Skip to main content
Glama

ThinAir Data

by co.thinair.data
OverviewDiscussionsAdmin

pii_scan

Read-onlyIdempotent

Sweep string columns across tables for common PII patterns (email, SSN, credit card, phone, JWT, bearer tokens). Heuristic-only — not a compliance guarantee. [BUILD tier]

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
connectionNoTarget connection name from this tenant's inventory. Call `list_connections` to see every name + dialect, then match semantically to the user's intent (e.g. 'analytics' → a connection named `*-analytics-*`; 'prod' → a connection with `prod-` prefix). If the user didn't specify, use the tenant's default (first added). Do not invent names — resolve from `list_connections` output.
max_tablesNoMax tables to sample (default 25, cap 50)
sample_rowsNoRows sampled per table (default 20, cap 100; values < 5 are floored to 5)

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
dataNo
metaNo
displayNo
summaryNo
insightsNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedOutput schema / properties / data / anyOf
      Previous value: -[
-  {
-    "items": {
-      "additionalProperties": true,
-      "properties": {
-        "column": {
-          "type": "string"
-        },
-        "kind": {
-          "type": "string"
-        },
-        "sample_matches": {
-          "type": [
-            "number",
-            "string"
-          ]
-        },
-        "sampled_rows": {
-          "$ref": "#/properties/data/anyOf/0/items/properties/sample_matches"
-        },
-        "severity": {
-          "anyOf": [
-            {
-              "enum": [
-                "info",
-                "warning",
-                "critical"
-              ],
-              "type": "string"
-            },
-            {
-              "type": "string"
-            }
-          ]
-        },
-        "table": {
-          "type": "string"
-        }
-      },
-      "required": [
-        "table",
-        "column",
-        "kind",
-        "severity"
-      ],
-      "type": "object"
-    },
-    "type": "array"
-  },
-  {
-    "additionalProperties": true,
-    "properties": {
-      "code": {
-        "type": "string"
-      },
-      "details": {
-        "additionalProperties": {},
-        "type": "object"
-      },
-      "error": {
-        "type": "string"
-      },
-      "internal_code": {
-        "type": "string"
-      },
-      "message": {
-        "type": "string"
-      },
-      "retry_after_s": {
-        "type": "number"
-      }
-    },
-    "type": "object"
-  }
-]New value: +[
+  {
+    "items": {
+      "additionalProperties": true,
+      "properties": {
+        "column": {
+          "type": "string"
+        },
+        "kind": {
+          "type": "string"
+        },
+        "sample_matches": {
+          "type": [
+            "number",
+            "string"
+          ]
+        },
+        "sampled_rows": {
+          "$ref": "#/properties/data/anyOf/0/items/properties/sample_matches"
+        },
+        "severity": {
+          "anyOf": [
+            {
+              "enum": [
+                "info",
+                "warning",
+                "critical"
+              ],
+              "type": "string"
+            },
+            {
+              "type": "string"
+            }
+          ]
+        },
+        "table": {
+          "type": "string"
+        }
+      },
+      "required": [
+        "table",
+        "column",
+        "kind",
+        "severity"
+      ],
+      "type": "object"
+    },
+    "type": "array"
+  },
+  {
+    "additionalProperties": true,
+    "properties": {
+      "code": {
+        "type": "string"
+      },
+      "details": {
+        "additionalProperties": {},
+        "type": "object"
+      },
+      "error": {
+        "type": "string"
+      },
+      "internal_code": {
+        "type": "string"
+      },
+      "message": {
+        "type": "string"
+      },
+      "retry_after_s": {
+        "type": "number"
+      }
+    },
+    "required": [
+      "error"
+    ],
+    "type": "object"
+  }
+]
  2. Changed6 schema fields changed
    • addedInput schema / properties / connection / maxLength
      Added value: +256
    • addedInput schema / properties / max_tables / maximum
      Added value: +50
    • addedInput schema / properties / max_tables / minimum
      Added value: +1
    • changedInput schema / properties / sample_rows / description
      Previous value: -"Rows sampled per table (default 20, cap 100)"New value: +"Rows sampled per table (default 20, cap 100; values < 5 are floored to 5)"
    • addedInput schema / properties / sample_rows / maximum
      Added value: +100
    • addedInput schema / properties / sample_rows / minimum
      Added value: +1
  3. Changed2 schema fields changed
    • addedOutput schema / properties / display / properties / map
      Added value: +{
+  "additionalProperties": true,
+  "properties": {
+    "label": {
+      "type": "string"
+    },
+    "lat": {
+      "type": "string"
+    },
+    "lon": {
+      "type": "string"
+    },
+    "title": {
+      "type": "string"
+    }
+  },
+  "type": "object"
+}
    • changedOutput schema / properties / display / properties / type / anyOf
      Previous value: -[
-  {
-    "enum": [
-      "table",
-      "chart",
-      "metric",
-      "code",
-      "text",
-      "list"
-    ],
-    "type": "string"
-  },
-  {
-    "type": "string"
-  }
-]New value: +[
+  {
+    "enum": [
+      "table",
+      "chart",
+      "metric",
+      "code",
+      "text",
+      "list",
+      "map"
+    ],
+    "type": "string"
+  },
+  {
+    "type": "string"
+  }
+]
  4. Changed1 schema field changed
    • changedOutput schema / (root)
      Previous value: -nullNew value: +{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "additionalProperties": true,
+  "properties": {
+    "data": {
+      "anyOf": [
+        {
+          "items": {
+            "additionalProperties": true,
+            "properties": {
+              "column": {
+                "type": "string"
+              },
+              "kind": {
+                "type": "string"
+              },
+              "sample_matches": {
+                "type": [
+                  "number",
+                  "string"
+                ]
+              },
+              "sampled_rows": {
+                "$ref": "#/properties/data/anyOf/0/items/properties/sample_matches"
+              },
+              "severity": {
+                "anyOf": [
+                  {
+                    "enum": [
+                      "info",
+                      "warning",
+                      "critical"
+                    ],
+                    "type": "string"
+                  },
+                  {
+                    "type": "string"
+                  }
+                ]
+              },
+              "table": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "table",
+              "column",
+              "kind",
+              "severity"
+            ],
+            "type": "object"
+          },
+          "type": "array"
+        },
+        {
+          "additionalProperties": true,
+          "properties": {
+            "code": {
+              "type": "string"
+            },
+            "details": {
+              "additionalProperties": {},
+              "type": "object"
+            },
+            "error": {
+              "type": "string"
+            },
+            "internal_code": {
+              "type": "string"
+            },
+            "message": {
+              "type": "string"
+            },
+            "retry_after_s": {
+              "type": "number"
+            }
+          },
+          "type": "object"
+        }
+      ]
+    },
+    "display": {
+      "additionalProperties": true,
+      "properties": {
+        "chart": {
+          "additionalProperties": true,
+          "properties": {
+            "chartType": {
+              "type": "string"
+            },
+            "color": {
+              "type": "string"
+            },
+            "title": {
+              "type": "string"
+            },
+            "x": {
+              "type": "string"
+            },
+            "xLabel": {
+              "type": "string"
+            },
+            "y": {
+              "anyOf": [
+                {
+                  "type": "string"
+                },
+                {
+                  "items": {
+                    "type": "string"
+                  },
+                  "type": "array"
+                }
+              ]
+            },
+            "yLabel": {
+              "type": "string"
+            }
+          },
+          "type": "object"
+        },
+        "code": {
+          "additionalProperties": true,
+          "properties": {
+            "executable": {
+              "type": "boolean"
+            },
+            "language": {
+              "anyOf": [
+                {
+                  "enum": [
+                    "sql",
+                    "json",
+                    "bash",
+                    "typescript"
+                  ],
+                  "type": "string"
+                },
+                {
+                  "type": "string"
+                }
+              ]
+            },
+            "title": {
+              "type": "string"
+            }
+          },
+          "type": "object"
+        },
+        "metric": {
+          "additionalProperties": true,
+          "properties": {
+            "label": {
+              "type": "string"
+            },
+            "status": {
+              "anyOf": [
+                {
+                  "enum": [
+                    "good",
+                    "warning",
+                    "critical"
+                  ],
+                  "type": "string"
+                },
+                {
+                  "type": "string"
+                }
+              ]
+            },
+            "trend": {
+              "anyOf": [
+                {
+                  "enum": [
+                    "up",
+                    "down",
+                    "neutral"
+                  ],
+                  "type": "string"
+                },
+                {
+                  "type": "string"
+                }
+              ]
+            },
+            "trendValue": {
+              "type": "string"
+            },
+            "unit": {
+              "type": "string"
+            },
+            "value": {
+              "type": [
+                "string",
+                "number"
+              ]
+            }
+          },
+          "type": "object"
+        },
+        "type": {
+          "anyOf": [
+            {
+              "enum": [
+                "table",
+                "chart",
+                "metric",
+                "code",
+                "text",
+                "list"
+              ],
+              "type": "string"
+            },
+            {
+              "type": "string"
+            }
+          ]
+        }
+      },
+      "type": "object"
+    },
+    "insights": {
+      "items": {
+        "additionalProperties": true,
+        "properties": {
+          "column": {
+            "type": "string"
+          },
+          "message": {
+            "type": "string"
+          },
+          "severity": {
+            "anyOf": [
+              {
+                "enum": [
+                  "info",
+                  "warning",
+                  "critical"
+                ],
+                "type": "string"
+              },
+              {
+                "type": "string"
+              }
+            ]
+          },
+          "value": {}
+        },
+        "required": [
+          "severity",
+          "message"
+        ],
+        "type": "object"
+      },
+      "type": "array"
+    },
+    "meta": {
+      "additionalProperties": true,
+      "properties": {
+        "cacheHit": {
+          "type": "boolean"
+        },
+        "connection": {
+          "type": "string"
+        },
+        "dialect": {
+          "anyOf": [
+            {
+              "enum": [
+                "postgres",
+                "mysql",
+                "mssql"
+              ],
+              "type": "string"
+            },
+            {
+              "type": "string"
+            }
+          ]
+        },
+        "executionTimeMs": {
+          "$ref": "#/properties/data/anyOf/0/items/properties/sample_matches"
+        },
+        "plan": {},
+        "rowCount": {
+          "$ref": "#/properties/data/anyOf/0/items/properties/sample_matches"
+        },
+        "tool": {
+          "type": "string"
+        },
+        "truncated": {
+          "type": "boolean"
+        }
+      },
+      "type": "object"
+    },
+    "summary": {
+      "type": "string"
+    }
+  },
+  "type": "object"
+}
  5. First observed

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnlyHint, openWorldHint, and idempotentHint, so the description correctly focuses elsewhere. It adds important behavioral context by disclosing that results are heuristic-only and not a compliance guarantee, which is not evident from annotations or schema. This is valuable beyond structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and well-ordered: the first sentence communicates the core action and scope, while the second adds the key caveat. The '[BUILD tier]' tag is a small, useful context marker and nothing in the description is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With a full output schema, fully documented parameters, and read-only/idempotent annotations, the description does not need to explain return values or side effects. It covers purpose, scope, and behavioral limits; the only contextual gap is explicit guidance on when to choose this tool over closely related siblings.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, including defaults, caps, flooring behavior, and connection-resolution guidance. The description adds no parameter-level detail, so the baseline of 3 is appropriate; the schema already carries the full explanatory burden.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('sweep'), a clear resource ('string columns across tables'), and enumerates concrete PII patterns (email, SSN, credit card, phone, JWT, bearer tokens). The PII focus clearly separates it from sibling tools like data_profile, analyze_table, or detect_anomalies even without naming them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for heuristic PII discovery and explicitly warns that it is 'not a compliance guarantee,' giving a when-not. However, it does not explicitly say when to prefer this tool over data_profile, analyze_table, or describe_schema, nor does it name an alternative tool for compliance-grade scanning.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All ThinAir Data toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources