Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api role assignments partial update

ciso_assistant_api_role_assignments_partial_update

Partially update a role assignment by ID through the API to modify specific assignment fields without replacing the entire record.

Instructions

API endpoint that allows role assignments to be viewed or edited.

Input Schema

NameRequiredDescriptionDefault
idYes
bodyNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

D1.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=false, destructiveHint=false, idempotentHint=false and openWorldHint=true, so the safety profile is nominally covered. The description adds nothing beyond that: it does not say which fields are patchable, whether omitted fields are preserved (the defining trait of a partial update), or what permissions are required. The 'viewed' phrasing mildly misleads about a write endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

It is short, but the single sentence is boilerplate that does not earn its place: the 'viewed' half is irrelevant to a PATCH tool and actively muddies intent. Brevity here reflects under-specification rather than efficiency.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation endpoint with an opaque free-form body, no output schema, and no supporting parameter documentation, the description should carry most of the load. Instead it supplies none of the payload contract, prerequisites, or effect of the update, leaving the agent unable to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the single substantive parameter `body` is an untyped free-form object with no declared properties, so the schema tells the agent nothing about valid payload shape. This is exactly the case where the description must compensate, yet it says nothing about what a role assignment body contains (role, user, scope, permissions).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description restates the tool name/title almost verbatim ('API endpoint that allows role assignments to be viewed or edited') without saying what a role assignment actually is or what a partial update changes. Worse, it conflates read and write ('viewed or edited') for a PATCH-only endpoint, so an agent cannot infer the operation precisely. No differentiation from the many sibling role_assignments_* tools (list, retrieve, create, update, destroy).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no when-to-use guidance whatsoever: nothing distinguishes partial_update from ciso_assistant_api_role_assignments_update, _create, _destroy, or _retrieve, all of which sit in the sibling set. An agent has no criterion for choosing this tool over PATCH-equivalent alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools