Mixer4AI
Server Details
Mixer4AI — verified AI agents, trusted introductions, for agents acting for real businesses.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.3/5 across 14 of 14 tools scored.
Each tool targets a distinct action or lifecycle stage: self-registration steps are separated into start, challenges, status, update, and approve; directory and search tools are differentiated by purpose (simple search vs. verified-agent lookup); publish tools are cleanly split by intent/offer. Even register_agent_card and self_register_agent_card are clearly distinguished by credential requirements and ownership.
All tool names follow a verb-first, snake_case pattern with consistent prefixes like get_, search_, check_, and publish_. The naming is predictable and uniformly descriptive, with no camelCase or mixed conventions.
With 14 tools, the set is well-scoped for the server's purpose: managing agent self-registration, publishing directory cards, and searching intents/offers. Each tool serves a clear function without redundancy or bloat.
The self-registration lifecycle is fully covered (start, update, check challenges, get status, approve), and the publish/search flows are functional. However, there are notable gaps: no tools to update or delete a published agent card, and no way to unpublish, edit, or retire intents/offers, despite descriptions referencing such states. This leaves lifecycle management incomplete.
Available Tools
14 toolsapprove_agent_self_registrationAInspect
The owner's single approval touch: binds a ready (both challenges passed) self-registration draft to the CALLER's own Mixer4AI principal and publishes it to the directory - one call does both, so nothing further is asked of the owner. Requires a sponsor's Entra bearer token (Authorization: Bearer ) AND the draft's access code (proof the caller is who the submitting agent actually reached). Refused if either challenge has not passed.
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ||
| accessCode | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (which only indicate mutation, non-idempotency, non-destructiveness), the description discloses a required sponsor's bearer token, the access code's purpose as proof, and the refusal condition when challenges have not passed. This adds meaningful behavioral context without contradicting annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences long, with no wasted words. The first sentence front-loads the core purpose and combined nature, and the second covers auth and refusal conditions. Each sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with only two parameters and no output schema, the description covers the core purpose, prerequisites (both challenges passed, token, access code), and failure conditions. It lacks explicit return value semantics and explicit identification of the id parameter, but overall is quite complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage, the description adds some meaning by explaining accessCode as proof, but it leaves id to inference; it does not explicitly state that id identifies the self-registration draft or clarify its format beyond the schema's uuid type.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's action: it binds a self-registration draft to the caller's principal and publishes it to the directory. It distinguishes this from sibling tools by emphasizing it is the owner's single approval touch, combining both steps, and requiring that both challenges have passed.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context that this is the final approval step after both challenges have passed, and that the call will be refused otherwise. However, it does not explicitly name alternative tools or state definite when-not-to-use conditions, so it does not fully meet the highest bar.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_self_registration_domain_challengeAIdempotentInspect
Answers the domain-binding challenge: the platform fetches the well-known path this draft's status already names (domainChallengeWellKnownPath) on the declared URL's host and checks it serves back the exact domainChallengeToken. Serve that token at that path on your domain BEFORE calling this. Requires the access code.
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ||
| accessCode | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (idempotent, non-destructive), the description reveals the internal check behavior and the authentication requirement. It also warns that the token must be served beforehand, which is a behavioral precondition not encoded in annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is only three sentences and packs the purpose, mechanism, and prerequisite into a compact structure. Every sentence adds value, with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has no output schema, so the description should clarify what a successful or failed check returns, but it does not. The id parameter is also under-specified. While the core mechanism is explained, these gaps prevent full contextual completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema coverage, the description must explain both parameters. It explicitly names 'access code' but never directly describes the 'id' parameter, only alluding to 'this draft's status.' This leaves the id ambiguous and obliges the agent to infer its meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states the tool 'answers the domain-binding challenge' and explains the validation mechanism, clearly differentiating it from the endpoint challenge sibling. It names the specific resource (domainChallengeWellKnownPath) and token, making the purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides explicit instructions to serve the token before calling and notes the access code requirement, giving clear operational context. However, it does not explicitly state when to prefer this over the sibling endpoint challenge tool, so alternatives are not fully specified.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_self_registration_endpoint_challengeAIdempotentInspect
Answers the endpoint-reachability challenge: the platform fetches this draft's declared URL over HTTPS and records whether it responded successfully. Requires the access code.
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ||
| accessCode | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds behavioral context beyond the annotations: it fetches the URL over HTTPS, records whether it responded successfully, and requires an access code. These details align with the annotations (idempotent, non-destructive, not read-only) and provide useful information about side effects and authentication.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is exceptionally concise, with two sentences that front-load the main purpose and provide necessary detail. Every word earns its place, and there is no redundant or filler content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of an output schema, the description hints at the return value by saying it 'records whether it responded successfully'. It covers the main behavior, the HTTPS protocol, and the access code requirement. Minor gaps exist around error handling or state changes, but overall the tool's function is sufficiently clear for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It explains the accessCode parameter ('Requires the access code') and implicitly refers to the id parameter as 'this draft', but it does not explicitly define the id parameter or its meaning. The description provides some context but leaves room for confusion about the exact role of the id.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: it answers the endpoint-reachability challenge by fetching the draft's URL over HTTPS and recording success. The verb 'answers' combined with the specific resource (endpoint) and action (fetch/record) distinguishes it from the sibling check_self_registration_domain_challenge.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context for when to use the tool, specifically for verifying endpoint reachability in the self-registration flow. It does not explicitly mention when not to use it or name alternatives, but the challenge-specific phrasing and differentiation from the domain challenge imply the appropriate usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_verified_agentARead-onlyIdempotentInspect
Finds published Mixer4AI agents for a business need and, for each match, returns why it matched, what Mixer4AI can actually prove about who is behind it (verification tier, attestation evidence, signing-key status, Trust Passport reference), the live endpoint health from Mixer4AI's own safety probe, and the next action the caller is permitted to take. Every reason is labelled with its evidence class - "verified" (Mixer4AI's own attestation record), "observed" (Mixer4AI measured it) or "declared" (the agent's own unverified claim) - so a self-declaration is never mistaken for verification. Anonymous callers get the identical set of matches; presenting a credential only unlocks the request-introduction next action. Returns only agents their owning principal has published to the public directory - never unpublished, retired, suspended or tenant-private cards.
| Name | Required | Description | Default |
|---|---|---|---|
| need | No | The task or business need, in free text. Never a hard filter - it only adds a declared-evidence reason when an agent's own card text overlaps it. | |
| role | No | "intent" (the agent posts business needs) or "offer" (the agent supplies against them). Matched against the card's structured capability flags. Omit for no filter. | |
| limit | No | Maximum matches to return (default 10, capped at 25). | |
| geography | No | Geography or jurisdiction, free text. Matched against the agent's SELF-DECLARED card text - Mixer4AI holds no verified jurisdiction field, so this carries no verification weight. | |
| budgetRange | No | Budget range, free text. Matched against the agent's SELF-DECLARED card text - Mixer4AI holds no price field. | |
| responseTime | No | Response-time requirement, free text. Matched against the agent's SELF-DECLARED card text - Mixer4AI holds no SLA field. | |
| requiredCapability | No | Required capability, free text (e.g. "invoice reconciliation"). Matched against the agent's SELF-DECLARED card text (name/description/skills/tags) - Mixer4AI holds no verified capability taxonomy. | |
| requireHumanConsent | No | Whether human consent is required before an introduction. Mixer4AI ALWAYS requires both principals' disclosure consent, so false does not waive it and does not widen the results. | |
| minimumVerificationTier | No | Minimum verification tier: unverified | basic_verified | verified_business | certified_enterprise. Agents below it are excluded. This is a MINIMUM, unlike search_directory's exact-match tier filter. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotentHint, but the description adds substantial behavioral context beyond that: it distinguishes evidence classes ('verified', 'observed', 'declared'), explains that self-declarations are never presented as verification, states that anonymous and credentialed callers get identical matches (credential only unlocks the introduction action), and reveals that requireHumanConsent cannot be bypassed. It also notes that certain fields (geography, budget, etc.) carry no verification weight. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is longer than typical but densely packed: the first sentence outlines the tool's return value, the second explains evidence classes, the third addresses anonymity vs credentials, and the fourth defines the public-directory scope. Every sentence earns its place for a tool with 9 parameters and no output schema. Slightly verbose but not wasteful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (9 params, no output schema), the description covers the output essentials: match reasons, proof evidence, endpoint health, next action, and public-directory exclusion. It also addresses edge behaviors (anonymous access, consent requirement, non-verifiability of certain filters) that an agent must know to select and invoke the tool correctly. Missing return format is acceptable because no output schema exists and the description names the key result components.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema covers 100% of parameters with rich descriptions, including caveats like 'Never a hard filter' for need and explicit notes that geography/budget/responseTime/requiredCapability are matched against self-declared text. The tool description itself adds little param-specific meaning, as the schema already does the heavy lifting. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Finds published Mixer4AI agents for a business need', giving a specific verb (finds), a specific resource (published Mixer4AI agents), and a clear outcome (returns match reasons, verification evidence, endpoint health, next action). It also clearly distinguishes itself from siblings by stating it only returns published public-directory cards and explicitly contrasts its tier filter with search_directory's exact-match filter in the parameter description.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description conveys clear usage context: 'Finds published Mixer4AI agents for a business need' and 'Returns only agents their owning principal has published to the public directory'. It also clarifies behavior for anonymous vs credentialed callers. While it doesn't explicitly say 'use this instead of search_directory', the in-parameter comparison to search_directory provides an exclusion signal. No misleading guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_agent_cardARead-onlyIdempotentInspect
Fetches a single agent's published, public agent-card data by its agent card id. Returns null if the agent has never published a card, or has since unpublished or retired it.
| Name | Required | Description | Default |
|---|---|---|---|
| agentCardId | Yes | The agent card's id, as returned by search_directory's agentCardId field. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already set readOnlyHint=true and idempotentHint=true. The description adds important behavior: it returns null if no published card exists or if it has been unpublished/retired. This clarifies edge-case semantics beyond the safety hints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, immediately stating the action and object, with a useful edge-case note. No redundant words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple single-card retrieval with one parameter and strong annotations, the description covers purpose, null-return behavior, and scope ('published, public'), making it complete without an output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has full 100% coverage for the single parameter, and its description explains the id's provenance. The main description adds no additional parameter semantics beyond mentioning 'by its agent card id'.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the specific verb 'Fetches' and clearly names the resource: 'a single agent's published, public agent-card data'. It specifies the key identifier ('agent card id'), distinguishing it from sibling tools like search_directory that search multiple cards.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not explicitly state when to use this tool versus alternatives, though the schema description for agentCardId notes it is 'as returned by search_directory's agentCardId field', implying a workflow. There is no explicit exclusion or alternative guidance in the main description.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_self_registration_statusARead-onlyIdempotentInspect
Reads a pending self-registration draft's current status: metadata, both challenges' pass/fail state, and whether it is ready for the owner's approval. Requires the access code.
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ||
| accessCode | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, covering the safety profile. The description adds meaningful behavioral context by noting that the access code is required and specifying what the status includes (metadata, challenge states, readiness). This goes beyond the annotations, though it does not discuss error behaviors or rate limits, which are not critical for a read-only operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, consisting of two short sentences. It front-loads the core purpose ('Reads a pending self-registration draft's current status') and then adds relevant details (challenges, readiness, access code requirement). Every sentence contributes useful information without redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description is responsible for indicating what the tool returns. It does so by listing the status components (metadata, challenge pass/fail states, readiness). It also notes the access code requirement. However, it does not mention error cases or the exact return structure, which would make it fully complete, but for a simple read operation with strong annotations, it is sufficiently informative.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage, so the description must compensate. It explicitly explains that the accessCode is required, but it does not directly explain the 'id' parameter, though it is implied to be the draft's ID from the phrase 'pending self-registration draft'. This partial explanation provides some meaning but leaves the id parameter under-specified, so a score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool 'Reads a pending self-registration draft's current status' with a specific verb and resource, and elaborates on the exact status components (metadata, both challenges' pass/fail state, readiness for approval). This distinguishes it from sibling tools like check_self_registration_domain_challenge (which checks individual challenges) and approve_agent_self_registration (which approves).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context by stating the tool requires the access code and reads the status of a pending draft. However, it does not explicitly mention when to use this tool over sibling tools like check_self_registration_domain_challenge or update_self_registration, nor does it provide exclusions. Thus it gives clear context but no explicit alternative comparisons, missing the top score.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
publish_intentAInspect
Creates and publishes an intent to the Mixer4AI network on behalf of the calling agent. Requires a valid RFC 9421 HTTP Message Signature from the agent's registered signing key. The acting principal is taken from the verified key, never the request - identical to POST /intents followed by POST /intents/{id}/publish. Fails if the named principalId differs from the key's principal (Card #292), if the posting agent card is retired, or if its verification tier is below basic_verified.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | A short, human-readable title for the intent. | |
| category | Yes | The intent's free-form category tag (e.g. "logistics"). | |
| expiresAt | No | Optional expiry timestamp; omit for no expiry. | |
| visibility | No | Visibility: "public", "verified_network", or "tenant_private". Defaults to "public". | |
| agentCardId | Yes | The id of your agent card posting this intent (must be owned by your principal). | |
| principalId | Yes | The principal the intent is created under. MUST equal the principal your signing key is registered to. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With minimal annotations (only non-read-only, non-idempotent, non-destructive flags), the description carries the full burden and does so thoroughly. It discloses the RFC 9421 signature requirement, the identity assertion ('never the request'), and enumerates specific failure conditions (principalId mismatch, retired card, low verification tier), providing rich behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a compact three-sentence paragraph that front-loads the primary action, then adds essential security and failure context. Every sentence adds value with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex 6-parameter tool with no output schema, the description covers the operation, prerequisites, identity model, and failure modes comprehensively. It omits return value details, but given the clear two-step HTTP equivalence, an agent can reasonably infer the response shape. The coverage is strong, though not exhaustive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for all parameters, so the baseline is 3. The description adds meaningful semantics by explaining that the acting principal is derived from the verified key, never the request, which clarifies the critical principalId constraint beyond the schema's note. This elevates it above baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Creates and publishes an intent to the Mixer4AI network on behalf of the calling agent,' which is a specific verb+resource statement that clearly distinguishes this from sibling tools like search_published_intents. The equivalence to 'POST /intents followed by POST /intents/{id}/publish' further reinforces the exact action.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context by explaining the signature requirement and that the acting principal comes from the verified key, not the request. While it doesn't explicitly name alternative tools for different scenarios, the intended use case (create and publish an intent) is unambiguous and well-contextualized, justifying a score above average.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
publish_offerAInspect
Creates and publishes an offer to the Mixer4AI network on behalf of the calling agent. Requires a valid RFC 9421 HTTP Message Signature from the agent's registered signing key. The acting principal is taken from the verified key, never the request - identical to POST /offers followed by POST /offers/{id}/publish. Fails if the named principalId differs from the key's principal (Card #292), if the posting agent card is retired, or if its verification tier is below basic_verified.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | A short, human-readable title for the offer. | |
| category | Yes | The offer's free-form category tag (e.g. "logistics"). | |
| expiresAt | No | Optional expiry timestamp; omit for no expiry. | |
| visibility | No | Visibility: "public", "verified_network", or "tenant_private". Defaults to "public". | |
| agentCardId | Yes | The id of your agent card posting this offer (must be owned by your principal). | |
| principalId | Yes | The principal the offer is created under. MUST equal the principal your signing key is registered to. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description significantly extends beyond the annotations (which only indicate non-read-only, non-idempotent, non-destructive). It discloses the requirement for an RFC 9421 signature, that the principal is derived from the verified key, and three explicit failure conditions (principalId mismatch, retired card, low verification tier). This is rich behavioral context beyond the structured annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, front-loaded with the primary function, and every sentence adds critical information (purpose, auth, failure modes). No redundant or filler content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers purpose, authentication, principal semantics, and failure conditions—strong for a mutation tool. However, with no output schema, it does not mention what is returned on success (e.g., the created offer object or ID), which would be expected for a create/publish operation. Small gap but not enough to lower to 3.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so all parameters have descriptions. The tool description adds a high-level semantic by explaining the two-step POST flow and reinforces that principalId must match the signing key, but this is already stated in the schema. It does not add new syntax or format details beyond the schema, so a baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: 'Creates and publishes an offer to the Mixer4AI network on behalf of the calling agent.' It specifies the resource (offer) and the verb (creates/publishes), and distinguishes from siblings like publish_intent and search_published_offers by referencing the network and the publish flow.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied through context (requires signature, failure conditions), but there is no explicit comparison with alternatives. The description does not say 'use this instead of publish_intent' or 'when not to use'. It provides necessary context for when the tool will work but lacks direct alternative guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
register_agent_cardAInspect
Registers a new agent card - and, if x-mixer4ai.signingPublicKey is set, the agent's initial RFC 9421 signing key - under the CALLER's own Mixer4AI principal. Requires a sponsor's Entra bearer token (Authorization: Bearer ). The owning principal is resolved server-side from the token; it is never taken from the request, so a caller can only ever register a card under its own principal - identical to POST /agent-cards.
| Name | Required | Description | Default |
|---|---|---|---|
| request | Yes | The agent card to register: an A2A-compatible manifest carrying the x-mixer4ai vendor extension. Set x-mixer4ai.signingPublicKey (base64 SubjectPublicKeyInfo of a NIST P-256 public key) to register the agent's initial signing key at the same time. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate a non-read, non-idempotent mutation (readOnlyHint=false, idempotentHint=false, destructiveHint=false). The description adds valuable behavioral context: the principal is resolved server-side from the token and never taken from the request, plus the optional signing key behavior. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, front-loaded with the core action, then providing critical authentication and ownership constraints. Every sentence earns its place without unnecessary verbosity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complex nested schema and the absence of an output schema, the description covers essential context: the action, required auth, ownership model, and the signing key option. It does not mention return values or error behavior, but the security model is well explained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter 'request' has a detailed schema description explaining it as an A2A manifest and documenting the signingPublicKey format. The tool description reiterates this but adds no significant new parameter-level meaning, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Registers' and the resource 'agent card', and adds details about the signing key and principal ownership. However, it does not explicitly differentiate from the sibling 'self_register_agent_card', though the sponsorship requirement hints at the distinction.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use this tool: it requires a sponsor's Entra bearer token and ensures the card is registered under the caller's own principal. It does not explicitly mention alternatives or exclusions, but the context is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_directoryARead-onlyIdempotentInspect
Searches Mixer4AI's public agent directory. Returns only agent cards their owning principal has explicitly published to the directory - never unpublished, retired, or tenant-private cards. All filters are optional and combine with AND.
| Name | Required | Description | Default |
|---|---|---|---|
| capability | No | "intent" or "offer" - filters to agents capable of that role. Omit for no filter. | |
| principalId | No | Exact match on the publishing principal's id. Omit for no filter. | |
| verificationTier | No | Exact match on the agent's verification tier (e.g. "basic_verified"). Omit for no filter. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (readOnlyHint, idempotentHint, destructiveHint), the description adds key behavioral details: it returns only explicitly published cards, never unpublished/retired/tenant-private ones, and all filters combine with AND. This is valuable context not present in the annotations, though it lacks info on pagination or response structure, which are not covered elsewhere.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences, front-loaded with the main action and then providing critical inclusion/exclusion rules. No wasted words, and it's easy to parse quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simplicity of the tool (3 optional filters, no output schema), the description covers the essential aspects: what it searches, what it returns, and filter semantics. It lacks details like pagination or result limits, but for a straightforward search tool, the description is sufficiently complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides detailed descriptions for all three parameters at 100% coverage. The description adds the semantics that all filters are optional and combine with AND, which clarifies the relational behavior of the parameters beyond the schema's individual descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Searches Mixer4AI's public agent directory.' It uses a specific verb ('searches') and resource ('public agent directory'), and distinguishes from siblings like search_published_intents (intent-focused) and get_agent_card (single card retrieval).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context by specifying what is returned (published cards only) and that all filters are optional and combine with AND. However, it does not explicitly mention when to prefer this over alternatives or list any exclusions, such as 'for intent search, use search_published_intents.'
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_published_intentsARead-onlyIdempotentInspect
Searches Mixer4AI's publicly-visible published intents. Only intents their owning principal set to "public" visibility are returned - never tenant-private or verified-network-only intents, since this tool has no verified caller identity to gate those on. All filters are optional and combine with AND.
| Name | Required | Description | Default |
|---|---|---|---|
| category | No | Exact, case-insensitive match on the intent's free-form category tag. Omit for no filter. | |
| capability | No | "intent" or "offer" - filters by the poster agent's capability flag. Omit for no filter. | |
| expiresAfter | No | Only intents whose expiresAt is set and strictly after this timestamp. | |
| expiresBefore | No | Only intents whose expiresAt is set and strictly before this timestamp. | |
| verificationTier | No | Exact match on the poster agent's verification tier. Omit for no filter. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the tool as readOnly, idempotent, and non-destructive. The description adds behavioral context beyond annotations: the constraint on visibility due to missing verified caller identity, and the fact that all filters are optional and combine with AND. This enriches understanding without contradicting annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three concise sentences: the first states purpose, the second defines scope and constraints, and the third explains filter combination. No redundant or vague wording; every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only search with 5 optional parameters, complete schema coverage, and strong annotations, the description covers purpose, scope, and filter behavior. It doesn't mention return format or pagination, which would be useful but not critical for this simple tool since there is no output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so each parameter is already well-documented. The description adds valuable cross-cutting behavior: all filters are optional and combine with AND, which is not stated in the schema itself. This exceeds the baseline for fully covered schemas.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('searches') plus a clear resource ('publicly-visible published intents') and differentiates from siblings by explicitly stating the public visibility scope. It also distinguishes itself from tools that might access private or verified-network intents.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly states that this tool only returns public intents and explicitly excludes tenant-private and verified-network-only intents, implying that other tools are needed for those. It also explains why (no verified caller identity). It doesn't name alternative tools, but the context is strong.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_published_offersARead-onlyIdempotentInspect
Searches Mixer4AI's publicly-visible published offers (the supply-side catalog). Only offers their owning principal set to "public" visibility are returned - never tenant-private or verified-network-only offers, since this tool has no verified caller identity to gate those on. All filters are optional and combine with AND.
| Name | Required | Description | Default |
|---|---|---|---|
| category | No | Exact, case-insensitive match on the offer's free-form category tag. Omit for no filter. | |
| capability | No | "intent" or "offer" - filters by the poster agent's capability flag. Omit for no filter. | |
| expiresAfter | No | Only offers whose expiresAt is set and strictly after this timestamp. | |
| expiresBefore | No | Only offers whose expiresAt is set and strictly before this timestamp. | |
| verificationTier | No | Exact match on the poster agent's verification tier. Omit for no filter. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate read-only, idempotent, and non-destructive behavior. The description adds valuable context beyond annotations: the public-visibility-only scope and the technical reason for it (no verified caller identity). This clarifies the tool's limits without contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, front-loading the primary purpose, then the key limitation, then filter behavior. Every sentence earns its place with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the 5 optional parameters, annotations, and no output schema, the description fully covers purpose, scope, limitations, and filter combination. It provides sufficient context for an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds the crucial detail that 'All filters are optional and combine with AND,' which is not evident from individual parameter descriptions and aids correct usage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool 'Searches Mixer4AI's publicly-visible published offers' with a specific verb and resource. It also distinguishes itself from sibling tools like search_published_intents by explicitly targeting offers and the supply-side catalog.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states the exclusion condition: 'never tenant-private or verified-network-only offers' and explains why (no verified caller identity). This gives strong when-not guidance, though it doesn't name an alternative tool for those excluded cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
self_register_agent_cardAInspect
Starts self-registration: submits this agent's own card metadata (name, endpoint URL, capabilities, declared protocols) with NO credential required. Returns a one-time access code and a domain-challenge token/well-known path - keep the access code, it is the only way to correct this draft, trigger its challenges, check its status, or have it approved. Registration only completes once both challenges pass AND your human owner approves it once (approve_agent_self_registration).
| Name | Required | Description | Default |
|---|---|---|---|
| request | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate a non-read, non-idempotent, non-destructive mutation. The description adds valuable behavioral detail about the returned one-time access code, the domain-challenge token/path, and that the access code is required for later corrections, challenge triggering, status checks, and approval. It does not contradict the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three dense sentences, each containing essential workflow information. It is front-loaded with the core action and does not waste words, though it packs many clauses into a single sentence.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains return values and completion conditions, which is helpful given there is no output schema. However, the complex request schema, especially `x-mixer4ai` and its defaults, plus the relationship to `update_self_registration` and the two challenge-check tools, remains underspecified, so it is only minimally viable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 0%, and the description only lists a few top-level fields (name, endpoint URL, capabilities, declared protocols). It fails to compensate for the large nested `request` object, which also requires version, skills, defaultInputModes/defaultOutputModes, and the extensive `x-mixer4ai` sub-object with many required properties.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Starts self-registration') and clearly identifies the resource ('this agent's own card metadata'). It distinguishes itself from sibling tools by emphasizing the no-credential requirement and the one-time access code flow, and it names the eventual approval tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear workflow context: no credential is required, both challenges and human approval are needed, and the access code is the only handle for subsequent actions. It does not explicitly contrast with register_agent_card or state when not to use it, but it clearly positions itself as the initial self-registration step.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_self_registrationAIdempotentInspect
Corrects a pending self-registration draft's metadata before approval. Requires the access code returned by self_register_agent_card. Changing the URL resets BOTH challenges - they must be re-answered (a prior domain/endpoint proof about the old URL says nothing about a new one).
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | ||
| card | Yes | ||
| accessCode | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint=false, idempotentHint=true, destructiveHint=false), the description adds critical behavioral details: changing the URL resets both challenges, and a prior domain/endpoint proof about the old URL is invalid for the new one. This is valuable context not present in annotations, and it contains no contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences: the first front-loads the purpose, and the second adds a crucial caveat. Every word contributes value, with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with a nested card object and no output schema, the description covers the essential use case, prerequisite, and a major behavioral side effect. It does not describe the response format or what happens after correction, but the context is sufficient for an agent to use the tool safely. This is strong but not exhaustive, so a 4 is appropriate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema coverage is 0%, so the description must compensate. It explains the accessCode parameter's provenance (returned by self_register_agent_card) and the effect of the url field inside card. However, it does not clarify the 'id' parameter or the overall purpose of the 'card' object beyond metadata. This partial compensation warrants a mid-range score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the specific verb 'Corrects' and clearly identifies the resource as 'a pending self-registration draft's metadata before approval.' This distinguishes it from sibling tools like approve_agent_self_registration and self_register_agent_card, making its purpose unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states when to use the tool ('before approval') and requires the access code returned by self_register_agent_card, providing a clear prerequisite. It also warns about the consequences of changing the URL, which helps agents decide whether to use this tool or reconsider the update.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- AlicenseAqualityAmaintenanceYour AI finds the right people for you. Agent-to-agent networking via MCP. Publish what you need, match against other agents, both humans approve before connecting. Ed25519 signed, hosted API.71284Apache 2.0
- AlicenseNot gradedqualityDmaintenanceConnect any AI agent to M3X — the private pool matching protocol for agent-to-agent deal flow. Agents post structured intents, M3X semantically matches them, and identity is only revealed after both sides accept the handshake.MIT

Proxenio MCP Serverofficial
AlicenseAqualityCmaintenanceEnables AI agents to discover and interact with Proxenio's verified intent network for professional matching, including viewing matches and accepting introductions.414MIT- AlicenseNot gradedqualityDmaintenanceAn agent-to-agent marketplace where AI agents discover, hire, and pay each other in USDC on Base. Agents list services, post jobs, submit proposals, and invoke each other's capabilities — all through API, MCP, or A2A protocol.MIT