ECZ-ID Trust MCP
Server Details
Read-only ECZ-ID Business Passport state lookup via the public ECZ-ID Resolver. Reports state only.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
7 toolscreate_request_to_resolveCreate a neutral Request-to-Resolve (authenticated)AInspect
AUTHENTICATED: create a neutral, shareable request for independently re-checkable ECZ-ID evidence. Requires a Microsoft Entra bearer token with the RequestToResolve.Create scope (or app role). It never verifies a target, never sends messages, and absence of evidence is never rendered as unsafe.
| Name | Required | Description | Default |
|---|---|---|---|
| target_type | Yes | ||
| consent_mode | Yes | ||
| resolver_ref | No | ||
| idempotency_key | No | ||
| target_descriptor | Yes | ||
| requested_evidence_category | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full behavioral burden and does so well: it discloses authentication requirements, the required scope/app role, and important negative behaviors ('never verifies a target, never sends messages, absence of evidence is never rendered as unsafe'). It doesn't discuss idempotency or response behavior, but still provides substantial behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tightly written sentences with the critical authentication requirement front-loaded and the non-behaviors condensed into a clear list. Every sentence earns its place with no wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Strong on purpose, authentication, and side-effect boundaries, but incomplete for a 6-parameter creation tool with no output schema. Required parameters like consent_mode and requested_evidence_category are unexplained, and there is no indication of return value or failure behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description provides no parameter-level meaning for target_type, target_descriptor, requested_evidence_category, consent_mode, resolver_ref, or idempotency_key. It only frames the overall request concept, leaving agents to guess formats and semantics for required fields.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('create'), a precise resource ('a neutral, shareable request for independently re-checkable ECZ-ID evidence'), and explicitly disclaims verification and messaging, which differentiates it from siblings like resolve_identity. The tool's role is clear and distinguishable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear usage context: it is authenticated, requires a Microsoft Entra bearer token with a specific scope, and clarifies what the tool never does. It doesn't name sibling tools or provide explicit when-not-to-use conditions, but the boundary against verification and messaging serves as strong implicit guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
explain_statusExplain ECZ-ID statusAInspect
Deterministically render the exact ECZ-ID status using the claims-safe renderer (VERIFIED is an ECZ-ID state, not a Microsoft certification). Absence of evidence renders the approved neutral wording — never "unsafe". No LLM.
| Name | Required | Description | Default |
|---|---|---|---|
| ecz_id | Yes | ECZ-ID identifier, e.g. ECZ-GB-RBS1NW |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden and does it well: it discloses determinism, the claims-safe renderer, the absence-of-evidence neutral wording, the 'never unsafe' guarantee, and the No-LLM behavior. It does not mention output format or errors, but for a simple read-only renderer the key behaviors are clearly surfaced.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three tight sentences with the core action front-loaded. Every sentence adds a distinct behavioral constraint, and there is no filler or redundant restating of the tool name.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter renderer with no output schema, the description covers the essential behavior: what is rendered, how it is rendered, and what happens with absence of evidence. It stops short of enumerating possible status values or the exact neutral wording, but the agent has enough to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline applies. The description does not add parameter-specific meaning beyond referencing ECZ-ID status; all usable semantic detail about ecz_id lives in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'Deterministically render the exact ECZ-ID status'. The clarification about VERIFIED and the 'No LLM' note help pin down the intended meaning, but it never names or contrasts a sibling tool, so differentiation is implied rather than explicit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use this tool: when an exact, deterministic, claims-safe status rendering is needed rather than an LLM-generated explanation. It does not explicitly state when to prefer a sibling or give exclusions, so usage guidance is present only by implication.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_productFind the next best ECZ-ID actionBInspect
Given narrow context flags, return ONE best next ECZ-ID product action (free/community routes win where correct; neutral context routes to free public verification).
| Name | Required | Description | Default |
|---|---|---|---|
| mcp_concern | No | ||
| agent_concern | No | ||
| multi_tenant_estate | No | ||
| org_wide_governance | No | ||
| deeper_evidence_required | No | ||
| developer_local_workflow | No | ||
| business_identity_missing | No | ||
| software_supply_chain_evidence | No | ||
| implementation_assessment_needed | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure, and it does usefully state that exactly one action is returned and that free/community routes take precedence when correct. It does not disclose the shape of the returned action, side effects, or failure behavior, leaving a transparency gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single front-loaded sentence with no filler, and the key decision logic is placed first. It loses a point because terms like 'ECZ-ID product action' and 'narrow context flags' are used without explanation, which reduces clarity despite the good structure.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a decision tool with nine boolean inputs, no annotations, and no output schema, so the one-sentence description is not enough for an agent to invoke it correctly. Missing details include how the flags map to specific product actions, what the returned action value looks like, and how neutral/edge cases are resolved.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate for the nine undocumented boolean parameters. It only labels them generically as 'narrow context flags' and provides no per-parameter meaning, combination rules, or examples, so the agent cannot infer how to set each flag.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('return') and resource ('ONE best next ECZ-ID product action'), and it explains the tie-breaking preference between free/community and public verification routes. It does not explicitly contrast with sibling tools, but the 'return a recommendation' framing distinguishes it from the more execution-oriented siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The opening phrase 'Given narrow context flags' establishes a clear input-based condition for when the tool is appropriate, and the routing policy explains how the decision should be made. However, it does not name alternative tools or state explicit exclusions, so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_current_stateGet current ECZ-ID stateAInspect
Return the narrow current Resolver-derived state for an ECZ-ID (state, checked_at, Resolver link). No risk/safety/compliance inference.
| Name | Required | Description | Default |
|---|---|---|---|
| ecz_id | Yes | ECZ-ID identifier, e.g. ECZ-GB-RBS1NW |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses the return scope (state, checked_at, Resolver link) and what it deliberately does not do (inference). However, it lacks mention of potential error conditions, authentication requirements, rate limits, or behaviors on invalid ECZ-IDs, which would be expected for a complete picture.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence that front-loads the core purpose, specifies the exact data returned, and adds a caveat about what is excluded. Every clause earns its place, and the structure is immediately scannable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple getter with one parameter and no output schema, the description names the three returned fields and the scope boundary, which is sufficient for an agent to call it correctly. While it does not specify error behavior or output format beyond field names, the absence of an output schema means the description does not need to explain return values in depth.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already fully documents the 'ecz_id' parameter. The description adds no additional parameter semantics beyond what the schema provides, so the baseline score of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Return') and resource ('current Resolver-derived state for an ECZ-ID') and enumerates the exact fields returned (state, checked_at, Resolver link). Explicitly scopes out risk/safety/compliance inference, which distinguishes it from siblings like resolve_identity or explain_status that likely perform inference.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage: it returns a 'narrow' state and explicitly notes 'No risk/safety/compliance inference', suggesting that tools like explain_status should be used when inference is needed. However, it does not name alternative tools or describe specific scenarios where this tool is the right choice versus a sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_install_instructionsGet official install routesAInspect
Return deterministic official install/discovery routes for an ECZ-ID product or surface (canonical URLs only; planned Microsoft surfaces carry no URLs).
| Name | Required | Description | Default |
|---|---|---|---|
| product | Yes | Product slug: mcp-trust | agent-trust | developer-trust | resolver | developer-gateway | trustops | mcp-services | msp |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It does disclose useful behavior: results are deterministic, only canonical URLs are returned, and planned Microsoft surfaces yield no URLs. However, it does not describe the output structure, error behavior, or explicitly confirm there are no side effects, though 'Return' implies a read-only operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single efficient sentence with a parenthetical for edge-case clarification. Every element earns its place: the action, the object, the canonical-URL constraint, and the planned-surface exception.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter read-like tool with no output schema, the description is mostly complete: it states what is returned and the important special case. The only real gap is that it does not specify the exact response structure, but that is a minor omission given the low complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter 'product' is already fully described in the input schema, including the allowed slug values and pattern, so schema coverage is 100%. The description adds no additional parameter-level semantics beyond the phrase 'ECZ-ID product or surface', which is not needed for correct invocation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Return') and a clear resource ('official install/discovery routes for an ECZ-ID product or surface'), plus scoping details ('canonical URLs only; planned Microsoft surfaces carry no URLs'). This makes it clearly distinct from sibling tools like get_resolver_link or find_product without needing to inspect their schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance about when to use this tool versus its alternatives. The description never mentions sibling tools or conditions that would route an agent away from this tool. Usage is only implied by the name and the general purpose statement.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_resolver_linkGet Resolver proof linkAInspect
Return the deterministic public Resolver proof/re-check URL for an ECZ-ID. No network call.
| Name | Required | Description | Default |
|---|---|---|---|
| ecz_id | Yes | ECZ-ID identifier, e.g. ECZ-GB-RBS1NW |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden and does well: 'deterministic' implies stable output, 'public' suggests no auth barrier, and 'No network call' signals a pure computation with no side effects. It doesn't describe URL format or failure behavior, but for a simple link generator this is solid coverage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler. The main purpose is front-loaded, and the key behavioral caveat ('No network call') is placed in the second sentence without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter tool with 100% schema coverage and no output schema, the description is mostly complete: it states what is returned, for what input, and that no network call occurs. The main gap is that it doesn't explicitly position the tool relative to the sibling operations that may appear similar.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%: the ecz_id parameter already includes a pattern, maxLength, and an example. The description does not add parameter-specific semantics, but no additional guidance is required; this matches the baseline for fully schema-documented parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb ('Return'), names the exact resource (ECZ-ID), and specifies the output type (proof/re-check URL). It also adds a distinguishing property, 'No network call,' which separates it from resolution-style siblings like resolve_identity or create_request_to_resolve.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'No network call' gives useful context for choosing this tool, but the description does not explicitly say when to use this tool versus sibling tools or when not to use it. Usage guidance is therefore implied rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
resolve_identityResolve an ECZ-IDAInspect
Resolve an ECZ-ID through the public ECZ-ID Resolver and return the exact canonical state with checked_at, Resolver proof link, re-check action and the local-policy caveat. Never asserts safety, approval or compliance.
| Name | Required | Description | Default |
|---|---|---|---|
| ecz_id | Yes | ECZ-ID identifier, e.g. ECZ-GB-RBS1NW |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the burden of behavioral disclosure. It does well by enumerating the returned fields and adding a meaningful caveat: 'Never asserts safety, approval or compliance.' It does not mention potential errors or rate limits, but for a simple one-parameter lookup this is reasonably transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, information-dense sentence front-loads the operation and then lists key return components and a caveat. There is no filler or repetition of schema details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with one required parameter and no output schema, the description covers the essential return contract and a behavioral caveat. It could elaborate on what 're-check action' and 'local-policy caveat' mean, but the core calling context is sufficiently complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides 100% parameter coverage, including type, pattern, max length, and an example. The description adds no new parameter-level semantics beyond referring to 'an ECZ-ID', so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Resolve') with a clear resource ('an ECZ-ID') and specifies the exact output ('canonical state with checked_at, Resolver proof link, re-check action and the local-policy caveat'). It also distinguishes itself from siblings by stating it goes through the public ECZ-ID Resolver and explicitly disclaims safety/compliance assertions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The implied usage is clear: use this tool when you need the resolved canonical state plus proof and caveat details. However, it does not explicitly name alternatives like get_resolver_link or get_current_state, nor does it state when not to use this tool versus those siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user or an account that owns the GitHub organization, then choose Claim with GitHub.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
Check any company's witnessed trust record on the Trooth Network, live and read-only.
Read-only, privacy-safe evidence of physical business presence for AI agents.
Deterministic company, entity and location lookups for agents - per call, x402 or API key.
Light: Download + OCR, official-source lookup. Platform-hosted, pay per query with prepaid credit.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceEnables tracking the status of a REDESIM protocol at JUCESP (company opening, alteration, or closure) with a single read-only tool. Works with any MCP client over HTTP, no credentials required, pay-per-use.MIT
- AlicenseNot gradedqualityCmaintenanceEnables querying Brazilian state tax clearance certificates (Certidão Negativa de Débitos Estaduais) from official sources via a read-only, hosted MCP tool with pay-per-use access.MIT
- AlicenseNot gradedqualityCmaintenanceEnables agents to check whether a CPF or CNPJ is registered in the São Paulo state CADIN (debtor registry), returning its situation. Read-only, works over MCP HTTP with any client.MIT
- AlicenseNot gradedqualityCmaintenanceProvides a read-only tool to query ECRVSP Estampagem authorization data from an official source via MCP, with prepaid usage and no credentials.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Most tools are conceptually distinct, but get_current_state, resolve_identity, and explain_status all orbit the same status/render responsibility and could be misselected without careful reading. The descriptions reduce overlap, but the boundaries are still subtle.
Every tool follows a consistent verb_noun pattern: create_request_to_resolve, explain_status, find_product, get_current_state, get_install_instructions, get_resolver_link, resolve_identity. There is no mixing of conventions or vague ambiguous verbs.
Seven tools is a well-scoped set for an identity-trust utility server. Each tool covers a distinct operation area without bloat, and the count fits comfortably within the expected range.
The domain is covered well: resolution, state retrieval, status explanation, resolver links, request creation, product guidance, and install instructions. Minor gaps exist around request lifecycle management (e.g., checking or cancelling a request), but core workflows are not dead-ended.