Skip to main content
Glama

Purchase PII Pattern Scan

pii.scan
Idempotent

PAID $0.01 USDC on Base via x402. Detects selected personal-data patterns and returns classifications and positions, not matched values. Heuristic, not comprehensive. Calling this MCP tool returns a payment challenge and does not autonomously spend funds.

Input Schema

NameRequiredDescriptionDefault
textYesInput text, maximum 65536 UTF-8 bytes.

Output Schema

NameRequiredDescriptionDefault
assetNo
errorNo
inputNo
priceNo
pay_toNo
statusNo
acceptsNo
networkNo
resourceNo
capabilityNo
extensionsNo
purchaseIdNo
instructionNo
x402VersionNo
entitlementIdNo
execution_urlNo
execution_modeNo
payment_requiredNo
payment_required_headerNo
settlement_expectationsNo
confirmation_expectationsNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed10 schema fields changed
    • changedOutput schema / additionalProperties
      Previous value: -falseNew value: +true
    • addedOutput schema / properties / accepts
      Added value: +{
      +  "items": {
      +    "additionalProperties": true,
      +    "properties": {},
      +    "type": "object"
      +  },
      +  "type": "array"
      +}
    • addedOutput schema / properties / entitlementId
      Added value: +{
      +  "type": "string"
      +}
    • addedOutput schema / properties / error
      Added value: +{
      +  "type": "string"
      +}
    • addedOutput schema / properties / extensions
      Added value: +{
      +  "additionalProperties": true,
      +  "properties": {},
      +  "type": "object"
      +}
    • addedOutput schema / properties / purchaseId
      Added value: +{
      +  "type": "string"
      +}
    • addedOutput schema / properties / resource
      Added value: +{
      +  "additionalProperties": true,
      +  "properties": {},
      +  "type": "object"
      +}
    • addedOutput schema / properties / status
      Added value: +{
      +  "type": "string"
      +}
    • addedOutput schema / properties / x402Version
      Added value: +{
      +  "const": 2,
      +  "type": "number"
      +}
    • removedOutput schema / required
      Removed value: -[
      -  "payment_required",
      -  "execution_mode",
      -  "capability",
      -  "input",
      -  "price",
      -  "asset",
      -  "network",
      -  "pay_to",
      -  "execution_url",
      -  "payment_required_header",
      -  "settlement_expectations",
      -  "confirmation_expectations",
      -  "instruction"
      -]
  2. Added

TDQS

A3.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=false and openWorldHint=true but give no reason; the description explains why this read-like operation is flagged as a write — it is paid via x402 ($0.01 USDC on Base) and returns a payment challenge instead of autonomously spending funds. It also discloses the heuristic/comprehensive limits and that matched values are withheld. This is exactly the extra context annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four tight sentences, front-loaded with the cost and payment behavior — the single most decision-relevant fact — followed by output semantics and scope caveats. Minor redundancy between 'PAID $0.01 USDC on Base via x402' and 'returns a payment challenge', but nothing is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be spelled out, and the description still usefully characterizes them as classifications and positions. Cost, privacy behavior, accuracy limits, and the no-autonomous-spend guarantee are all covered; only the mechanics of satisfying the payment challenge (handled by sibling x402 tools) are left unstated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Only one parameter, text, and schema description coverage is 100% with a documented 65536-byte cap. The description adds nothing about the input beyond what the schema already states, so the baseline of 3 applies rather than a penalty.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Detects selected personal-data patterns and returns classifications and positions, not matched values.' The output-privacy distinction ('not matched values') plus the 'heuristic, not comprehensive' scope note make the tool's behavior unmistakable. It does not, however, name or contrast itself with the adjacent secret.scan sibling, which is the nearest alternative.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage context is only implied ('detects personal-data patterns' → use when you need PII detection in a text blob), and no when-not-to-use or alternative (e.g. secret.scan for credentials) is given. It does supply one genuinely useful precondition — that invoking it returns a payment challenge rather than a result — but that is a cost/prerequisite note, not routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.