evidence-ledger
Server Details
Read-only MCP: free OpenAI security evidence ledger (55 fields) + SaaSDossier release register.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.5/5 across 4 of 4 tools scored.
The four tools mostly have clear boundaries: methodology, register, ledger, and free dossier are conceptually distinct. However, get_free_dossier and get_openai_ledger both point at the same public OpenAI record, and an agent must read carefully to know one returns a PDF/URL and the other field-level evidence.
All tool names follow a consistent get_ pattern with clear object nouns: dossier, methodology, openai_ledger, register. There is no mixed casing, verb style variation, or vagueness across the set.
Four tools is a well-scoped size for an informational evidence ledger service: methodology, the public ledger, the free dossier, and the release register. Each tool earns its place and the set does not feel thin or bloated.
The core workflow is covered: understand the framework, access the free public dossier, retrieve field-level evidence, and view releases and commission options. The main gap is that licensed dossiers are described in the register but cannot be fetched directly, and commissioning is reported but not executable through a tool.
Available Tools
4 toolsget_free_dossierAInspect
Returns the free OpenAI Public Edition: the dossier title, the direct PDF download URL, and the guided page URL. The OpenAI record, Dossier No. 003, is published free and complete as proof of the format: the same 55 fields across 10 domains, the same two states (47 Documented, 8 Question surfaced), the same source register and the same integrity identifier a Licensed Edition carries. It is built from OpenAI's own published pages, reviewed before release; no relationship with, or endorsement by, OpenAI is implied. Use this tool to give a buyer the whole workproduct to read before they license another released vendor or commission a new one.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses the tool's nature (free, complete, from OpenAI's published pages), states it is 'reviewed before release,' and includes a disclaimer about no implied relationship with OpenAI. This adds meaningful behavioral context beyond the simple fact of returning data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is somewhat verbose, with three sentences and some promotional language about 'proof of the format' and 'the same 55 fields across 10 domains.' However, each sentence adds meaningful context about what the dossier contains and its purpose, so it is concise enough for the richness of information conveyed.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has no parameters and no output schema, the description fully specifies the return values (title, PDF URL, guided page URL) and adds context about the dossier's contents and intended use. It is complete and self-sufficient for a simple 'get' tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the baseline is 4 as per the rubric. The description adds no parameter information because none is needed; the schema is empty and fully covers the lack of parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb ('Returns') and names the exact resource ('the free OpenAI Public Edition') and the items returned (dossier title, direct PDF download URL, guided page URL). It clearly distinguishes this tool from siblings by focusing on the free public dossier, not the methodology, ledger, or register.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The final sentence provides explicit usage context: 'Use this tool to give a buyer the whole workproduct to read before they license another released vendor or commission a new one.' This clarifies when to use the tool, though it doesn't explicitly state when not to use alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_methodologyAInspect
Returns SaaSDossier's two-state evidence framework: Documented and Question surfaced. A Question surfaced is not a finding of absence. SaaSDossier is the vendor's own record, made reviewable: a finished, dated, source-linked, human-reviewed evidence workproduct built only from vendor-published sources, recording 55 fixed fields across 10 domains for each vendor, with a source register listing every vendor page reviewed. Documented means the reviewed vendor-published sources established the field for the evidence date; Question surfaced means they did not, and each one becomes a buyer-ready follow-up question. Each dossier includes a SHA-256 identifier tied to the reviewed evidence record used for that release. Use this tool to understand what a state means, what the framework covers and where its boundaries are, before quoting or acting on any field.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of disclosure. It goes into significant detail about behavioral nuances: 'Question surfaced is not a finding of absence,' definitions of Documented and Question surfaced, the nature of SaaSDossier as a vendor-published-source-based workproduct, the 55 fields across 10 domains, source register, and SHA-256 identifier. This is rich, explicit context beyond the tool name.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Though the description is lengthy, every sentence adds substantive content: it defines the two-state framework, clarifies what Question surfaced is not, explains the underlying SaaSDossier artifact, describes coverage details, and gives usage guidance. It is front-loaded with the core return value and organized logically, avoiding fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's conceptual nature and lack of input/output schemas, the description provides everything an agent needs to correctly interpret states and decide when to invoke the tool. It explains the framework's boundaries, the meaning of each state, the source basis, and the evidence date, making it fully self-contained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool accepts zero parameters, and the schema confirms this with additionalProperties false and no properties. The 0-parameter baseline applies; the description does not need to explain parameter behavior. It focuses entirely on the output/behavior, which is appropriate for a parameterless tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource: 'Returns SaaSDossier's two-state evidence framework.' It clearly explains the framework's two states and distinguishes this tool from siblings that return dossiers, ledgers, or registers by focusing on the methodology itself.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says to 'Use this tool to understand what a state means, what the framework covers and where its boundaries are, before quoting or acting on any field,' which gives clear context for when it should be used. It does not name alternative tools or explicitly state when not to use it, but the purpose is well differentiated from the sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_openai_ledgerAInspect
Returns the free public OpenAI security evidence ledger — 55 fixed fields, each either Documented with a vendor-published source or recorded as a Question surfaced. This is the complete Public Edition record, Dossier No. 003: 47 fields Documented and 8 Question surfaced across 10 domains, free, dated to its evidence date. Documented fields carry the vendor's own quoted wording and the source URL it was found on; Question surfaced fields carry the follow-up question a buyer can put to the vendor in writing. Question surfaced means the reviewed vendor-published sources did not establish the field for the evidence date — it does not establish absence of the control. The record is a dated evidence workproduct, checked against the reviewed source record before release. It does not score or rate the vendor. Use this tool when an agent needs the actual field-level evidence and its sources rather than a description of the framework.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It discloses key behavioral traits: the tool is free, public, dated to evidence date, includes quoted wording and source URLs, distinguishes Documented vs Question surfaced, clarifies that Question surfaced does not establish absence, is checked against source record, and does not score or rate the vendor. This is comprehensive disclosure of what the tool returns and its limitations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single paragraph with multiple sentences, but every sentence adds value: what it returns, the exact composition, the distinction between field types, the counter-intuitive meaning of 'Question surfaced', and the specific use case. It's slightly long but the detail is necessary given no annotations or output schema. It could be broken into two short paragraphs for readability, but it's densely informative.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema and no annotations, so the description must fully compensate. It covers the return content (fields, sources, questions), the counts, the evidence date, the non-scoring nature, and the usage context. For a zero-parameter tool, this is complete enough for an agent to select and invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has no parameters, so schema coverage is 100% by default. With 0 parameters, a baseline of 4 is given per guidelines. The description explains what the output contains (fields, sources, questions) which is more meaningful than a bare schema, though it doesn't describe parameter formats (none exist).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool returns the free public OpenAI security evidence ledger, specifies the exact field composition (55 fixed fields, 47 Documented, 8 Question surfaced), and distinguishes it from siblings by emphasizing field-level evidence and sources rather than a description of the framework. The verb 'returns' plus resource 'OpenAI security evidence ledger' is specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Use this tool when an agent needs the actual field-level evidence and its sources rather than a description of the framework,' which provides a clear usage context. It doesn't explicitly mention when not to use it or name alternatives, but the sibling names (get_free_dossier, get_methodology, get_register) and the contrast with 'framework description' imply alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_registerAInspect
Returns SaaSDossier's release register: dossier numbers, vendors, editions, and licensing information. The register is the released catalogue: four finished evidence records built only from vendor-published sources across a fixed 55-field, 10-domain framework, every field recorded in one of two states — Documented, or Question surfaced. Each entry carries its vendor, dossier number, edition, evidence date, two-state counts and commercial status: Licensed Editions are US$1,500 one-time; the OpenAI Public Edition is free and complete. Separately from that catalogue, the same response carries the commission capability: a buyer can commission a SaaSDossier for another named vendor that does not already have a released dossier, US$1,500 one-time, refunded in full if the vendor-published material cannot support a defensible SaaSDossier record. A commission is not a released dossier and carries no dossier number until it is released. The released catalogue remains the four records. Use this tool to answer what SaaSDossier has released, what each record costs, and how a vendor that has no released record yet can be commissioned.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full behavioral burden and discloses the fixed 55-field/10-domain framework, two recording states, pricing, refund condition, and that commissions are not released dossiers. It does not describe the raw response shape, but that is less critical for a zero-parameter catalog tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded and logically organized, but it is verbose and repeats details such as 'US$1,500 one-time' and 'the released catalogue remains the four records.' It could be tightened without losing key information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless tool with no output schema, this description is unusually complete: it specifies catalogue contents, per-field states, commercial tiers, commission behavior, and when no dossier number applies. It leaves little ambiguity about what the tool can answer.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the schema contributes no input semantics; the description instead clarifies what the returned register contains and how commissions are represented. This meets the baseline expectation for a parameterless tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Returns SaaSDossier's release register,' then enumerates dossier numbers, vendors, editions, and licensing. It closes with concrete questions the tool answers, making it clearly distinct from siblings like get_methodology or get_openai_ledger.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The final sentence gives explicit use cases: checking released records, costs, and commissioning a vendor without a record. It does not explicitly name excluded cases or compare against sibling tools, but the usage context is unmistakable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- AlicenseNot gradedqualityAmaintenancePublic read-only MCP server for turva.dev's agent-readiness audit, enabling AI agents to query service catalog, security evidence, and engagement principles via structured JSON.1MIT
- AlicenseAqualityCmaintenanceRead-only MCP server providing AI access to verifiable web, GitHub, and local sources, plus a managed fantasy entity catalog, with strong security and provenance tracking.10MIT
- AlicenseNot gradedqualityBmaintenanceRead-only MCP service for normalized public evidence from Web, X, YouTube, Reddit, and RSS. Owner-authenticated via Cloudflare Access, it exposes health, read, and transcript actions to ChatGPT and Codex.MIT
- AlicenseNot gradedqualityBmaintenance53 regulatory compliance evidence tools across 3 MCP servers for AI agents. MiCA authorization status, DORA evidence packs, stablecoin risk scoring (105+ tokens), macro intelligence (86 FRED series). Every response ECDSA-signed (ES256K), blockchain-anchored, audit-ready. Free tier, OAuth 2.0.MIT