Skip to main content
Glama
bunkerity

BunkerWeb MCP

Official

configs_upload

Destructive

Create configuration snippets from base64-encoded files, one per file named after its sanitized filename, and save them to the database for the scheduler to apply later.

Instructions

Create snippets from base64 files, one per file, named after the file. Use config_create for text. Saved to the database; the scheduler applies it later; this tool cannot confirm it is live.

Input Schema

NameRequiredDescriptionDefault
filesYesFiles to create, one snippet per file, named after the sanitized file stem
serviceNoService ID for every file; omit or 'global' for global
is_draftNoCreate as draft
config_typeYesType for every uploaded file. Custom config type, e.g. http, server-http, default-server-http, stream, server-stream, modsec, modsec-crs, crs-plugins-before, crs-plugins-after

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed4 schema fields changedv0.6.0
    • addedInput schema / $defs / ConfigUploadFile / properties / filename / description
      Added value: +"File name, with its extension"
    • changedInput schema / properties / config_type / description
      Previous value: -"Configuration type"New value: +"Type for every uploaded file. Custom config type, e.g. http, server-http, default-server-http, stream, server-stream, modsec, modsec-crs, crs-plugins-before, crs-plugins-after"
    • addedInput schema / properties / files / description
      Added value: +"Files to create, one snippet per file, named after the sanitized file stem"
    • changedInput schema / properties / service / description
      Previous value: -"Service identifier or global"New value: +"Service ID for every file; omit or 'global' for global"
  2. Changed3 schema fields changedv0.5.0
    • addedInput schema / properties / config_type / description
      Added value: +"Configuration type"
    • addedInput schema / properties / is_draft / description
      Added value: +"Create as draft"
    • addedInput schema / properties / service / description
      Added value: +"Service identifier or global"
  3. First observedv0.1.0

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and readOnlyHint=false, but the description adds genuinely new behavior: writes go to the database, the scheduler applies them later, and the tool cannot confirm the config is live. That deferred-application caveat is exactly the kind of context an agent needs. It stops short of stating what gets overwritten on a name collision, which matters given destructiveHint=true.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short clauses with zero filler, and the core action plus the count/naming rule are front-loaded ahead of the alternative and the caveat. Every sentence carries distinct information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a batch upload tool with no output schema, it covers the essential gaps: multi-file semantics, naming, the text alternative, and the fact that success does not mean the config is live. Absent details about overwrite behavior and draft handling are the remaining minor holes.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3; the schema already documents filename, content_base64, service, is_draft, and config_type. The description only reinforces the file-to-snippet naming relationship and the base64 requirement, adding little beyond the structured fields and never mentioning config_type or service scoping.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Create snippets from base64 files') plus the cardinality and naming rule ('one per file, named after the file'), and explicitly contrasts with the sibling config_create for text input. An agent can distinguish it from config_create, config_update, and config_upload_update without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly routes text content to config_create, which is the most likely confusion point among siblings. It does not, however, address when to prefer config_upload_update or how this differs from config_update, so the guidance is clear but not exhaustive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.