Skip to main content
Glama
doitintl

DoiT MCP Server

Official
by doitintl

create_account_role

Destructive

Creates or updates a CloudConnect document for an AWS account by providing the IAM role ARN and declaring which features to enable. Supports optional S3 bucket configuration for real-time anomaly detection.

Instructions

Manage cloud provider connections and check feature availability for connected accounts. Creates or updates a CloudConnect document for an AWS account. Unlike the CloudFormation variant, this endpoint does not update Firestore channel documents or require a CloudFormation stack ID.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
roleArnYesThe ARN of the IAM role created for DoiT access.
s3BucketNoS3 bucket name for CloudTrail real-time anomaly detection. Required together with s3BucketRegion.
accountIDYesThe AWS account ID.
s3BucketRegionNoAWS region of the S3 bucket. Required together with s3Bucket.
customerContextNoScope the request to a specific customer by ID. Required for DoiT employees (whose token isn't tied to a single customer); omit for direct customer users.
enabledFeaturesYesDeclares which supported AWS features the caller intends to enable. Values must match feature names configured in awsFeaturePermissions on app/cloud-connect. The value is persisted and returned in account responses. When "real-time-data" is included, s3Bucket and s3BucketRegion are required; when it is not included, s3Bucket and s3BucketRegion are not allowed.
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds a couple of behavioral details beyond annotations: it does not update Firestore channel documents and does not require a CloudFormation stack ID. The annotations already indicate destructive and open world behavior. The description could be improved by mentioning side effects, permissions required, or rate limits, but the provided details are helpful.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, but the first sentence is overly broad ('Manage cloud provider connections and check feature availability') and could be misleading. The core action is in the second sentence. A more concise, front-loaded description would improve clarity. The current structure is adequate but not optimal.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that there is no output schema, the description should explain what the tool returns (e.g., the created/updated document). It also does not define what a CloudConnect document is, nor does it elaborate on 'check feature availability.' The tool has 6 parameters and annotations indicating destructive behavior, but the description lacks details on the expected outcome and broader context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% parameter description coverage, so the schema itself documents each parameter's meaning and constraints. The tool description does not elaborate on parameters beyond what the schema provides. It mentions 'check feature availability' which could relate to enabledFeatures, but this is not explicit. Therefore, the description adds minimal value in this dimension.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states that the tool creates or updates a CloudConnect document for an AWS account. The verb 'creates or updates' and the resource 'CloudConnect document' are specific. However, the first sentence 'Manage cloud provider connections and check feature availability' is vague and not directly aligned with the tool's primary action. It differentiates from a CloudFormation variant but not from sibling tools like delete_account_role or update_aws_feature.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides a comparison to the CloudFormation variant, noting that this endpoint does not update Firestore channel documents or require a CloudFormation stack ID. This offers some context for choosing this tool over an alternative. However, it does not explicitly state when to use this tool versus other account role management tools (e.g., delete_account_role), nor does it mention prerequisites or typical scenarios.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/doitintl/doit-mcp-server'

If you have feedback or need assistance with the MCP directory API, please join our Discord server