are efficient, though the missing articles make it slightly harder to parse on first read.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only, single-parameter tool with no output schema, the definition covers the essentials: what is returned, in what two shapes, what auth is needed, and who may act on the results. The only real omission is any explanation of what the 'app' argument scopes or accepts.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% for the single 'app' parameter, so the description is the only place meaning could be added, and it only alludes to app scoping indirectly via 'the app's policy band.' For a single self-describing parameter named 'app' this is a minor gap rather than a fatal one.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with a specific verb+resource ('List what waits for an owner') and immediately splits the result into the two distinct resource types it returns, approvals and challenges, with their field sets. An agent can tell this apart from approval_approve and owner_command without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description makes the usage context clear: this is the read side of the owner-approval workflow, and it explicitly states 'Agents cannot approve either,' which tells the agent that approval_approve is out of reach and listing is the only permitted action. It does not explicitly name a sibling as the alternative or state when-not to call it, so it falls short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.