Skip to main content
Glama
ni-c

woodpecker-ci-mcp

by ni-c

Update a user

update_user
DestructiveIdempotent

Change a Woodpecker CI user's role and details: grant admin control or update email while preserving untouched fields. Requires admin privileges; a confirm token is needed to grant admin access.

Instructions

Changes an account. Admin only. The one that matters is "admin": granting it gives full control of the instance, including every secret of every repository. Fields you do not pass are preserved.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
adminNoInstance administrator. Grants access to every repository, secret and agent on the server. Granting it needs a confirm_token.
emailNo
loginYesThe account login as it is spelled in the forge.
forge_idYesWhich forge the login belongs to. Required by the API — a login is only unique per forge. list_users shows it; on a single-forge instance it is 1.
confirm_tokenNoToken from a previous call of this tool.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
truncatedNoPresent only when the answer was shortened to fit the budget.

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. First observedv0.2.0

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations, the description discloses that granting admin grants full instance control including every repository secret, and that omitted fields are preserved. This is exactly the kind of side-effect context an agent needs before invoking a destructive, admin-only mutation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences with the core action first, followed by a prerequisite and the two most important behavioral notes. No fluff or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter mutation tool with an output schema and annotations, the description covers the action, restrictions, and critical risk. The confirm_token requirement and parameter meanings are already in the schema, so the context is nearly complete, though it could have listed the updatable fields for even faster agent comprehension.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 80%, so the schema carries most parameter documentation. The description adds value by highlighting 'admin' as the critical parameter and by stating the partial-update semantics ('Fields you do not pass are preserved'), which is not inferable from the schema alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear action ('Changes an account') on a user resource, which aligns with the tool name and title. It does not explicitly differentiate from sibling update tools like update_forge or update_agent, so it misses the top score.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives a prerequisite ('Admin only') and implies partial-update usage via 'Fields you do not pass are preserved,' but it never states when to choose this tool over create_user/get_user/delete_user or other update tools. Usage context is implied rather than explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/ni-c/woodpecker-ci-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server