Skip to main content
Glama

Settlens

Verify a Settlens evidence attestation

verify_attestation
Read-onlyIdempotent

Offline check of a Settlens evidence attestation: verifies its ed25519 signature and, when the report is supplied, that the report is intact and is the one the attestation covers. A valid signature only proves the attestation was signed by the key it embeds; pass expected_public_key to require a specific signer.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
reportNoOptional Settlens JSON report the attestation should cover.
attestationYesThe attestation JSON object.
expected_public_keyNoOptional signer the attestation must come from: an ed25519 public key PEM, or the 0x-prefixed 32-byte hex key printed by evidence keygen.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
validYes
reasonsYes
publicKeyYes
attestedAtYes
reportMatchesYes
signatureValidYes
publicKeyMatchesNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, so the bar is lower, yet the description adds real context: the check is offline, and crucially warns that a valid signature only proves signing by the embedded key, not by a trusted signer. This security caveat is exactly the kind of behavioral disclosure an agent needs. It doesn't describe return shape or failure modes, but an output schema exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the core action, then the conditional report behavior, then the signer requirement. Every sentence carries non-redundant information and nothing is padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a verification tool with good annotations, full schema coverage, and an output schema, the description covers what is checked, the optional parameters' roles, and the trust caveat. An agent has everything it needs to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, setting a baseline of 3, but the description adds semantic meaning beyond the schema: it explains the report/attestation coverage relationship and the security implication of expected_public_key. That elevates it above the baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('verifies' a 'Settlens evidence attestation') and names the exact cryptographic operation (ed25519 signature check plus report integrity/coverage). It is clearly distinguishable from siblings like verify_report and verify_payment_signature because it defines the attestation-specific scope.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives conditional usage: the report parameter is only relevant 'when the report is supplied', and expected_public_key should be passed 'to require a specific signer'. It does not explicitly name alternative sibling tools or state when-not to use this one, so it falls short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources