Skip to main content
Glama
walletap

@walletap/mcp-server

Official
by walletap

upload_file_from_url

Destructive

Fetch a public image URL, validate it, and store it for use in Wallet pass templates, returning a file ID for image fields.

Instructions

Fetch a public image URL, validate it, and store it in Walletap-managed storage. Returns a file_… id you can reference inside a template's pass design as { "fileId": "file_…" } on any image field (logo, hero, icon, strip, background, stamp, thumbnail). When purpose is supplied the server generates 1×/2×/3× variants at Apple Wallet spec dimensions. Max source size 10 MiB. Accepts PNG, JPEG, WebP, SVG, AVIF, HEIC, GIF, TIFF and ICO; anything with a wallet purpose is transcoded to PNG. Source URLs that resolve to private / loopback IPs are refused (SSRF protection).

USE A URL YOU HAVE ACTUALLY SEEN — one the user gave you, or one you read out of the page you fetched. Do not construct a plausible-looking asset URL from a brand name: guessed Wikimedia and logo-CDN paths are the single most common cause of failure here. If the fetch reports that the source returned 404, the URL is wrong — find a different one rather than retrying, and ask the user for the image if you cannot.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlYesPublic HTTP(S) URL of the source image.
purposeNoDrives server-side resizing presets. Use template_logo / template_hero / etc. Omit to store the original as-is with no variants.
templateIdNoOptional — scope this file to a template for organization.
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations provide destructiveHint=true, but the description does not contradict it; it simply adds rich behavioral context beyond annotations: SSRF protection (refusing private/loopback IPs), max source size (10 MiB), accepted formats, transcoding to PNG when purpose is supplied, and generation of 1x/2x/3x variants. It also discloses the direct-use warning about URL provenance. This fully discloses behavior beyond what annotations offer.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured and front-loaded with the core action and return value. The second paragraph is a crucial warning about URL usage, which, while verbose, directly prevents the most common failure. No sentence is redundant; it is detailed but appropriately organized for the complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 3 parameters and no output schema, this description is exceptionally complete. It explains the return value (file id and usage in templates), parameter behaviors (variants, transcoding), constraints (size, formats, SSRF), failure handling (404 guidance), and provides practical usage guidance. Nothing an agent needs to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds meaningful semantics beyond schema: for 'url' it specifies public HTTP(S), size limit, and SSRF refusal; for 'purpose' it explains that variants are generated and transcoding occurs. 'templateId' is succinctly described as scoping for organization. While not exhaustive for every edge case, it substantially enhances parameter understanding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Fetch', 'validate', 'store'), names the resource ('public image URL', 'Walletap-managed storage'), and explains the return value (file id). It clearly distinguishes from sibling tools like get_file, delete_file, and list_templates by describing the unique upload-from-URL operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is explicit guidance on when to use the tool (when you have a user-provided or fetched URL) and clear exclusions: 'Do not construct a plausible-looking asset URL from a brand name' and 'if the fetch reports 404, find a different one rather than retrying'. This directly addresses common failure modes and instructs the agent on appropriate alternatives (ask the user), leaving no ambiguity about invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/walletap/walletap-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server