Skip to main content
Glama

Upload File to Matching Input

upload_file
Destructive

Attach local files to matching file inputs, including hidden ones, during web app QA. Use approved file-root paths to supply uploads for form and persistence checks.

Instructions

Attach local files to a matching file input, including hidden inputs. Paths must be inside approved file roots.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "description": "<description>",
      "paths": "<paths>"
    },
    "name": "upload_file"
  }
}

Input Schema

NameRequiredDescriptionDefault
pathsYes
descriptionYes

Output Schema

NameRequiredDescriptionDefault
dataNo
run_idYes
stagesNo
statusYes
recoveryNo
operationYes
error_codeYes
session_stateYes
schema_versionNo
progress_omittedNo
progress_delivery_failedNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed3 schema fields changedv0.10.0
    • removedInput schema / properties / description / title
      Removed value: -"Description"
    • removedInput schema / properties / paths / title
      Removed value: -"Paths"
    • removedInput schema / title
      Removed value: -"upload_fileArguments"
  2. Changed12 schema fields changed
    • removedOutput schema / properties / data / title
      Removed value: -"Data"
    • removedOutput schema / properties / error_code / title
      Removed value: -"Error Code"
    • removedOutput schema / properties / operation / title
      Removed value: -"Operation"
    • removedOutput schema / properties / progress_delivery_failed / title
      Removed value: -"Progress Delivery Failed"
    • removedOutput schema / properties / progress_omitted / title
      Removed value: -"Progress Omitted"
    • removedOutput schema / properties / recovery / title
      Removed value: -"Recovery"
    • removedOutput schema / properties / run_id / title
      Removed value: -"Run Id"
    • removedOutput schema / properties / schema_version / title
      Removed value: -"Schema Version"
    • removedOutput schema / properties / session_state / title
      Removed value: -"Session State"
    • removedOutput schema / properties / stages / title
      Removed value: -"Stages"
    • removedOutput schema / properties / status / title
      Removed value: -"Status"
    • removedOutput schema / title
      Removed value: -"AgentResult"
  3. Changed14 schema fields changedv0.5.2
    • addedOutput schema / properties / data
      Added value: +{
      +  "additionalProperties": true,
      +  "title": "Data",
      +  "type": "object"
      +}
    • addedOutput schema / properties / error_code
      Added value: +{
      +  "anyOf": [
      +    {
      +      "type": "string"
      +    },
      +    {
      +      "type": "null"
      +    }
      +  ],
      +  "title": "Error Code"
      +}
    • addedOutput schema / properties / operation
      Added value: +{
      +  "title": "Operation",
      +  "type": "string"
      +}
    • addedOutput schema / properties / progress_delivery_failed
      Added value: +{
      +  "default": false,
      +  "title": "Progress Delivery Failed",
      +  "type": "boolean"
      +}
    • addedOutput schema / properties / progress_omitted
      Added value: +{
      +  "default": 0,
      +  "title": "Progress Omitted",
      +  "type": "integer"
      +}
    • addedOutput schema / properties / recovery
      Added value: +{
      +  "items": {
      +    "type": "string"
      +  },
      +  "title": "Recovery",
      +  "type": "array"
      +}
    • removedOutput schema / properties / result
      Removed value: -{
      -  "title": "Result",
      -  "type": "string"
      -}
    • addedOutput schema / properties / run_id
      Added value: +{
      +  "anyOf": [
      +    {
      +      "type": "string"
      +    },
      +    {
      +      "type": "null"
      +    }
      +  ],
      +  "title": "Run Id"
      +}
    • addedOutput schema / properties / schema_version
      Added value: +{
      +  "const": 1,
      +  "default": 1,
      +  "title": "Schema Version",
      +  "type": "integer"
      +}
    • addedOutput schema / properties / session_state
      Added value: +{
      +  "title": "Session State",
      +  "type": "string"
      +}
    • addedOutput schema / properties / stages
      Added value: +{
      +  "items": {
      +    "type": "string"
      +  },
      +  "title": "Stages",
      +  "type": "array"
      +}
    • addedOutput schema / properties / status
      Added value: +{
      +  "enum": [
      +    "completed",
      +    "error"
      +  ],
      +  "title": "Status",
      +  "type": "string"
      +}
    • changedOutput schema / required
      Previous value: -[
      -  "result"
      -]New value: +[
      +  "operation",
      +  "status",
      +  "session_state",
      +  "run_id",
      +  "error_code"
      +]
    • changedOutput schema / title
      Previous value: -"upload_fileOutput"New value: +"AgentResult"
  4. Addedv0.5.1

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and openWorldHint=true, so the safety profile is covered. The description adds real value beyond that by disclosing that hidden inputs are targeted and that paths must reside in approved file roots — a permission/constraint detail not present in the annotations or schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences with the core action front-loaded and the constraint following. No filler or redundant restatement of the tool name.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described. But for a destructive write tool with two fully undocumented parameters, the definition leaves out what 'description' does, how many files can be attached, and what happens on overwrite or failure.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must carry the load. It clarifies the 'paths' parameter with the approved-roots constraint, but the required 'description' parameter is never mentioned and its meaning is entirely opaque, as is the expected format of the paths array.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Attach') and resource ('local files to a matching file input'), plus a scope detail ('including hidden inputs') that separates it from visible-element interactions. It doesn't explicitly name a sibling like type_into or select_into as the alternative, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'matching file input' implies this applies only when a file input exists, and the approved-roots constraint gives a precondition. However, there is no explicit guidance on when to prefer this over type_into or select_into, nor any statement of failure conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.