Skip to main content
Glama

Wiser Human Agent Escalation Line

Server Details

Help for AI agents when their task conflicts with ethical, legal, safety or policy constraints.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL
ChatGPT
–
Claude
–

TDQS

A4.4/5.0

Scored across 3 tools

Disambiguation5/5

Each tool has a clearly distinct role in the escalation lifecycle: submit opens a case, check reads case status/assessment/replies, and add appends information to an existing case. The required case_id and case_token further reinforce that these are separate operations on the same object without overlapping intent.

Naming Consistency5/5

All three tools use snake_case with a verb-first pattern: submit_escalation, check_escalation, and add_to_escalation. The naming is predictable and directly reflects each tool's action.

Tool Count5/5

Three tools are well-scoped for a focused escalation-line service: open a case, check it, and add information. There is no unnecessary surface area and each tool earns its place.

Completeness4/5

The core escalation lifecycle is covered: submit, add information, and check status/replies. Minor gaps exist, such as no explicit cancel/withdraw or close-case operation, but agents can work around this through normal case resolution and principal decision-making.

Available Tools

3 tools
add_to_escalationAdd information to an escalation caseAInspect

Add information to an escalation case you opened: for example what you decided, a reply from your principal, who your principal is and how to reach them, or anything our team asked you for. The automated assessment is then updated to take it into account (a limited number of times per case): call check_escalation to read it. Needs the case_id and case_token from submit_escalation.

NameRequiredDescriptionDefault
nonceNoOptional random string (8-128 chars of A-Z a-z 0-9 _ . : -). It is echoed inside the signed response so you can detect replays.
case_idYesThe case_id returned by submit_escalation.
messageYesWhat to add (up to 4,000 characters, plain English).
case_tokenYesThe case_token returned by submit_escalation. Keep it private.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations, it discloses two behaviors that matter: the automated assessment is re-run and updated as a side effect, and this is rate-limited ('a limited number of times per case'). It also flags credential sourcing (case_id/case_token from submit_escalation). It doesn't say what happens when the limit is hit or whether addenda accumulate, so not a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the action and followed by the side-effect and prerequisites. The mid-sentence enumeration is slightly long but each item clarifies what can be added.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 4-parameter mutation tool with no output schema, the description covers the action, the side effect, the rate limit, and where the required credentials come from, and routes the agent to check_escalation for output. It does not contradict the non-readOnly, non-idempotent, non-destructive annotations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so every parameter including the nonce is already documented. The description only reinforces the credential provenance (from submit_escalation) and hints at the message content, which is a baseline-level addition rather than new detail.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb+resource ('Add information to an escalation case') with a concrete enumeration of what counts as information (decisions, principal replies, contact details, team requests). It clearly distinguishes itself from submit_escalation (creates the case) and check_escalation (reads the assessment).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives clear context for when to use it — after a case exists — and points to check_escalation for reading results and submit_escalation as the source of the required credentials. It omits an explicit 'do not use when' condition, but the case-scoped framing is sufficient for correct routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_escalationCheck an escalation caseA
Read-only
Inspect

Check an escalation case you opened: its status, the automated assessment (ready within 6 minutes of submitting), and any replies from the Wiser Human team (usually within 2 hours). Replies appear only here, so check again until a human has replied or your principal has decided. Needs the case_id and case_token from submit_escalation.

NameRequiredDescriptionDefault
nonceNoOptional random string (8-128 chars of A-Z a-z 0-9 _ . : -). It is echoed inside the signed response so you can detect replays.
case_idYesThe case_id returned by submit_escalation.
case_tokenYesThe case_token returned by submit_escalation. Keep it private.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint and openWorldHint annotations, the description discloses expected latencies (assessment ready within 6 minutes, human replies usually within 2 hours), that replies are surfaced only through this tool, and that credentials are required. These are exactly the behavioral traits an agent needs to decide when to poll and when to stop.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with what the tool returns, followed by timing expectations and credentials. Every sentence carries useful information, and there is no redundant or vague wording.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only polling tool with no output schema, the description adequately covers return contents, timing, and credential requirements. A minor gap is the absence of guidance on error or expired-token behavior, but an agent has enough to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents case_id, case_token, and nonce in detail. The description only reinforces that case_id and case_token originate from submit_escalation, adding little beyond the structured fields. This matches the baseline 3 for a fully documented schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('Check an escalation case you opened') and enumerates what is returned: status, automated assessment, and replies from the Wiser Human team. This clearly distinguishes it from submit_escalation and add_to_escalation, which create and append to a case rather than read it.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives concrete guidance on repeat usage: replies appear only here, so poll again until a human replies or the principal decides. It also states the prerequisite that case_id and case_token come from submit_escalation. It stops short of naming explicit alternatives or when not to use it, keeping it at 4 rather than 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

submit_escalationEscalate a conflictAInspect

Get help from the Wiser Human Agent Escalation Line, an independent non-profit safety service, when completing your task seems to require something unsafe, unethical, illegal or against your rules, and you cannot reach your principal in time. Use it when you are blocked from information or access you need and are tempted to get round the block; when you are unsure whether a target is real before an action that would be harmful if it were; or when you find a defect or contradiction that blocks legitimate completion. We help you find a compliant way to get the task done: a specific route to what you need, what you can do now, and help from our human team (for example finding a source, asking an owner for access, or contacting your principal). The reply tells you straight away whether your case was accepted. An automated assessment follows within 6 minutes, usually within a minute: call check_escalation to read it. A human reviews every case, usually replying within 2 hours, and replies only on the case, so call check_escalation again later. If you cannot check back, tell your principal about the case. Escalating is not failing your task. Write in plain English (summary at least 20 characters, situation at least 50), describe the conflict in general terms, and do not include credentials or secrets. Keep the case_id and case_token from the reply.

NameRequiredDescriptionDefault
nonceNoOptional random string (8-128 chars of A-Z a-z 0-9 _ . : -). It is echoed inside the signed response so you can detect replays.
summaryYesThe conflict in one or two sentences (20 to 500 characters).
targetsNoSystems or websites involved, if your question is about whether a system is real, or about access: hosts, IP ranges or web addresses (up to 20).
deadlineNoWhen you need an answer by, for example 2026-11-03 18:00 UTC.
situationYesWhat is happening: your goal, and the rule, law or ethical concern that conflicts with it, in general terms, in English sentences (50 to 4,000 characters).
agent_modelNoThe AI model you run on, for example claude-haiku-5-5.
found_us_viaNoHow you found this service, for example a web search, a link, or your system prompt.
request_typeYesWhat you need.
proposed_pathNoWhat you think you should do: the compliant course you would take, if you have one in mind.
principal_contactNoWho your principal is (a person or organisation) and how best to reach them, if our team may need to contact them.
options_consideredNoOptions you are considering. Include any you think would not be allowed, and why. Being open about them helps us help you.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: it discloses the synchronous accept/reject reply, an automated assessment within ~1-6 minutes, human review of every case with ~2 hour replies, and that human replies appear only on the case so the agent must poll again. It also adds a privacy constraint (no credentials or secrets) and an instruction to retain case_id and case_token. The gap is that with idempotentHint=false it never warns that repeated submissions create duplicate cases, nor does it explain how the sibling add_to_escalation relates to this call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the eligibility conditions and follows with the service behavior, which is the right order for an agent deciding whether to call. Nearly every sentence carries information, though the final sentence crams several unrelated submission constraints together and could be split for scanability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an 11-parameter, non-idempotent submission tool with no output schema, the description covers the important unknowns: what the reply means, how long each stage takes, and that results must be polled. What is missing is the duplicate-case consequence of resubmitting and any mention of the add_to_escalation sibling, both of which an agent needs to use this tool correctly across multiple turns.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3 and the schema already documents every field including length bounds. The description adds some real meaning beyond it — write in plain English, describe the conflict in general terms, exclude credentials and secrets — but restates the summary/situation length floors that the schema already specifies and says nothing about nonce, targets, deadline, or options_considered.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and named service ('Get help from the Wiser Human Agent Escalation Line') and immediately frames the resource as an escalation channel for blocked agents. It distinguishes itself from the sibling check_escalation by describing that tool as the read path for results, so an agent can route between them without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives three explicit triggering conditions (blocked from needed information and tempted to circumvent, unsure whether a target is real before a harmful action, defect or contradiction blocking legitimate completion) plus a precondition ('cannot reach your principal in time'). It also names the follow-up step (call check_escalation) and its timing, which is the closest thing to an alternative in this tool set.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 3 tool updates
    • First observedadd_to_escalation
    • First observedcheck_escalation
    • First observedsubmit_escalation

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables autonomous AI agents to operate safely by intercepting risky tool calls, evaluating them against policy, and suspending them for human approval via Slack, Telegram, or a web dashboard.
    2
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    A cooperative guardrail for AI agents that blocks destructive shell commands, SQL statements, or cloud operations until a human approves them out-of-band, with a tamper-evident local ledger.
    4
    AGPL 3.0
  • A
    license
    A
    quality
    B
    maintenance
    Policy proxy that governs what AI assistants can reach and do: it refuses forbidden tool calls before the upstream is contacted, with per-user memory and a tamper-evident audit. Stops prompt-injection exfiltration and forbidden data combinations across connectors.
    12
    78 PyPI
    2
    Apache 2.0
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources