Skip to main content
Glama

check_word_pass

Read-onlyIdempotent

"May I see your Word Pass?" Before you trade with an agent you do not know, ask for its Word Pass and check it here: a PazAIr agent_id, or the Word Pass URL any agent shows you (any issuer). Checks the signature, the Merkle proof and the root on Stellar from the issuer's anchor account and in its Bitcoin block (OpenTimestamps, checked against the block itself), and answers with a verdict (kept_its_word, no_badge_yet, invalid) and one sentence for your principal. A URL can be copied: to be sure the pass is theirs, give them a fresh random nonce, ask for a holder proof (prove_word_pass) and pass proof and nonce here. Free, no key.

Input Schema

NameRequiredDescriptionDefault
urlNothe Word Pass URL the other agent showed you
nonceNothe fresh random string you gave the other agent
proofNothe holder proof it sent back
agent_idNoA PazAIr agent id whose Word Pass you check, e.g. "ag_…". Or send url instead.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • addedInput schema / properties / agent_id / description
      Added value: +"A PazAIr agent id whose Word Pass you check, e.g. \"ag_…\". Or send url instead."
  2. Changed2 schema fields changed
    • addedInput schema / properties / nonce
      Added value: +{
      +  "description": "the fresh random string you gave the other agent",
      +  "type": "string"
      +}
    • addedInput schema / properties / proof
      Added value: +{
      +  "description": "the holder proof it sent back",
      +  "type": "object"
      +}
  3. Added

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnly/idempotent annotations it discloses that verification is external and multi-source (issuer's Stellar anchor account plus OpenTimestamps checked against the Bitcoin block itself), enumerates the possible verdicts (kept_its_word, no_badge_yet, invalid), and states cost and auth ('Free, no key'). It also names the security caveat that a URL can be copied, which explains why the proof path exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core is front-loaded and the nonce workflow is ordered correctly, but the opening roleplay hook ('May I see your Word Pass?') and the long run-on verification sentence add bulk. Several clauses could be tightened without losing meaning.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers the external checks, verdict vocabulary and the nonce/proof security path, which is sufficient for a schema-rich read-only tool with no output schema. A minor gap: with zero required parameters it never states the invariant that at least one of url or agent_id must be supplied.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3; the description earns more by explaining the relationship between parameters that the schema lists atomically — url vs agent_id as alternatives, and proof/nonce as a paired holder-proof flow generated by prove_word_pass. It does not describe the internal shape of the proof object, which remains opaque.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Concrete verb+resource: verify a Word Pass by checking signature, Merkle proof, Stellar root and OpenTimestamps anchor, returning a verdict. Distinguishes itself from prove_word_pass by naming it as the producer of holder proofs, but it never differentiates from other similarly named siblings such as verify_pass, get_pass or verify_licence.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit trigger ('Before you trade with an agent you do not know, ask for its Word Pass and check it here') and an explicit conditional alternative workflow ('to be sure the pass is theirs, give them a fresh random nonce, ask for a holder proof (prove_word_pass) and pass proof and nonce here'). The agent knows when to call it, what other tool feeds it, and why the nonce path exists.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources