Skip to main content
Glama

QuassLabs API

log_audit_creator

Generate a concrete audit-logging spec for an app. POST your feature list (and optional compliance targets: soc2/hipaa/gdpr/pci) and get a full audit-event catalog (namespaced event names, actor/target/required fields, PII flags, retention), a canonical event envelope schema, a storage plan (append-only, access control, alerting), and per-framework compliance notes. A dev team can implement it directly. Deterministic, no LLM. Retention/compliance figures are common-practice defaults to verify with counsel.

Input Schema

NameRequiredDescriptionDefault
stackNo
featuresNoApp features, e.g. ["user login", "payments", "file upload"].
complianceNo
descriptionNoOptional free-text app description (scanned for features).

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations and no output schema, the description carries the disclosure burden well: it enumerates what comes back, states 'Deterministic, no LLM', and warns that retention/compliance figures are common-practice defaults to verify with counsel. Only idempotency/rate-limit behavior is left unstated, which matters little for a stateless generator.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The deliverable list and the input requirement are front-loaded, and every clause (outputs, implementability, determinism, legal caveat) carries distinct information. No redundant restatement of the tool name.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Without an output schema, the description's enumeration of return contents is exactly what an agent needs, and the determinism plus legal caveat cover trust concerns. The one hole is the unexplained 'stack' parameter.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50%: 'features' and 'description' are documented in the schema, and 'compliance' is self-documenting via its enum. The description adds that compliance targets are optional but never explains 'stack', leaving one parameter undocumented in both places. Baseline 3 fits when the schema does most of the work.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

A specific verb (Generate) plus a precise resource (concrete audit-logging spec) and an enumerated set of deliverables: event catalog, envelope schema, storage plan, compliance notes. No sibling could be confused with this one — log_analyzer analyzes logs while this produces a spec.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Clearly frames the call as 'POST your feature list (and optional compliance targets)' and states the outcome is directly implementable by a dev team. Use context is clear, but there are no explicit exclusions or named alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources