Skip to main content
Glama

AgentCV

Check an AgentCV team profile

validate_team_profile
Read-onlyIdempotent

Check an agentcv.team.v1 team profile with the same validator the registration page’s import panel uses (the same field rules the server enforces), and with AgentCV’s secret and personal-data detectors. Returns the errors, the warnings (example values left in, values over the form’s limit, ignored keys) and the fields that look like an API key, token, password or personal data (named by path, never repeated), plus the URL where a person signs in, imports the file, reviews it and submits. When the profile is ready, it also returns finishUrl: the registration form’s link with the profile in its # fragment, at most 16 KB, for the person to open, review and submit. Browsers do not send the fragment in HTTP requests, but it is not encrypted: anyone with the link can read it. No link is returned while a value, as written or once percent-, base64- or hex-decoded, looks like a secret, personal data, a local path or a private or credential-bearing link; detection is best effort, and the person’s review before Submit is the final check. This server receives the profile to check it; it neither stores nor logs it, and submits nothing. Read-only.

Input Schema

NameRequiredDescriptionDefault
profileYesThe profile: the agentcv.team.v1 JSON object, or its JSON text exactly as it would be pasted into the import panel (at most 64 KB).

Output Schema

NameRequiredDescriptionDefault
validYes
errorsYes
storedYes
redactedYes
warningsYes
withheldYes
finishUrlYes
nextStepsYes
truncatedYes
finishLinkYes
readyToImportYes
finishRegistrationUrlYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (read-only, idempotent, non-destructive, closed-world), and the description still adds substantial context beyond them: it returns errors, warnings and detected-secret paths, the value is detected after percent/base64/hex decoding, the fragment link is capped at 16 KB and is unencrypted, and the server neither stores nor logs the profile. The best-effort caveat and the 'no submit' statement are exactly the behavioral disclosures an agent needs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose and the outcome (errors, warnings, detected fields, sign-in URL, finishUrl) are front-loaded, which is good. However, the body is a dense run-on block with visible repetition ('reviews it and submits' appears twice) and several nested caveats crammed into single sentences, making it harder to scan than it needs to be.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter validation tool with an output schema, this covers everything an agent needs to decide, call and interpret correctly: what is checked, what is returned, when the link is withheld, and the security properties of the returned fragment. Nothing material is left to inference.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already explains that the single parameter accepts either the JSON object or its JSON text as pasted into the import panel, including the 64 KB limit. The description's framing ('same validator the import panel uses') reinforces that nuance but does not add format or syntax detail beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb and resource: checking an agentcv.team.v1 profile with the same validator the registration import panel uses, plus secret/personal-data detection. That is unmistakably distinct from the fetch/list siblings (get_team, search_teams, list_platforms). It never names a sibling or explicitly contrasts itself, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage context is clear: this is the pre-import check that produces a link a person opens, reviews and submits, and it explicitly states the condition under which no link is returned (any value that looks like a secret, personal data, local path or credential-bearing link). No alternatives among siblings are named, so an agent must infer whether to call get_registration_schema first.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources