Skip to main content
Glama

Appside Developer Docs

verify_app

Idempotent

Verify a pending registration after publishing the returned token at /.well-known/appside-verify.txt or in a meta name="appside-verify" content="TOKEN" tag on the submitted website. For itch.io, put the token anywhere in the public text of the exact submitted game page (edit its description). Store-only apps put the token in every submitted public store description. Success makes the catalog page searchable and indexable.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "id": "<id>"
    },
    "name": "verify_app"
  }
}

Input Schema

NameRequiredDescriptionDefault
idYes
tokenNoOptional Appside bearer token. Associates registrations with your account. Store securely; never log it.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • addedInput schema / properties / token
      Added value: +{
      +  "description": "Optional Appside bearer token. Associates registrations with your account. Store securely; never log it.",
      +  "type": "string"
      +}
  2. Added

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover idempotency and open-world access, and the description adds real value beyond them: the external side effects required before calling, and the outcome that success makes the catalog page searchable and indexable. Failure behavior (what an unverified result looks like or whether it errors) is not disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the core action, then packs platform-specific placement rules into two dense sentences. Every clause carries operational information, though the platform variants could be slightly more scannable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a state-changing verification call with no output schema, the description covers the required out-of-band setup and the resulting state change. Remaining gaps are error/retry semantics and the role of the id parameter, which the schema does not document either.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50%: the optional token param is documented in the schema, while id is not. The description's 'returned token' refers to the verification token from register_app, which is not obviously the same as the schema's 'Appside bearer token' param, leaving a mild ambiguity about which token the caller supplies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Verify a pending registration', and spells out the mechanism (token published at a well-known path or meta tag). It is clearly distinct from register_app, though it never explicitly contrasts itself with the similar-sounding confirm_mcp_claim sibling.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives the precondition for use (after publishing the returned token) and branches by platform: website, itch.io, and store-only apps, each with the exact place to put the token. It does not name alternatives or state when verification should be retried vs abandoned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources