retail-ops-mcp-kit

approve

Approve a staged write using a human token to execute the action and move it from pending to executed.

Instructions

Approve a staged write. Requires the human approval token (server env RETAIL_OPS_MCP_APPROVAL_TOKEN) — the agent does not hold it, so an agent-supplied token is refused. On a valid human token the staged action executes (mock) and the record moves pending → executed. Refused if no token is configured (fail closed).

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "approval_id": "<approval_id>",
      "token": "<token>"
    },
    "name": "approve"
  }
}

Input Schema

Name	Required	Description	Default
`token`	Yes
`approval_id`	Yes

Output Schema

Name	Required	Description	Default
No arguments

Schema Changelog

Changes observed during successful MCP inspections.

First observedv0.1.0Aug 11, 2026

TDQS

A4.5/5.0

Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure, and it delivers: it states the hard requirement for a human token, explains that agent-supplied tokens are refused, specifies failure mode when no token is configured (fail closed), and reveals the state transition and mock execution. This is excellent transparency about permissions, security, and side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences long, front-loaded with the core purpose, and every sentence provides essential information: purpose, token requirement, execution and failure behavior. There is no redundancy or filler, making it highly concise while remaining comprehensive.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (approval token security, state transition, failure modes), the description covers all key aspects: what it does, prerequisites, security caveat, and behavior on success and failure. An output schema exists, so return values need not be described, and no critical context is missing for an agent to invoke the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must compensate for the undocumented parameters. It thoroughly explains the 'token' parameter's semantics (human-only, agent cannot supply it), but it does not explicitly describe 'approval_id' as the identifier of the staged write. The approval_id is inferable from context but not directly clarified, leaving a gap in parameter guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'Approve a staged write,' which uses a specific verb and resource, clearly distinguishing this tool from the sibling staging and query tools. It clarifies exactly which action is performed and the resulting state transition (pending → executed), leaving no ambiguity about its role.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly conveys that this tool requires a human-provided approval token and that an agent-supplied token will be refused, making it explicit when the tool can be effectively used. While it does not name alternatives, the context of siblings (stage_invoice_payment, stage_po_amendment, list_pending_approvals) makes the workflow apparent, so the usage guidance is strong but not fully explicit about when not to use other tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server