Skip to main content
Glama

Update qURL Token

update_qurl_token

Update token-level settings—expiration, label, access policy, max sessions, or session duration—for a single qURL token without changing sibling tokens or resource metadata.

Instructions

Update one qURL token under a resource: expiration, label, access policy, max sessions, or session duration. Use this when you need to change a specific q_… token without changing sibling tokens or resource-level metadata. Use update_qurl instead for resource-level description/tags/custom-domain changes, and use revoke_qurl_token when the token should stop working entirely. Constraints: extend_by and expires_at are mutually exclusive; at least one token update field must be set. Returns the updated token summary.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
labelNoHuman-readable label for this token
qurl_idYesThe qURL display ID (q_ prefix) to update.
extend_byNoDuration to extend this token by (e.g., "24h", "7d"). Mutually exclusive with expires_at.
expires_atNoAbsolute token expiration timestamp (RFC 3339). Mutually exclusive with extend_by.
resource_idYesThe resource public key, CRID, or legacy r_ ID to update a specific qURL token under.
max_sessionsNoMaximum concurrent sessions for this token (0 = unlimited, max 1000)
access_policyNoReplace the access policy for this token
session_durationNoHow long access lasts after clicking (e.g., "1h"). Empty string applies the parent resource cap when one is set.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
labelNo
statusYesPer-token status (wider than resource status — tokens may be consumed/expired independently)unknown
qurl_idYes
qurl_siteNo
use_countNo
created_atNo
expires_atNo
max_sessionsNo
one_time_useNo
access_policyNoAccess control policy snapshot for this token
session_durationNoSeconds of access granted after a successful resolve

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv0.2.1

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already flag this as a mutating, non-idempotent, non-destructive operation, so the description adds value by disclosing key invariants: `extend_by` and `expires_at` are mutually exclusive, at least one token update field must be set, and the operation returns the updated token summary. This goes beyond what annotations alone provide, though details like access-policy replacement semantics are only implied and left to the schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded: it opens with the action and scope, then provides routing guidance, then lists constraints in a clearly labeled block. Every sentence earns its place, and the structure makes it easy for an agent to scan and act on.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With eight parameters, nested access-policy objects, and a rich sibling set, the description covers the core invocation context—what to update, when to use it, which siblings to prefer, and key constraints. The output schema relieves it from detailing return values. It could have explicitly stated that `access_policy` replaces the entire policy, but the schema's field description already communicates this.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds meaningful semantic constraints not derivable from the schema's `required` array alone—that at least one token-update field must be supplied and that `extend_by` and `expires_at` cannot be combined. It also groups the updateable fields, helping an agent understand the intent of the parameter set.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description states a precise action—'Update one qURL token under a resource'—and enumerates the mutable fields: expiration, label, access policy, max sessions, or session duration. It explicitly differentiates from siblings by contrasting with `update_qurl` and `revoke_qurl_token`, making the tool's scope unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides a direct when-to-use condition: 'Use this when you need to change a specific `q_…` token without changing sibling tokens or resource-level metadata.' It also names alternatives and the exact conditions that select them: use `update_qurl` for resource-level changes, and `revoke_qurl_token` when the token should stop working entirely.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.