Skip to main content
Glama

Order Automatic SSL subscription

order_automatic_ssl_subscription
DestructiveIdempotent

Confirm and pay for an approved Automatic SSL quote to start a subscription using the exact quote token, unchanged details, and same idempotency key.

Instructions

Confirm and pay for the exact Automatic SSL quote. Call only after the user approves the final EUR total, subscribed names, term, and payment method. Use the unchanged request, same idempotencyKey, and exact quote token. Setup credentials remain portal-only behind two-factor verification and are never returned to MCP. Requires certificates:order and paid-operation spend controls.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
domainsYesCanonical subscribed DNS names. A base name includes its www alias; an apex and wildcard are separate names and may be ordered together.
paymentYesPayment object. For account balance use { payment: 1, successUrl: '', cancelUrl: '' }
offer_idYesPublished EUR offer ID returned by the selected catalog product
auto_renewYesExplicitly choose whether the subscription remains eligible for separately prepaid future terms
product_idYesPublished product ID returned by list_certificate_catalog
quote_tokenYesExact short-lived quote_token returned by quote_automatic_ssl_subscription
idempotencyKeyYesSame client-global idempotency key used for quote_automatic_ssl_subscription
offer_generationYesExact offer generation returned by the catalog; stale generations are rejected
acknowledge_exact_quote_and_paymentYesTrue only after the user approves the exact EUR total, names, term, and payment

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.16

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructive=true and idempotent=true, but the description adds meaningful context beyond them: the required certificates:order scope, paid-operation spend controls, the idempotencyKey reuse contract, and that setup credentials stay portal-only and are never returned to MCP. These auth/security disclosures are genuinely beyond the structured annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Five sentences, front-loaded with the core action, and each sentence carries distinct information (precondition, idempotency contract, credential handling, authorization). Slightly dense but no wasted filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a high-stakes payment tool with 9 required parameters and no output schema, the description covers the approval precondition, idempotency requirement, permission scope, and spend controls. It omits any explanation of what a successful order returns or what to do on failure, a minor gap given the destructive nature.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema itself documents all 9 parameters, including quote_token, idempotencyKey, and the payment object. The description reinforces the idempotency and quote-token semantics but adds no syntax or format detail the schema lacks, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource: 'Confirm and pay for the exact Automatic SSL quote.' An agent can tell this is the ordering/payment step, distinct from the quoting lifecycle. It never names the sibling (quote_automatic_ssl_subscription) to differentiate explicitly, so it falls short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a clear precondition: 'Call only after the user approves the final EUR total, subscribed names, term, and payment method.' This is an explicit when-to-use gate with the required approval signal. It stops short of naming alternative tools or when-not-to-call scenarios.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools