Skip to main content
Glama

List the OAuth clients attached to the Mozilla account

browser_oauth_clients
Read-only

Lists the devices and web sessions linked to the signed-in Mozilla account, with an optional flag to bypass the 4-hour cache. Returns an empty array when no account is signed in.

Instructions

List devices and web sessions attached to the signed-in Mozilla account (listAttachedOAuthClients). MEASURED: with no account signed in it resolves to an empty array rather than throwing, and the underlying _fetchAttachedOAuthClients needs a session token, so this only returns data for a REAL signed-in account. The mock account from browser_sync_probe deliberately has no session, so it yields an empty list — that is the expected offline answer.

Input Schema

NameRequiredDescriptionDefault
refreshNoBypass the 4-hour cache

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well past the readOnlyHint annotation: it discloses that no-session resolves to an empty array rather than throwing, that a session token is required internally, and that the mock account is expected to yield an empty list. These failure-mode and edge-case details are exactly what an agent needs before calling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in the first clause, followed by the measured edge-case notes. Slightly dense with internal jargon ("MEASURED:", "_fetchAttachedOAuthClients") but each sentence carries distinct information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-optional-parameter read tool with no output schema and minimal annotations, the description covers invocation, preconditions, and the empty-result case. The only gap is the shape of individual client/session entries, which the agent must discover empirically.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single parameter `refresh` is fully documented in the schema ("Bypass the 4-hour cache"), so baseline is 3. The description adds nothing about the cache behavior or when to force a refresh, leaving that meaning entirely to the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: "List devices and web sessions attached to the signed-in Mozilla account," and gives the underlying API name. The mention of browser_sync_probe distinguishes it from the neighboring sync tool without the agent opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Clearly frames the condition under which the tool is meaningful (a real signed-in account) and warns that the browser_sync_probe mock account is a deliberate mismatch that returns empty. It doesn't explicitly say "use X instead if you need Y," but the when-not context is concrete.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools