Skip to main content
Glama

podyx_v1_get_api_key

Read-onlyIdempotent

Retrieve metadata for the authenticated API key, including the resolved studio and current service account permissions.

Instructions

Inspect the authenticated API key GET /api/v1/key. Returns safe key metadata, the studio resolved from the bearer credential, and the service account's current effective permissions. No tenant host is required. Read/preview only. Follow all pagination; a quote does not reserve a slot or lock a price.

Tool call template

This tool declares no required parameters. Add optional parameters from the input schema as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {},
    "name": "podyx_v1_get_api_key"
  }
}

Input Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.4.0

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, openWorldHint, and destructiveHint=false, so the safety profile is covered. The description usefully adds that the studio is derived from the bearer credential and that no tenant host is needed, but it says nothing about auth failure modes, rate limits, or permission-evaluation caveats for a tool whose whole purpose is auth introspection.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The first three sentences are tight and front-loaded. The closing sentence ('Follow all pagination; a quote does not reserve a slot or lock a price') is boilerplate about quotes and pagination that is irrelevant to a zero-parameter read-only key inspection and adds noise an agent must discard.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no input parameters, no output schema, and rich annotations, the description supplies what is actually needed: the endpoint, the three classes of returned data, and the host requirement. The trailing pricing/pagination sentence is the only completeness-relevant flaw, and it is a distraction rather than a missing fact.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters with 100% schema coverage, so there is nothing for the description to disambiguate. The statement that no tenant host is required is the one parameter-adjacent fact an agent could otherwise get wrong, and it is supplied.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Inspect the authenticated API key') plus the concrete endpoint GET /api/v1/key, and enumerates what comes back (key metadata, resolved studio, effective permissions). It is clear, though it never explicitly contrasts itself with the nearest sibling podyx_v1_get_studio, which also resolves studio context.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'No tenant host is required' and 'Read/preview only' imply the operating context, but there is no explicit when-to-use versus when-to-use-a-sibling guidance (e.g., use this instead of get_studio when you need to validate the bearer credential itself). Usage is inferred rather than directed.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools