Skip to main content
Glama

SentryFi - Wi-Fi Safety

Home Wi-Fi: secure it or check if it was hacked

secure_my_wifi
Read-onlyIdempotent

Use this when the user asks how to secure their home Wi-Fi or router ("how to secure my wifi", "secure wifi from hackers", "router security settings"), how to change their Wi-Fi password or where it is shown, whether to turn off WPS or UPnP, whether to set up a guest network for smart-home devices, "can my router or internet provider see my history at home" or "do I need a VPN at home". Also use it when they suspect their own home Wi-Fi or router was hacked ("is my wifi hacked", "is my router hacked", "someone is using my wifi"): fill in the symptom answers they gave (unknown devices, a router login that stopped working, changed DNS, redirects or pop-ups, a Wi-Fi name or password that changed, slow internet, busy router lights) and use null for anything they did not say rather than guessing. Returns a router hardening checklist ranked by impact (admin password, WPA3/WPA2-AES, Wi-Fi password, firmware, WPS, remote admin, UPnP, guest/IoT network, network name, DNS), steps already done marked, brand-specific password steps and a neutral answer on privacy and VPNs at home; when symptoms are given it adds hack signals out of 100 (100 = none of the answers point to a break-in), common causes that are not a hack and ordered first steps. Do not use to hack, crack or get into a network the user does not own, to find or watch another person, to recommend VPN or security products, or for public Wi-Fi safety (use check_public_wifi_risk). Does not scan or connect to any network; works only from what the user tells ChatGPT.

Input Schema

NameRequiredDescriptionDefault
wpsOnNotrue if WPS (push-button / PIN pairing) is on.
needsUpnpNotrue if a game console, voice chat or home server needs UPnP (e.g. "strict NAT" without it).
smartHomeNoHow many smart-home devices (cameras, plugs, bulbs, speakers, TVs) are on the network. many = moves the guest/IoT network step up.unknown
dnsChangedNotrue if the router or a device shows DNS servers the user did not set.
alreadyDoneNoSteps the user says they have already done; they are marked done and moved to the end.
routerBrandNoRouter or internet provider, if known.
slowInternetNotrue if the internet has become slow.
lightsAtNightNotrue if the router lights blink a lot when nobody seems to be using it.
unknownDevicesNotrue if the router lists devices the user does not recognise.
firmwareOutdatedNotrue if router updates are not installed, or the router no longer gets updates.
cantLogIntoRouterNotrue if the router admin password that used to work no longer works.
redirectsOrPopupsNotrue if browsers jump to odd sites, fake login pages or show pop-ups.
wifiSettingsChangedNotrue if the Wi-Fi name or password changed without the user doing it.
adminPasswordDefaultNotrue if the router admin password is still the default one from the sticker or manual.
passwordSharedWidelyNotrue if the Wi-Fi password has been given to many people (neighbours, past guests, ex-roommates).
redirectsOnAllDevicesNotrue if the redirects/pop-ups happen on every device on this Wi-Fi, false if only on one device.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark this as read-only, non-destructive and closed-world, and the description adds substantial behavioral context beyond them. It describes the ranked hardening checklist, marked completed steps, brand-specific password steps, neutral privacy/VPN guidance, and the hack-signal score plus common non-hack causes when symptoms are supplied.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the primary when-to-use guidance before moving into exclusions and return behavior. It is dense and long, but given the breadth of trigger phrases and the 16-parameter schema, most of the content earns its place; it could be structured more cleanly but is not padded with fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex 16-parameter tool with no output schema, the definition covers the important gaps: what the tool returns, how symptom inputs are handled, what the score means, and what the tool cannot do. Nothing essential for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so parameter meanings are already well documented. The description still adds useful population guidance by telling the agent to fill in symptom answers and use null for anything the user did not say rather than guessing, which is meaningful beyond the schema itself.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: it helps secure a home Wi-Fi router and diagnose whether that router was hacked. It names concrete trigger phrases and explicitly distinguishes itself from check_public_wifi_risk, so an agent can tell what it does and does not cover.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage conditions are explicit and unusually thorough: it lists when to use the tool, when not to use it (hacking someone else's network, finding or watching another person, public Wi-Fi safety), and names check_public_wifi_risk as the alternative for public networks. It also explains that it does not scan or connect to any network.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources