Skip to main content
Glama
clidey

whodb-cli

Official
by clidey

whodb_platform_confirm

Destructive

Execute a pending WhoDB platform write using its confirmation token after user approval. Validates the token, applies the queued change, and uploads files at execution time.

Instructions

Confirm and execute a pending hosted WhoDB platform write.

Use the confirmation_token returned by hosted platform write tools. Tokens expire after 5 minutes. Only call this after the user has approved the pending write preview. The token does not independently prove human approval: the MCP host must enforce approval if that guarantee is required. For uploads, review the full local source path and destination; the file is read at execution time, not snapshotted when the preview is created. Accepts workspace {host, org, project} for per-call targeting without changing defaults.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
tokenYesConfirmation token from a previous whodb_query or hosted platform write response
workspaceNoOptional target for this call only. Omit to use the session default set by whodb_platform_session_use, then process/saved defaults. Discover targets with whodb_platform_hosts, whodb_platform_orgs and whodb_platform_projects.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
rowsYes
errorNo
scopeNo
columnsYes
messageNo
commandsNo
workspaceNoOptional target for this call only. Omit to use the session default set by whodb_platform_session_use, then process/saved defaults. Discover targets with whodb_platform_hosts, whodb_platform_orgs and whodb_platform_projects.
next_stepsNo
request_idNo
column_typesNo
setup_statusNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv0.135.0

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already flag destructive/non-idempotent/openWorld, and the description layers on real extra context: 5-minute token expiry, the caveat that the token does not itself prove human approval, and that uploads are read at execution time rather than snapshotted. These are exactly the non-obvious behaviors an agent needs before executing a write.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action, then gated workflow, expiry, approval caveat, and upload detail in short sentences. Dense but each sentence carries distinct weight; only the trailing workspace sentence is somewhat redundant with the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and rich annotations, the description needn't explain returns. It covers the lifecycle (token source, expiry), the approval precondition, and the upload timing nuance, which is complete for a confirm-and-execute gate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so both the token and the workspace object are already documented in the schema (including 'does not change the default host'). The description's workspace note largely restates the schema; its added value on the token (expiry, provenance) is behavioral rather than semantic, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb pair ('Confirm and execute') and a specific resource ('pending hosted WhoDB platform write'), which is clearly distinct from siblings like whodb_platform_pending or whodb_platform_action. It does not explicitly name an alternative tool, so it stops short of full sibling differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly conditions invocation: use the token from a prior write tool, and only call after the user has approved the pending preview. This is a clear when-to-call rule with an enforced workflow gate, leaving little to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools