Skip to main content
Glama

Gate verify

affix_gate_verify
Destructive

Check proof-based permission against a circuit or policy. Choose check to avoid consuming the proof, or consume to spend it on successful verification. Your application must enforce the returned decision. Requires mcp:write; can create audit evidence.

Input Schema

NameRequiredDescriptionDefault
bodyYesJSON request body for this check.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed5 schema fields changed
    • changedInput schema / properties / body / description
      Previous value: -"JSON request body. See the AffixIO OpenAPI schema resource for the contract."New value: +"JSON request body for this check."
    • addedInput schema / properties / body / properties
      Added value: +{
      +  "agentCredential": {},
      +  "agent_trust_credential": {},
      +  "circuit_id": {
      +    "minLength": 1,
      +    "type": "string"
      +  },
      +  "credential": {},
      +  "device_id": {
      +    "maxLength": 80,
      +    "type": "string"
      +  },
      +  "device_secret": {
      +    "maxLength": 128,
      +    "type": "string"
      +  },
      +  "entry_point": {
      +    "maxLength": 64,
      +    "type": "string"
      +  },
      +  "gate_id": {
      +    "maxLength": 64,
      +    "type": "string"
      +  },
      +  "mode": {
      +    "description": "Explicitly choose whether successful verification consumes the proof.",
      +    "enum": [
      +      "check",
      +      "consume"
      +    ],
      +    "type": "string"
      +  },
      +  "policy_id": {
      +    "minLength": 1,
      +    "type": "string"
      +  },
      +  "proof": {
      +    "minLength": 1,
      +    "type": "string"
      +  },
      +  "region_expected": {
      +    "type": "string"
      +  },
      +  "region_hash": {
      +    "type": "string"
      +  },
      +  "requestAttestation": {
      +    "type": "boolean"
      +  },
      +  "sector": {
      +    "type": "string"
      +  },
      +  "valid_from": {
      +    "maximum": 9007199254740991,
      +    "minimum": -9007199254740991,
      +    "type": "integer"
      +  },
      +  "valid_until": {
      +    "maximum": 9007199254740991,
      +    "minimum": -9007199254740991,
      +    "type": "integer"
      +  }
      +}
    • addedInput schema / properties / body / required
      Added value: +[
      +  "proof",
      +  "mode"
      +]
    • addedInput schema / properties / body / type
      Added value: +"object"
    • addedInput schema / required
      Added value: +[
      +  "body"
      +]
  2. First observed

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and non-idempotence, so the safety profile is known. The description adds valuable behavioral context: consume mode spends the proof, check mode avoids consumption, audit evidence may be created, and the application must enforce the returned decision. It does not contradict annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four tightly packed sentences with no waste. The critical mode choice and enforcement requirement are front-loaded, followed by permission and audit context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers the essential behavioral contract for a destructive verification tool: mode semantics, proof consumption, enforcement, permissions, and audit evidence. It does not describe the shape of the returned decision or how to handle failure cases, and without an output schema that leaves a minor gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is high, so the schema is expected to carry parameter documentation. The description adds meaning for the mode parameter (check vs consume) and references proof/circuit/policy, but does not explain the many optional nested fields such as sector, gate_id, or device_secret. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (verify) and resource (proof-based permission against a circuit or policy), making the core purpose clear. It does not explicitly distinguish itself from sibling verification tools like affix_circuit_verify or affix_verify, but the gate/policy framing provides useful specificity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit guidance on choosing between check and consume modes, and states the prerequisite 'Requires mcp:write' plus the enforcement requirement. It does not mention when to use this tool instead of similar verification siblings, which keeps it from a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources