Skip to main content
Glama

provider_grant_device_authorization

Grants a device authorization request using a user code, enabling a service account to obtain an access token through subsequent device-code polling.

Instructions

Grants a device authorization request Grants access to service account identified by the specified user code. Subsequent polling by the device will result in access token to be transmitted as per device code flow specification POST /cloudapi/1.0.0/deviceLookup/grant

Input Schema

NameRequiredDescriptionDefault
bodyYesDevice information for device authorization requests.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.2.0

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare that this is a non-read-only, non-idempotent, open-world operation. The description adds meaningful behavioral context beyond annotations: access is granted to a service account, and subsequent device polling will transmit an access token according to the device code flow specification.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded with the main action. It does contain some redundancy, since the first sentence largely restates the tool name and the second repeats 'Grants access,' but it remains efficient overall.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with no output schema, the description gives enough context about the device code flow and the resulting token transmission. It does not mention permission requirements, error behavior, or explicitly contrast with deny/find tools, so it is strong but not fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the userCode parameter is already well documented in the schema. The description references the specified user code but does not add syntax, format, or validation details beyond what the schema provides, making the baseline score of 3 appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: granting a device authorization request. It also clarifies that access is granted to the service account identified by the user code, which distinguishes it from sibling operations such as provider_deny_device_authorization and provider_find_device_authorization_request.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The device code flow context implies this is used after a device authorization request has been created and when a user code is available. However, the description does not explicitly say when to use this instead of deny, find, or other device authorization-related tools, so usage guidance is implied rather than explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools