Skip to main content
Glama

esxi_account_manage

Destructive

Create, update, remove, or change passwords for ESXi accounts. Preview actions with dry-run defaults, verify the expected host, and use request IDs to prevent duplicate changes.

Instructions

专用 account 管理:create, update, remove, password_change。先 resource_schema/get 和默认预览;实际执行精确 expected_host、写开关与依赖确认,支持 request_id 防止重复执行。

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
actionYes
dry_runNo
argumentsNo
request_idNo
expected_hostNo
allow_disruptionNo
acknowledged_vm_idsNo
allow_unknown_impactNo
allow_protected_impactNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.3.0

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare destructiveHint=true, readOnlyHint=false, and idempotentHint=false, so the agent already knows this is a mutating, non-idempotent, destructive operation. The description adds some behavioral context: default preview via dry_run, confirmation via expected_host, write switches, dependency confirmation, and request_id for deduplication. It does not clarify what gets destroyed (e.g., accounts) or permission requirements, but it adds meaningful procedural detail beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loads the core purpose and actions. However, the second sentence is a dense string of instructions with limited punctuation, making it somewhat hard to parse. It avoids unnecessary filler but could be structured more clearly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive, multi-action tool with 9 parameters (mostly undocumented), the description provides some critical procedural context (preview-first, expected_host, request_id). Still, it omits details about the 'arguments' object, the exact effects of the impact flags, and what each action requires. An output schema exists, so return values are covered, but the input side remains underspecified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description should explain parameters. It mentions action, dry_run, expected_host, write switches (likely allow_disruption/allow_unknown_impact/allow_protected_impact), dependency confirmation (acknowledged_vm_ids), and request_id, but it does so in a compressed, non-exhaustive way and does not define the 'arguments' object or the exact meaning of each switch. With 9 parameters and no schema help, this is a significant gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific resource (ESXi account) and the four CRUD-style actions (create, update, remove, password_change), which is clear enough for an agent to know what the tool does. It does not explicitly name sibling tools or differentiate from other '*_manage' tools, but the resource is specific.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It implies a workflow: first use resource_schema/get and a default preview, then perform the actual operation with proper confirmations. However, it doesn't explicitly say when to use this tool versus other account management or permission tools, and there are no exclusions or clear alternative guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.