Skip to main content
Glama

grocy_user_permissions

DestructiveIdempotent

Manage Grocy user permissions by retrieving a user's access list, adding a permission, or replacing the full list; write actions require confirmation.

Instructions

User permissions. action get is GET /api/users/{userId}/permissions. add is POST one permissions_id. replace is PUT the full list. Writes need confirm.

Input Schema

NameRequiredDescriptionDefault
actionYesget lists permissions. add posts one permissions_id. replace overwrites the list.
confirmNoSet to the boolean true to execute the write. Omit this field for a dry-run preview. false and the string true are rejected.
user_idYesUser id.
permissionsNoRequired for replace.
permissions_idNoRequired for add.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true, idempotentHint=true, and readOnlyHint=false, so safety is largely covered. The description adds genuinely useful context beyond them: 'Writes need confirm' signals a confirmation gate, and the verb mapping clarifies that replace overwrites while add appends.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded and free of padding, with each clause mapping an action to its semantics. It is telegraphic to the point of terseness ('add is POST one permissions_id'), but every sentence carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 100% schema coverage, annotations carrying the safety profile, and the confirm gate documented in the schema, the definition is complete enough to call correctly. The only minor gap is no explicit sibling differentiation or return-value guidance (no output schema).

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so each parameter is already documented (action enum, confirm, permissions, permissions_id). The description only lightly ties 'add is POST one permissions_id' to the param; baseline 3 is appropriate when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States the resource ('User permissions') and maps each of the three actions to its underlying HTTP endpoint, so an agent can tell what each mode does. It doesn't explicitly contrast with sibling tools like grocy_users_list/update, but the resource is distinct enough to be unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The endpoint mapping implies when to pick add (single id) vs replace (full list), but this is largely restated by the action enum in the schema. There are no explicit when-not-to-use conditions or alternatives, so guidance is implied rather than spelled out.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.