compliance-evidence
Server Details
Dated, signed compliance-evidence packs: gov-fact-grounded claims + exclusion screens + trap-facts.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 3.7/5 across 4 of 4 tools scored.
Each tool has a clearly distinct purpose: building an evidence pack, grounding a claim, screening an entity, and verifying a pack. No overlap or ambiguity.
All tool names follow a consistent verb_noun pattern in snake_case (build_evidence_pack, ground_claim, screen_entity, verify_pack), making them predictable.
With only 4 tools, the server is tightly scoped to the core workflow of building, grounding, screening, and verifying compliance evidence. Each tool earns its place.
The tool surface covers the essential lifecycle for compliance evidence: creation, verification, and supporting checks. A minor gap is the absence of a tool to retrieve pack details without verification, but this is not critical.
Available Tools
4 toolsbuild_evidence_packAInspect
Build a dated, source-linked, SIGNED compliance-evidence pack for a regulated-AI deployer to file with their auditor. Grounds each ticker's claims against CURRENT public gov facts (contradiction-engine: SEC 10-K vs USAspending), screens each named entity against federal exclusion/sanctions (exclude-feed: OFAC/LEIE/SAM), and runs N trap-fact refusals (planted false facts refuted by live public data). Output is an EVIDENCE ARTIFACT with a hash-chain receipt — NOT a 'you are compliant' claim.
| Name | Required | Description | Default |
|---|---|---|---|
| traps | No | Optional custom trap-fact battery; omit to use the default battery. | |
| tickers | No | Public-company tickers whose disclosure claims to ground (max 10). | |
| entities | No | Named entities to screen: [{name, npi?, uei?, state?}] (max 20). |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It discloses key behavioral traits: grounding against 'CURRENT public gov facts', screening against federal exclusion lists, and running trap-fact refusals. It also clarifies the output is 'an EVIDENCE ARTIFACT with a hash-chain receipt — NOT a 'you are compliant' claim'. While it doesn't detail error handling or idempotency, it provides substantial transparency for an initial evaluation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, dense paragraph that front-loads the main action and then explains the three key steps. Every sentence adds value without repetition or fluff. It is concise yet comprehensive for the tool's core functionality.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (orchestrating grounding, screening, trap-facts) and the absence of an output schema, the description gives a good overview but lacks details on the exact structure of the EVIDENCE ARTIFACT, error scenarios, or prerequisites (e.g., need for API keys). It provides enough to understand what it does, but not enough to fully anticipate behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds meaning beyond the schema: it explains that 'traps' are 'planted false facts refuted by live public data' and that 'entities' are screened against federal exclusion/sanctions lists (OFAC/LEIE/SAM). This enriches understanding of optional parameters, justifying a higher score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool builds a dated, source-linked, SIGNED compliance-evidence pack for regulated-AI deployers. It specifies the verb 'build', the resource (evidence pack), and differentiates from sibling tools like ground_claim, screen_entity, and verify_pack by encompassing multiple steps (grounding, screening, trap-facts) and producing an artifact.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides context ('for a regulated-AI deployer to file with their auditor') but does not explicitly state when to use this tool versus alternatives such as ground_claim, screen_entity, or verify_pack. It implies usage for a complete pack, but lacks clarity on when to choose this over simpler tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ground_claimAInspect
Ground one public-company claim against CURRENT gov facts via the live contradiction-engine. Returns the dual-cited record if a verifiable 10-K-vs-USAspending contradiction exists, else an HONEST null ('checked, no contradiction at medium/high confidence as of T') — itself audit evidence.
| Name | Required | Description | Default |
|---|---|---|---|
| ticker | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description effectively communicates the tool's behavior: it returns a dual-cited record if a contradiction exists, or a descriptive null otherwise. It also notes the response serves as audit evidence, providing useful context beyond a simple return type.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise at two sentences, but the first sentence contains jargon ('live contradiction-engine', 'dual-cited record') that may reduce clarity. Nonetheless, it avoids unnecessary information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains what the tool returns in both success and failure cases, but it omits details like error handling for invalid tickers, rate limits, or prerequisites. Given the tool's specialized nature, additional context would improve completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The 'ticker' parameter is not described in the schema (0% coverage) and the description does not explain its meaning or format. While 'ticker' is somewhat self-explanatory as a stock ticker, the lack of explicit documentation forces the agent to infer its usage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly specifies the tool's action: 'Ground one public-company claim against CURRENT gov facts via the live contradiction-engine.' It uniquely identifies the resource (public-company claim) and distinguishes itself from siblings like 'screen_entity' by focusing on contradiction checking.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies use when verifying a public-company claim against government data, but it does not explicitly state when to use this tool versus alternatives like 'build_evidence_pack' or 'verify_pack', nor does it mention exclusions or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
screen_entityBInspect
Screen a named entity across federal exclusion/sanctions lists (OFAC SDN, OFAC Consolidated, OIG LEIE; SAM where enabled) via the live exclude-feed. FCRA-safe KYB/sanctions screen, not a consumer report.
| Name | Required | Description | Default |
|---|---|---|---|
| npi | No | ||
| uei | No | ||
| name | Yes | ||
| state | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It reveals that it screens via a 'live exclude-feed' and is 'FCRA-safe', but does not disclose behavioral aspects like whether it modifies state, requires authentication, or rate limits. It is a read-only lookup, but this is not explicitly stated.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that front-loads the core action. However, it could be improved by splitting to cover parameter details or usage notes. It earns its place but sacrifices completeness for brevity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and 4 parameters with 0% description coverage, the description is incomplete. It provides the list of databases and compliance note but fails to explain the function of optional parameters, return values, or error scenarios. The agent lacks essential context to use the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 4 parameters with 0% description coverage, yet the description only mentions 'name' implicitly via 'named entity'. It fails to explain the semantics of 'npi', 'uei', and 'state' – what they represent or how they affect the screening. This leaves the agent guessing about optional identifiers.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Screen a named entity' and the specific resource: federal exclusion/sanctions lists (OFAC SDN, OFAC Consolidated, OIG LEIE; SAM where enabled). It distinguishes itself from consumer reports with 'FCRA-safe' and specifies it's for KYB/sanctions screening, making its purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not explicitly state when to use this tool versus its siblings (build_evidence_pack, ground_claim, verify_pack). It implies usage for sanctions screening but provides no guidance on when not to use it or alternatives for different use cases like claims verification or evidence building.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_packAInspect
Verify a previously-issued pack's hash-chain receipt (proves the artifact is unaltered since generatedAt). Pass the pack id.
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It states the tool verifies integrity via hash-chain receipt, suggesting a read-only operation, but does not disclose what happens on failure, authorization needs, or rate limits. Adequate but not comprehensive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise (one sentence) and front-loaded with the core purpose. It could be slightly restructured for clarity, but every part is relevant and earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter tool with no output schema or annotations, the description covers the core purpose and input. Missing details about return value or error handling, which for a verification tool might be useful, but overall adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage and only one parameter, the description adds context ('Pass the pack id') beyond the schema's type-only definition. However, it lacks format specifics or examples, making it minimally sufficient.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: verifying a pack's hash-chain receipt to prove the artifact is unaltered since generatedAt. It uses specific verb 'verify' and resource 'pack's hash-chain receipt', and distinguishes from siblings (build_evidence_pack, ground_claim, screen_entity) as a verification tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage (pass the pack id) but does not explicitly state when to use this tool versus alternatives, nor does it provide exclusion criteria or prerequisites. The context is clear but no guidance on when not to use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- AlicenseAqualityAmaintenanceCompiles ISO 20022 readiness findings, remediation diffs, and simulated bank responses into sealed, tamper-evident audit evidence packs with Ed25519 signing and verification.Last updated6Apache 2.0
- Alicense-qualityBmaintenanceEnables defining and verifying evidence contracts for claims in READMEs, releases, or product pages using constrained verifiers and generating hash-chained receipts and reports.Last updatedMIT
- AlicenseAqualityBmaintenanceIssues, verifies, and exchanges portable cryptographic compliance passports for AI agents, enabling offline verification of regulatory compliance across 11 frameworks.Last updated3MIT
- AlicenseAqualityAmaintenanceConverts audit trails from AIops agents into framework-mapped, tamper-evident compliance evidence bundles for HIPAA, PCI-DSS, SOC 2, and GDPR.Last updated18MIT