Skip to main content
Glama

Crypto, web, finance and app data tools

Secure Random Generator

random_values

Cryptographically secure random values: UUID v4 or v7, strong passwords, hex or URL-safe tokens, integers in a range, dice rolls or coin flips, up to 100 at once.

Tool call template

This tool declares no required parameters. Add optional parameters from the input schema as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {},
    "name": "random_values"
  }
}

Input Schema

NameRequiredDescriptionDefault
kindNouuid
countNo
lengthNo
max_valueNo
min_valueNo

Output Schema

NameRequiredDescriptionDefault
resultYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does deliver one genuinely important trait: the output is cryptographically secure, which is the key distinction from a naive RNG. It also discloses the batch cap of 100. It omits other behavior an agent would want: that results are non-reproducible/no seeding, what happens when count exceeds 100 or min_value exceeds max_value, and whether length applies only to token/password kinds.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One sentence, front-loaded with the security guarantee and the unit limit, with zero filler. The enumerated list is dense but readable and each item earns its place as a valid output mode. Only minor cost is that the enumeration reads like a catalog rather than guiding the caller on how to choose among the modes.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value explanation is rightly omitted, and the description covers the 'what can I generate' question well. But with five undocumented parameters, zero schema coverage, and no annotations, the definition leaves the kind-to-parameter mapping unexplained, which is the main thing an agent needs to invoke it correctly. Adequate as an overview, incomplete as a calling guide.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must supply parameter meaning, and it only partly does. It implies count (up to 100), length (password/token size), and min_value/max_value (integers in range), but it never says what string values the `kind` parameter accepts, which is the single switch controlling everything else. An agent still has to guess whether the value is 'uuid', 'uuid_v4', 'password', 'token_url', or similar, and defaults for count/length/min/max are left to the schema titles alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names the concrete artifacts produced (UUID v4/v7, passwords, hex tokens, integers, dice/coin flips) rather than restating the title, so an agent can tell immediately what comes back. It never states a verb-and-resource summary like 'generates random values of a given kind', so the scope is clear but the framing is a list rather than a stated contract. No sibling tool produces the same output, so differentiation is not a problem.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: an agent infers to call it whenever it needs random material, but the description never says when this is preferable to the alternative of user-supplied values or an existing hash. It does not warn against using it for keys/secrets at scale or point to any other tool. The 'up to 100 at once' limit is the only practical constraint it gives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources