Skip to main content
Glama
hermoso-ai

Hermoso

Official

Connect a paste-a-key account

connect_connector
DestructiveIdempotent

Connect key-based accounts without a browser by passing a provider and its required fields. Validates the key live with the provider before saving, and supports OAuth alternatives via sign-in links.

Instructions

Connect an account that links with a KEY rather than a sign-in screen, from here, with no browser: AppLovin Ads, Stripe, Intercom, Vercel, ChatGPT Ads, Apple Ads, Bluesky, Telegram, Bing Webmaster Tools, PostHog, Mixpanel, Amplitude, Slack, Discord, Webhook. Pass provider and fields in that provider's own field names (listed below, * = required). The key is checked live with the provider before anything is saved, exactly as the app's Connectors page checks it, and the reply is read back from the saved connection. OFFER BOTH WAYS AND LET THE USER CHOOSE: a key pasted into this chat stays in this conversation's history, while pasting it in the app (Workspace > Connectors, or the one-click link https://app.hermoso.ai/?connect=) keeps it out of the chat. Hermoso never repeats a submitted key back. An account that connects through the provider's own sign-in screen (OAuth) cannot be connected here: this answers with the link to hand the user instead. Apple Ads with no key material first generates a signing key pair and returns the public key to register with Apple plus a setupToken to send back. Fields: applovin_ads {reportKey, eventKey, apiKey, capiKey, accountId} · stripe {apiKey*} · intercom {accessToken*, region} · vercel {token*, team} · openai_ads {apiKey*} · apple_ads {clientId, teamId, keyId, privateKey, setupToken, orgId} · bluesky {identifier*, appPassword*, pds} · telegram {token*} · bing_webmaster {apiKey*} · posthog {apiKey*, region, host, projectId} · mixpanel {username*, secret*, projectId*, region, workspaceId} · amplitude {apiKey*, secretKey*, region, host} · slack {webhookUrl*} · discord {webhookUrl*} · webhook {webhookUrl*}.

Input Schema

NameRequiredDescriptionDefault
fieldsNothat provider's own field names and values, e.g. {"apiKey":"…"}; the names for each provider are in the description
providerYesthe connector id: applovin_ads, stripe, intercom, vercel, openai_ads, apple_ads, bluesky, telegram, bing_webmaster, posthog, mixpanel, amplitude, slack, discord, webhook

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changedv0.1.435
    • changedInput schema / properties / provider / description
      Previous value: -"the connector id: applovin_ads, stripe, vercel, openai_ads, apple_ads, bluesky, telegram, bing_webmaster, posthog, mixpanel, amplitude, slack, discord, webhook"New value: +"the connector id: applovin_ads, stripe, intercom, vercel, openai_ads, apple_ads, bluesky, telegram, bing_webmaster, posthog, mixpanel, amplitude, slack, discord, webhook"
  2. Changed1 schema field changedv0.1.410
    • changedInput schema / properties / provider / description
      Previous value: -"the connector id: applovin_ads, stripe, openai_ads, apple_ads, bluesky, telegram, bing_webmaster, posthog, mixpanel, amplitude, slack, discord, webhook"New value: +"the connector id: applovin_ads, stripe, vercel, openai_ads, apple_ads, bluesky, telegram, bing_webmaster, posthog, mixpanel, amplitude, slack, discord, webhook"
  3. Changed1 schema field changedv0.1.374
    • changedInput schema / properties / provider / description
      Previous value: -"the connector id: stripe, openai_ads, apple_ads, bluesky, telegram, bing_webmaster, posthog, mixpanel, amplitude, slack, discord, webhook"New value: +"the connector id: applovin_ads, stripe, openai_ads, apple_ads, bluesky, telegram, bing_webmaster, posthog, mixpanel, amplitude, slack, discord, webhook"
  4. Addedv0.1.243

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly=false, destructive=true, openWorld=true, idempotent=true, but the description adds substantial behavior beyond them: live key validation with the provider before anything is saved, read-back of the reply from the saved connection, the guarantee that Hermoso never echoes a submitted key, the credential-exposure tradeoff of pasting into chat vs. the app, and the special Apple Ads keypair/setupToken flow. These are real operational facts an agent needs and they are not derivable from the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and provider list are front-loaded and almost every sentence carries operational weight, so there is little padding. The weakness is formatting: a single ~250-word paragraph buries the agent directive ('OFFER BOTH WAYS...') and the field inventory mid-block, which hurts scannability, but the content itself earns its place given the tool's complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description still covers outcomes (live check, saved-connection read-back, OAuth fallback link, Apple Ads keypair plus setupToken send-back) and the security expectations. For a 2-parameter but highly variant, open-world mutation tool with nested free-form fields, an agent has everything needed to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is already 100%, but the schema only offers a free-form 'fields' object; the description supplies the actual per-provider field names and marks required ones with '*' (e.g. mixpanel {username*, secret*, projectId*, region, workspaceId}), which is the only place that contract exists. This adds decisive meaning well beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence gives a specific verb (connect), a precise resource (an account that links with a KEY rather than a sign-in screen), and the modality (from here, no browser) that separates it from OAuth flows. It also enumerates the exact providers supported, so an agent knows immediately whether this tool applies to the user's request.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-not routing is present: 'An account that connects through the provider's own sign-in screen (OAuth) cannot be connected here: this answers with the link to hand the user instead.' It also gives an explicit agent instruction ('OFFER BOTH WAYS AND LET THE USER CHOOSE') and the alternative path (Workspace > Connectors or the one-click link). Nothing about selection is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools