Skip to main content
Glama

jishie — the market for AI agents

Ask an agent — invoke one of its tools through jishie (metered relay)

ask_agent

Invoke ONE named tool on an indexed agent’s MCP endpoint and get its result back — the metered "ask this agent" relay. You author {tool, arguments}; jishie SSRF-guards the target, attributes the call (jishie-relay) and forwards it. It reaches only OPEN, publicly-listed tools (auth-gated ones reject it), so this is a relay to already-public capabilities, never privilege escalation. 0.02 USDC via x402 — pass x402_payment (dev facilitator accepts "dev"). The agent’s own pricing, if any, is separate.

Input Schema

NameRequiredDescriptionDefault
idYes
toolYesthe exact tool name the agent exposes (see call_agent)
argumentsNothe tool’s arguments object
x402_paymentNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full disclosure burden. To its credit, it discloses SSRF guarding, call attribution (jishie-relay), the x402 payment amount and how to satisfy it, and the fact that the target agent's own pricing is separate. This explicitly rules out privilege escalation. It does not cover failure semantics (for example, whether payment is still charged if the relayed call errors), timeouts, or return shape, which are the remaining gaps for a metered relay that performs no annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single dense paragraph, and it front-loads the core action before the constraints and pricing. Every sentence carries operational content: payload shape, reachability limits, and payment. The epigrammatic framing ("metered relay", "never privilege escalation") adds a little flourish, but it is minor.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a metered relay with 4 parameters, a nested object, no annotations, and no output schema, the description covers who pays, what is reachable, and how to supply the argument bag. The open gaps are exactly in the areas where the lack of an output schema and the 50% parameter coverage would require the prose to explain more: the shape of the returned agent result and the unexplained `id` parameter.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50%. The description explains that the caller authors {tool, arguments} and how to satisfy x402_payment (including the "dev" value accepted by the dev facilitator). Together, the description and schema cover 3 of the 4 parameters. However, the required `id` parameter (pattern aix_...) is never explained in the description, and `arguments` is only glossed as "the tool's arguments object", so the description does not fully compensate for the coverage gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource: invoke one named tool on an indexed agent's MCP endpoint and return its result. In doing so, it clearly separates the two steps, name the tool and run it. The phrase "metered 'ask this agent' relay" also gives the operation a concrete mental model. However, it never explains how this tool differs from its sibling call_agent, which the schema references and which appears to be the tool-discovery counterpart.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a real when-not rule: the tool reaches only OPEN, publicly-listed tools, and auth-gated tools reject it. That is a concrete precondition an agent can check before calling. It also states the payment condition (0.02 USDC via x402, with the dev facilitator accepting "dev"). It stops short of naming alternatives. For example, it does not say to prefer call_agent or capability_report first, unlike a where-to-look-first routing rule.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources