clm_get_contract_accessGet inherit/override access, effective permission and ACL principals, including saved levels, follows-role, exclusions and surviving grants. Use the contract ID from the contract list. Removing one principal can leave access through another group or Everyone. MCP cannot change access.
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | Contract ID from the contract list |
Changes observed during successful MCP inspections.
Input schema / properties / id / descriptionPrevious value: -"Contract identifier"New value: +"Contract ID from the contract list"Input schema / properties / id / patternRemoved value: -"^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$"Output schema / (root)Previous value: -{
- "$schema": "http://json-schema.org/draft-07/schema#",
- "additionalProperties": false,
- "properties": {
- "accessInheritance": {
- "enum": [
- "inherit",
- "override"
- ],
- "type": "string"
- },
- "canManage": {
- "description": "Whether the caller can change contract access",
- "type": "boolean"
- },
- "contractId": {
- "allOf": [
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- },
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- }
- ],
- "description": "Contract UUID",
- "type": "string"
- },
- "effectivePermission": {
- "anyOf": [
- {
- "enum": [
- "view",
- "comment",
- "edit",
- "manage"
- ],
- "type": "string"
- },
- {
- "type": "null"
- }
- ]
- },
- "entries": {
- "description": "Explicit ACL entries when override is active",
- "items": {
- "additionalProperties": false,
- "properties": {
- "principalId": {
- "description": "User or group identifier",
- "minLength": 1,
- "type": "string"
- },
- "principalType": {
- "enum": [
- "user",
- "group"
- ],
- "type": "string"
- }
- },
- "required": [
- "principalType",
- "principalId"
- ],
- "type": "object"
- },
- "type": "array"
- },
- "filing": {
- "oneOf": [
- {
- "additionalProperties": false,
- "properties": {
- "kind": {
- "const": "unfiled",
- "type": "string"
- }
- },
- "required": [
- "kind"
- ],
- "type": "object"
- },
- {
- "additionalProperties": false,
- "properties": {
- "folder": {
- "additionalProperties": false,
- "description": "Visible folder and ancestor path, leaf last",
- "properties": {
- "id": {
- "allOf": [
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- },
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- }
- ],
- "description": "Folder UUID",
- "type": "string"
- },
- "name": {
- "description": "Folder name",
- "minLength": 1,
- "type": "string"
- },
- "parentFolderId": {
- "anyOf": [
- {
- "allOf": [
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- },
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- }
- ],
- "type": "string"
- },
- {
- "type": "null"
- }
- ]
- },
- "path": {
- "description": "Visible ancestor path, leaf last",
- "items": {
- "additionalProperties": false,
- "properties": {
- "id": {
- "allOf": [
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- },
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- }
- ],
- "description": "Folder UUID",
- "type": "string"
- },
- "name": {
- "description": "Folder name",
- "minLength": 1,
- "type": "string"
- },
- "parentFolderId": {
- "anyOf": [
- {
- "allOf": [
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- },
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- }
- ],
- "type": "string"
- },
- {
- "type": "null"
- }
- ]
- }
- },
- "required": [
- "id",
- "name",
- "parentFolderId"
- ],
- "type": "object"
- },
- "type": "array"
- }
- },
- "required": [
- "id",
- "name",
- "parentFolderId",
- "path"
- ],
- "type": "object"
- },
- "kind": {
- "const": "folder",
- "type": "string"
- }
- },
- "required": [
- "kind",
- "folder"
- ],
- "type": "object"
- },
- {
- "additionalProperties": false,
- "properties": {
- "kind": {
- "const": "unavailable",
- "type": "string"
- }
- },
- "required": [
- "kind"
- ],
- "type": "object"
- }
- ]
- },
- "folderId": {
- "anyOf": [
- {
- "allOf": [
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- },
- {
- "pattern": "^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$",
- "type": "string"
- }
- ],
- "type": "string"
- },
- {
- "type": "null"
- }
- ]
- }
- },
- "required": [
- "contractId",
- "folderId",
- "filing",
- "accessInheritance",
- "effectivePermission",
- "canManage",
- "entries"
- ],
- "type": "object"
-}New value: +nullDoes the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false; the description's 'MCP cannot change access' is consistent reinforcement of that safety profile rather than new information. The genuinely additive behavioral note is the warning that access can persist through other groups, which matters when interpreting results, but nothing is said about permissions required, latency, or result size.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the returned content, then the ID sourcing, then the caveat. The first sentence is a dense noun pile of ACL jargon but every term maps to a real output field, so nothing is padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter read-only tool with no output schema, the description does the important work of naming what comes back (effective permission, ACL principals, exclusions, surviving grants), which compensates for the missing output schema. It falls short only on result shape or volume, which an agent handling a large ACL payload would want.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is a single UUID parameter with 100% schema description coverage, so the schema already carries the semantics. The description's only parameter text mirrors the schema wording ('Contract ID from the contract list') and adds no format, sourcing, or validation detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource ('Get ... access ... and ACL principals') and enumerates the returned facets: inherit/override, effective permission, saved levels, follows-role, exclusions, surviving grants. That distinguishes it from the mutation siblings, though it never explicitly contrasts with clm_list_contract_shares or clm_get_contract, so an agent must infer the boundary.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It supplies an input hint ('Use the contract ID from the contract list') and one caveat about removing a principal while access survives via another group or Everyone, but it never says when to reach for this versus the shares/ACL listing siblings. Usage is implied rather than scoped.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Add one secure layer between your agents and this server.