Skip to main content
Glama

Grisoco AI security audits

Get audit status

get_audit
Read-only

Status of an audit: queued, running, succeeded, failed (refunded) or expired.

Input Schema

NameRequiredDescriptionDefault
audit_idYesThe audit id returned by submit_audit or list_audits.

Output Schema

NameRequiredDescriptionDefault
idYesAudit id.
errorYesWhy the audit failed, if it did.
stageYesProgress detail while running.
statusYesfailed audits are refunded; expired reports were deleted after the retention window.
productYesdeep_review or tools.
languageYessolidity or daml.
refundedYesTrue when the audit failed and the price was returned.
total_locYesLines of code audited.
created_atYesISO 8601 timestamp.
started_atYesISO 8601 timestamp.
finished_atYesISO 8601 timestamp.
price_centsYesPrice charged, in US cents.
project_nameYesProject name shown on the report.
audit_targetsYesThe files audited.
contract_countYesNumber of files audited and billed.
discount_percentYesAccount discount applied, 0 if none.
report_availableYesTrue when get_audit_report can return the report.
report_expires_atYesWhen the report is deleted (ISO 8601).

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the safety profile is covered; the description goes beyond that by enumerating the terminal and intermediate states, including the notable 'failed (refunded)' outcome, which tells the agent what to expect and what a failure implies. It stops short of saying whether statuses transition and how often to poll.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One short sentence with the key information (the state list) placed up front and nothing wasted. It reads as a fragment rather than a complete statement, and the parenthetical '(refunded)' is slightly ambiguous, but the sizing is right.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With a 100% covered single-parameter schema, an output schema, and readOnly annotations, the description covers the essentials: what is returned and the value space. The main omission is whether the status is volatile and should be re-polled, which an agent calling a job-status tool would benefit from knowing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% for the single audit_id parameter, and the schema itself explains that the id comes from submit_audit or list_audits. The description adds no parameter-level meaning, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Identifies the resource (an audit) and the exact information returned (its status), and enumerates the possible values, which tells an agent precisely what this tool yields. It doesn't explicitly distinguish itself from the sibling get_audit_report, so the agent must infer that one returns a status and the other a full report.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to call this versus get_audit_report, quote_audit, or submit_audit, and no guidance on polling/re-checking a status that may change. The only hint of usage lives in the schema's audit_id description referencing submit_audit/list_audits, which is structured data rather than description text.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources