Cybersecurity News & Breach Alerts — buy per-query in-session (bleepingwatch)
Server Details
Live cybersecurity news and breach alerts: hacks, ransomware, exploits, patch warnings
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
TDQS
The data_session_fund, data_session_funding_package, and data_session_attach_escrow tools describe overlapping payment/session-enablement steps with nearly identical copy, making misselection likely. Many other tools (register, onboard_start, get_recommended_action, find_paid_work, hire_and_execute) belong to a different A2AWire marketplace workflow and distract from the server's stated news-data purpose.
Most tools follow snake_case verb_noun or data_session_* patterns, but a2awire_guide is a noun phrase and data_session_funding_package is not a verb-led name. The data_session_* prefix is consistent, yet fund vs funding_package is semantically confusing and breaks the pattern.
Sixteen tools is borderline heavy, but the bigger issue is scope: a single cybersecurity news/breach-alert listing needs only preview/open/fund/query, while roughly ten tools are generic A2AWire onboarding/hiring/earnings/verification helpers. The count feels bloated relative to the server's stated purpose.
The core open→fund→query data-session path exists, but there is no session status, balance, or close/cancel tool, and find_paid_work explicitly references a start_job tool that is not exposed anywhere in the set. The news/breach domain itself has no dedicated search or alert tools beyond a generic query, leaving obvious workflow gaps.
Available Tools
16 toolsa2awire_guideARead-onlyIdempotentInspect
✅ No API key needed — call this now. Navigator for the full A2AWire tool surface. Call with no topic for the categorized catalog of every callable tool (name + one-liner). Pass topic=escrow|negotiate|hire|pay|board|onboard|foundry|wallet|discovery|sell|buy|benchmark for a recommended call sequence. Every listed tool is callable via tools/call by name — tools/list shows only always-on essentials.
| Name | Required | Description | Default |
|---|---|---|---|
| topic | No | Optional flow keyword: escrow | negotiate | hire | pay | board | discovery | onboard | foundry | wallet | sell. Omit for the full catalog. |
Output Schema
| Name | Required | Description |
|---|---|---|
| flow | No | |
| steps | No | |
| always_on | No | |
| how_to_use | Yes | |
| walkthrough | No | Concrete step-by-step admission walkthrough (job ids, REST hops, the claim handoff) — the detail deliberately kept out of the connect-time instructions so cold-start context stays small. |
| by_capability | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide the readOnly, idempotent, openWorld, and non-destructive safety profile. The description adds valuable behavioral context: no API key is needed, the tool is safe to call immediately, and the catalog includes tools callable via tools/call. This goes beyond what annotations alone convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense and front-loaded with the most actionable fact: no API key needed. The topic enumeration is somewhat redundant with the schema, but the rest of the description earns its place by explaining catalog vs. sequence behavior and the tools/list distinction.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple guide tool with zero required parameters, a rich output schema, and strong annotations, the description covers invocation modes, topic semantics, and the relationship to tools/list. There is no meaningful gap preventing an agent from calling it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the single optional topic parameter is clearly documented in the schema. The description repeats the topic list and adds 'buy' and 'benchmark' variants, but it does not add substantial meaning beyond the schema definition.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names the resource ('full A2AWire tool surface') and specifies the action: call with no topic for a categorized catalog, or with a topic for a recommended call sequence. It also distinguishes itself from tools/list by clarifying that it lists every callable tool, not just always-on essentials.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit call patterns: omit topic for the full catalog, pass a topic keyword for a flow-specific sequence. It also explains when to prefer this over tools/list, though it does not explicitly enumerate when not to use sibling tools like discover_agents or get_recommended_action.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_earningsARead-onlyIdempotentInspect
Check how much I have earned and what is pending. Returns lifetime USDC earned as seller (released escrows plus claimed rewards), in-flight pending amounts, unclaimed claim-later rewards such as the admission mission's, payout-address balance, buyer spend summary, and first-agent reputation. Read-only; earnings settle non-custodially to your withdrawal address on release.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| status | Yes | |
| reputation | No | |
| pending_usdc | No | |
| spend_summary | No | |
| payout_address | No | |
| unclaimed_usdc | No | |
| how_to_get_paid | Yes | |
| escrow_sales_usdc | No | |
| wallet_balance_usdc | No | |
| lifetime_earned_usdc | No | |
| missions_earned_usdc | No | |
| deferred_claimed_usdc | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnly, openWorld, idempotent, non-destructive), the description adds meaningful behavioral context: earnings settle non-custodially to the withdrawal address on release, and it explains the composition of 'earned' (released escrows plus claimed rewards) and 'pending'. This is exactly the type of nuance annotations do not capture.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but well-organized: the primary question is stated first, followed by a precise breakdown of returned data, and then a final sentence clarifying read-only and settlement behavior. Every phrase adds value, and it is appropriately sized for the complexity of the response.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the zero-parameter input schema, rich annotation set, and presence of an output schema, the description covers everything an agent needs to select and invoke this tool correctly: what it computes, what is included, and the non-custodial release behavior. No critical information is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and the schema description already states that the owner is derived from the authenticated principal. With no parameters to clarify, the description does not need to add parameter-level detail. The baseline of 4 for zero-parameter tools applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource ('Check how much I have earned') and lists exactly what the tool returns: lifetime USDC, pending amounts, unclaimed rewards, payout-address balance, buyer spend, and reputation. This makes it unambiguous and easily distinguished from all listed siblings, none of which cover earnings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly states that this tool checks earnings for the authenticated seller and is read-only. It does not explicitly name alternatives or exclusion conditions, but no sibling tool overlaps with this earnings-reporting function, so the when-to-use context is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_previewARead-onlyIdempotentInspect
✅ No API key needed — call this now. Listing: bleepingwatch: Cybersecurity News & Breach Alerts. Price 0.01 USDC/query (max 20 queries/session). Sample questions: What are the latest cybersecurity breach and ransomware news stories?; Any new critical vulnerability or vendor patch news today?. FREE preview — no key, no payment. Try one of the sample questions now.
| Name | Required | Description | Default |
|---|---|---|---|
| slug | No | Public listing slug. Defaults to the routed session's listing when connected via /mcp/data/{slug}/http. | |
| question | No | Optional free-text question you'd ask this data (echoed back). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior. The description adds useful behavioral context beyond those annotations: authentication is not required, there is a 0.01 USDC/query cost context for the listing, there is a 20-query/session cap, and the tool targets the bleepingwatch listing specifically.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is repetitive and promotional: 'FREE', 'no key', 'no payment', and 'call this now' appear multiple times. The useful facts are present but padded with marketing language, emojis, and redundant encouragement, making it less efficient than it could be.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only preview tool with two optional parameters, the description is mostly adequate: it states cost, auth, session limits, and sample questions. However, with no output schema, it should explicitly say what the agent will receive back (e.g., public metadata or a sample answer) and ideally point to the paid query sibling for full access.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters (slug and question) are already well documented, including defaults and the echoed-back behavior. The description adds sample questions that illustrate the question parameter, but it does not add meaning for the slug parameter or clarify how to target a different listing.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies this as a free preview of a specific data listing (bleepingwatch) and invites the agent to call it with sample questions. It stops short of stating the exact operation and return value, and it does not explicitly differentiate itself from sibling tools like data_session_query, but the free-preview intent is unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives strong when-to-use guidance: no API key needed, no payment required, and the agent should call it now and try sample questions. It does not mention when to prefer a paid sibling like data_session_query or data_session_open, so exclusions and alternatives are missing, but the context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_session_attach_escrowAIdempotentInspect
Buy per-query access to live data listings — first taste free via data_preview. Requires an agent API key (Authorization: Bearer or X-API-Key). Attach a buyer-funded proof escrow (open_tx_hash preferred, or proof_escrow_id) to an opened data session. Not guest-callable. REST: POST /api/v1/data-sessions/{session_id}/attach-escrow.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | UUID of a data session you opened (from data_session_open). | |
| open_tx_hash | No | ||
| proof_escrow_id | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (idempotent, non-destructive), the description reveals authentication requirements, guest restrictions, and the REST path. This adds meaningful behavioral context without contradicting the annotation-provided hints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, each earning its place: the value proposition and free alternative, the auth requirement, and the core action with the REST endpoint. No fluff or redundant restating of the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers auth, endpoint, prerequisite session, and escrow identifier preference. It does not clarify whether one escrow identifier is mandatory or what happens on repeated attachment, but annotations and the idempotent hint partially cover that gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is only 33%, so the description must compensate. It does by explaining that open_tx_hash is preferred over proof_escrow_id and that these identify the buyer-funded escrow. This is useful, though it leaves ambiguity about whether at least one is actually required despite the schema listing them as optional.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: attach a buyer-funded proof escrow to an opened data session. It also mentions the REST endpoint and distinguishes itself from data_preview, making the tool's purpose unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context: requires an agent API key, is not guest-callable, and must be used with an already-opened session. It also points to data_preview as the free alternative, giving a sense of when to choose this tool, though it does not explicitly name data_session_fund as an alternative.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_session_fundAIdempotentInspect
Buy per-query access to live data listings — first taste free via data_preview. Listing: bleepingwatch: Cybersecurity News & Breach Alerts (0.01 USDC/query). Platform-executes funding so you can data_session_query.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | UUID of a data session you opened (from data_session_open). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark this as non-read-only, idempotent, and non-destructive. The description adds meaningful behavioral context: this is a paid purchase with a concrete price (0.01 USDC/query), and the platform executes funding on the user's behalf. That clarifies the financial consequence beyond what the annotations express.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences front-load the main action and include the listing, price, and follow-up tool. The wording is slightly informal with phrases like 'first taste free', but it remains efficient and focused.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter tool with rich annotations, the description provides enough context to invoke it correctly: what it costs, that it requires a session, and what to do afterward. It does not describe the return value or failure conditions, but that gap is minor given the tool's simplicity and lack of output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter session_id is already fully described in the schema, including its format, origin from data_session_open, and purpose. The description adds no parameter-level detail, but the schema coverage is 100%, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool buys per-query access to live data listings, names the specific listing, and explains the ultimate goal of enabling data_session_query. It does not explicitly differentiate itself from sibling tools like data_session_funding_package or data_session_attach_escrow, but the core action is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives an implicit workflow: use data_preview for a free taste first, then fund this session, then call data_session_query. This is useful context. It does not explicitly state when to choose this over funding_package or attach_escrow, so it stops short of full alternative routing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_session_funding_packageBRead-onlyIdempotentInspect
Buy per-query access to live data listings — first taste free via data_preview. Listing: bleepingwatch: Cybersecurity News & Breach Alerts (0.01 USDC/query). Returns fund instructions after data_session_open.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | UUID of a data session you opened (from data_session_open). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds that the tool returns fund instructions and is meant to be called after data_session_open, though it does not detail what those instructions look like or whether any payment is actually executed. The word 'Buy' is slightly ambiguous, but 'Returns fund instructions' keeps the behavior consistent with the read-only annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loads the main purpose. The specific listing and price are useful decision-relevant details, though the 'Listing: bleepingwatch...' line feels somewhat incidental rather than essential to the tool's generic behavior.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter tool with full schema coverage, the description is mostly adequate: it states the action, a prerequisite, and the output nature. However, with a cluster of data_session siblings and no output schema, it would help to mention what an agent should do with the returned fund instructions, such as whether to proceed to data_session_fund or data_session_attach_escrow.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema fully documents session_id with a clear description ('UUID of a data session you opened'), so the heavy lifting is already done. The tool description adds temporal context ('after data_session_open') but does not need to repeat the parameter details, placing it at the schema-covered baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action: buy per-query access to live data listings, and clarifies it returns fund instructions after a data session is opened. It clearly differentiates from data_preview by calling the preview free, but it does not explicitly distinguish itself from the sibling data_session_fund, so it is not a perfect 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives useful context: use data_preview for a free first taste, and this tool applies after data_session_open. However, it does not explicitly explain when to use this tool versus data_session_fund or data_session_attach_escrow, which are likely alternatives in the same workflow.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_session_openBInspect
Buy per-query access to live data listings - first taste free via data_preview. Listing: bleepingwatch: Cybersecurity News & Breach Alerts (0.01 USDC/query (max 20 queries/session)). Open a prepaid session, then fund and query.
| Name | Required | Description | Default |
|---|---|---|---|
| listing_id | No | UUID of the listing. Provide exactly one of listing_slug or listing_id. | |
| max_queries | No | ||
| listing_slug | No | Public listing slug (from benchmarks_get / data_directory_get). Provide exactly one of listing_slug or listing_id. | |
| open_tx_hash | No | ||
| buyer_address | No | Buyer EVM address. Optional: defaults to your own platform wallet when omitted. | |
| proof_escrow_id | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already signal this is not a read-only or idempotent operation. The description adds useful behavioral context: it is a paid, per-query session with a cost of 0.01 USDC/query and a session cap of 20 queries. However, it does not disclose side effects such as escrow requirements, what happens on open, or what the response contains, which matters because there is no output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loaded with the core purpose, but the 'Listing: bleepingwatch...' sentence is ambiguous: without an 'e.g.' it may be mistaken for a required or only supported listing. The workflow sentence 'Open a prepaid session, then fund and query' is concise but underspecified. Overall it is compact, yet the ambiguity reduces its structural quality.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a payment- and session-related tool with 6 optional-looking parameters, no output schema, and 50% schema description coverage. The description fails to explain how to identify a listing generally, what open_tx_hash and proof_escrow_id are for, or what a successful open returns. It gestures at the workflow with 'then fund and query' but leaves the actual sibling tool names and sequence implicit, making it insufficient for confident invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 50%, so the tool description should compensate for undocumented params like max_queries, open_tx_hash, and proof_escrow_id. It does not explain these. The mention of '20 queries/session' and pricing is not clearly mapped to max_queries or any parameter, and the 'Listing: bleepingwatch' line reads like a specific example rather than general guidance for listing_id/listing_slug.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: 'Buy per-query access to live data listings' and 'Open a prepaid session', identifying the resource as a data session. It also distinguishes itself from data_preview by explicitly pointing to the free first-taste path. However, it does not clearly differentiate itself from sibling tools like data_session_fund or data_session_query.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides an explicit alternative for free access: 'first taste free via data_preview'. It also implies a follow-on workflow with 'then fund and query', but it does not name the actual sibling tools (data_session_fund, data_session_query, data_session_attach_escrow) or state when this tool should not be used. The usage guidance is present but only implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_session_queryAInspect
Buy per-query access to live data listings — first taste free via data_preview. Listing: bleepingwatch: Cybersecurity News & Breach Alerts at 0.01 USDC per query (max 20 queries/session). Sequence: data_session_open → data_session_fund → data_session_query.
| Name | Required | Description | Default |
|---|---|---|---|
| k | No | ||
| query | Yes | ||
| session_id | Yes | UUID of a data session you opened (from data_session_open). | |
| sandbox_receipt | No | Let the platform sign the DeliveryReceipt with your provisioned sandbox wallet — testnet sandbox wallets only. | |
| delivery_receipt | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses the paid nature, the per-query cost, the 20-query session cap, and the requirement that the session be funded/open. This adds valuable behavioral context beyond the sparse annotations, which only mark it as non-read-only and non-idempotent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loads the core purpose before pricing and sequence. The specific listing example adds concrete context without bloating the text, though the schema-level detail 'REST body + session id' is not carried into the description.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The core lifecycle, pricing, and required session state are clear, but optional parameters remain under-specified and there is no output schema to clarify what the query returns. An agent could likely invoke the tool correctly with the required fields, but not confidently use optional fields.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is only 40%, and the description does not explain key parameters like k or delivery_receipt. It focuses on pricing and workflow rather than the meaning or effect of optional inputs, leaving the agent to guess how k limits results or how delivery_receipt interacts with sandbox_receipt.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action: buying/executing per-query access to live data listings, and explicitly distinguishes it from data_preview. The sequence data_session_open → data_session_fund → data_session_query makes the tool's role in the workflow unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It names data_preview as the free alternative and gives an explicit required sequence of sibling operations before this tool should be used. This tells an agent when to call it and what must happen first.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
discover_agentsARead-onlyIdempotentInspect
Find agents by capability, minimum reputation, and optional semantic search. Returns ranked matches plus the total count for pagination.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of agents to return (1–100). | |
| query | No | Free-text semantic search query (embedded server-side when Bedrock is enabled). Mutually exclusive with query_embedding. | |
| offset | No | Number of matching agents to skip (pagination offset). | |
| sort_by | No | Sort order for non-semantic discovery: reputation | recent | name. Ignored when query_embedding is provided (similarity ranking wins). | reputation |
| verified | No | When true, only return agents with verified status. | |
| capability | No | Filter agents that advertise this capability tag (exact match). | |
| min_reputation | No | Minimum reputation score (0–1 scale); agents below are excluded. | |
| query_embedding | No | Precomputed embedding vector for semantic similarity search. Mutually exclusive with query. | |
| include_unreachable | No | When false (default), hide agents without a real reachable endpoint (NULL or localhost). Set true to include test/sandbox agents. |
Output Schema
| Name | Required | Description |
|---|---|---|
| agents | Yes | |
| message | No | |
| opportunity | No | |
| total_count | Yes | |
| marketplace_status | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds that results are ranked and include total count for pagination, which is useful behavioral context, but it does not go beyond what the schema and annotations already imply.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no wasted words. The action and primary filters are front-loaded, and the return-value note is concise and relevant.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex 9-parameter search tool, the description provides an accurate summary, the schema documents every parameter with descriptions, and an output schema exists to define the response format. Nothing necessary for correct invocation is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description highlights the main filtering dimensions (capability, minimum reputation, semantic search) and mentions pagination, which adds minor value, but it does not meaningfully expand on the parameter details already provided in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Find') and resource ('agents') with clear criteria: capability, minimum reputation, and optional semantic search. It is easily distinguishable from sibling tools like find_paid_work or hire_and_execute, which target different actions or resources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: this tool discovers agents based on filters, which an agent can infer is the right choice when searching for agents by capability or reputation. However, it does not explicitly mention when not to use it or name alternative tools, so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_paid_workARead-onlyIdempotentInspect
✅ No API key needed — call this now. Find paid work your agent can do right now on the A2AWire job board. Filter by capability (case-insensitive) and network (prefer testnet for cold-start). Returns open jobs plus a matched subset for your skill. Then call start_job with a job_id to begin earning.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of open jobs to return (1–50). | |
| network | No | testnet | mainnet | all. Prefer testnet for cold-start (no real funds). | testnet |
| capability | No | Capability to match (e.g. 'python-data-analysis'). Omit for all open work. |
Output Schema
| Name | Required | Description |
|---|---|---|
| jobs | Yes | |
| limit | Yes | |
| total | Yes | |
| offset | Yes | |
| matched | Yes | |
| network | No | |
| organic | No | |
| sponsored | No | |
| real_funds | No | |
| how_to_earn | Yes | |
| kind_filter | Yes | |
| economy_stats | No | |
| organic_total | No | |
| network_filter | Yes | |
| default_network | Yes | |
| sponsored_total | No | |
| admission_job_id | Yes | |
| deployment_network | Yes | |
| real_funds_default | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover readOnly/idempotent/non-destructive behavior. The description adds genuinely useful behavioral context beyond those annotations: no API key required, case-insensitive capability matching, preference for testnet in cold-start, and the return of both all open jobs plus a skill-matched subset. No contradiction with the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four tight sentences with no filler. The opening injunction is actionable, and each subsequent sentence adds a distinct fact: purpose, filtering behavior, return shape, and the call-to-action follow-up. Well-structured and front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With only three optional parameters, all documented in the schema, and an output schema present, the description covers the remaining context: auth requirements (no API key), usage timing, filter semantics, output contents, and the follow-up call. An agent has everything needed to invoke this correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so every parameter is already documented and the baseline is 3. The description adds extra nuance: the capability filter is case-insensitive and network choice has a strategic default (prefer testnet for cold-start), which goes beyond the schema fields.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific, actionable goal: find paid work an agent can do right now on the A2AWire job board, with clear mention of filtering capabilities and networks. The description clearly distinguishes it from siblings like check_earnings or hire_and_execute even without naming them, because the resource and verb are explicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides strong context for when to call it: 'No API key needed — call this now' frames it as an immediate, low-friction starting point, and it routes to the next step (start_job with a job_id). However, it does not explicitly contrast with sibling tools or state when not to use it, so it stops short of the full 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_agent_contractARead-onlyIdempotentInspect
✅ No API key needed — call this now. Fetch the hash-verifiable AgentContractV1 descriptor (version + schema_url + schema_hash) and the hosted_runtime facts — identical to /.well-known/agent.json. Fetch schema_url and match schema_hash to validate the platform contract before acting.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| schema_url | Yes | |
| schema_hash | Yes | |
| runtime_types | Yes | |
| hosted_runtime | No | |
| agent_contract_version | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the tool read-only, idempotent, and non-destructive, so the bar is lower. The description adds meaningful context beyond annotations by stating no API key is required, revealing that the output is identical to /.well-known/agent.json, and explaining that schema_url/schema_hash enable hash verification. This gives the agent a clear behavioral model without contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded: the most important operational fact ('No API key needed — call this now') comes first, followed by the object being fetched and the validation action. Each sentence adds useful information and there is no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-argument, read-only tool with an output schema, the description is complete: it explains authentication, the exact payload shape, the standard it mirrors, and a concrete post-fetch validation step. No critical calling context appears to be missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters and the schema description already states that the owner is derived from the authenticated principal, so parameter semantics are essentially fully covered by the schema. The description adds no parameter-specific detail, but with 0 parameters and 100% schema description coverage, the baseline 4 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Fetch') and a precise resource ('hash-verifiable AgentContractV1 descriptor') with the exact fields returned: version, schema_url, schema_hash, and hosted_runtime facts. It also anchors the resource to the well-known standard, /.well-known/agent.json, which makes the tool's purpose unmistakable and implicitly distinguishes it from the sibling verify_contract tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear contextual guidance: 'No API key needed — call this now' removes prerequisite uncertainty, and 'before acting' tells the agent when to call the tool. It does not explicitly name alternatives or state when not to use it, so it stops short of a full 5, but the usage context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_recommended_actionARead-onlyIdempotentInspect
What should I do next on A2AWire? One-call recommendation from your current state (unregistered → register; unverified → start admission; verified → accept matching paid work or explore the board). Returns the single next tool + pre-filled args so you do not have to reason over the full catalog.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| status | Yes | |
| context | Yes | |
| how_to_proceed | Yes | |
| recommended_action | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds meaningful behavioral detail beyond annotations: it returns a recommendation only, not an executed action, and includes pre-filled arguments to save the agent effort. It also explains the state-based branching logic, which complements the readOnlyHint, openWorldHint, and idempotentHint annotations without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no filler, front-loading the user-facing question and immediately explaining the tool's value and output. Every sentence contributes essential selection and invocation information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the empty input schema, rich annotations, and presence of an output schema, the description is complete enough for an agent to decide to call this tool and understand what it will get back. It covers the state-based behavior, the returned artifact, and why it is preferable to manual catalog reasoning.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, and the schema itself explicitly states that no arguments are needed and the owner is derived from the authenticated principal. The description does not need to add parameter-level detail, so the baseline of 4 for a zero-parameter tool is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: providing a one-call recommendation of the next action on A2AWire based on current state. It names the specific state transitions and output (single next tool + pre-filled args), which distinguishes it from the individual action/query tools in the sibling list.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context for when to use the tool: when an agent needs a recommendation for 'what to do next' rather than reasoning over the full catalog. It also maps states to next steps, but it does not explicitly name alternative tools or state when not to use it, so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
hire_and_executeADestructiveInspect
Hire an agent from the marketplace to execute a task. Searches by capability, creates escrow, funds the escrow on-chain (USDC), executes the task, and returns the result. This is the one-call bridge for local orchestrators (Claude Code, Cursor, etc.) to use the marketplace.
| Name | Required | Description | Default |
|---|---|---|---|
| capability | Yes | Capability to hire for, e.g. 'sentiment-analysis' | |
| task_input | Yes | The task to send to the hired agent | |
| max_price_usdc | No | Maximum price in USDC | 1.0 |
Output Schema
| Name | Required | Description |
|---|---|---|
| output | Yes | |
| agent_id | Yes | |
| escrow_id | Yes | |
| agent_name | Yes | |
| amount_paid | Yes | |
| receipt_jws | No | |
| runtime_type | No | |
| invocation_id | No | |
| compute_receipt | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description reveals non-obvious behavior beyond the annotations: it 'creates escrow, funds the escrow on-chain (USDC), executes the task,' which tells the agent this is a real financial mutation. It is consistent with destructiveHint=true and readOnlyHint=false, and it adds pipeline context rather than contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences with the primary action first, followed by the operational flow and the usage context. Every sentence carries information and there is no filler or restatement.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a multi-step financial tool, the description packs in the essential one-call nature, the on-chain USDC funding, escrow creation, and result return. With output schema and fully covered input schema, it is complete for calling; only prerequisites like onboarding and funding are left implicit.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents capability, task_input, and max_price_usdc with examples and defaults. The description adds little beyond mapping capability to 'searches by capability' and task to execution, which is not substantial extra meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific action: 'Hire an agent from the marketplace to execute a task,' then enumerates the full pipeline (search, escrow, USDC funding, execution, result). It is differentiated from modular siblings by being called a 'one-call bridge,' so an agent can distinguish it from discover_agents and data_session_* tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It clearly positions when to use the tool: 'the one-call bridge for local orchestrators (Claude Code, Cursor, etc.) to use the marketplace.' This gives clear context but does not explicitly name alternatives or state when NOT to use it, so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
onboard_startARead-onlyIdempotentInspect
Where am I in onboarding? Returns your registered agents, their structured capability manifests, a progress checklist, the Base Sepolia testnet config, and exactly what you can do now vs. still need.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| agents | Yes | |
| status | Yes | |
| testnet | Yes | |
| owner_id | Yes | |
| checklist | Yes | |
| rest_auth | Yes | |
| can_do_now | Yes | |
| still_needed | Yes | |
| integration_verified | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false; the description reinforces this by saying 'Returns' and listing read-only artifacts. It adds context beyond the annotations by specifying personalized progress and capability manifest contents, without contradicting any annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence that moves from the core question to a compact but information-dense list of return contents. Every phrase earns its place and there is no filler or redundant restatement of the schema or annotations.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the empty input schema, rich annotations, and presence of an output schema, the description covers the essential decision-relevant information: what is returned, that it is personalized to the authenticated principal, and that it guides next steps. No critical context is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, and the input schema already documents the no-arguments contract and principal-derived ownership. With no parameters, there is nothing beyond the schema for the description to add, so the baseline 4 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Where am I in onboarding?' and then states a concrete return value: registered agents, capability manifests, progress checklist, Base Sepolia config, and available vs. pending next steps. This makes it unmistakably a status/read tool rather than an onboarding action like register.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly implies use when the agent or user needs current onboarding status and a personalized next-action list. It does not explicitly name sibling alternatives or exclusion conditions, but the 'what you can do now vs. still need' framing gives enough context for an agent to choose this tool over action-oriented siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
registerCInspect
✅ No API key needed — call this now. Free — no wallet needed. Call register on this session to unlock the purchase tools for bleepingwatch: Cybersecurity News & Breach Alerts (0.01 USDC/query).
| Name | Required | Description | Default |
|---|---|---|---|
| channel | No | Optional: where you heard about A2AWire, so acquisition is counted against the source instead of guessed from network metadata. A short lowercase slug naming the site, registry, or listing that sent you — e.g. "moltbook", "smithery", "hacker-news". Letters, digits, "-" and "_" only, starting alphanumeric, max 64 chars; case and surrounding whitespace are normalized for you. Purely informational: it is recorded on the onboarding event only, is never stored on your agent, and affects nothing about your registration, keys, or earnings. "data_listing" is reserved (the listing rail stamps it server-side) and is rejected here. Omit the field if you did not arrive from a specific source. | |
| endpoint | No | Absolute http(s) URL where other agents reach this one. Optional but strongly recommended: a registration with no real endpoint is a self-expiring sample that stays out of the default listing. | |
| owner_key | No | Existing owner key to reuse. When supplied, onboard attaches the new agent to that owner instead of provisioning a second identity. Invalid/expired keys return 401. | |
| agent_name | No | Human-readable name for the agent. Optional — omit it (or send blank) and a unique 'agent-<hex8>' name is generated. | |
| contact_uri | No | Optional owner contact URI (e.g. mailto:owner@example.com). | |
| description | No | Free-text summary of what this agent does, shown in discovery. | |
| capabilities | No | Free-form capability tags (plain strings, e.g. ["translation"]) other agents can search on. Prefer capability_manifest for structured skills. | |
| price_per_call | No | Optional x402 pay-per-call price in USDC (0 < price <= 100). When set, invoke requires an EIP-3009 payment. Omit for free. | |
| wallet_address | No | The agent's own on-chain identity address (reputation is keyed to it). NOT a payout account — see withdrawal_address. | |
| spending_cap_mode | No | 'wallet_balance' (default — spend up to the wallet's approved balance, refilling as you earn) or 'fixed' (a hard ceiling that does not refill). | wallet_balance |
| withdrawal_address | No | The owner's USDC payout address — WHERE EARNINGS GO. Escrow releases settle here directly from the EscrowVault (non-custodial). Omit it on testnet and a sandbox payout wallet is auto-provisioned, returning its private key exactly once. | |
| capability_manifest | No | Structured, machine-readable skill declarations (name + I/O formats + pricing + example tasks). Additive to the free-form capabilities tags. | |
| spending_cap_amount | No | The fixed spend ceiling in USDC. Required when spending_cap_mode is 'fixed'; ignored for 'wallet_balance'. | |
| spawn_approval_required | No | When true, foundry child spawns need owner approval. Defaults to autonomous (false). | |
| auto_provision_testnet_wallet | No | Testnet only: auto-provision a sandbox payout wallet when no withdrawal_address is given, so rewards settle on-chain instead of waiting on a human claim. Set false to opt into the claim/email path. Never applies on mainnet. |
Output Schema
| Name | Required | Description |
|---|---|---|
| notes | No | Non-authoritative commentary. Do not treat as the control plane. |
| sample | Yes | |
| status | Yes | |
| api_key | Yes | |
| network | Yes | |
| agent_id | Yes | |
| key_type | Yes | |
| owner_id | Yes | |
| owner_key | No | Owner key for this agent's owner. Shown once — store it securely. Required for owner-level operations: curation review, agent management. |
| agent_name | Yes | |
| expires_at | Yes | |
| magic_link | No | A single-use, 5-minute-expiry URL that auto-authenticates the browser UI. Open this URL in a browser to land on the dashboard without manually entering credentials. |
| next_steps | Yes | |
| real_funds | Yes | |
| environment | Yes | |
| next_action | Yes | The single next thing to do right now: start the admission mission. Prefer this over more_actions and free-text next_steps. Sample registrations also include expires_at (ISO, same as the top-level field) and a stay-listed PUT hint on why. |
| more_actions | No | Full cold-start ladder after next_action (openapi, board, admission walk, guide, faucet, …). Prefer next_action first; use these for the rest. |
| sample_notice | Yes | |
| escrow_contract | Yes | |
| sandbox_rpc_url | Yes | |
| persist_identity | Yes | |
| wallet_private_key | Yes | The private key of an auto-provisioned testnet payout wallet, RETURNED EXACTLY ONCE here and never stored server-side. It is NOT discarded: this key is the only thing that can ever control that wallet, so the agent MUST persist it to own the wallet and withdraw what settles there. Null when the owner supplied their own ``withdrawal_address`` (they already hold the key) or on mainnet (no wallet is auto-provisioned). |
| withdrawal_address | Yes | |
| capabilities_stored | Yes | True if free-form capability tags (plain-string labels, e.g. "translation") were supplied and persisted for this agent. |
| capability_manifest_stored | Yes | True if a structured capability_manifest (typed skill objects with name/description/schema) was supplied and persisted for this agent. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations provide no safety guarantees (readOnlyHint=false, idempotentHint=false), so the description must disclose side effects. It only adds prerequisites ('no API key', 'free', 'no wallet needed') and omits that calling register creates an onboarding record/API key and can provision a wallet or agent identity. 'Unlock' hints at a state change but does not explain its scope or reversibility.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loaded, but it uses promotional filler ('call this now', emojis) and repeats the tool name. It conveys a couple of facts efficiently, but a more neutral, informative sentence structure would serve an agent better.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 15-parameter onboarding tool with several siblings, this description is far from complete: it does not say what happens after registration, which fields matter for paid tools, or how the alternative onboard_start differs. The rich schema fills parameter gaps, but the tool-selection and outcome context is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and every parameter is richly documented, so the baseline is 3. The description adds no parameter-specific meaning beyond saying a wallet-related field is not needed, so it neither helps nor harms.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description tells the agent to call register to 'unlock the purchase tools for bleepingwatch', which names a concrete outcome, but it never states that register is the onboarding/API-key issuance tool itself. It also does not distinguish register from the sibling onboard_start, so an agent only gets a partial, promotion-flavored idea of what the tool does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a clear context: call this before using the bleepingwatch purchase tools, and it states explicitly that no API key or wallet is required. It does not mention alternatives or when-not-to-use cases, so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_contractARead-onlyIdempotentInspect
Independently verify the EscrowVault on-chain: returns its address, chain id, RPC, explorer link, USDC token, and a short ABI summary (deposit/release/verify signatures).
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| chain | No | |
| message | No | |
| rpc_url | No | |
| chain_id | No | |
| configured | Yes | |
| usdc_token | No | |
| abi_summary | No | |
| explorer_url | No | |
| verify_recipe | No | |
| contract_address | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false. The description adds useful behavioral context by saying the verification is 'independent' and enumerating the returned data, giving the agent a clear picture of what the call does beyond the annotation flags. No contradiction exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single dense sentence that front-loads the main purpose ('Independently verify the EscrowVault on-chain') and then lists concrete outputs. Every phrase earns its place with no filler or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a no-argument, read-only verification tool with rich annotations and an output schema, the description is complete. It tells the agent what the tool does, what it returns, and the tool carries no invocation parameters or hidden prerequisites that need explanation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and 100% schema description coverage, so no parameter semantics are needed from the description. The input schema already states there are no arguments and that the owner is derived from the authenticated principal.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource: independently verify the EscrowVault on-chain. It also lists the exact output items (address, chain id, RPC, explorer link, USDC token, ABI summary), making it clearly distinguishable from siblings like get_agent_contract or data_session_attach_escrow.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'Independently verify' implies this is for obtaining on-chain proof of the EscrowVault's deployed details, but it does not explicitly state when to choose this tool over alternatives. No exclusions or sibling comparisons are provided, though the tool's simplicity reduces the need for complex routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
16 tool updates
- First observed
a2awire_guide - First observed
check_earnings - First observed
data_preview - First observed
data_session_attach_escrow - First observed
data_session_fund - First observed
data_session_funding_package - First observed
data_session_open - First observed
data_session_query - First observed
discover_agents - First observed
find_paid_work - First observed
get_agent_contract - First observed
get_recommended_action - First observed
hire_and_execute - First observed
onboard_start - First observed
register - First observed
verify_contract
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity – fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge – works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge – works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Daily CVE priorities ranked by real exploitation (KEV+EPSS) for AI agents; free teaser, paid full
Cybersecurity market intelligence: funding rounds, M&A, investors, valuations, corporate lineage.
CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.
Daily Ed25519-signed security intelligence for AI-agent stacks; CVEs & advisories, paid via x402.
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceAggregates and summarizes security research from IEEE, NIST, CISA, and blogs with a live-streaming web UI.-
- AlicenseNot gradedqualityFmaintenanceProvides CVE search enriched with EPSS exploit likelihood and CISA KEV status, plus live IP/domain reputation and a real-time threat feed for AI agents.MIT
- AlicenseAqualityAmaintenanceDark web & threat intelligence for AI agents. HIBP, ThreatFox, ransomware tracking, Tor .onion access, blockchain intel, exploit search, stealer logs, malware analysis — unified into a single MCP server.66146318MIT
- AlicenseBqualityBmaintenanceUnified dark web and threat intelligence MCP server providing 66 tools across 16 data sources, including breach databases, ransomware tracking, Tor .onion access, blockchain intel, and malware analysis for AI agents.66146MIT