Skip to main content
Glama
anythink-cloud

Anythink-MCP

Official

Roles: permissions remove

roles_permissions_remove
Destructive

Revoke specified entity permissions from a role, removing access for every user who holds it while preserving other permissions. Check existing grants first before changing data.

Instructions

Remove entity permissions from a role. Takes one or more actions (default read) on one entity away from a role; every user holding the role loses them at once, and its other permissions are kept. Actions the role doesn't have are ignored. Use roles_permissions_list first to see what it grants. It changes or deletes existing data, so check with the user before running it.

Input Schema

NameRequiredDescriptionDefault
entityYesEntity name
actionsNoComma-separated actions: read,create,update,delete (default: read)
role_idYesRole ID. Find it with roles_list.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changedv0.2.37
    • changedInput schema / properties / role_id / description
      Previous value: -"Role ID"New value: +"Role ID. Find it with roles_list."
  2. Addedv0.2.27

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and readOnlyHint=false, so the safety profile is covered. The description adds real value beyond that: blast radius (every user holding the role loses the permission at once), preservation semantics (other permissions kept), and lenient partial-application behavior (actions the role lacks are ignored). It does not cover reversibility, auth requirements, or error behavior for an unknown entity, so a 4 rather than a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action, then blast radius, then alternatives and caution - a sensible order. The clause 'Takes one or more actions (default read) on one entity away from a role' partially repeats the opening sentence, a minor redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with an output schema absent (so returns need not be explained), full parameter coverage, and annotations carrying the safety flags, the description closes the remaining gaps: what is destroyed, who is affected, and the recommended workflow.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so all three parameters (role_id, entity, actions) are already documented, including the comma-separated action list and the 'read' default. The description restates the default and 'one entity' scoping but adds no syntax or format detail beyond the schema, matching the baseline 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (remove) and resource (entity permissions from a role), and implicitly scopes it against sibling roles_permissions_add. An agent can immediately tell this is the removal counterpart without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit instructions: use `roles_permissions_list` first to see current grants, and check with the user before running because it changes/deletes data. Names the alternative tool and the condition selecting it, plus a confirmation prerequisite.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools