Skip to main content
Glama

ECZ-ID Trust MCP

Server Details

Read-only ECZ-ID Business Passport state lookup via the public ECZ-ID Resolver. Reports state only.

If you are the author of this connector, you can claim ownership with GitHub, an HTTP challenge, or a DNS record. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
99.9% over 22 days
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL

TDQS

A3.6/5.0

Scored across 7 tools

Disambiguation3/5

get_current_state and resolve_identity both return current Resolver-derived state, and get_resolver_link duplicates a link already returned by resolve_identity, creating meaningful overlap. explain_status vs get_current_state also blurs (rendering status vs returning state). Descriptions give hints (network resolve vs narrow derived state) but boundaries remain fuzzy.

Naming Consistency4/5

Nearly all tools follow a verb_noun pattern (get_*, create_*, explain_*, find_*, resolve_*), which is predictable. Minor deviation: create_request_to_resolve is an elongated phrase and find_product uses a different verb than the get_* family, but overall readable and consistent.

Tool Count5/5

Seven tools is well-scoped for a focused trust/verification domain, with each tool nominally earning a place. No bloat or excessive granularity for the stated purpose.

Completeness4/5

The surface covers the core lifecycle: create a request, resolve an identity, read current state, explain status, fetch the resolver link, and discover/install products. Minor gaps exist (no batch resolve, no explicit revocation/history lookup), but agents can work around them.

Available Tools

7 tools
create_request_to_resolveCreate a neutral Request-to-Resolve (authenticated)AInspect

AUTHENTICATED: create a neutral, shareable request for independently re-checkable ECZ-ID evidence. Requires a Microsoft Entra bearer token with the RequestToResolve.Create scope (or app role). It never verifies a target, never sends messages, and absence of evidence is never rendered as unsafe.

ParametersJSON Schema
NameRequiredDescriptionDefault
target_typeYes
consent_modeYes
resolver_refNo
idempotency_keyNo
target_descriptorYes
requested_evidence_categoryYes

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full behavioral burden and does so well: it discloses authentication requirements, the required scope/app role, and important negative behaviors ('never verifies a target, never sends messages, absence of evidence is never rendered as unsafe'). It doesn't discuss idempotency or response behavior, but still provides substantial behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tightly written sentences with the critical authentication requirement front-loaded and the non-behaviors condensed into a clear list. Every sentence earns its place with no wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Strong on purpose, authentication, and side-effect boundaries, but incomplete for a 6-parameter creation tool with no output schema. Required parameters like consent_mode and requested_evidence_category are unexplained, and there is no indication of return value or failure behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description provides no parameter-level meaning for target_type, target_descriptor, requested_evidence_category, consent_mode, resolver_ref, or idempotency_key. It only frames the overall request concept, leaving agents to guess formats and semantics for required fields.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('create'), a precise resource ('a neutral, shareable request for independently re-checkable ECZ-ID evidence'), and explicitly disclaims verification and messaging, which differentiates it from siblings like resolve_identity. The tool's role is clear and distinguishable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear usage context: it is authenticated, requires a Microsoft Entra bearer token with a specific scope, and clarifies what the tool never does. It doesn't name sibling tools or provide explicit when-not-to-use conditions, but the boundary against verification and messaging serves as strong implicit guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

explain_statusExplain ECZ-ID statusAInspect

Deterministically render the exact ECZ-ID status using the claims-safe renderer (VERIFIED is an ECZ-ID state, not a Microsoft certification). Absence of evidence renders the approved neutral wording — never "unsafe". No LLM.

ParametersJSON Schema
NameRequiredDescriptionDefault
ecz_idYesECZ-ID identifier. Parent, e.g. ECZ-GB-RBS1NW; or child Passport, e.g. ECZ-GB-RBS1NW::MCP_PASSPORT-ABC123

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does so well: it declares deterministic rendering, claims-safe wording, that VERIFIED is an ECZ-ID state rather than a Microsoft certification, absence-of-evidence handling, and that no LLM is involved. It omits auth/permission requirements and rate/return behavior, keeping it short of a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Roughly two dense sentences, front-loaded with the core action, with no filler. Each clause (determinism, VERIFIED semantics, neutral fallback, no LLM) contributes distinct information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter renderer with no output schema and no annotations, the description conveys the semantics of the output wording and its guarantees. It does not hint at the returned shape or any access prerequisites, leaving a small gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%: the single ecz_id parameter already documents the parent/child forms and pattern. The description adds no parameter-level syntax or format detail, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific action (deterministically render/explain) on a specific resource (ECZ-ID status) via a named mechanism (the claims-safe renderer). An agent understands the intent, but the description never names a sibling such as get_current_state, so the boundary between 'explain' and 'get current state' is left to inference.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use / when-not-to-use guidance and no named alternative among the six sibling tools. Usage is only implied by the wording ('claims-safe', 'No LLM'), which an agent must interpret on its own.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

find_productFind the next best ECZ-ID actionBInspect

Given narrow context flags, return ONE best next ECZ-ID product action (free/community routes win where correct; neutral context routes to free public verification).

ParametersJSON Schema
NameRequiredDescriptionDefault
mcp_concernNo
agent_concernNo
multi_tenant_estateNo
org_wide_governanceNo
deeper_evidence_requiredNo
developer_local_workflowNo
business_identity_missingNo
software_supply_chain_evidenceNo
implementation_assessment_neededNo

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure, and it does usefully state that exactly one action is returned and that free/community routes take precedence when correct. It does not disclose the shape of the returned action, side effects, or failure behavior, leaving a transparency gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with no filler, and the key decision logic is placed first. It loses a point because terms like 'ECZ-ID product action' and 'narrow context flags' are used without explanation, which reduces clarity despite the good structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a decision tool with nine boolean inputs, no annotations, and no output schema, so the one-sentence description is not enough for an agent to invoke it correctly. Missing details include how the flags map to specific product actions, what the returned action value looks like, and how neutral/edge cases are resolved.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate for the nine undocumented boolean parameters. It only labels them generically as 'narrow context flags' and provides no per-parameter meaning, combination rules, or examples, so the agent cannot infer how to set each flag.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('return') and resource ('ONE best next ECZ-ID product action'), and it explains the tie-breaking preference between free/community and public verification routes. It does not explicitly contrast with sibling tools, but the 'return a recommendation' framing distinguishes it from the more execution-oriented siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The opening phrase 'Given narrow context flags' establishes a clear input-based condition for when the tool is appropriate, and the routing policy explains how the decision should be made. However, it does not name alternative tools or state explicit exclusions, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_current_stateGet current ECZ-ID stateBInspect

Return the narrow current Resolver-derived state for an ECZ-ID (state, checked_at, Resolver link). No risk/safety/compliance inference.

ParametersJSON Schema
NameRequiredDescriptionDefault
ecz_idYesECZ-ID identifier. Parent, e.g. ECZ-GB-RBS1NW; or child Passport, e.g. ECZ-GB-RBS1NW::MCP_PASSPORT-ABC123

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations, so the description bears the full burden. It declares the operation is non-inferential (no risk/safety/compliance), which usefully sets expectations about output scope. But it doesn't state read-only explicitly, latency, auth requirements, or what happens for unknown/stale IDs — for a no-annotation tool, that leaves gaps.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences, front-loaded with the action and scope. The exclusion clause ('No risk/...') is the second sentence and earns its place by preventing the agent from over-reading the output.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-param read tool with 100% schema coverage and no output schema, the description is largely sufficient. The main missing piece is disambiguation from get_resolver_link, which shares the 'Resolver link' surface and is not addressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% — the ecz_id parameter is fully documented with a pattern and examples of parent vs child Passport IDs. The description adds nothing about parameters, which is acceptable given the schema does the work; baseline 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Return the narrow current Resolver-derived state for an ECZ-ID') and enumerates the returned fields (state, checked_at, Resolver link). It's clearly a read of current state, distinguishing it from mutation siblings like create_request_to_resolve, though it doesn't explicitly name which sibling to use instead of get_resolver_link.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There's an implicit scope constraint ('narrow', 'No risk/safety/compliance inference'), which tells the agent what NOT to expect, but no explicit when-to-use guidance or named alternative. The closest sibling, get_resolver_link, overlaps on the 'Resolver link' concept and isn't disambiguated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_install_instructionsGet official install routesAInspect

Return deterministic official install/discovery routes for an ECZ-ID product or surface (canonical URLs only; planned Microsoft surfaces carry no URLs).

ParametersJSON Schema
NameRequiredDescriptionDefault
productYesProduct slug: mcp-trust | agent-trust | developer-trust | resolver | developer-gateway | trustops | mcp-services | msp

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It does disclose useful behavior: results are deterministic, only canonical URLs are returned, and planned Microsoft surfaces yield no URLs. However, it does not describe the output structure, error behavior, or explicitly confirm there are no side effects, though 'Return' implies a read-only operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single efficient sentence with a parenthetical for edge-case clarification. Every element earns its place: the action, the object, the canonical-URL constraint, and the planned-surface exception.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter read-like tool with no output schema, the description is mostly complete: it states what is returned and the important special case. The only real gap is that it does not specify the exact response structure, but that is a minor omission given the low complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single parameter 'product' is already fully described in the input schema, including the allowed slug values and pattern, so schema coverage is 100%. The description adds no additional parameter-level semantics beyond the phrase 'ECZ-ID product or surface', which is not needed for correct invocation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and a clear resource ('official install/discovery routes for an ECZ-ID product or surface'), plus scoping details ('canonical URLs only; planned Microsoft surfaces carry no URLs'). This makes it clearly distinct from sibling tools like get_resolver_link or find_product without needing to inspect their schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance about when to use this tool versus its alternatives. The description never mentions sibling tools or conditions that would route an agent away from this tool. Usage is only implied by the name and the general purpose statement.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

resolve_identityResolve an ECZ-IDBInspect

Resolve an ECZ-ID through the public ECZ-ID Resolver and return the exact canonical state with checked_at, Resolver proof link, re-check action and the local-policy caveat. Never asserts safety, approval or compliance.

ParametersJSON Schema
NameRequiredDescriptionDefault
ecz_idYesECZ-ID identifier. Parent, e.g. ECZ-GB-RBS1NW; or child Passport, e.g. ECZ-GB-RBS1NW::MCP_PASSPORT-ABC123

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It usefully discloses the local-policy caveat and the explicit non-assertion of safety/approval/compliance, which is meaningful behavioral context. However, it says nothing about whether the lookup is read-only, its error modes (unresolvable IDs), rate limits, or latency/network dependence, so it is incomplete for a tool with zero annotation coverage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the verb and resource, then the return shape and the caveat. Dense but no filler; the key constraint (no safety assertion) is placed at the end but still clearly stated.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, so the description does carry return-value burden; it names checked_at, a proof link, a re-check action, and the policy caveat, which is decent but not a full shape. Combined with absent usage guidance and no read-only/error behavior disclosure on a zero-annotation tool, the definition is adequate but has clear gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single parameter includes a pattern, maxLength, and an example-rich description covering parent and child Passport forms. The description adds no parameter-level detail beyond the schema, so the baseline 3 for high coverage applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (resolve) and resource (ECZ-ID via the public ECZ-ID Resolver) and describes the canonical output shape. It is distinct from siblings like get_current_state or get_resolver_link, though it doesn't explicitly contrast with them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use or when-not-to-use guidance is given. With siblings such as get_current_state and get_resolver_link that could be confused with resolving an ID, the description leaves the routing decision entirely to the agent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updates
    • Changedexplain_status2 fields changed
      • changedInput schema / properties / ecz_id / description
        Previous value: -"ECZ-ID identifier, e.g. ECZ-GB-RBS1NW"New value: +"ECZ-ID identifier. Parent, e.g. ECZ-GB-RBS1NW; or child Passport, e.g. ECZ-GB-RBS1NW::MCP_PASSPORT-ABC123"
      • changedInput schema / properties / ecz_id / pattern
        Previous value: -"^ECZ(-[A-Z0-9]{2,32}){1,4}$"New value: +"^ECZ(-[A-Z0-9]{2,32}){1,4}(::[A-Z0-9][A-Z0-9_-]*-[0-9A-Z]{6})?$"
    • Changedget_current_state2 fields changed
      • changedInput schema / properties / ecz_id / description
        Previous value: -"ECZ-ID identifier, e.g. ECZ-GB-RBS1NW"New value: +"ECZ-ID identifier. Parent, e.g. ECZ-GB-RBS1NW; or child Passport, e.g. ECZ-GB-RBS1NW::MCP_PASSPORT-ABC123"
      • changedInput schema / properties / ecz_id / pattern
        Previous value: -"^ECZ(-[A-Z0-9]{2,32}){1,4}$"New value: +"^ECZ(-[A-Z0-9]{2,32}){1,4}(::[A-Z0-9][A-Z0-9_-]*-[0-9A-Z]{6})?$"
    • Changedget_resolver_link2 fields changed
      • changedInput schema / properties / ecz_id / description
        Previous value: -"ECZ-ID identifier, e.g. ECZ-GB-RBS1NW"New value: +"ECZ-ID identifier. Parent, e.g. ECZ-GB-RBS1NW; or child Passport, e.g. ECZ-GB-RBS1NW::MCP_PASSPORT-ABC123"
      • changedInput schema / properties / ecz_id / pattern
        Previous value: -"^ECZ(-[A-Z0-9]{2,32}){1,4}$"New value: +"^ECZ(-[A-Z0-9]{2,32}){1,4}(::[A-Z0-9][A-Z0-9_-]*-[0-9A-Z]{6})?$"
    • Changedresolve_identity2 fields changed
      • changedInput schema / properties / ecz_id / description
        Previous value: -"ECZ-ID identifier, e.g. ECZ-GB-RBS1NW"New value: +"ECZ-ID identifier. Parent, e.g. ECZ-GB-RBS1NW; or child Passport, e.g. ECZ-GB-RBS1NW::MCP_PASSPORT-ABC123"
      • changedInput schema / properties / ecz_id / pattern
        Previous value: -"^ECZ(-[A-Z0-9]{2,32}){1,4}$"New value: +"^ECZ(-[A-Z0-9]{2,32}){1,4}(::[A-Z0-9][A-Z0-9_-]*-[0-9A-Z]{6})?$"
  2. 7 tool updates
    • First observedcreate_request_to_resolve
    • First observedexplain_status
    • First observedfind_product
    • First observedget_current_state
    • First observedget_install_instructions
    • First observedget_resolver_link
    • First observedresolve_identity

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables official-source lookups on people and companies, covering registration status, tax and labor clearance certificates, sanctions lists, trademarks/patents, and electronic invoices, with platform-hosted pay-per-query access.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Remote, read-only MCP connector to check any company's witnessed trust record on the Trooth Network, across identity, security, privacy, and AI practices. Also does a neutral read of a domain's public security surface and verifies signed Trust Ledger Tokens. No key, no account.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables tracking the status of a REDESIM protocol at JUCESP (company opening, alteration, or closure) with a single read-only tool. Works with any MCP client over HTTP, no credentials required, pay-per-use.
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources