Skip to main content
Glama

Create an approved Sieve filter

create_sieve_filter
Destructive

Applies a user-approved Sieve filter preview by token; Proton Mail Bridge refuses and changes nothing, so use the preview script or add_rule instead.

Instructions

Create the previewed Proton Sieve filter; only call after explicit approval of its preview. With Proton Mail Bridge, the backend this server uses, it always refuses and changes nothing, so do not call it there.

Instead show the script from preview_sieve_filter for the user to add in Proton's own filter settings (Add sieve filter), or use preview_add_rule and add_rule for a rule this server applies. Proton Mail Bridge has no Sieve or filter interface and this server has no other apply path; the refusal comes before any form and leaves the token unused.

It takes only preview_sieve_filter's token. Where a backend could apply it, the user would confirm the exact script in the client's form, and it would add one filter that files later matching mail, never replacing or removing one, and return log_id.

Input Schema

NameRequiredDescriptionDefault
tokenYesSingle-use token from the preview the user approved.

Output Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: it discloses that the Bridge backend always refuses before any form and leaves the token unused, that the operation adds exactly one filter and never replaces or removes one, and that it returns log_id. The destructiveHint=true annotation is conservative rather than contradicted, since the text clarifies the additive, non-removing semantics.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The critical guidance is front-loaded, but the Bridge refusal is restated across three separate sentences ('always refuses and changes nothing', 'Proton Mail Bridge has no Sieve or filter interface', 'the refusal comes before any form'), which is redundant for a one-parameter tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-token mutation tool with an output schema, the description covers preconditions, backend limitations, side effects, and the return value. Nothing an agent needs to decide whether and how to call it is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single token parameter is already documented, so the baseline is 3. The description adds real meaning beyond the schema: the token is single-use, must come from the approved preview, and is left unused if the call is refused.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Create the previewed Proton Sieve filter') and immediately ties it to the sibling that produces its input (preview_sieve_filter). An agent can distinguish it from preview_sieve_filter, preview_add_rule, and add_rule without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit precondition ('only call after explicit approval of its preview'), an explicit when-not ('with Proton Mail Bridge ... it always refuses ... do not call it there'), and named alternatives (show the preview script, or preview_add_rule + add_rule). This is the full when/when-not/alternative triad.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.