Skip to main content
Glama
darthzen

fossa-mcp

by darthzen

fossa_update_issues

Destructive

Manage FOSSA issues in bulk: ignore, unignore, unlink, or create durable exceptions, targeting either specific issue IDs or filtered issue sets.

Instructions

Ignore, unignore, unlink, or create a reusable exception for a set of issues.

WRITES TO FOSSA. Requires FOSSA_ALLOW_WRITES=true, and additionally FOSSA_ALLOW_DESTRUCTIVE=true when issue_ids is omitted.

Passing issue_ids acts on exactly those issues. Omitting it acts on every issue matching the filters, a set the caller cannot see in advance, so that form is gated at the destructive tier and requires a project scope or at least one filter. Run fossa_list_issues with the same arguments first to see what will be affected.

The issueException action creates a durable ignore rule rather than a one-off ignore; package_scope, ignore_scope, expires_after, and license_id only apply to it. Ticket export is not offered by this tool.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
cwesNo
notesNo
actionYes
depthsNo
reasonNo
searchNo
statusNoactive
categoryYes
licensesNo
severityNo
issue_idsNo
license_idNo
scope_typeNoglobal
found_afterNo
issue_typesNo
ignore_scopeNo
revision_idsNo
expires_afterNo
package_scopeNo
project_labelsNo
project_locatorNo
severity_sourceNo
package_managersNo
revision_locatorNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already signal destructive and non-read-only behavior, but the description adds substantial context: the FOSSA_ALLOW_WRITES and FOSSA_ALLOW_DESTRUCTIVE environment requirements, the broad 'every issue matching the filters' behavior when issue_ids is omitted, and the durable-rule distinction for issueException. It also warns that the affected set is not visible in advance, which is exactly the kind of behavioral trait an agent needs. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and well-structured, front-loading the action set and using short paragraphs for safety requirements, selection semantics, and exception-specific constraints. Every sentence adds new information—no filler, no repetition of schema fields or annotations.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex 24-parameter destructive mutation tool, the description covers the critical selection-destructive behavior, required environment variables, the preview workflow, and action-specific parameter constraints. Since an output schema exists, return-value details are not necessary, and the description provides sufficient context to invoke the tool safely and correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage, the description compensates for the most critical parameters: it clarifies issue_ids (exact vs. omitted set), and maps package_scope, ignore_scope, expires_after, and license_id to the issueException action. It also tells the agent to use the same filter arguments as fossa_list_issues, which offloads semantics to a sibling. However, many of the 24 filter parameters are not individually described, so the compensation is incomplete.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb phrase: 'Ignore, unignore, unlink, or create a reusable exception for a set of issues,' naming the exact actions and resource. It also distinguishes this tool from siblings by clarifying the durable exception behavior and explicitly excluding ticket export, so the agent knows what this tool does and does not do.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly tells the agent to run fossa_list_issues with the same arguments first to preview the affected set, and clearly states when the destructive gate applies (FOSSA_ALLOW_DESTRUCTIVE required when issue_ids is omitted). It also explains that issueException-specific parameters only apply to that action and that ticket export is not offered, providing direct when-not-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/darthzen/fossa-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server