Skip to main content
Glama
tokportal

tokportal-mcp

Official

tokportal_reveal_account_credentials

Retrieve saved account credentials by providing a versioned policy acknowledgment. Credits apply based on account creation date.

Instructions

Reveal delivered account credentials. The first credential or verification-code access is priced from this saved account's created_at timestamp against the immutable managed_pricing_new_customer_cutover_at value, never from the workspace action-pricing cohort or August 14 grace deadline. A saved account created before the cutoff permanently keeps the prior API contract: the reveal costs 0 credits, requires no new versioned acknowledgment body, and is irreversible; support and ban coverage end, but the account is not detached and existing TokPortal task access remains available. A saved account created at or after the cutoff follows the managed policy and requires the explicit versioned acknowledgment handshake: normally 150 credits, or the stored $10 legacy / $15 new per-30-day rate when Account Owning is already admin-approved. Crossing the Account Owning eligibility threshold only submits an admin review request and never activates it automatically. While approval is pending, reveal remains available for 150 credits on a post-cutoff account. Under the managed policy the charge is final and non-refundable, and reveal permanently detaches the account, makes it read-only, and ends TokPortal Coverage, all task access, analytics updates, support, ban protection, replacement, refunds, compensation and credit restoration. TokPortal is not responsible for later access, performance, reach, security, restrictions or bans. The debit or Account Owning activation, reveal marker and Coverage shutdown commit atomically. Previously revealed accounts are not charged a second time. Do not send Idempotency-Key: this response contains credentials and is never stored in the replay ledger. A request that includes the header is rejected before any ledger claim, reveal, debit, or secret access with IDEMPOTENCY_KEY_NOT_ALLOWED_FOR_SENSITIVE_RESPONSE (400). After an uncertain transport result, fetch the safe account state before deciding whether to call this endpoint again without the header.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
idYesSaved account ID.
bodyNoJSON request body.
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description explicitly states that revealing credentials is irreversible, permanently detaches the account, makes it read-only, and ends coverage—clear destructive side effects. However, the annotation destructiveHint: false contradicts this. According to instructions, any contradiction yields a score of 1. The description adds some behavioral context (atomicity, idempotency restrictions) but the core contradiction overrides.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single block of dense text exceeding 300 words. While it contains valuable information, it is not concisely structured for quick agent consumption. The first sentence states purpose, but the rest is a legal-like wall of policy details. Bullet points or sections would vastly improve readability and efficiency.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite no output schema, the description covers return format (credentials in response, not stored), error codes (400, 409, 428), idempotency rules, pricing, and side effects in detail. It is comprehensive for a high-complexity tool, though the structure hinders quick comprehension. It virtually covers all necessary contextual information.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline is 3. The description adds value beyond the schema by explaining the implications of policy_version (missing returns 428, stale returns 409 with new quote) and clarifying that acknowledge_support_forfeit is ignored after first reveal. This enriches the agent's understanding of parameter behavior.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Reveal delivered account credentials' which is a specific verb and resource. It distinguishes itself from siblings like tokportal_retrieve_account_verification_code by focusing on full account credentials rather than just verification codes, though it does not explicitly contrast itself. The purpose is clear and unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides extensive detail on when the tool can be used (first access vs. repeated access, cutoff dates, pricing tiers) but does not explicitly state when to use this tool vs. alternatives. It lacks guidance on prerequisites (e.g., needing a saved account ID) and does not mention when not to use it. The context of when to invoke the tool is implied but not directly addressed.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/tokportal/tokportal-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server