Skip to main content
Glama
z0nam

worksmobile-mcp

by z0nam

worksmobile-mcp

非官方 NAVER WORKS (LINE WORKS) Drive 管理 CLI + MCP 服务器,基于开发者 API 的服务账号委派(JWT delegated_user)构建。

现有的 WORKS MCP 服务器专注于最终用户层面(通过 User OAuth 访问你自己的邮件/日历/文件)。本项目覆盖它们所不具备的管理层面:

  • 通过委派以租户中任何成员的身份操作(类似 Google 全域委派)

  • 共享驱动器治理:列出驱动器,检查 accessibleRange/permissionType,授予/撤销驱动器和文件夹级权限,切换文件夹继承(enable/disable

  • share-create(“与我共享”快捷方式)、My Drive 脚手架、上传/下载、搜索

  • 目录审计:账号卫生规则以及与外部名册的对账——找出仍拥有有效邮件/驱动器访问权限的前员工

与 NAVER / WORKS MOBILE Corp. 无关联。“NAVER WORKS”、“LINE WORKS”和 worksmobile.com 是其商标/财产。官方 API 文档:https://developers.worksmobile.com/

🙋 只想自己使用 WORKS?那这个工具不适合你。

如果你想让 AI 代理读取你自己的邮件、日历、驱动器或任务,请到此为止——参见 docs/END_USER_SETUP.md。该路径只需几分钟,不需要管理员权限,而且只会触及你自己的账号。

本项目面向租户管理员。它使用一个委派服务账号进行身份验证,该账号可以以组织中任何成员的身份操作,因此它需要的凭据是普通成员无法获取的。如果你的开发者控制台显示*“you do not have access”*,那不是需要解决的设置问题——而是边界按预期工作。

安全设计

🔑 在除自己机器以外的任何地方运行之前,请先阅读此内容

这不是按用户集成的工具。它所需的凭据是一个委派服务账号,可以以你租户中任何成员的身份操作——读取任何人的驱动器,更改任何人的共享设置。请像对待域管理员密钥一样对待私钥,因为它就是。

不要将这些凭据粘贴到第三方 MCP 托管、“install/deploy this server”按钮或托管检查器中,无论多么方便。这些会在别人的机器上运行服务器,而把此密钥交给他们就等于交出整个租户。本仓库的目录和市场列表是自动抓取的结果,不代表对任何部署模式的认可——本项目支持的唯一配置是在管理员自己的机器上运行本地 stdio

如果你确实需要 HTTP 传输,请将其绑定到 localhost,并在其前面加上真正的身份验证。这里的密钥泄露无法通过轮换密码来恢复:在开发者控制台撤销该密钥之前,持有者就是每一位员工。

WORKS Drive 权限 API 有不少坑。本工具将其固化:

  • 每个变更操作都需要明确确认 —— CLI:--yes(非交互式运行在没有它时会拒绝);MCP:confirm=true 参数。代理在设置之前应询问人类。

  • 批量权限删除(“all-delete”)完全不暴露 —— 其语义在 WORKS 各版本之间发生了翻转(仅限主管理员 vs 对所有人开放)。

  • 破坏性语义在工具文档中有明确说明:驱动器 accessibleRange 的 PATCH 转换会清除已授予的权限;文件夹 enable 会破坏继承;disable 会丢弃文件夹授权。

Related MCP server: synology-office-mcp

设置

  1. 开发者控制台中,创建一个具有服务账号委派的应用,记下 Client ID/Secret,创建服务账号,并下载私钥。授予 OAuth 范围(fileuser.read)。

  2. 配置凭据:

pip install worksmobile-mcp        # or: uv tool install worksmobile-mcp
mkdir -p ~/.config/worksmobile
cp .env.example ~/.config/worksmobile/.env   # then fill in values

配置解析顺序:进程环境变量(WORKS_*)> $WORKS_ENV_FILE > ./.env > ~/.config/worksmobile/.env

CLI

worksmobile doctor                              # what credentials/scopes actually work
worksmobile users --dept 연구                    # members (joint appointments preserved)
worksmobile find 홍길동                          # search by any substring
worksmobile audit --ignore shared-accounts.txt  # account-hygiene findings
worksmobile drift roster.tsv --name-col name    # reconcile against an external roster

worksmobile drives                              # list shared drives
worksmobile drive @2001000000xxxxxx             # accessibleRange / permissionType
worksmobile ls --sd @2001000000xxxxxx           # list files
worksmobile perms @2001000000xxxxxx --folder FID
worksmobile grant @2001000000xxxxxx --target pm@corp.com --type WRITE --folder FID --yes
worksmobile share FID --owner host@corp.com --to pm@corp.com --type WRITE --yes
worksmobile download FID --sd @2001000000xxxxxx -o report.hwp
worksmobile call GET /users/me/drive/files      # raw API escape hatch

所有读取命令都接受 --user someone@corp.com 参数,以该成员的身份操作。

MCP 服务器

stdio(本地代理——Claude Code、Codex、Cursor、Gemini CLI):

claude mcp add worksmobile -- worksmobile-mcp
{ "mcpServers": { "worksmobile": { "command": "worksmobile-mcp" } } }

Streamable HTTP —— 用于本地绑定的端点,并在前面加上你自己的身份验证,而不是交给托管提供商(参见顶部的提示框):

worksmobile-mcp --transport streamable-http --host 127.0.0.1 --port 8123

⚠️ 无论你选择哪种传输方式,该进程都持有租户级管理员凭据——请在你运行域管理员 shell 的地方运行它,而不是其他地方。

工具

工具

变更

描述

works_drives_list / works_drive_get

共享驱动器及设置

works_files_list

共享驱动器或成员 My Drive 中的文件

works_perms_list

驱动器/文件夹权限

works_perm_grant / works_perm_revoke

授予/删除一条权限

works_folder_enable / works_folder_disable

文件夹继承开关

works_file_download / works_file_upload

存储重定向下载 / 两步上传

works_folder_create

My Drive 文件夹

works_share_create / works_share_delete

“与我共享”快捷方式(仅 My Drive)

works_sharedfolders_list

成员收到的共享

works_search

驱动器搜索

works_users_list / works_user_find

租户成员(需要 user.read

works_directory_audit

账号卫生发现 + 休眠检查报告

works_directory_drift

对照外部名册对账账号

works_member_footprint

单个成员的完整触达范围——离职查询

works_api_call

原始 API 逃生舱

⚠ = 需要 confirm=true

目录审计:休眠检查

works_directory_audit 在返回 findings 的同时返回 dormant_rules。当某条规则读取的字段在整个租户中为空时,该规则即处于休眠状态——例如,如果没有任何人的 leaveOfAbsence 被设置过,“休假但未暂停”就永远不会触发。空的 findings 列表并不代表一切健康,因此该工具会说明哪些检查无能为力,而不是暗示所有检查都已通过。coverage 显示每个字段的填充率。

这在实践中很重要:在构建此工具所针对的租户上,employeeNumber 为 0/136,hiredDate 为 1/136——HR 字段根本没有被填充,而这正是审计工具必须告诉你、而不是掩盖的事情。

对账:不在某个名册中并不构成证据

works_directory_drift 返回 only_works——即在你传入的名册中没有记录的账号。那是一个信号,而不是离职的证明。 每个名册都会遗漏某些人群:HR 登记册可能完全不包含访问研究员;聊天目录无法容纳从未被分配企业邮件的人。把“不在此列表中”解读为“已离职”,正是导致在职员工账号被删除的原因——这确实发生过一次,也是该工具现在这样工作的原因。

传入 corroborating_rosters({label: path}),包含你拥有的所有其他名册。在其他地方找到的行会以 seen_in 填充的形式返回,应从怀疑列表中剔除。每个名册都按电子邮件、电话和姓名建立索引,因为没有任何单一键是足够的——在促成此设计的真实案例中,该成员的账号上没有电话,也没有企业邮件,因此只有姓名匹配。

一个值得了解的陷阱:通过去掉 82 来规范化韩国手机号是错误的。许多记录同时带有国家代码首位零(+82 010-…),因此仅去掉会得到 00…,什么都匹配不上——某个租户 40% 的号码都是如此。请使用 directory.norm_phone

blind_spots 涵盖更困难的情况:API 完全无法回答的问题。最棘手的是委派管理员——isAdministrator 仅对 SUPER 管理员为 true,因此控制台中作为子管理员的账号仍报告 false。仅凭此 API 枚举“谁拥有管理员权限”会静默遗漏他们;请在管理控制台中进行该操作。

离职流程:在暂停账号之前收集足迹

works_member_footprint 一次调用即可回答“此人能触达什么”。它编码了两件容易出错的事情:

  • 顺序。 先暂停账号是直觉上的做法,但这会破坏你调查的能力:对已暂停账号的委派会失败,因此他们的 My Drive 内容和收到的文件夹将无法访问。先收集,后暂停。

  • 驱动器 master 在 /permissions 中不可见。 它们位于共享驱动器对象的 masters[] 中。master 可以授予权限和更改驱动器设置,因此在交接中遗漏它们会使驱动器实际上处于无主状态——该工具会单独报告它们。

API 说明(来之不易的经验)

  • accessibleRange 有 3 个值:TENANT / DOMAIN / MEMBER。新驱动器默认为 DOMAIN+WRITE。PATCH 转换具有破坏性(MEMBER→DOMAIN 会删除所有授权;存在文件夹级授权时 →MEMBER 会失败)。

  • 文件夹级权限仅接受单个用户(不支持组织单元);目标用户必须已经是驱动器成员(未记录,观察所得)。

  • 文件夹 enable = 在授予之前仅限 master;disable = 丢弃授权,恢复继承。

  • share-create 仅适用于 My Drive 文件夹——团队驱动器文件夹无法生成“与我共享”快捷方式。

  • 纯服务账号令牌没有 My Drive(403);托管需要委派给真实账号。

  • 上传分两步(元数据 POST → uploadUrl PUT);下载是 302 重定向,其存储位置同样需要 Bearer 令牌。

  • GET /sharedrives 返回 {"sharedrives": [...]}(文档暗示是裸数组)。

许可证

MIT

Available Tools

16 tools
works_api_callB

Raw WORKS API escape hatch (path under https://www.worksapis.com/v1.0). Non-GET requires confirm=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
pathYes
userNo
methodYes
confirmNo
body_jsonNo

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must disclose behavioral traits. It mentions the base URL and the confirm flag for non-GET, but fails to describe side effects, authentication, error behavior, rate limits, or response format. For a tool that can perform arbitrary mutations, this is a significant omission, leaving the agent under-informed about the tool's full behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences and front-loads the core purpose. It is concise and every sentence adds value. However, it is perhaps too terse, lacking details that could be added without undermining conciseness. Still, structure is clean and efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is a generic raw API caller with 5 parameters, no annotations, and no output schema. The description only provides a base path and a confirm requirement. It omits crucial operational details like how to construct endpoints, expected response format, error handling, and when to use this tool versus the many sibling tools. This is inadequate for safe and correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must clarify parameters. It provides limited context for 'path' (relative to the base URL) and 'confirm' (needed for non-GET), but does not explain 'method', 'body_json', or 'user'. This is insufficient for a 5-parameter tool where the schema itself has no descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the tool as a raw API escape hatch for the WORKS API, with a specific base URL. This distinguishes it from the sibling tools, which are purpose-built for specific operations (e.g., works_drive_get, works_files_list) and makes the tool's role obvious.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The 'escape hatch' wording implies the tool is a fallback for when specific siblings don't cover an operation, but it does not explicitly state when to use this vs. alternatives. The confirm=true requirement for non-GET requests provides some usage guidance, but no exclusions or alternative references are given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_drive_getB

Get one shared drive's settings (accessibleRange TENANT/DOMAIN/MEMBER, permissionType).

ParametersJSON Schema
NameRequiredDescriptionDefault
userNo
sharedrive_idYes

TDQS

B3.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must disclose behavioral traits. The verb 'Get' implies a read operation, but it does not explicitly state safety, permissions, side effects, or return format. It adds context about the settings fields but fails to disclose important behavior for a tool with no annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single concise sentence, front-loaded with the verb and resource, containing no filler or redundant information. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is simple, but with no output schema and no annotations, the description should explain return values and parameter effects. It lists the settings fields but does not state that the response is a settings object or how `user` influences the request, leaving gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It does not explain the `user` parameter or the format of `sharedrive_id`, only vaguely implying an identifier via 'one shared drive'. This is insufficient given the lack of schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the specific verb 'Get' and names the resource 'one shared drive's settings', clearly distinguishing it from sibling tools like works_drives_list (which lists drives). It also enumerates the settings (accessibleRange, permissionType), making the purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for retrieving settings of a single shared drive, and the word 'one' contrasts with list tools. However, it does not explicitly state when to prefer this over alternatives or provide any exclusions, relying only on implication.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_drives_listB

List shared drives (id, name, accessibleRange, permissionType, masters).

ParametersJSON Schema
NameRequiredDescriptionDefault
userNo

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It lists the output fields but does not explicitly state that the operation is read-only, mention permission requirements, or explain how the optional 'user' parameter affects results. It also lacks details on response shape, pagination, or error behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence, front-loaded with the verb and object, and uses a parenthetical to enumerate fields. There is no filler or redundancy, making it appropriately concise and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has a minimal schema, no annotations, and no output schema, placing a high burden on the description. It covers the output fields but omits the meaning of the 'user' parameter, any filtering behavior, and contextual details that would help the agent invoke the tool correctly. This is incomplete for even a simple list tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The only parameter, 'user', is not mentioned anywhere in the description. With 0% schema description coverage, the description must compensate and explain this parameter, but it completely omits it. The parenthetical list refers to output fields, not input parameters, so no semantic value is added.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'List' paired with a clear resource 'shared drives', and enumerates the returned fields (id, name, accessibleRange, permissionType, masters). This clearly distinguishes it from siblings like works_drive_get (singular get) and works_files_list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage as the tool for listing shared drives, but it provides no explicit guidance on when to use it over alternatives, nor any exclusions. The name and verb alone make the intended use reasonably clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_file_downloadA

Download a file to a local path (follows the storage redirect with auth).

ParametersJSON Schema
NameRequiredDescriptionDefault
userNo
file_idYes
out_pathYes
sharedrive_idNo

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure. It does disclose that the tool 'follows the storage redirect with auth,' which is useful. However, it omits other important behaviors such as whether existing files are overwritten, required permissions, or the return format on success/error.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence: 'Download a file to a local path' followed by a useful parenthetical about auth redirect. Every word earns its place, with no fluff or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 4 parameters, no output schema, and performs a side effect (writing to a local path), the description is under-specified. It does not mention what the tool returns, whether it overwrites files, how optional parameters (user, sharedrive_id) affect the operation, or any error conditions. The note about auth redirect is the only extra context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It does not explain any of the four parameters (file_id, out_path, user, sharedrive_id) or their roles in the download. The parameter names are somewhat self-explanatory, but the description adds no explicit meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action: 'Download a file to a local path' with a specific verb and resource. It distinguishes from sibling tools like works_file_upload and works_files_list by focusing on the download operation, which no other sibling provides.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context for when to use the tool (when a file needs to be downloaded to a local path) and mentions the auth redirect behavior, which is a relevant usage consideration. It does not explicitly mention alternatives or exclusions, but since there is no alternative download tool among the siblings, the context is sufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_files_listB

List files/folders. With sharedrive_id: that shared drive; else the delegated user's My Drive.

ParametersJSON Schema
NameRequiredDescriptionDefault
userNo
folder_idNo
sharedrive_idNo

TDQS

B3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It only states the action and scope condition, but omits any details about permissions, side effects, response format, pagination, or error handling. It doesn't even explicitly state that the operation is read-only, leaving the agent to infer it from 'List'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise, using two short sentences to convey the action and the key conditional. There is no redundant phrasing or unnecessary detail. Every word contributes to the core meaning.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 3 optional parameters, no output schema, and no annotations, the description is quite sparse. It explains only the sharedrive_id behavior and leaves the user and folder_id semantics unclear. The description also fails to mention what data is returned (metadata, contents, recursive listing) or any constraints, making it insufficient for an agent to confidently invoke the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 0% description coverage, and the description only explains sharedrive_id ('that shared drive' vs 'My Drive'). It does not clarify the meaning or usage of user or folder_id, which remain ambiguous despite having titles. Since the schema provides no descriptions, the description should compensate but only partially does.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'List files/folders', providing a clear verb and resource. It also distinguishes between shared drives and My Drive based on the sharedrive_id parameter, which gives specific scope. However, it does not explicitly reference sibling tools like works_drives_list or works_sharedfolders_list, so differentiation is implicit rather than explicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description offers a conditional usage rule for sharedrive_id ('With sharedrive_id: that shared drive; else the delegated user's My Drive'), which clarifies when to use that parameter. But it provides no guidance on when to choose this tool over alternatives like works_search or works_drives_list, and it does not explain the role of user or folder_id parameters.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_file_uploadB

Upload a local file into a My Drive folder (2-step metadata+PUT flow).

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNo
userNo
file_pathYes
parent_folder_idYes

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must carry the burden of behavioral disclosure, but it only reveals a 2-step metadata+PUT flow. It does not mention needed permissions, overwrite behavior, partial-failure handling, or the response format.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no redundancy. The parenthetical '2-step metadata+PUT flow' efficiently adds useful behavioral context without wasting words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an upload tool with no annotations, no output schema, and 0% schema description coverage, one sentence is insufficient. Missing are prerequisites, error conditions, permission requirements, and any information about return values or success/failure indicators.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description partially maps 'local file' to file_path and 'My Drive folder' to parent_folder_id. However, the name and user parameters are left undocumented, and the description does not fully compensate for the low schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'Upload' with a clear resource 'a local file into a My Drive folder', distinguishing it from siblings like works_file_download. The phrase '2-step metadata+PUT flow' adds technical specificity without ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives, nor on prerequisites such as target folder existence or file accessibility. The only context is the action itself; there are no exclusions or alternative recommendations.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_folder_createA

Create a folder in the delegated user's My Drive (root if no parent).

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYes
userNo
parent_folder_idNo

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full burden. It adds context about the delegated user's My Drive and the root-if-no-parent behavior, which is useful. However, it does not disclose potential side effects, permissions, or what happens when the user parameter is null, leaving gaps for a mutation tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence that is front-loaded with the action and resource, then adds the key scoping detail. Every word earns its place; it is appropriately concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple create tool with no annotations and no output schema, the description provides the core purpose and a key location behavior. However, it omits return value information, prerequisites, and edge-case behavior, making it less complete for an agent that must invoke it correctly without additional context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage, the description must compensate. It clarifies parent_folder_id via 'root if no parent' and references the user parameter via 'delegated user's My Drive', but it does not explain the name parameter or the optional nature of user beyond the schema default.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Create') and resource ('folder'), and adds the scoping detail 'in the delegated user's My Drive (root if no parent)'. This clearly identifies the tool's function and distinguishes it from sibling tools like folder_enable/disable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage by stating the target location and the parent-folder behavior, but it does not explicitly say when to use this tool versus alternatives or provide any exclusions. It gives clear context but no alternative guidance, so it falls short of a 4.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_folder_disableA

Disable folder-level permissions. WARNING: drops folder grants, restores inheritance. Requires confirm=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
userNo
confirmNo
folder_idYes
sharedrive_idYes

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full responsibility for disclosing behavioral traits. It explicitly warns that the action 'drops folder grants, restores inheritance' and requires `confirm=true`, revealing a destructive and potentially irreversible effect. This goes well beyond what the schema alone indicates (confirm parameter exists, but its mandatory nature is not obvious) and is genuinely helpful.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise and well-structured. It front-loads the purpose, then delivers a warning, and finally states the confirmation requirement. Every sentence adds distinct value, with no filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (no annotations, no output schema, 4 parameters), the description covers the core details: purpose, destructive warning, and confirmation requirement. It does not explain the `user` parameter's role or potential reversibility, but for a focused permission-disabling action, the provided context is mostly sufficient. Slight room for improvement in addressing parameter semantics.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 0% parameter description coverage, so the description must compensate. It explains only `confirm` (must be true) but leaves `sharedrive_id`, `folder_id`, and `user` without added meaning beyond their names. For instance, `user` is optional and could be interpreted as a filter, but no clarification is provided. This is a significant gap for a tool with multiple parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb plus resource: 'Disable folder-level permissions.' It clearly distinguishes from the sibling tool `works_folder_enable` by stating the opposite action. The additional detail on dropping grants and restoring inheritance further clarifies the exact scope.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool (to disable folder-level permissions) but provides no explicit exclusions or alternatives. For instance, it does not contrast with `works_perm_revoke` for revoking specific user grants. The requirement to set `confirm=true` is a prerequisite, not a usage guideline, so guidance is limited to implied context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_folder_enableA

Enable folder-level permissions. WARNING: breaks inheritance (masters-only until granted). Requires confirm=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
userNo
confirmNo
folder_idYes
sharedrive_idYes

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description takes on the full burden of behavioral disclosure. It effectively warns that enabling folder-level permissions breaks inheritance and results in a 'masters-only' state until grants are made. This is significant, useful context. It does not mention reversibility or the fate of existing permissions, but the core side effect is clearly disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise, consisting of two sentences that deliver the core purpose, a critical warning, and a required parameter. There is no filler or redundancy, and the most important information is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (4 parameters, no output schema) and the lack of annotations, the description covers the most critical aspects: the action, the warning about inheritance, and the confirm requirement. It does not describe return values or fully elaborate on the 'masters-only' state, but it is sufficient for an agent to understand the basic behavior and risk.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides no descriptions (0% coverage), so the description must compensate. It does add crucial semantics for the 'confirm' parameter by stating it must be true. The other parameters (sharedrive_id, folder_id, user) are not explained, but their names and roles are reasonably self-explanatory from context.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Enable folder-level permissions') with a specific verb and resource. It implies a distinction from siblings like works_folder_disable, but does not explicitly differentiate itself from similar permission-related tools such as works_perm_grant.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes a prerequisite ('Requires confirm=true') and a cautionary warning ('breaks inheritance'), which provide some usage context. However, it does not explicitly state when to use this tool versus alternatives, nor does it mention any exclusions or conditions that would make it inappropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_perm_grantA

Grant READ/WRITE to a member (drive-level, or folder-level with folder_id). Requires confirm=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
userNo
confirmNo
folder_idNo
perm_typeYes
target_emailYes
sharedrive_idYes

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses the safety requirement 'Requires confirm=true' and clarifies the two scope modes. But with no annotations, it does not mention whether the grant is additive, if existing permissions are overwritten, or what the response looks like, leaving room for ambiguity.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One concise sentence that is front-loaded with the core action and includes the critical confirm requirement. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has 6 parameters, no annotations, and no output schema, so the description should be more comprehensive. It covers the action and the confirm flag but omits side effects, return value, and idempotency, leaving the agent with partial understanding.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage, the description helps interpret key parameters: folder_id (folder-level), perm_type (READ/WRITE), and confirm (must be true). However, it does not explain user, sharedrive_id, or target_email beyond their obvious meanings, so it partially compensates.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'Grant' and identifies the resource as 'READ/WRITE to a member', clearly distinguishing drive-level vs folder-level scope. This differentiates it from sibling tools like works_perm_revoke and works_perms_list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It clearly implies the use case: granting permissions to a member, with the optional folder_id for folder-level grants. However, it does not explicitly name alternatives or state when not to use it, so it stays at clear context without exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_perm_revokeA

Delete ONE permission by perm_id or target_email. Bulk delete is unsupported by design. Requires confirm=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
userNo
confirmNo
perm_idNo
folder_idNo
target_emailNo
sharedrive_idYes

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses the need for confirm=true and the inability to bulk delete, which is useful behavioral information. However, it does not explain what happens when confirm is false, required prerequisites, or potential errors, leaving some ambiguity for a destructive operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three short sentences, front-loaded with the primary action, and contains no unnecessary words. Every sentence adds meaningful information about the operation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (6 parameters, no output schema, no annotations), the description is too sparse. It omits the role of sharedrive_id, user, and folder_id, and does not clarify return values or failure modes, making it incomplete for an agent to safely invoke.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema coverage, the description must explain all parameters, but only perm_id and target_email are mentioned. The required sharedrive_id parameter is not described, and user, folder_id, and confirm (beyond 'required') lack semantic detail. This is insufficient for a 6-parameter tool.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Delete' and the resource 'permission', specifying the two identifier methods (perm_id or target_email). This unambiguously distinguishes it from sibling tools like works_perm_grant and works_perms_list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives practical usage context by stating that bulk delete is unsupported and that confirm=true is required, which helps the agent know constraints. It does not explicitly mention alternatives or when not to use this tool, but the guidance is clear enough.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_perms_listA

List drive-level (or, with folder_id, folder-level) permissions.

ParametersJSON Schema
NameRequiredDescriptionDefault
userNo
folder_idNo
sharedrive_idYes

TDQS

A3.5/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden for behavioral disclosure. It states the action is 'List', which implies a read-only operation, but it does not mention return value, authentication needs, or any side effects. Beyond indicating scope, it offers no additional behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, concise sentence that front-loads the purpose and includes a key modifier ('with folder_id') in a parenthetical. Every word contributes meaning, with no redundant content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple list tool with no output schema, the description gives a clear overview and covers the folder_id nuance. However, it omits any mention of the 'user' parameter's role, and without an output schema, a brief return-value description would improve completeness. It is minimally adequate but has clear gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are three parameters with zero schema descriptions. The description adds meaning for 'folder_id' by indicating it changes the behavior to folder-level, and implies that omitting it means drive-level. However, it does not explain 'user' or 'sharedrive_id' beyond their names, leaving some semantics implicit.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: listing permissions. It specifies the scope ('drive-level or, with folder_id, folder-level'), which distinguishes it from sibling list tools for drives, files, and shared folders. The verb 'List' is specific and matches the resource type.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use this tool (when you need to list permissions) and mentions the folder_id condition for folder-level permissions. However, it does not explicitly name alternatives or exclusions, leaving the usage context to inference from sibling names.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_share_createA

Share a My Drive folder so it appears in the recipient's 'shared with me'. My Drive only (not shared drives). Requires confirm=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
notifyNo
confirmNo
file_idYes
to_emailYes
perm_typeNoREAD
owner_emailYes

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses the effect (appears in 'shared with me'), scope (My Drive only), and a requirement (confirm=true). But it omits side effects, return value, and how parameters like perm_type and notify affect behavior, leaving some transparency gaps.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three concise sentences, each adding value: the effect, the scope limitation, and the confirm prerequisite. It is front-loaded with the most critical information and contains no redundant content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (6 parameters, no annotations, no output schema), the description provides only the core purpose and two constraints. It fails to explain parameter relationships, when to prefer this over similar siblings, or expected outcomes, leaving significant contextual gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description should compensate. It only hints at confirm=true and that a My Drive folder is shared, leaving most parameters (file_id, owner_email, to_email, perm_type, notify) semantically unexplained. This is inadequate for a 6-parameter tool.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the specific verb 'Share' with the resource 'My Drive folder' and clearly states the outcome (appears in the recipient's 'shared with me'). It also differentiates from siblings by scoping to My Drive only and explicitly excluding shared drives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context for when to use (sharing My Drive folders) and an exclusion (not shared drives), plus a prerequisite (confirm=true). However, it does not explicitly name alternative sibling tools like works_perm_grant, so it lacks the full when-to-use vs. alternative guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_share_deleteC

Remove sharing from a My Drive folder. Requires confirm=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
confirmNo
file_idYes
owner_emailYes

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses a confirm requirement, implying a safety mechanism, but does not explain its purpose or consequences. With no annotations, it fails to mention whether the operation is reversible, if special permissions are needed, or what side effects removing sharing may have on existing permissions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, with the main action front-loaded and no extraneous detail. The confirm requirement is stated efficiently, making the description concise and easy to parse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a destructive operation with no annotations and no output schema, yet the description is extremely sparse. It lacks details on what 'remove sharing' entails, whether it deletes all permissions, error conditions, or success indicators, leaving an AI agent under-informed for safe invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description adds minimal parameter meaning: it notes confirm must be true. However, it does not explain file_id or owner_email semantics, and given 0% schema coverage, the description bears the full burden of explaining these parameters but fails to do so.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (remove sharing) and the resource (a My Drive folder), using a specific verb. It distinguishes itself from sibling tools like works_share_create by indicating the opposite operation, though it could more explicitly differentiate from works_perm_revoke which also deals with permissions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus alternatives such as works_perm_revoke or works_share_create. The only hint is 'Requires confirm=true,' which is a prerequisite rather than an indication of appropriate usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

works_sharedfolders_listA

List a member's 'shared with me' folders (requires that member as delegated user).

ParametersJSON Schema
NameRequiredDescriptionDefault
userYes

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description bears the full burden. It does disclose the delegated user requirement, which is useful auth/behavioral context. However, it does not describe response format, pagination, or error behavior, leaving gaps for a read operation without annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, clear sentence that immediately conveys the tool's purpose and key requirement. No unnecessary words or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple list tool with one parameter, the description covers the essential purpose and the delegated-user prerequisite. While there is no output schema, the return type (list of folders) is reasonably implied, but no explicit mention of return details prevents a 5.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema provides only a bare 'user' parameter with no description. The description clarifies that the user must be a member and must be a delegated user, adding meaning that compensates for the 0% schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists a member's 'shared with me' folders, specifying the resource type (shared folders) and scope (member's). This distinguishes it from sibling tools like works_drives_list (which presumably lists all drives) and works_files_list (which lists files).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the prerequisite that the member must be a delegated user, providing some usage context. However, it does not explicitly compare with alternatives or state when not to use this tool, so usage is implied rather than clearly guided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 16 tool updatesv0.1.0
    • First observedworks_api_call
    • First observedworks_drive_get
    • First observedworks_drives_list
    • First observedworks_file_download
    • First observedworks_file_upload
    • First observedworks_files_list
    • First observedworks_folder_create
    • First observedworks_folder_disable
    • First observedworks_folder_enable
    • First observedworks_perm_grant
    • First observedworks_perm_revoke
    • First observedworks_perms_list
    • First observedworks_search
    • First observedworks_share_create
    • First observedworks_share_delete
    • First observedworks_sharedfolders_list

TDQS

B3.4/5.0
Disambiguation4/5

Most tools have clearly distinct purposes, with only minor potential overlap between works_share_create/works_perm_grant and works_files_list/works_search. The descriptions generally resolve ambiguity adequately.

Naming Consistency4/5

Tools follow a consistent noun_verb pattern (e.g., drive_get, files_list, perm_grant), with the exception of works_search, which lacks a resource prefix. This is a minor deviation from an otherwise predictable naming convention.

Tool Count4/5

16 tools is slightly above the typical 3-15 range, but the scope covers file management, permissions, sharing, and a raw API escape hatch. Each tool serves a distinct purpose, making the count reasonable for the apparent domain.

Completeness3/5

The toolkit covers listing, downloading, uploading, sharing, and permission management well, but lacks file delete, rename, move, and drive lifecycle operations (create/update/delete). These gaps are notable for a file management server.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/z0nam/worksmobile-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server