Skip to main content
Glama

SentryFi - Wi-Fi Safety

Check public Wi-Fi risk

check_public_wifi_risk
Read-onlyIdempotent

Use this when the user is about to join, or is on, hotel, airport, café (coffee shop), rental, campus or other public Wi-Fi and asks "is public wifi safe", "is hotel wifi safe", whether to do banking or work there, whether a sign-in page or a network name looks fake (evil twin / fake wifi), or what to watch out for. Also use it when they ask who can see their browsing on hotel or café Wi-Fi ("can the wifi owner see my history", "does incognito hide my browsing", "does a VPN protect me on public wifi"): the card shows what the Wi-Fi owner, hotel, other guests or a VPN provider can and cannot see, and how HTTPS, a VPN or encrypted DNS change that. Fill in what the user said; use "unknown" or null for anything they did not say rather than guessing. Returns a 0–100 score (100 = no warning signs) from their answers, the signals behind it, advice per activity, who can see what, and a checklist for that venue. Do not use for home Wi-Fi security or hack worries (use secure_my_wifi), for recommending VPN or security products, to monitor or read another person's activity, or for getting onto a network without permission. Does not scan or connect to any network; works only from what the user tells ChatGPT.

Input Schema

NameRequiredDescriptionDefault
venueYesWhere the Wi-Fi is.
securityNoopen = no password; shared_password = one password for everyone (e.g. on a card); private_password = only you have it; enterprise_login = personal username/password (e.g. eduroam).unknown
usingVpnNo
httpsOnlyNoOnly HTTPS sites (HTTPS-only mode on).
activitiesNoWhat the user wants to do on this network.
signInAsksNoWhat the sign-in page asks for.
signInPageNoWhether a sign-in (captive) page appeared and if its address started with https or http.unknown
encryptedDnsNoPrivate DNS / DNS over HTTPS turned on.
nameConfirmedNotrue if the exact network name was confirmed with staff or an official sign.
certificateWarningNotrue if the device showed a certificate or "not private" warning.
mobileDataAvailableNo
similarNetworkNamesNotrue if several networks with similar names are visible.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare a safe, read-only, idempotent, closed-world operation, so the bar is lower, but the description still adds the crucial behavioral fact that it does not scan or connect to any network and works only from user-reported answers. It also describes what the returned card contains. It stops short of explaining scoring weights or confidence, which keeps it at 4 rather than 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

It is front-loaded with the use case, then the returned content, then the exclusions, and the quoted user phrasings make the trigger conditions concrete. The paragraph is long and dense with many quoted examples, which is slightly more than strictly needed, but each sentence contributes selection or behavioral information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 12-parameter tool with no output schema, the description covers the input contract (fill from user statements, unknown/null otherwise), the return payload (score, signals, per-activity advice, visibility, checklist), and the hard boundary (no scanning or connecting). Nothing an agent needs to select or call it correctly appears to be missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 83% schema coverage the schema already carries most parameter meaning, so the baseline is 3; the description earns an extra point by instructing the agent to fill in only what the user actually said and to use "unknown" or null instead of guessing, which is real guidance the schema does not encode. It does not explain individual fields beyond that.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific analysis task (assessing public Wi-Fi risk from what the user reports) and states the concrete output: a 0–100 score, the signals behind it, per-activity advice, a who-can-see-what breakdown and a venue checklist. It also distinguishes itself from the sibling secure_my_wifi by excluding home Wi-Fi and hack worries.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit trigger phrasings ("is hotel wifi safe", "does incognito hide my browsing"), lists the situations that select this tool (about to join or already on hotel/airport/café/campus Wi-Fi), and names exclusions with routing: home Wi-Fi and hack worries go to secure_my_wifi, and it must not be used for product recommendations, monitoring others, or unauthorized access.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources