Skip to main content
Glama

websex_http_session_create

Create a persistent, engagement-scoped HTTP workbench session to set target scope, headers, cookies, TLS, and redirect rules for authorized security testing.

Instructions

Create a persistent engagement-scoped HTTP workbench session with declared target scope, default headers, cookies, TLS, and redirect behavior.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
nameYes
base_urlYes
verify_tlsNo
scope_hostsNo
engagement_idYes
default_headersNo
follow_redirectsNo
include_subdomainsNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.0.0

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the behavioral burden. It adds useful context ('persistent', 'engagement-scoped', 'declared target scope'), but says nothing about authentication needs, whether sessions can be reused concurrently, or lifecycle/destruction behavior. Return values are covered by the output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single, front-loaded sentence with no filler, leading with the verb and resource. Efficient, though it is terse for an 8-parameter tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 8 undocumented parameters, no annotations, and no title, a one-sentence description is thin. The output schema covers return values, but when-to-use context and parameter meaning are left to inference.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% across 8 parameters, so the description must compensate. It maps loosely to scope_hosts, default_headers, verify_tls and follow_redirects, but omits name, base_url, engagement_id and include_subdomains, and references 'cookies' for which no parameter exists.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb+resource ('Create a persistent engagement-scoped HTTP workbench session') and enumerates the configurable dimensions (scope, headers, TLS, redirects). The 'create' verb clearly separates it from session_list/get/update siblings, though no sibling is named explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It conveys that the session is persistent and engagement-scoped, but gives no guidance on when to create a session versus using websex_http_request, websex_http_repeater, or the browser tools directly. No prerequisites or exclusions are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools