Skip to main content
Glama

OpenPanel: Create client

openpanel_create_client
Destructive

Create a new API client through Manage API with write, read, or root access modes; requires a root-mode client to provision credentials for tracking, analytics, or full access.

Instructions

[UNIFIED] Create a new API client via Manage API. Modes: 'write' (tracking only), 'read' (export/analytics), 'root' (full access). Requires 'root' mode client.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "site": "<site>",
      "name": "<name>",
      "project_id": "<project_id>"
    },
    "name": "openpanel_create_client"
  }
}

Input Schema

NameRequiredDescriptionDefault
modeNowrite
nameYes
siteYes
project_idYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv3.14.0
  2. Removedv3.13.1
  3. First observedv3.4.0

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and idempotentHint=false, so the safety profile is covered. The description adds value the annotations cannot: the three permission tiers (write=tracking only, read=export/analytics, root=full access) and the authorization requirement that the caller must already hold a root-mode client. It does not disclose whether the returned credentials are shown only once or how a duplicate name is handled, which keeps it below a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three compact sentences, front-loaded with the action, then the mode semantics, then the prerequisite. Nothing is repeated and nothing could be removed without losing information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive, non-idempotent creation tool with four parameters at 0% schema coverage and no output schema, the definition covers permissions and modes but leaves the identity of site/project_id and the generated-credential outcome unspecified. An agent can invoke it, but must guess at two required parameters and at what it receives back.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must carry the load. It does document the meaningful values for the 'mode' parameter, which the schema leaves as an unspecified string. The remaining three required parameters (site, name, project_id) are never explained, so the compensation is only partial.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

"Create a new API client via Manage API" gives a specific verb and resource, and the mode enumeration clarifies what kind of client is produced. It does not contrast itself with nearby creation tools such as oauth_register_client or openpanel_create_project, so the sibling differentiation is left implicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The prerequisite "Requires 'root' mode client" is a genuinely useful gating condition that tells the agent when this call will succeed. However, there is no guidance on when to prefer this tool over oauth_register_client or other client-creation paths, and no guidance on when a given mode should be chosen beyond the one-line glosses.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools