Skip to main content
Glama
awslabs

Threat Modeling MCP Server

Official
by awslabs

update_asset

Update existing assets in a threat model by modifying attributes like name, type, classification, or lifecycle state. Supports batch updates for multiple assets simultaneously.

Instructions

Update an existing asset. Supports batch operations via the 'items' parameter.

This tool updates one or more existing assets in the system. For single item: provide id and fields to update directly. For batch: provide a list of asset dicts in the 'items' parameter (each must include 'id').

Args: ctx: MCP context for logging and error handling id: ID of the asset to update (required for single item mode) name: New name of the asset type: New type of the asset classification: New classification of the asset lifecycle_state: New lifecycle state of the asset description: New description of the asset owner: New owner of the asset sensitivity: New sensitivity level of the asset criticality: New criticality level of the asset metadata: New metadata for the asset items: Optional list of asset dicts for batch update

Returns: A confirmation message

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
idNo
nameNo
typeNo
itemsNo
ownerNo
metadataNo
criticalityNo
descriptionNo
sensitivityNo
classificationNo
lifecycle_stateNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYes
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of disclosing side effects, but it only mentions that it returns 'a confirmation message.' It does not disclose whether updates are partial or full replacement, whether validation occurs, permission requirements, or what happens if an asset does not exist. This is a significant gap for a mutation tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-organized with a summary, mode explanation, Args block, and Returns line. While the opening sentences are somewhat repetitive, the overall structure is front-loaded and each section serves a purpose. It is appropriately sized for an 11-parameter tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity of 11 parameters and two modes, the description adequately covers the purpose, parameter meaning, and return value. It lacks examples and error handling details, but the presence of an output schema and the clear mode guidance make it sufficient for typical invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The Args section lists all 11 schema properties with brief semantic descriptions (e.g., 'New name of the asset'), fully compensating for the 0% schema description coverage. It also explains the interaction between 'id' (required for single mode) and 'items' (batch mode), which is critical for correct invocation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'Update an existing asset' and 'Supports batch operations via the items parameter,' clearly identifying the verb, resource, and scope. It distinguishes from siblings like add_asset, delete_asset, and other update_* tools by targeting assets specifically. The dual-mode (single/batch) detail further clarifies what the operation encompasses.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides explicit instructions for when to use each mode: 'For single item: provide id and fields to update directly' and 'For batch: provide a list of asset dicts in the items parameter.' It does not explicitly contrast with alternatives (e.g., add_asset), but the asset-specific naming and mode guidance make the usage context clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/awslabs/threat-modeling-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server