Skip to main content
Glama

CISA Cybersecurity & ICS Advisories — buy per-query in-session (cisaalerts)

data_session_attach_escrow

Idempotent

Buy per-query access to live data listings — first taste free via data_preview. Requires an agent API key (Authorization: Bearer or X-API-Key). Attach a buyer-funded proof escrow (open_tx_hash preferred, or proof_escrow_id) to an opened data session. Not guest-callable. REST: POST /api/v1/data-sessions/{session_id}/attach-escrow.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
session_idYesUUID of a data session you opened (from data_session_open).
open_tx_hashNo
proof_escrow_idNo

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. First observed

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already supply readOnlyHint=false, idempotentHint=true, and destructiveHint=false. The description adds meaningful context beyond those: authentication requirements (Bearer/X-API-Key), the guest-call restriction, the commercial effect of the operation (per-query purchase), and the preference for open_tx_hash over proof_escrow_id. No contradiction with annotations — the mutating 'attach/buy' framing is consistent with readOnlyHint=false.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Five compact sentences, each earning its place: commercial purpose, free alternative, auth requirements, mechanism with parameter preference, guest restriction, and REST endpoint. The purpose is front-loaded in the first sentence. Minor redundancy exists between the 'buy per-query access' framing and the 'attach escrow' mechanism, but the density is otherwise tight.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 3-parameter tool with no output schema, the description covers the invocation essentials well: prerequisites, target session, parameter preference, and endpoint. But with no output schema present, the lack of any mention of what a successful attach returns or how success is signaled is a real gap. It also never clarifies the relationship to data_session_fund, leaving the overall funding workflow partially unexplained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 33% — only session_id is documented in the schema. The description partially compensates by clarifying that open_tx_hash and proof_escrow_id are alternative identifiers for a buyer-funded proof escrow and that open_tx_hash is preferred. However, it does not explain where these values come from or how they relate to the escrow creation flow, leaving the two undocumented parameters under-specified.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('attach a buyer-funded proof escrow to an opened data session') and its purpose ('buy per-query access to live data listings'). It explicitly names data_preview as the free alternative, helping an agent distinguish the paid path from the free one. However, it does not differentiate this tool from the closely-related sibling data_session_fund, leaving some ambiguity about which funding mechanism to choose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context: it requires an agent API key (Bearer or X-API-Key), is not guest-callable, and operates on a session opened via data_session_open (reinforced in the schema). It also hints at sequencing via 'first taste free via data_preview'. However, it gives no explicit exclusion guidance relative to sibling tools like data_session_fund or data_session_funding_package, so the when-not-to-use boundaries are incomplete.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

B3.1/5.0
Disambiguation2/5

Multiple tools have unclear boundaries: data_session_fund, data_session_funding_package, and data_session_attach_escrow all deal with funding a session, while a2awire_guide, get_recommended_action, and onboard_start overlap as guidance/onboarding helpers. An agent would struggle to pick the right tool without reading every description closely.

Naming Consistency4/5

Tool names are uniformly snake_case and mostly follow a verb_noun or data_session_* patttern. Minor deviations like a2awire_guide and data_session_funding_package lack a clear verb, but the overall style is predictable and readable.

Tool Count3/5

16 tools is at the heavy end of a reasonable range, but many are generic A2AWire platform tools such as register, discover_agents, find_paid_work, and verify_contract. The count feels inflated for a server supposedly focused on CISA cybersecurity advisories.

Completeness2/5

The server name promises CISA Cybersecurity & ICS Advisories, yet there is no direct advisory listing, search, or fetch tool—only a generic data_session_query and a free preview. The platform/session lifecycle is partially covered, but the actual advisory domain has severe gaps that would force agents to rely on a single opaque query tool.

Resources