Quiet Failures
Server Details
Open weekly security base rates (CC BY 4.0), plus live DMARC, takeover and WHOIS checks.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.4/5 across 6 of 6 tools scored.
Each tool has a clearly distinct purpose: the three check_* tools target different failure modes (email auth, subdomain takeover, WHOIS), and the three base rate tools are distinguished by their roles (list catalog, search, get detail). No overlap or ambiguity.
Tool names follow a consistent verb_noun pattern (check_* and get/find/list), but there is a minor inconsistency: 'list_base_rates' uses plural while 'find_base_rate' and 'get_base_rate' use singular. Otherwise the naming is predictable.
Six tools is well-scoped for a specialized security scanner: three live checks and three data access functions. Each tool earns its place, and the count feels neither sparse nor bloated.
The tool set covers the full lifecycle of the stated purpose: live checks for three common failure types plus a complete knowledge base with list, search, and detail endpoints. No obvious gaps or dead ends.
Available Tools
6 toolscheck_email_authCheck email authentication (live)ARead-onlyInspect
Live SPF, DKIM and DMARC audit of up to 50 domains the user owns or asks about. Returns a per-domain breakdown plus a portfolio grade. Compare against the base rates: most of the web fails these controls. Rate-limited per client.
| Name | Required | Description | Default |
|---|---|---|---|
| domains | Yes | Domains to audit (1-50). Array preferred; a JSON-encoded array or comma/space-separated string also works. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds valuable behavioral context beyond the annotations (readOnlyHint, openWorldHint): 'live' indicates real-time execution, 'Rate-limited per client' discloses constraints, and 'most of the web fails these controls' sets performance expectations. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, front-loaded with the core action, and every sentence contributes unique information (action, returns, base-rate comparison, rate limit). No fluff or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite lacking an output schema, the description clearly states the return type ('per-domain breakdown plus a portfolio grade') and notes rate limiting. This is sufficient for a straightforward audit tool, and the comparison to base rates adds decision-making context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with the parameter description already detailing accepted formats and the 1-50 domain limit. The description's mention of 'up to 50 domains' and 'owns or asks about' adds authorization context but does not enhance parameter structure or syntax. Baseline 3 for high schema coverage is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('Live SPF, DKIM and DMARC audit') and resource ('up to 50 domains'). It distinguishes itself from siblings like check_subdomain_takeover and check_whois by focusing on email authentication. The scope ('the user owns or asks about') adds precision.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives usage context by suggesting comparison to base rates and noting rate limits per client. However, it does not explicitly state when to use this tool over alternatives or provide exclusions. This is clear but lacks the explicit 'use X instead' guidance seen in top-tier examples.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_subdomain_takeoverCheck subdomain takeover exposure (live)ARead-onlyInspect
Live scan of one domain: enumerate its subdomains (CT logs + DNS), then test each for dangling references on 13 cloud providers. Slow on large domains (up to a few minutes). Rate-limited per client.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | The apex domain to scan |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses that the scan is live, enumerates subdomains from CT logs and DNS, tests on 13 cloud providers, may take minutes on large domains, and is rate-limited per client. This adds meaningful behavioral context beyond the readOnlyHint and openWorldHint annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences: the first states the process, the second mentions performance and rate-limit constraints. No filler, information is front-loaded, and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the scan process and performance constraints well, but lacks an output schema and does not describe the return format (e.g., list of vulnerable subdomains, report structure). This is a noticeable gap for a tool with no output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already fully describes the 'domain' parameter as 'The apex domain to scan' (100% coverage). The description adds only marginal context like 'one domain' and the scanning process, which doesn't materially enhance parameter understanding.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb-resource-outcome: live scan of one domain, enumerate subdomains via CT logs and DNS, and test for dangling references on 13 cloud providers. This distinguishes it from siblings like check_email_auth and check_whois.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear context that it's a live scan of a single domain with caveats about slowness and rate limiting, implying when this tool is appropriate. However, it doesn't explicitly mention alternatives or when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_whoisCheck domain registrations (live)ARead-onlyInspect
Live WHOIS lookup for up to 100 domains: expiry date, registrar, nameservers. Use to catch registrations about to lapse. Rate-limited per client.
| Name | Required | Description | Default |
|---|---|---|---|
| domains | Yes | Domains to look up (1-100). Array preferred; a JSON-encoded array or comma/space-separated string also works. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the operation as read-only (readOnlyHint=true, openWorldHint=true), lowering the bar. The description adds valuable behavioral details beyond annotations: 'Live', 'up to 100 domains', and 'Rate-limited per client'. It does not disclose potential failure modes or response structure, but for a read-only lookup this is acceptable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact (two sentences) and front-loaded with the primary action and result. Each clause adds meaning: 'Live' signals immediacy, the domain limit is stated, the purpose (catching lapses) is included, and the rate limit is disclosed. No filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter read-only tool with no output schema, the description covers the essential operation, constraints (100 domains, rate limit), and a practical use case. It could optionally mention error behavior or that results are per-domain, but the information provided is sufficient for an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and the parameter 'domains' already includes details about accepted formats and the 1-100 count. The tool description does not add significant parameter semantics beyond the schema, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('live WHOIS lookup') and names the resource (domains) and key outputs (expiry date, registrar, nameservers). It clearly distinguishes from siblings like check_email_auth and check_subdomain_takeover, which address different concerns.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a concrete use case ('Use to catch registrations about to lapse') and contextualizes when the tool is appropriate. It does not explicitly name alternatives or exclusions, but the sibling tools are contextually distinct, and the intended scenario is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_base_rateFind a base rate by keywordARead-onlyInspect
Search the Quiet Failures base rates by keyword (e.g. "dmarc", "certificate expiry uk", "subdomain takeover"). Returns matching metrics and their most citable segments.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Keywords to search for (at least 2 characters) |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so the safe read nature is known. The description adds behavioral context by specifying that it returns 'matching metrics and their most citable segments,' which clarifies the output focus beyond a generic search. This extra detail justifies a score above baseline.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the core action, and includes practical examples. Every word earns its place, with no fluff or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple one-parameter tool with no output schema. The description explains what the tool returns ('matching metrics and their most citable segments'), which is sufficient for an agent to understand the outcome. It does not mention edge cases or pagination, but those are not critical for a single-query search tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single parameter 'query' is described as 'Keywords to search for (at least 2 characters)'. The description adds example keywords ('dmarc', 'certificate expiry uk', 'subdomain takeover') but does not significantly enhance meaning beyond the schema, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description specifies a clear action ('Search'), a resource ('Quiet Failures base rates'), and a method ('by keyword') with examples. It distinguishes from sibling tools like get_base_rate (likely fetch by ID) and list_base_rates (list all) by emphasizing keyword-based search and returning matching metrics and segments.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for keyword search, but it does not explicitly state when to use it instead of siblings like get_base_rate or list_base_rates. There is no mention of exclusions or alternatives, so the usage context is only implied, not explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_base_rateGet one base rate in fullARead-onlyInspect
Full detail for one Quiet Failures base rate segment: the figure with confidence interval, how it is measured, why it matters, the limits of the measurement, the recent time series, and the canonical source URL to cite. Segment defaults to "global"; country slugs (gb, fr, us…) and company cuts (gb-companies, gb-small…) are also published.
| Name | Required | Description | Default |
|---|---|---|---|
| metric | Yes | Metric id, e.g. "dmarc-policy" (see list_base_rates) | |
| segment | No | Segment slug, default "global" | global |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes beyond the readOnlyHint annotation by disclosing exactly what the output includes (measurement, importance, limits, time series, canonical source URL) and clarifying default segment behavior. This provides rich behavioral context without contradicting the read-only nature.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loads the core purpose, and packs useful detail without fluff. Every phrase adds value, from the list of output components to the segment type examples.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the read-only nature, no output schema, and two simple parameters, the description provides a complete picture: what is returned, what parameters do, and possible segment values. It is sufficient for an agent to invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already describes both parameters with examples (metric id, segment slug). The description adds further meaning by explaining segment defaults and naming country/company cut examples, enriching the understanding beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns 'full detail for one Quiet Failures base rate segment', listing specific content like the figure, confidence interval, measurement approach, and source URL. It specifies the metric and segment parameters, and the scope ('one segment') distinguishes it from list_base_rates while the detail level separates it from find_base_rate.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for retrieving comprehensive details on a single segment, noting the default segment and available cut types. It does not explicitly name alternative tools or exclusion criteria, but the context is clear enough for an agent to know when to invoke this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_base_ratesList security base ratesARead-onlyInspect
Catalog of all published Quiet Failures base rates: metric id, the global question, the current global figure, sample size, severity, and every published segment slug (valid segment values for get_base_rate). Use get_base_rate for full detail on one.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, and the description reinforces this by framing the tool as a read-only catalog. It adds useful behavioral context by specifying that it returns all published base rates and lists the fields included, which helps set expectations for output scope without conflicting with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two efficient sentences: the first lists the contents, the second directs users to get_base_rate for detail. Every word contributes to clarity, and the most important information (catalog, contents) is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no parameters and no output schema, the burden on the description is to explain what the tool returns. It does this thoroughly by naming all fields (metric id, global question, current global figure, sample size, severity, segment slugs) and clarifying the relationship with get_base_rate. This is complete for a simple listing tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the description correctly omits parameter-specific semantics. It still adds value by explaining that the segment slugs are valid input values for get_base_rate, which indirectly clarifies how data from this tool relates to another tool's parameters. Baseline 4 is appropriate for no-parameter tools.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states it is a 'Catalog of all published Quiet Failures base rates' and enumerates the exact contents (metric id, global question, current global figure, sample size, severity, segment slugs). It also distinguishes itself from get_base_rate by noting that get_base_rate provides full detail on one entry.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly differentiates this tool from get_base_rate with 'Use get_base_rate for full detail on one', establishing a clear when-to-use vs. when-not-to-use contrast. It also mentions that the segment slugs listed here are valid values for get_base_rate, providing actionable cross-tool guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- AlicenseAqualityCmaintenanceDomain intelligence for DNS, WHOIS/RDAP, SSL/TLS, subdomain discovery, availability, valuation, email security, and typosquatting and brand protection.11MIT
- AlicenseAqualityAmaintenanceDomain security reconnaissance for AI agents — 13 tools (DNS+DNSSEC, SSL/TLS, HTTP security headers, SPF/DKIM/DMARC email auth, port scan, ASN, RDAP/WHOIS) plus a one-shot security_scan returning a 0–100 Health Score (A–F). Free, no API key.13511MIT
- Alicense-qualityDmaintenanceEnables DNS and email security analysis through passive and active scanning capabilities. Provides comprehensive domain security checks including SPF, DMARC, DNSSEC validation, MX record analysis, and SMTP connectivity testing.MIT
- AlicenseAqualityCmaintenancePerforms domain security posture checks including SPF, DKIM, DMARC, TLS, and HTTP security headers.3151MIT