Skip to main content
Glama
Storno CLI

Storno CLI

Official
by stornoro

auth_update_profile

Update the authenticated user's profile details—name, phone, timezone, quiet-hours, and preferences—or change the password by supplying the current password.

Instructions

Update the authenticated user's profile. Can update name, phone, timezone, quiet-hours preference, preferences, or change password (requires currentPassword when changing password).

Input Schema

NameRequiredDescriptionDefault
phoneNoPhone number (E.164 format recommended, e.g., +40721234567)
lastNameNoUser's last name
passwordNoNew password (requires currentPassword to also be provided)
timezoneNoTimezone in IANA format (e.g., Europe/Bucharest)
firstNameNoUser's first name
preferencesNoUser preferences object (language, theme, notifications, etc.)
currentPasswordNoCurrent password (required when changing password)
respectQuietHoursNoMute push notifications between 22:00 and 08:00 local time (defaults to true)

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.0.17

TDQS

B3.2/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=false, idempotentHint=false, destructiveHint=false, so the safety profile is covered externally. The description adds only the conditional requirement that currentPassword be supplied with password, which is already in the schema; it says nothing about whether omitted fields are preserved (partial update semantics), whether a password change invalidates sessions, or what permissions/auth state are required.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the action and object, followed by the updatable surface and the one conditional rule. Tight and readable, though the field enumeration duplicates schema content rather than adding new information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an 8-parameter mutation with a nested object and no output schema, the description covers what can be changed but not the important semantics: whether this is a partial or full replace, what happens to unlisted fields, or what is returned. Adequate as a pointer, incomplete as a contract.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so every one of the 8 parameters is already documented, including the currentPassword/password pairing and the quiet-hours default. The description's field list largely restates the schema, and it says nothing about the nested preferences object's expected keys or merge behavior. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: updating the authenticated user's own profile, and enumerates which fields can change. It implicitly disambiguates from members_update (other users) and notification_preferences_update, but never names those siblings explicitly, so an agent must infer the boundary.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'authenticated user's profile' implies it should be used for self-service edits rather than admin edits of other members. There is no explicit when-to-use/when-not guidance and no mention of the alternative tools, leaving the choice to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools