Skip to main content
Glama

Bidda Sovereign Intelligence

Server Details

Search and retrieve cryptographically-verified compliance nodes. 3,000+ nodes across 31 pillars AI Governance, Banking & Global Finance, Cybersecurity, Medical & Healthcare, Legal & IP Sovereignty, ESG and more. Zero hallucination: every node traces to primary legal sources with avg 7 citations.

Status
Healthy
Last Tested
Transport
Streamable HTTP
URL

Glama MCP Gateway

Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.

MCP client
Glama
MCP server

Full call logging

Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.

Tool access control

Enable or disable individual tools per connector, so you decide what your agents can and cannot do.

Managed credentials

Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.

Usage analytics

See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.

100% free. Your data is private.
Tool DescriptionsA

Average 4.1/5 across 18 of 18 tools scored. Lowest: 3.3/5.

Server CoherenceA
Disambiguation5/5

Each tool has a clearly distinct purpose: browsing topics, searching nodes, getting specific nodes, comparing jurisdictions, checking compliance, managing run ledgers, etc. There is no overlap that would cause confusion.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern in snake_case (e.g., browse_topics, get_node, seal_run). The verbs are varied but appropriate, and the naming is predictable.

Tool Count5/5

With 18 tools, the server covers a broad range of compliance intelligence operations without being excessive. The count is well-scoped for the domain.

Completeness5/5

The tool set provides comprehensive coverage: discovery (list_pillars, search_nodes, browse_topics), retrieval (get_node, get_jurisdiction_bundle), analysis (check_action_compliance, compare_jurisdictions, get_crosswalk, get_dependency_chain, get_mitre_mapping), monitoring (get_latest_changes, watch_changes), and auditing (create_attestation, open_run, record_run_entry, seal_run, get_run, point_in_time). No obvious gaps for the stated purpose.

Available Tools

25 tools
browse_topicsAInspect

Browse the registry by cross-cutting compliance TOPIC (for example data breach notification, AI transparency, AML and KYC). Returns each topic with how many rules carry it and across how many pillars and jurisdictions. Topics sit on top of the 39 pillars without replacing them. Free, no key required. Pass a topic string to drill into one.

ParametersJSON Schema
NameRequiredDescriptionDefault
topicNoOptional topic name to filter or drill into.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so description carries full burden. It discloses that the tool is free and keyless (no auth required), describes the browse action as read-only by nature, and explains drilling into a specific topic. This is sufficient behavioral context for a simple query tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences total, each earning its place: first states action and examples, second describes return value, third explains position relative to pillars and usage. No fluff, front-loaded with purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema and only one optional parameter, the description adequately explains return values (counts, pillars, jurisdictions), relationship to pillars, and authentication requirements. Minor gap: no mention of error handling or response format, but not critical for this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers the one optional parameter 'topic' with description. Description adds semantic value by distinguishing browsing all topics (no parameter) from drilling into one (with topic string), which enhances agent understanding beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the tool browses the registry by compliance topic, provides concrete examples (data breach notification, AI transparency, AML and KYC), and specifies what it returns (counts across pillars and jurisdictions). The verb 'browse' is distinct from sibling tools like check, create, or compare.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Description implies usage for browsing topics and mentions it is free and requires no key, but does not explicitly contrast with siblings or state when not to use this tool versus alternatives. Context about topics being on top of pillars helps but lacks direct guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_action_complianceAInspect

Pre-flight regulatory check. Agent describes an intended action in natural language ("process EU resident biometric data", "transfer health records to a third-party AI vendor", "deploy autonomous trading model in Singapore") and receives a ranked list of regulations that may apply, plus a risk indicator (LOW/MODERATE/HIGH). The primary tool for runtime compliance gating in autonomous agent workflows.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax matches to return. Default 10. Max 25.
actionYesNatural-language description of the intended action.
jurisdictionNoOptional jurisdiction filter (eu, us, uk, etc.).
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must fully cover behavior. It discloses that the tool returns a ranked list of regulations with a risk indicator, but it does not mention side effects, authentication requirements, or rate limits. The description adds some transparency but is incomplete.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no extraneous information. Key details (purpose, input format, output characteristics) are front-loaded, making it highly efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite no output schema, the description effectively communicates the return format (ranked list of regulations, risk indicator). With three parameters and clear context, the description is complete for an agent to select and invoke the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 100% description coverage for all three parameters. The description adds value by explaining that the 'action' parameter should be a natural-language description, with specific examples (e.g., 'process EU resident biometric data'), which aids understanding beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool performs a 'pre-flight regulatory check' and provides examples of natural language actions it handles. It distinguishes itself by being 'the primary tool for runtime compliance gating in autonomous agent workflows,' which sets it apart from sibling tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says it is the primary tool for runtime compliance gating, implying when to use it. However, it does not mention when to avoid it or provide direct comparisons to siblings like get_crosswalk or search_nodes. The guidance is clear but lacks exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compare_jurisdictionsAInspect

Compare how different jurisdictions address a compliance topic, side by side, including where their numeric thresholds differ (for example a breach-notification deadline of 72 hours versus 30 days). It surfaces the real rules and numbers and does not rank which jurisdiction is stricter. Requires an active Bidda subscription: pass your key as api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
topicYesTopic to compare, for example "data breach notification".
api_keyYesYour Bidda subscription API key (sent as x-bidda-api-key). A free trial counts.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. It discloses that the tool does not rank strictness, surfaces real rules/numbers, and requires a subscription. Contradictions are absent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three concise sentences front-load main purpose, include an example, and convey key requirement. No extraneous information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, but description adequately explains the return concept (side-by-side with thresholds). Lacks specifics on return format or scope of jurisdictions, but sufficient for a comparison tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for both parameters. Description adds value by providing example for topic ('data breach notification') and clarifying that api_key is sent as x-bidda-api-key and that free trial counts.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the verb 'compare' and resource 'jurisdictions addressing a compliance topic', with specific examples like 'breach-notification deadline'. It distinguishes from sibling tools like get_jurisdiction_bundle by focusing on side-by-side comparison and thresholds.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly requires an active Bidda subscription and mentions passing api_key. Provides usage condition but does not explicitly state when not to use or mention alternative tools like get_crosswalk.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

consult_nodeAInspect

The one-call governed turn: fetch the full vault node (this consumes one call on your key, exactly like unlocking a node) AND record a verified node_consulted entry for it on an open run, in a single step. The entry pins the node to its current version + integrity hash, so the run receipt proves what the agent actually consulted. Use this instead of get_node when you are inside a run. Requires an active Bidda subscription: pass api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
modelNoOptional: the model id/version making the decision.
actionNoOptional: an action the agent took or checked.
run_idYesThe open run to record into (from open_run).
api_keyYesYour Bidda subscription API key. A free trial counts.
node_idYesThe rule to fetch and record.
decisionNoOptional: what the agent decided using this node.
input_hashNoOptional: a sha256:... hash of the user's message instead of the text.
user_inputNoOptional: the end user's message as text.
subject_hashNoOptional: a sha256:... hash of an end-user identifier. Hash only.
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description provides full behavioral context: it consumes one call, records an entry with version and integrity hash, and requires an API key. This adequately discloses the tool's side effects and constraints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no wasted words. The first sentence explains the core action and its cost, and the second sentence explains the recording purpose and usage hint.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 9 parameters, no output schema, and no annotations, the description covers the main functionality, side effects, and intended usage. However, it does not describe the return value or error conditions, which would make it fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with individual descriptions for each parameter. The description adds minor context (e.g., run_id from open_run, node_id as rule to fetch), but does not significantly enhance understanding beyond the schema definitions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the tool fetches a vault node and records a node_consulted entry in one step, and explicitly distinguishes it from get_node by specifying when to use it instead ('inside a run').

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Description explicitly states when to use this tool ('when you are inside a run') and when to use the sibling get_node, and lists a prerequisite ('active Bidda subscription').

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_attestationAInspect

Create a signed, time-stamped record of which Bidda rules a person or AI agent relied on for a decision. Returns a record ID and a public verify URL so anyone can later confirm the record has not been changed. Useful for agents that must keep an audit trail of what they checked. Requires an active Bidda subscription: pass api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
agentYesThe system or AI agent that made the decision.
nodesYesnode_ids that were checked (max 50).
actionNoOptional: what the agent did.
api_keyYesYour Bidda subscription API key. A free trial counts.
workflow_steps_followedNoOptional: steps the agent followed.
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description provides critical behavioral details: the record is signed and time-stamped, returns a record ID and public verify URL for integrity confirmation, and requires a subscription. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three well-structured sentences: purpose and output, utility, and requirement. No fluff or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description explains return values. It covers purpose, output, and requirement. Could mention parameter constraints like max 50 nodes, but schema already covers that.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers all 5 parameters with descriptions (100% coverage). Description adds minimal extra context, such as the api_key requirement. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool creates a signed, time-stamped record of Bidda rules used for a decision, distinguishing it from the sibling tools which are read-only (get, list, search) or check compliance.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Describes utility for audit trails and mentions the requirement of an active Bidda subscription and api_key. Does not explicitly state when not to use or compare with siblings, but context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_control_attestationAInspect

Sign a tamper-evident record of one of YOUR OWN controls or policies and the Bidda obligation nodes it maps to. Each obligation is pinned to its current version + integrity hash at signing time, so the record shows what the control was mapped against on that date. This is the design-side evidence ('we operate this control, mapped to these obligations'); run receipts are the operating-side evidence. Requires an active Bidda subscription: pass api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
nodesYesObligation node_ids the control maps to (max 50).
api_keyYesYour Bidda subscription API key. A free trial counts.
controlYesThe name of your control or policy.
frameworkNoOptional: the framework you are mapping to (e.g. "EU AI Act").
statementYesWhat the control does or asserts (plain text).
evidence_refNoOptional: a reference/URL/hash to your own evidence (kept by you).
control_ownerNoOptional: the role or team that owns the control.
control_statusNoOptional: implemented | planned | in-progress.
effective_dateNoOptional: YYYY-MM-DD the control took effect.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It discloses that the tool creates a tamper-evident record with integrity hashes, requires a subscription, and is design-side evidence. It does not mention side effects or destructive behavior, but the creation action is implied.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact (two sentences plus a phrase) and front-loaded with the core action. It could be more structured (e.g., bullet points for parameters), but it avoids wasted words and efficiently conveys key information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (9 parameters, no output schema), the description adequately explains the main purpose, key feature (pinning), requirement (subscription), and context (design vs. operating). Optional parameters are covered by the schema, which has 100% coverage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline is 3. The description adds meaning beyond schema by explaining that 'nodes' are obligation node_ids (max 50) and that they are pinned with current version and integrity hash. This provides context not evident from the schema alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Sign a tamper-evident record') and the resource ('one of YOUR OWN controls or policies and the Bidda obligation nodes it maps to'). It distinguishes from sibling tools like create_attestation by specifying it is design-side evidence as opposed to operating-side run receipts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes a prerequisite ('Requires an active Bidda subscription: pass api_key') and explains the feature of pinning obligations. However, it does not explicitly state when not to use this tool or mention specific alternatives among siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

drift_checkAInspect

Check whether the compliance rules an agent has cached in its own memory are still current. Submit the node_id and the integrity hash you stored when you last grounded on each rule; get back, per rule, whether it is fresh, has drifted (content changed), or was withdrawn (instrument repealed) - so the agent re-grounds before acting on stale law. Included with every API tier; the per-call batch size scales with your plan. Pass api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
anchorsYesThe cached rules to check.
api_keyYesYour Bidda subscription API key. A free trial counts.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without annotations, the description discloses the tool's read-only nature, scalability, and return of per-rule status. Missing details on rate limits or error conditions, but adequate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three front-loaded sentences covering purpose, usage, and pricing/scaling. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Complete for a simple tool with 2 params and no output schema. Could mention optionality of hash more directly, but generally sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Adds meaning beyond schema by explaining the hash usage (optional) and API key context. Schema coverage is 100%, so baseline is 3; description provides extra context.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool checks if cached compliance rules are current using integrity hashes. It distinguishes from siblings like 'check_action_compliance' by focusing on cached rule integrity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides guidance on when to use (before acting on stale law) and mentions batch scaling, but does not explicitly exclude alternatives or specify when not to use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

gap_checkAInspect

Given the compliance rules a team says it covers, return the prerequisite rules Bidda's dependency graph links to them that were NOT listed - the 'you missed the prerequisite obligation' gaps - plus any covered rule the registry marks withdrawn. A coverage aid for a qualified reviewer; it does not rank or determine compliance. Requires an active Bidda subscription: pass api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
depthNoOptional: how many dependency hops to walk (1-3, default 1).
nodesYesThe node_ids you cover (max 200).
api_keyYesYour Bidda subscription API key. A free trial counts.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It informs that the tool requires an active Bidda subscription and an API key, indicates it is read-only ('coverage aid'), and specifies that it does not rank or determine compliance. It also describes the two types of gaps returned (prerequisite missing, withdrawn). This is good coverage, though it lacks details on error handling, rate limits, or performance characteristics.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences long, with the first sentence clearly explaining the core functionality. The second and third sentences add useful context about intended use and authentication. There is no fluff or repetition, and it is appropriately front-loaded. However, a slightly more streamlined presentation could improve readability, so it earns a 4 rather than a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (dependency graph, prerequisite gaps, withdrawn rules) and the absence of an output schema, the description is adequate but not fully complete. It explains what the tool returns and what it does not do, but it does not describe the output format, structure of results, or behavior regarding the depth parameter (e.g., how dependency hops affect results). More detail on return values or non-obvious behaviors would improve completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides full coverage (100%) for all three parameters, each with a description. The tool description adds minimal new meaning: it restates that the API key requires a subscription and that nodes are 'node_ids you cover', but these reproduce the schema. The depth parameter is not mentioned in the description. Thus, the description adds no significant value beyond the schema, meeting the baseline score of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: given covered compliance rules, it returns prerequisite rules that are missing (gaps) and any covered rule marked as withdrawn. It uses specific verbs ('return the prerequisite rules') and identifies the unique output (gaps in prerequisite obligations and withdrawn rules). While it does not explicitly distinguish from sibling tools, the function is highly specific and unlikely to be confused with others like 'drift_check' or 'obligation_deltas'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for a 'qualified reviewer' seeking coverage gaps and states what it does not do ('does not rank or determine compliance'). However, it does not explicitly specify when to use this tool versus alternatives, nor does it mention when not to use it. The context signals include many sibling tools that could serve alternative purposes, but no guidance is provided on how to choose among them.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_audit_packAInspect

Export a run as a governance evidence pack: the signed receipt, every entry, a roll-up of the nodes consulted (with pinned versions/hashes), an independent hash-chain + Merkle integrity self-check, and a coversheet mapping the receipt to the record-keeping obligations it supports (EU AI Act Art. 12/26, ISO/IEC 42001, NIST AI RMF). A sealed run is readable by id; a still-open run's draft pack needs your api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
run_idYesThe run to export.
api_keyNoOptional: your Bidda key, required for a still-open (unsealed) run.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description fully discloses the pack contents, the distinction between sealed and open runs, and the regulatory relevance. It could add potential limitations but is already strong.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, dense, two-sentence paragraph that front-loads essential information without wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity, the description covers the pack contents, usage modes, and regulatory relevance adequately. No output schema exists, but the description compensates by detailing what is included.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds context by explaining when api_key is needed (for still-open runs) and clarifies run_id as 'the run to export', going slightly beyond schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool exports a run as a governance evidence pack and lists specific contents (signed receipt, entries, node roll-up, hash-chain, coversheet) and regulatory mappings, distinguishing it from siblings like get_run.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides clear context on when to use (sealed vs open run) and notes the api_key requirement for open runs, but does not explicitly state when not to use the tool or mention specific alternatives among siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_crosswalkAInspect

Return the cross-framework mapping dimensions for a node: which other regulations, standards, or jurisdictions this rule maps to (e.g. GDPR Article 17 → CCPA right-to-delete → POPIA Section 24). Discovery returns the available dimensions; full mapping values are vault-gated.

ParametersJSON Schema
NameRequiredDescriptionDefault
node_idYesNode ID to inspect crosswalks for.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description fairly discloses that full mapping values are vault-gated (requires additional permissions) and distinguishes between discovery and full mapping output. However, it does not mention other behavioral aspects like rate limits, idempotency, or error handling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is remarkably concise (2 sentences), with no fluff. The purpose is front-loaded, and every sentence adds value: first defines the tool, second clarifies limitations.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description provides a solid overview of what to expect (list of dimensions, with examples) and mentions access gating. However, it does not specify the exact output format (e.g., JSON structure) or behavior when no crosswalks exist. It is sufficiently complete for a simple tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single parameter node_id is described in the schema as 'Node ID to inspect crosswalks for.' The description adds context that the node is a rule and the mapping is cross-framework, which enriches understanding beyond the schema's minimal description. Schema coverage is 100% so baseline is 3, and the extra context justifies a 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool returns cross-framework mapping dimensions for a node, with concrete examples (GDPR Article 17 → CCPA right-to-delete → POPIA Section 24). It also distinguishes between discovery and full mapping (vault-gated), which differentiates it from sibling tools like get_mitre_mapping or get_jurisdiction_bundle.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

While the description implies using it to inspect crosswalk dimensions for a node, it lacks explicit guidance on when to use this tool versus alternatives like get_mitre_mapping or check_action_compliance. No ‘when to use’ or ‘when not to use’ statements are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_dependency_chainAInspect

Walk the prerequisite chain for a compliance node. Given one node, returns its full dependency tree (the prior obligations an agent must satisfy before this one applies). Use this to plan a complete compliance posture: unlocking one node usually requires understanding 3-8 upstream nodes. Defaults to depth 2; max 4.

ParametersJSON Schema
NameRequiredDescriptionDefault
node_idYesRoot node ID to expand from.
max_depthNoHow many hops to walk (1-4). Default 2.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations, but the description discloses key behaviors: it walks the chain, returns a tree, defaults to depth 2, max depth 4. Lacks mention of side effects or auth, but is sufficiently informative for a read-like operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two efficient sentences, front-loaded with the core verb and object, no wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, but return value is described (full dependency tree). Siblings are listed but not compared. Overall complete for the tool's complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions, and the added context (full dependency tree, typical depth) enhances understanding beyond the schema alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states it walks the prerequisite chain and returns the dependency tree, effectively distinguishing it from siblings like check_action_compliance or get_node by framing the purpose for compliance planning.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly tells when to use the tool ('Use this to plan a complete compliance posture') and provides typical depth expectations (3-8 upstream nodes). Lacks explicit when-not or alternatives, but context is strong.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_jurisdiction_bundleBInspect

Return all compliance nodes that apply in a specific jurisdiction (EU, US, UK, Australia, Singapore, India, Canada, China, South Africa, Japan, Brazil and others). Use when an agent enters a new market and needs the full regulatory surface for that geography.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax nodes to return. Default 25. Max 100.
jurisdictionYesJurisdiction code or name: eu, us, uk, au, sg, india, canada, china, south-africa, japan, brazil.
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so the description must fully disclose behavior. It claims to 'Return all compliance nodes' but includes a limit parameter, creating ambiguity about completeness. It does not mention pagination, ordering, or what a 'compliance node' is, leaving significant gaps.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler. The purpose and usage context are front-loaded. Every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description lacks explanation of 'compliance nodes' and the implications of the limit parameter (e.g., capping results). With no output schema, the description should clarify the expected output. This is insufficient for a tool intended for entering new markets.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, with both parameters described. The description adds marginal value by listing jurisdiction examples (already in schema) but does not clarify the limit behavior or default beyond what schema states. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it returns compliance nodes for a specific jurisdiction, with examples. The verb 'Return' and resource 'compliance nodes' are specific, but it doesn't differentiate from siblings like search_nodes or get_node, which might also return nodes for a jurisdiction.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use when an agent enters a new market and needs the full regulatory surface for that geography.' This provides clear context, though it doesn't mention when not to use it or alternative tools like get_node for single node retrieval.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_latest_changesAInspect

List the most recently updated compliance nodes: the regulatory change feed. Use to monitor incoming amendments, new guidance, or freshly added rules. Filter by pillar to focus on a domain. Agents should call this on a schedule to keep compliance posture current.

ParametersJSON Schema
NameRequiredDescriptionDefault
daysNoLook back N days. Default 30. Max 180.
pillarNoOptional pillar filter, e.g. "AI Governance" or "Cybersecurity".
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without annotations, the description indicates a read-only polling operation ('list', 'call on a schedule'), which implies safety, but it omits details like pagination, rate limits, or behavior when no changes exist.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no waste: the first defines the tool concisely, the second gives actionable usage advice. Each sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple polling tool with two optional params and no output schema, the description covers purpose, usage pattern, and filtering. It could briefly mention the response is a list of nodes, but the name and description suffice.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already describes the parameters. The description adds 'Filter by pillar' but no additional meaning for 'days' beyond what the schema provides (default 30, max 180).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'list', the resource ('recently updated compliance nodes'), and frames it as a 'regulatory change feed', which is specific and distinguishes it from siblings like 'search_nodes' or 'watch_changes'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly advises agents to call this on a schedule for monitoring, and mentions filtering by pillar. However, it does not explain when to use this over the sibling 'watch_changes' or provide exclusion criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_mitre_mappingAInspect

The MITRE Rosetta Stone. Given a MITRE technique ID across 5 frameworks (ATT&CK Enterprise, ATT&CK Mobile, ATT&CK ICS, D3FEND, ATLAS), return the Bidda node for that technique plus its mapped compliance obligations: NIST 800-53 controls, ISO 27001 Annex A clauses, PCI DSS requirements, NIS2 articles, HIPAA Security Rule, DORA articles, NERC CIP, IEC 62443. The bridge between how SOC teams think (technique IDs) and how compliance teams think (control families). Free.

ParametersJSON Schema
NameRequiredDescriptionDefault
technique_idYesMITRE technique ID. ATT&CK Enterprise (T1566, T1486, T1078, T1003.001, T1547.001); ATT&CK Mobile (T1474, T1521, T1471, T1430, T1417); ATT&CK ICS (T0883, T0809, T0879, T0886, T0814); D3FEND (D3-FIM, D3-MFA, D3-NTA, D3-NI, D3-AI, D3-CH); CAPEC (CAPEC-66, CAPEC-63, CAPEC-98, CAPEC-94, CAPEC-49); or ATLAS (AML.T0020).
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description bears full responsibility for behavioral disclosure. It states the tool returns 'Bidda node' + compliance obligations, but it does not mention read-only nature, authorization requirements, rate limits, or potential error cases. This is adequate but lacks depth for a tool that likely involves external data.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise (two main sentences plus a short closing), with key information front-loaded via the metaphor. It lists supported frameworks and compliance standards efficiently. The 'Free.' is unnecessary but harmless.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the tool's input (technique ID from multiple frameworks) and output (Bidda node + compliance obligations). Without an output schema, it provides a high-level but sufficient account. It omits return structure details, but the list of compliance standards gives agents a clear expectation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the schema already provides detailed examples for the technique_id parameter. The description adds context about the returned compliance standards and the Bidda node, but does not clarify input format beyond the schema. Thus, the description adds only marginal value over the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly defines the tool as a mapper from MITRE technique IDs (across 5 frameworks) to compliance obligations (9 standards). The metaphor 'MITRE Rosetta Stone' effectively conveys its cross-domain purpose, distinguishing it from siblings like get_crosswalk or check_action_compliance.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains when to use it: as a bridge between SOC and compliance teams. It implicitly indicates not to use it for other mappings (e.g., cross-framework mappings might belong to get_crosswalk). However, it does not explicitly state alternatives or when to avoid this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_nodeAInspect

Get a specific compliance node by its ID. Returns the node summary: title, compliance pillar, version, last updated, and BLUF. The full node (machine-executable deterministic workflow, actionable schema, primary legal citations, dependency chain) is available at bidda.com.

ParametersJSON Schema
NameRequiredDescriptionDefault
idYesNode ID, e.g. "basel-iii-capital", "gdpr-article-5-principles", "fatf-40-recommendations-2023-consolidated", "us-hipaa-privacy-rule"
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so the description carries the full burden. It states the tool returns a summary and that the full node is available externally, which implies it is not a write operation. However, it lacks details on authentication, rate limits, or idempotency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler, front-loaded with the core action and results. Efficiently communicates purpose and extra information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple get by ID tool with one parameter and no output schema, the description adequately covers what the tool does and what it returns. It mentions where to find additional data, which is helpful context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and already describes the id parameter with examples. The description adds value by specifying that it retrieves a node by ID and listing the returned fields (summary contents), which goes beyond the schema's parameter description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb (Get), the resource (compliance node by ID), and the content of the return (summary with title, pillar, version, etc.). It distinguishes from siblings by specifying single-node retrieval by ID.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus list_pillars or search_nodes. It does not mention alternatives or conditions for use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_runAInspect

Fetch a run and its entries. The owner can read an open or sealed run (pass api_key); a sealed run is also publicly readable by id and reports whether its signature is valid.

ParametersJSON Schema
NameRequiredDescriptionDefault
run_idYesThe run_id to fetch.
api_keyNoOptional: your Bidda key, required to read your own still-open run.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without annotations, the description discloses key behaviors: the owner can read open/sealed runs with api_key, sealed runs are publicly readable, and the response reports signature validity for sealed runs. It doesn't cover error cases, but the mutation and access patterns are clear.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences: first sentence states the core purpose, second adds critical behavioral details (access rules and output). No fluff, and every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description mentions entries and signature validity, which covers key output aspects. It is sufficient for a simple fetch tool, though more detail on return format would be beneficial.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds meaning to api_key by specifying 'your Bidda key, required to read your own still-open run,' which clarifies the parameter's purpose beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Fetch a run and its entries.' which is a specific verb+resource combination. It distinguishes itself from sibling tools like open_run, seal_run, and record_run_entry by focusing on reading, not writing or starting runs.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains when to use the api_key (to read an open run) and when it's unnecessary (for sealed runs, which are publicly readable). However, it does not explicitly mention alternatives or when to use other sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_pillarsAInspect

List all compliance pillars in the Bidda Sovereign Intelligence registry with node counts. Use this first to discover available compliance domains before searching. Bidda has 10,085 cryptographically-verified nodes across 39 pillars, including a MITRE layer spanning 6 frameworks (ATT&CK Enterprise/Mobile/ICS, D3FEND, ATLAS, CAPEC) plus Banking, AI Governance, Cybersecurity, Healthcare, Legal, ESG and more.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, but description accurately reflects read-only listing operation with node counts. No hidden behavioral traits disclosed, but no reason to expect destructive effects. Sufficient for a simple list.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences: first states purpose, second provides usage context and scale. No wasted words, perfectly front-loaded with critical information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Describes output (node counts, examples of pillars), no output schema present. Could mention output format details, but scale information adds completeness. Adequate for a straightforward list-all operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema has zero parameters with 100% coverage. Description adds value by enumerating example pillars (MITRE, Banking, etc.) and scale, enhancing context beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states verb 'list' and resource 'compliance pillars with node counts'. Distinguishes from siblings by positioning as first step to discover domains.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use this first to discover available compliance domains before searching', providing clear usage context. Lacks explicit when-not-to-use or alternatives, but sufficient for most cases.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

obligation_deltasAInspect

The obligation-level change feed: primary sources whose content changed (or whose node was withdrawn), mapped to the Bidda obligation nodes they affect, filterable by time, pillar, or specific nodes. Use it to answer 'what obligations changed since I last reviewed?'. Requires an active Bidda subscription: pass api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoOptional: max deltas to return (default 100, max 500).
nodesNoOptional: restrict to deltas affecting these node_ids.
sinceNoOptional: ISO timestamp; only deltas newer than this are returned.
pillarNoOptional: restrict to one pillar.
api_keyYesYour Bidda subscription API key. A free trial counts.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Despite no annotations, the description explains it is a change feed, filterable by time/pillar/nodes, and that results map primary sources to affected nodes. It does not mention side effects or pagination but provides sufficient behavioral context for a read operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences plus a brief usage line, no wasted words, front-loaded with key information. Perfectly concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 5 parameters, no output schema, and no annotations, the description covers purpose, filters, and authentication. It omits return format details but the mapping statement gives an idea. For a change feed with siblings, it is fairly complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds extra meaning by grouping the parameters: 'filterable by time, pillar, or specific nodes' and explaining api_key requires an active subscription. This aids understanding beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it is an 'obligation-level change feed' that returns changes mapped to obligation nodes, and provides a use case 'answer what obligations changed since I last reviewed?'. It distinguishes from sibling tools like get_latest_changes by specifying 'obligation-level' and 'Bidda obligation nodes'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use: 'to answer what obligations changed since I last reviewed?' and mentions a prerequisite (requires active Bidda subscription with api_key). However, it does not explicitly contrast with sibling tools like get_latest_changes or watch_changes.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

open_runAInspect

Open a run ledger: a signed, tamper-evident log of what an agent does across a whole task or conversation (for example a support-bot chat). Returns a run_id. Record one entry per turn with record_run_entry, then seal_run to get a single signed Run Receipt. Requires an active Bidda subscription: pass api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
agentYesThe system or agent running the task or conversation.
labelNoOptional human label, for example the chat or ticket id.
api_keyYesYour Bidda subscription API key. A free trial counts.
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. It mentions the tamper-evident nature, return of run_id, and api_key requirement, but misses details like idempotency or potential limits. This is adequate but not exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three concise sentences, front-loaded with the purpose. Each sentence adds value: definition, workflow, and requirement. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity and full schema coverage, the description covers the key aspects: purpose, workflow, and authentication. It could mention error handling or output format details, but overall it is fairly complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds minimal extra context beyond the schema (e.g., examples for label), but doesn't significantly deepen understanding of the parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly defines the tool as opening a run ledger, a signed tamper-evident log, and distinguishes it from siblings like record_run_entry and seal_run by positioning it as the first step.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides a workflow: open the run, record entries with record_run_entry, then seal_run. It also mentions the prerequisite of a Bidda subscription and api_key, though it doesn't explicitly state when not to use this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

oscal_assessment_resultsAInspect

Export a governed run's evidence as a NIST OSCAL assessment-results document (the machine-readable format GRC and audit tooling consumes): reviewed-controls (the obligation nodes consulted), observations (each pinned to its version + integrity hash), and props recording the independent integrity self-check. A sealed run is readable by id; a still-open run needs your api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
run_idYesThe run to export as OSCAL assessment-results.
api_keyNoOptional: your Bidda key, required for a still-open (unsealed) run.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden. It discloses that the tool outputs a document with specific sections and notes access conditions (sealed vs. open). It does not mention error handling or rate limits, but for a read-only export, these are less critical.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences: the first clearly states purpose and output content, the second clarifies access conditions. Every word serves a purpose; no redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description adequately outlines the output structure (three sections). It could mention response format details, but for a specialized export tool, the provided info is sufficient for understanding the tool's function.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents both parameters. The description adds context about api_key (needed for still-open runs) and implies run_id identifies the run, but no additional syntax or constraints beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool exports a governed run's evidence as a NIST OSCAL assessment-results document, specifying the content (reviewed-controls, observations, props). This directly distinguishes it from siblings like get_run or open_run, which serve different purposes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains when to use the tool (for GRC/audit tooling consuming OSCAL format) and provides context on sealed vs. open runs, implying when an API key is needed. It does not explicitly list alternatives or when not to use, but the guidance is clear and sufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

point_in_timeAInspect

Get a signed record of which committed version of a rule was authoritative at a specific past date, anchored to the public history chain. Useful when an agent must show what a rule said at the moment it acted. Requires an active Bidda subscription: pass api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
as_ofNoISO date or time, or epoch milliseconds. Defaults to now.
api_keyYesYour Bidda subscription API key. A free trial counts.
node_idYesThe rule (node_id).
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so the description carries the full burden. It discloses the signed record, anchoring to history chain, and subscription requirement. It does not detail side effects, but for a read operation the transparency is adequate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences with no waste. The core purpose is front-loaded, followed by usage guidance and a prerequisite. Every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description explains what the tool returns (signed record) but lacks details about the format or contents of the output. Given no output schema, completeness is moderate but could be improved with output specifics.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds minimal value beyond the schema: it mentions as_of defaults to now, node_id is the rule, and api_key is for subscription. This is sufficient but not above baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it gets a signed record of the authoritative rule version at a past date, anchored to a public history chain. This verb+resource combination is specific and distinguishes it from siblings like browse_topics or check_action_compliance, which deal with other aspects.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says 'Useful when an agent must show what a rule said at the moment it acted,' providing a clear use case. It also requires an active subscription and api_key, but does not discuss when not to use or compare to alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

record_run_entryAInspect

Append one entry to an open run: which Bidda rules the agent consulted, what it decided, and the end user's input (as text via note, or privately as input_hash). Each entry is hash-chained to the previous one. Requires an active Bidda subscription: pass api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
noteNoOptional: the end user's message as text.
modelNoOptional: the model id/version that produced this decision (e.g. gpt-4o-2024-08-06).
nodesNoOptional node_ids the agent consulted (max 50).
actionNoOptional: an action the agent took or checked.
run_idYesThe run_id returned by open_run.
api_keyYesYour Bidda subscription API key. A free trial counts.
decisionNoOptional: what the agent decided or did this turn.
entry_typeNoOptional: node_consulted | action_checked | decision | note. Defaults to note.
input_hashNoOptional: a sha256:... hash of the user's message instead of the text.
output_hashNoOptional: a sha256:... hash of the agent's output.
subject_hashNoOptional: a sha256:... hash of an end-user identifier for per-subject traceability. Hash only, never plaintext.
verify_nodesNoOptional: pin each node in "nodes" to its current version + integrity hash (proof, not just a claim). No extra call charge.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description must carry the full burden. It discloses key behavioral traits: hash-chaining for integrity, privacy via input_hash, and subscription requirement. It does not cover potential errors, limits, or return format, but the disclosed traits are valuable and not merely redundant.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise: three sentences that front-load the primary purpose, add a key behavioral detail (hash-chaining), and state a requirement. Every sentence earns its place without unnecessary elaboration.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (12 parameters, no output schema), the description provides a high-level view but lacks details on return values, error conditions, and parameter relationships (e.g., entry_type enum usage). While schema descriptions fill some gaps, the tool description could better contextualize the workflow with sibling tools like open_run and seal_run.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The tool description provides a helpful overview of how parameters relate (nodes for rules, decision, note/input_hash for user input) but adds limited extra meaning beyond the schema descriptions themselves. It does not detail each parameter's semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Append one entry to an open run.' It specifies the content of entries (rules consulted, decision, user input) and mentions hash-chaining. This differentiates it from sibling tools like open_run and seal_run, which have distinct roles.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool ('Append one entry to an open run') and provides a prerequisite ('Requires an active Bidda subscription: pass api_key.'). However, it does not explicitly contrast with alternatives or state when not to use it, leaving some ambiguity for the agent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

seal_runAInspect

Seal an open run into one signed Run Receipt covering every entry, with a public verify URL. Idempotent: sealing an already-sealed run returns the same receipt. Requires an active Bidda subscription: pass api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
run_idYesThe run_id to seal.
api_keyYesYour Bidda subscription API key. A free trial counts.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses idempotency, return value, and authentication needs. It could mention state changes or error conditions, but is mostly transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences: first states purpose and output, second adds idempotency and requirement. No wasted words, front-loaded with key information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description explains the return value (signed Run Receipt with verify URL). It covers purpose, idempotency, and auth. Could mention required run state, but overall adequate for a simple 2-parameter tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds context for api_key (subscription info) but nothing beyond schema for run_id. Overall, it adds some value but not substantial.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'seal' and resource 'open run', and specifies the output: 'one signed Run Receipt covering every entry, with a public verify URL'. This distinguishes it from siblings like open_run, record_run_entry, and get_run.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes idempotency behavior and a subscription requirement, providing useful context. However, it does not explicitly state when to use this tool versus alternatives or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_nodesAInspect

Search Bidda compliance nodes by keyword. Returns matching node summaries including a one-sentence BLUF (Bottom Line Up Front): the exact compliance obligation in plain language. Every node traces to a primary legal source (no hallucination). Examples: "Basel III capital", "GDPR data breach", "AML transaction monitoring", "SOC 2 Type II".

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax results (default 10, max 25)
queryYesSearch terms, e.g. "Basel III capital requirements", "GDPR data breach notification 72 hours", "FATF travel rule"
pillarNoOptional: filter by pillar name, e.g. "Banking & Global Finance", "Cybersecurity", "AI Governance & Law", "Medical & Healthcare"
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It describes output quality (no hallucination, legal trace) but does not explicitly state read-only nature, rate limits, or authentication needs. It is adequate but not exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Extremely concise: two sentences plus a list of examples. Every sentence adds value. Front-loaded with purpose and key output characteristics.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, the description sufficiently explains what is returned (summaries with BLUF, legal sources). It also adds trust context (no hallucination). However, it omits details like pagination or error handling.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description does not add new semantic meaning beyond the schema's own parameter descriptions and examples. The examples in the description are similar to those in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it searches compliance nodes by keyword and explicitly describes the return value (summaries with BLUF, tracing to legal sources). The examples differentiate it from siblings like browse_topics or get_node.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool vs alternatives. While it's clear for keyword search, there is no mention of when not to use it or comparison to sibling tools like browse_topics or get_crosswalk.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

watch_changesBInspect

Subscribe to regulatory change alerts: watch specific rules and/or whole pillars and get notified by email or webhook when their primary source changes. Requires an active Bidda subscription: pass api_key.

ParametersJSON Schema
NameRequiredDescriptionDefault
labelNoOptional name for the alert.
nodesNonode_ids to watch.
api_keyYesYour Bidda subscription API key. A free trial counts.
pillarsNoPillar names to watch.
channelsNoDelivery channels, for example { "email": true, "webhook": false }. Defaults to email.
webhook_urlNoRequired if the webhook channel is enabled.
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It states it is a subscription mechanism that notifies on changes, which is helpful, but does not disclose how to cancel, if updates are possible, or any rate limits or destructive behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with clear purpose and prerequisite. No fluff, front-loaded with the action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the main action and a requirement, but with 6 parameters and no output schema, it lacks explanation of return values (e.g., subscription ID) or what happens on error, leaving uncertainty for the agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds no additional meaning beyond the schema for parameters like label, nodes, pillars, channels, or webhook_url.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool subscribes to regulatory change alerts and watches specific rules or whole pillars. It is distinct from sibling tools like get_latest_changes which is for one-time checks, though it does not explicitly differentiate from them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions requiring an active Bidda subscription and passing an api_key, but provides no guidance on when to use this tool versus alternatives such as get_latest_changes or search_nodes.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Discussions

No comments yet. Be the first to start the discussion!

Try in Browser

Your Connectors

Sign in to create a connector for this server.

Resources