Skip to main content
Glama

TunnelMind Data API

sigil_verify_app_bundle

Verifies that a mobile or CTV app bundle ID actually exists in the relevant app store — used to detect bundle spoofing in bid requests.

Platform support (v1):

  • ios: verified live via Apple's iTunes Lookup API.

  • android: verified live via the Google Play store listing page.

  • ctv_* / web: no public store API — returns verified=null.

Inputs:

  • bundle_id (body, required): e.g. com.nytimes.NYTimes.

  • platform (body, required): ios | android | ctv_roku | ctv_fire | ctv_samsung | ctv_lg | ctv_vizio | web.

  • claimed_developer (body, optional): checked against the store listing.

Returns:

  • verified: true | false | null. null means one of two things: the platform has no store API (confidence low, warning no_store_api_available), or the store lookup failed (confidence degraded, warning store_api_unavailable, with reason).

  • reason: why the store lookup failed — http_ | timeout | network_ | bad_response. Present only on the degraded path. When the relay was also tried and failed it is <worker reason>+relay_<relay reason>, e.g. http_403+relay_timeout.

  • source (iOS only): worker | relay. When the Worker's own iTunes lookup ends in http_403, http_429 or network_* and the relay is configured, the lookup is retried once through TunnelMind's relay; relay means the relay was consulted (success or failure).

  • store_listing: name, developer, developer_match, store_url.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
platformYes
bundle_idYes
claimed_developerNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden and does so comprehensively. It discloses platform support limits, null return semantics with confidence levels and warning codes, failure reasons, relay fallback behavior, and response fields—providing rich behavioral context beyond typical tool definitions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with headings (Platform support, Inputs, Returns) and front-loads the purpose. However, it redundantly repeats the platform enum and bundle_id example already present in the schema, slightly reducing conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema and no annotations, the description is complete: it covers platform support, all input parameters, return value semantics including edge cases, and failure modes. An agent has everything needed to invoke and interpret results.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must fully document parameters, and it does. It lists all three parameters with required status, examples, and added meaning (e.g., 'claimed_developer' is checked against the store listing).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Verifies'), resource ('mobile or CTV app bundle ID'), scope ('actually exists in the relevant app store'), and purpose ('detect bundle spoofing in bid requests'). It clearly distinguishes itself from sibling verification tools like sigil_verify_domain by focusing on app bundles.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides a clear context for use ('used to detect bundle spoofing in bid requests'), but does not explicitly name when to use this tool instead of alternatives such as sigil_verify_domain or sigil_verify_supply_chain. No exclusions or alternatives are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources