Skip to main content
Glama

waveguard_scan_timeseries

Read-onlyIdempotent

Detect anomalies in time-series data — use after pulling numeric metrics from monitoring APIs, financial data sources, IoT sensors, or spreadsheet columns. Send a single numeric array and specify a window size. Early windows define 'normal', recent windows are tested for anomalies.

Typical workflow: (1) Pull a column of numbers from Sheets, a Supabase time-series table, or a metrics API. (2) Pass the array here. (3) Get back which time windows are anomalous.

Examples:

  • Revenue monitoring: Pull monthly revenue from Sheets → detect anomalous months

  • Stock screening: Pull 90 days of closing prices → find unusual price windows

  • Server health: Pull response-time metrics → identify degradation windows

  • Sensor QA: Pull temperature readings from IoT API → flag sensor drift

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
dataYesNumeric time-series array, ordered chronologically. Should have at least 3x window_size data points.
sensitivityNoAnomaly sensitivity (default: 1.0). Higher = more sensitive.
window_sizeNoNumber of data points per window (default: 10). Smaller windows detect finer-grained anomalies.
test_windowsNoNumber of most recent windows to test (default: half of total windows). The rest are used as training (normal baseline).

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint, so the safety profile is known. The description adds valuable behavioral context about how the algorithm works: 'Early windows define normal, recent windows are tested for anomalies,' and explains the training/test split, which goes beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose and then provides a structured workflow and examples. It is somewhat long, with four similar examples that could be condensed, but each example serves to illustrate a different data source. Overall it is efficient and well-organized for the tool's complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 4 parameters, 100% schema coverage, and no output schema, the description is remarkably complete. It explains the algorithm, gives a typical workflow, and states the return value ('which time windows are anomalous'). It also provides multiple example scenarios, making it clear how to apply the tool in practice.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents every parameter thoroughly. The description adds minimal new meaning beyond mentioning the array and window size; the training/testing semantics are already in the test_windows schema description. Thus, it meets the baseline but does not elevate it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'Detect anomalies in time-series data' with a clear verb and resource. It provides concrete examples (revenue, stock, server health) that differentiate it from generic scan tools like waveguard_scan, but it does not explicitly name alternatives or contrast with siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit usage context: 'use after pulling numeric metrics from monitoring APIs, financial data sources, IoT sensors, or spreadsheet columns.' It outlines a typical workflow and multiple use cases, but does not mention when not to use the tool or name alternative tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

B3.4/5.0
Disambiguation3/5

Several tools occupy overlapping anomaly-detection territory (scan, scan_timeseries, price_manipulation, volume_check, token_risk, wallet_profile), which could cause misselection when an agent needs generic vs. specialized analysis. However, descriptions clarify data types and use cases, so the overlap is manageable.

Naming Consistency5/5

All tools share the consistent 'waveguard_' prefix with descriptive underscore-separated names (e.g., waveguard_cascade_risk, waveguard_volume_check). The occasional verb like 'scan' or 'compare' fits the overall pattern, making the set highly predictable.

Tool Count3/5

With 19 tools, the server is on the heavy side for a typical MCP but not extreme. The breadth reflects a comprehensive risk-analysis platform, though some specialized detectors (e.g., waveguard_price_manipulation vs. waveguard_scan_timeseries) could potentially be consolidated without losing functionality.

Completeness4/5

The tool surface covers the full analytical workflow: data ingestion (market_data), generic anomaly detection (scan, scan_timeseries), specialized crypto risk (token_risk, volume_check, wallet_profile), structural similarity (fingerprint, compare), and scenario/impact analysis (counterfactual, cascade_risk, mechanism_probe). Minor gaps like direct report generation exist but are not critical for the core purpose.

Resources