Skip to main content
Glama

Signal Nodus SEC Filings

Audit an x402 endpoint

x402_audit
Read-only

Experimental (outside the core SEC path; not covered by the published accuracy eval, may change or be withdrawn): Inspect one public HTTPS x402 endpoint and report the 402 challenge it returns to an anonymous caller: HTTP status, payment rails (scheme, network, asset, recipient), WWW-Authenticate header, Bazaar discovery extension, and a pass/fail checklist with a health verdict. No payment is signed or submitted. Costs $0.10 per call.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlYesAbsolute https URL of the x402 resource, e.g. https://api.example.com/v1/thing

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=true. The description goes beyond this by adding costs ($0.10 per call), experimental status (may change/withdrawn), and explicitly stating 'No payment is signed or submitted.' It also clarifies the scope (one public endpoint, anonymous caller). This adds meaningful behavioral context without contradicting the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, information-dense paragraph that front-loads the experimental warning, then states the action and output. It contains no fluff—every clause earns its place (e.g., the cost, the no-payment note). It could be split into clearer bullet points, but it's efficient and readable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has only one parameter and no output schema, so the description bears full responsibility for explaining the return value. It enumerates the exact components of the report (status, rails, headers, health checklist) and adds cost and experimental caveats. This is sufficient for an agent to understand what to expect, though it doesn't specify the exact response format (e.g., JSON) or any potential error conditions.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already provides a clear description for the single 'url' parameter ('Absolute https URL of the x402 resource') with an example. Schema description coverage is 100%, so the baseline is 3. The tool description reiterates that the endpoint must be public and HTTPS, which slightly reinforces the parameter's constraints but doesn't add new semantic detail beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb ('Inspect') and a precise resource ('one public HTTPS x402 endpoint'), then enumerates exactly what it reports: HTTP status, payment rails, WWW-Authenticate header, Bazaar discovery extension, and a health checklist. This fully distinguishes it from the other finance/filings/crypto siblings, all of which serve different data domains.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description states what the tool does but does not explicitly say when to use it versus alternatives, nor does it mention any sibling tool for comparison. It does imply usage (for auditing an endpoint's 402 challenge) and notes that it's experimental, but there is no 'when not to use' or alternative routing. Since the tool is unique among siblings, the omission is less critical, but explicit guidance would still be an improvement.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.5/5.0
Disambiguation3/5

Most tools have clearly written descriptions, but several pairs overlap semantically: token_price/token_report, latest_filings/recent_filings, and institutional_holdings/who_holds/activist_stakes all require careful reading to pick the right one. The overlap is not severe enough for a 2, but it is still more than the occasional confusion.

Naming Consistency3/5

Names are consistently snake_case and mostly descriptive, but the set does not follow one naming convention. It mixes noun phrases (crop_data, token_report, insider_trades) with verb phrases (lookup_company, compare_filings, verify_financial_claim), and pairs like latest_filings/recent_filings create avoidable confusion.

Tool Count2/5

31 tools is too many for what is nominally an SEC Filings server, and the scope sprawls into unrelated domains such as EVM gas, tokens, prediction markets, crop data, and x402 auditing. The count does not feel earned by a coherent workflow; it feels like an uncurated bundle of endpoints.

Completeness3/5

The SEC filing workflow is reasonably covered: company lookup, search, latest/recent filings, section extraction, 8-K events, comparisons, ownership filings, and XBRL financial checks are all present. However, there is no full-filing retrieval endpoint, no deep company financial history beyond a single concept, and many non-SEC subdomains are only one-off data points, so the overall surface is still incomplete.