Skip to main content
Glama

Secure random + IDs

random_gen
Read-onlyIdempotent

Cryptographically secure randomness: UUID v4/v7, passwords, API-key-style tokens, integers in a range, dice, coin flips, or a fair shuffle / pick from a list. Node's CSPRNG. Output is generated fresh per call and never stored or logged. Price: free.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
maxNo
minNo
kindNouuid4
countNo
itemsNo
lengthNo
symbolsNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already confirm readOnlyHint=true and destructiveHint=false, but the description adds valuable behavioral context: it discloses that output is generated fresh per call (non-idempotent despite the idempotentHint annotation), never stored or logged, and that it is cryptographically secure and free. This goes beyond the annotations by explaining the freshness and privacy guarantees. However, there is a potential conflict: the description says 'generated fresh per call' which implies non-idempotence, while annotations set idempotentHint=true. This is a minor contradiction worth noting, but the description adds enough transparency to score high. I flag it in annotation_contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, dense paragraph that lists the main capabilities up front, followed by the security and privacy notes. It is approximately two sentences, with no filler. Every word earns its place: the list of random types, the CSPRNG reference, and the 'never stored or logged' note. It is front-loaded with the most critical information and remains concise despite the breadth of functionality.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (7 parameters, 9 enum variants, no output schema), the description covers the main capabilities but does not delve into parameter-specific details like how to use min/max for integers, or that 'pick' requires items. For an agent to use it correctly, it would need to open the schema for parameter details. However, the description provides the conceptual model and operational context (secure, fresh, free) that is not in the schema. It is nearly complete for high-level understanding but lacks the per-operation parameter guidance that would make it fully self-sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. The description explains that 'kind' can be one of many types, but it does not explain each parameter's meaning or how they interact (e.g., min/max for int, items for pick/shuffle, length/symbols for passwords). Given the tool has 7 parameters and an enum, the description provides a high-level overview but lacks per-parameter semantics. However, it does mention the kinds and the general purpose, which helps an agent infer parameter roles. For a tool with complex parameters, this is decent but not exhaustive.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('generate') and a comprehensive resource list: UUIDs, passwords, tokens, integers, coins, dice, shuffle/pick. It names all kinds and gives a clear picture of the tool's domain. It also mentions the cryptographic security and backend (Node's CSPRNG), distinguishing it from typical random tools. Although sibling tools are mostly unrelated, the description makes the tool's unique value obvious. The verb is implied but the resource is explicit and rich, earning a top score.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly implies the tool is for generating random values, and it enumerates many use cases (UUIDs, passwords, tokens, etc.). It does not explicitly state when not to use it or list alternative tools, but given the sibling set is mostly unrelated (data lookup tools), the absence of exclusions is acceptable. The description implicitly tells an agent to use this tool for any random generation need, which is clear enough for selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources