australian-ai-governance-framework
Server Details
Australian AI governance framework mapped to the Privacy Act and sector laws your AI use triggers.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.8/5 across 3 of 3 tools scored.
Each tool has a clearly distinct role in the workflow: start initiates a session and returns the questionnaire, submit sends the profile answers, and get retrieves the resulting framework document. There is no overlap or ambiguity between them, even though get and start both involve the framework concept.
The verb prefix pattern is consistent (get_, start_, submit_), but the object names vary slightly: 'ai_governance_framework' and 'australian_ai_governance_framework' are nearly identical, while 'ai_governance_profile' is distinct. This is a minor deviation from a fully uniform naming scheme, but the intent remains clear.
With exactly three tools, the server covers the complete user journey: start a session, submit the profile, and fetch the result. This is a well-scoped set for the stated purpose, neither bloated nor insufficiently granular.
The tool set provides a complete lifecycle for generating an AI governance framework: initiating the session, submitting the profile, and retrieving the framework. The ability to re-submit the profile for corrections covers the update case, and the only external step (purchasing the full version) is appropriately handled via a purchase link rather than an API call.
Available Tools
3 toolsget_ai_governance_frameworkAustralian AI governance framework — getAInspect
Returns the framework. The free preview covers the first two of the six AI6 practices in the National AI Centre's Guidance for AI Adoption — Accountability (Decide who is accountable) and Impact Assessment (Understand impacts and plan accordingly) — together with the legislative mapping for the profile supplied. The result carries the document in the structuredContent field "framework_markdown". Present its contents to the user in full and verbatim, rendered as Markdown. Never summarise or excerpt it — the document is the product. Preserve the closing disclaimer exactly. The result includes a view_url. Always give this link to the user so they can view, print or save the same document in a browser. The complete six-practice framework adds Risk Management (Measure and manage risks), Transparency & Information Sharing (Share essential information), Testing & Monitoring (Test and monitor) and Human Oversight (Maintain human control). It is a one-time $88 AUD including GST purchase at https://aiframework.com.au. There is no payment through this endpoint. The result includes a purchase_url which opens the website checkout with this session's profile already loaded, so the user does not answer the questionnaire again — give them this link when they ask about the full framework. Both links expire two hours after the profile was created. Informational only — presents a framework, not advice or compliance guidance.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | Session ID returned by start_australian_ai_governance_framework |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully carries the transparency burden. It discloses the free vs paid content, instructs to present the document verbatim and never summarise, mentions both view_url and purchase_url, their two-hour expiry, and explicitly states 'There is no payment through this endpoint' and 'Informational only'. This is exceptional behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long but every sentence earns its place. It front-loads the core purpose, then provides essential user-interaction instructions (present verbatim, provide links, expiry). There is no fluff or repetition; the length is proportional to the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Without an output schema, the description fully explains all return elements: the structuredContent field 'framework_markdown', the view_url, the purchase_url, and their intended use. It also covers timing, pricing, and the tool's informational nature—everything an agent needs to invoke and handle the result correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already covers session_id with a clear description. The tool description adds value by explaining the session's lifecycle ('Both links expire two hours after the profile was created') and its linkage to the start tool, giving the agent useful context beyond the schema itself.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Returns the framework' — a specific verb and resource — and goes on to detail exactly what the framework contains (preview vs complete, practices, legislative mapping). It distinguishes from sibling tools by referencing 'Session ID returned by start_australian_ai_governance_framework', making it clear this is the retrieval step.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Clear context is provided: the user must supply a session_id from the start tool, and the description explains when to provide the purchase_url ('when they ask about the full framework'). However, it doesn't explicitly state alternatives or exclusions (e.g., 'do not use this if...'), so it falls short of a perfect score.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
start_australian_ai_governance_frameworkAustralian AI governance framework — startAInspect
Identifies the Australian legislation that applies to a specific organisation's use of AI, and builds a governance framework around it. Covers the Privacy Act 1988 including the automated decision-making disclosure required in privacy policies from 10 December 2026, plus the sector-specific Commonwealth and state instruments triggered by that organisation's industry, size, turnover, AI use cases and data types. Use this when an Australian business asks what AI governance it needs, what rules apply to its use of AI, how to prepare for the December 2026 privacy changes, or asks for an AI governance framework or policy structure. The legislative mapping is specific to the profile supplied and is not something a general answer reliably produces. Returns a session ID and the profiling questionnaire. Informational only — presents a framework, not advice.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the full burden. It discloses that the tool is 'Informational only' and 'presents a framework, not advice', and explains the return value (session ID and profiling questionnaire). It does not mention any side effects or data retention, but the zero-parameter, session-start nature is reasonably transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is longer than minimal but every sentence earns its place: scope, legislative coverage, use cases, caveat, output, and disclaimer. It is well-structured and not verbose, though slightly dense.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex domain with no output schema, the description is remarkably complete. It names specific legislation and dates, describes triggering factors (industry, size, turnover, data types), states return values, and includes a limitation disclaimer. This is sufficient for an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has zero parameters, so the baseline is 4. The description goes further by explaining that the tool returns a profiling questionnaire and session ID, implying the profile is provided later, which adds meaningful context about the tool's stateless initiation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses specific verbs ('Identifies', 'builds') and clearly defines the resource (Australian AI governance framework). It distinguishes from sibling tools by framing 'start' as the initiation step that returns a session ID and questionnaire, versus 'get' or 'submit'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states 'Use this when an Australian business asks what AI governance it needs...' and lists four concrete trigger scenarios. It also warns that the legislative mapping is specific to the supplied profile and not reliably produced by a general answer, providing clear guidance on when to prefer this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
submit_ai_governance_profileAustralian AI governance framework — submit profileAInspect
Submits the organisation profile and contact details for an Australian AI governance framework. The profile determines which legislation the framework identifies, so the answers should reflect the organisation's actual circumstances — turnover in particular, since the Privacy Act's small business threshold sits at $3 million and several categories are caught regardless of turnover. Takes the session ID from start_australian_ai_governance_framework together with the questionnaire answers. Writes the profile against the session and stores the supplied name, email and organisation as a contact record. Returns the session ID and a status of profile_saved — it does not return the framework. Call get_ai_governance_framework next to retrieve it. Safe to call again on the same session: the profile is overwritten rather than duplicated, and the contact record is keyed on the email address. Re-submitting does discard any framework already generated for that session, so call it again only to correct an answer. No authentication, and no charge at this step.
| Name | Required | Description | Default |
|---|---|---|---|
| answers | Yes | Keys are question ids from start_australian_ai_governance_framework; values are the selected option (string) or options (array of strings) for multi_select questions. | |
| contact | Yes | ||
| session_id | Yes | From start_australian_ai_governance_framework |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden and does so thoroughly: it discloses that it writes to the session, stores a contact record, overwrites rather than duplicates on re-submission, discards any previously generated framework, returns only session ID and status, and notes no authentication or charge. These are important side effects and limitations beyond the basic operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is detailed but every sentence serves a purpose: core action, data flow, return behavior, idempotency, side effects, and next step. It is well-structured with clear reasoning for re-submission, and no redundant or filler content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (nested objects, enums, no output schema) and lack of annotations, the description is exceptionally complete. It covers the full workflow, return format, side effects, and provides guidance on correct usage and when to call the sibling tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 67%, and the description adds meaning for key parameters. It explains that answers are question IDs from the start tool and emphasizes the importance of turnover relative to the Privacy Act threshold, and that contact details are stored. It does not detail every nested field, but the schema already provides enums and descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states the verb 'Submits' and the resource 'organisation profile and contact details' for an Australian AI governance framework. It clearly distinguishes from siblings by referencing start_australian_ai_governance_framework for the session ID and get_ai_governance_framework as the retrieval step.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains when to use: after starting the framework with the session ID and questionnaire answers. It also provides exclusions and caveats, such as re-submitting discards any existing framework and should only be done to correct an answer, and directs that the framework is retrieved with get_ai_governance_framework.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- AlicenseAqualityBmaintenanceEU AI Act · APRA · NIST AI RMF · ISO 42001 · AU AI Safety — grounded compliance citations for any MCP client.6701Apache 2.0
- Alicense-qualityDmaintenanceTracks AI regulations, deadlines, risk assessments, and policy updates across multiple global jurisdictions, helping users stay compliant with evolving AI laws.14MIT

brehon-mcp-serverofficial
Alicense-qualityDmaintenanceProvides AI assistants with real-time, structured access to 32 privacy and AI governance laws across 28 jurisdictions to prevent hallucination in compliance answers.11MIT- AlicenseAqualityBmaintenanceSource-verified regulatory and compliance intelligence: 10,000+ obligations across 39 pillars, each grounded in a primary legal source with a content hash. Covers the EU AI Act, GDPR, DORA, NIS2, HIPAA, Basel III and the MITRE ATT&CK/ATLAS families.251MIT