Skip to main content
Glama
Knuckles-Team

vaultwarden-mcp

Post attachment

vaultwarden_post_attachment

Uploads an attachment to a specified Vaultwarden cipher via the legacy single-phase endpoint, enabling AI agents to add files to vault items.

Instructions

Upload attachment (legacy single-phase)

Input Schema

NameRequiredDescriptionDefault
formNo
paramsNo
cipher_idYes
json_bodyNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv0.2.2

TDQS

C2/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=false, destructiveHint=false, and openWorldHint=true, so the schema-carrying safety profile is known. The description adds only "legacy single-phase" and does not explain authentication needs, file size limits, overwrite behavior, or what form/params/json_body represent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is only four words and is front-loaded, but it is under-specified rather than appropriately concise. It omits information an agent needs in order to invoke an upload operation with four undocumented parameters.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a multipart-like upload tool with four parameters at 0% schema coverage, no output schema, and multiple confusingly similar sibling tools, the description is far too sparse. It does not provide enough context to select or invoke the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description adds no meaning for the four parameters. The required cipher_id is only inferable from its name, and form, params, and json_body remain completely opaque.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a clear verb and resource ("Upload attachment") and adds a vague qualifier ("legacy single-phase"), so the agent knows this creates an attachment. However, it does not distinguish this tool from closely named siblings such as vaultwarden_post_attachment_v2, vaultwarden_post_attachment_v2_data, or vaultwarden_post_attachment_share, so selection remains ambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description contains no explicit when-to-use guidance and does not name alternatives. The word "legacy" hints that a newer sibling exists, but it does not state when this legacy path should be chosen over v2 or share variants.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools