Skip to main content
Glama

movahedi.ca Privacy Data

Search privacy enforcement actions

privacy_search_enforcement_actions
Read-onlyIdempotent

Search verified Canadian privacy enforcement actions: CAI orders and decisions under Quebec Law 25 and OPC findings under PIPEDA. Use this when someone asks about privacy fines, enforcement cases against a company, what regulators decided, or investigations (for example 'Has the CAI fined anyone for facial recognition?' or 'TikTok privacy investigation Canada'). Returns matching cases with dates, plain-language summaries, penalties, and links to the official regulator source. Start here to find a case ID, then call privacy_get_enforcement_case for full details. Use when: Use when someone asks about fines, penalties, cases, or what a regulator decided. Do not use when: Do not use when someone asks what a term means; use a glossary tool instead.

Input Schema

NameRequiredDescriptionDefault
yearNoFilter by decision year.
limitNoMaximum cases to return in this call.
queryNoFree-text search over case titles and summaries.
offsetNoNumber of matching cases to skip. Use next_offset from the previous response to page forward.
regulatorNoLimit to one regulator: 'cai' (Quebec Commission d'acces a l'information, Law 25) or 'opc' (federal Office of the Privacy Commissioner, PIPEDA).

Output Schema

NameRequiredDescriptionDefault
resultsYesMatching enforcement actions.
has_moreYesTrue when more results exist beyond this page.
truncatedYesTrue when results were shortened to fit the 50 KB output cap. Use the paginated REST API for the full set.
next_offsetYesPass as 'offset' in the next call to continue paging. Null when has_more is false.
total_countYesTotal number of matches across all pages.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false, and closed-world scope, so the safety profile is covered. The description adds real value beyond that: what the response contains (dates, plain-language summaries, penalties, source links) and the intended two-step workflow into privacy_get_enforcement_case. It stops short of noting result ordering or search matching behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core statement, then workflow, then structured Use/Do-not-use lines. Slight redundancy: the 'Use when' line largely restates the opening sentence about fines and enforcement cases, costing a little space.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema, full parameter documentation, and rich annotations, the description covers purpose, scope, response contents, and next steps. Minor gap: nothing about result ordering or how paging interacts with the query/regulator filters beyond what the offset field says.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and each parameter already documents its meaning and constraints. The description implies the year/regulator/query filters through examples but adds no syntax or semantics beyond the schema, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (search) and resource (verified Canadian privacy enforcement actions), and names the two covered regulator corpora (CAI/Law 25, OPC/PIPEDA). It distinguishes itself from privacy_get_enforcement_case by framing this as the discovery step that yields a case ID.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit 'Use when' triggers (fines, penalties, cases, investigations), concrete example queries, and an explicit 'Do not use when' pointing to a glossary tool for definitional questions. The alternative tool for full case details is named.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources