Skip to main content
Glama

request_app_install

Ask to add an app to the person's own persistent phone (not the simulator). Returns a consent card: app name, publisher, the permissions it asks for, and approve_url and decline_url. Show the card to the person and tell them to open a link themselves: you cannot approve, and nothing is installed until they do. A card expires after 15 minutes. Fails with unknown_app, already_installed or unauthorized. Needs PN_ASSISTANT_TOKEN.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "app": "<app>"
    },
    "name": "request_app_install"
  }
}

Input Schema

NameRequiredDescriptionDefault
appYesApp id

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With annotations only telling the agent this is non-read-only and non-destructive, the description carries the real weight: a consent card is returned with named fields, the card expires after 15 minutes, nothing is installed without human action, and the failure modes are enumerated (unknown_app, already_installed, unauthorized). It also discloses the PN_ASSISTANT_TOKEN requirement, which no annotation conveys.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the action, then the return shape, then the human-in-the-loop constraint, then expiry, errors, and auth. Every sentence carries distinct operational information; nothing is restated from the schema or annotations.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter mutation-adjacent tool with no output schema, the description still explains what comes back, how long it is valid, what the agent may not do, and how it fails. Nothing an agent needs to call it correctly and safely is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is a single parameter already documented at 100% schema coverage as 'App id', and the description adds no format, source, or lookup guidance (e.g. where to obtain an app id, such as list_store_apps). Baseline 3 is appropriate when the schema does the work.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('ask to add an app') and immediately scopes it to the person's own persistent phone rather than the simulator, which is exactly what distinguishes it from the sibling install_app. An agent can route between the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Makes the consent flow explicit: show the card, tell the person to open a link themselves, the agent cannot approve, and nothing installs until they do. The one gap is that it never names install_app as the direct-install alternative, so the agent must infer that comparison from the sibling list.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.