Skip to main content
Glama

Stratalize Governance

get_model_risk_management_standards

Read-only

Use when preparing for a model risk management examination, building an SR 26-2 compliant model governance program, or assessing a financial institution's MRM framework against regulatory expectations. Returns Federal Reserve SR 26-2 and OCC requirements across development, independent validation, ongoing monitoring, and governance — with exam deficiency rates showing where institutions most commonly fail. For AI and ML models, SR 26-2 explicitly requires independent validation even for vendor-supplied models and black-box systems. Example: Documentation deficiencies are the most common exam finding at 67% of reviewed institutions — inadequate conceptual soundness documentation for credit scoring models triggers immediate MRA (Matter Requiring Attention). Source: Federal Reserve SR 26-2, OCC Bulletin 2026-13, FDIC FIL-15-2026.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
institution_typeNocommunity_bank

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, so the safety profile is covered. The description adds substantial behavioral context by detailing what the tool returns (requirements across development, validation, monitoring, governance, plus deficiency rates) and includes an example finding and source citation. This goes beyond the annotations but doesn't describe return formatting or limitations, which is acceptable for a read-only report tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is four sentences, front-loaded with use cases, followed by return content, an example, and source attribution. Each sentence adds distinct value with no wasted words, though it is slightly longer than necessary and could be tightened without losing meaning.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only tool with no output schema, the description richly covers the returned content and regulatory sources, satisfying most of the 'what does it return' question. However, the unaddressed institution_type parameter leaves a clear gap in understanding how output is customized, making the description incomplete despite its depth.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has one parameter (institution_type) with enum values but no property description; schema description coverage is 0%. The description never mentions this parameter or how results vary by institution type, failing to compensate for the schema gap. The parameter name is somewhat self-explanatory, but the agent receives no guidance on how to set or use it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with specific use cases ('preparing for a model risk management examination') and a clear verb 'Returns' listing the content (Federal Reserve SR 26-2 and OCC requirements, exam deficiency rates). This clearly distinguishes the tool from sibling tools focused on other compliance topics, making the purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states 'Use when' followed by three concrete scenarios: preparing for an MRM exam, building an SR 26-2 compliant program, or assessing an MRM framework. This provides strong context, but it does not mention exclusions or alternatives when the tool is not appropriate, so it falls slightly short of full guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A4.1/5.0
Disambiguation5/5

Every tool targets a distinct regulatory domain or data source—from OFAC sanctions to CRA ratings to NIST AI RMF—with clear boundaries. Even the three screening tools (OFAC, OIG, SAM) differ by governing agency and list, and their descriptions explicitly disambiguate them.

Naming Consistency5/5

All tools follow the consistent lower_snake_case pattern 'get_<domain>_<focus>', such as get_ofac_sanctions_screening and get_us_state_ai_legislation. There are no mixed conventions, vague verbs, or unexpected abbreviations.

Tool Count4/5

18 tools is slightly above the ideal 3-15 range but appropriate for a broad governance data server covering federal, state, and international regulatory sources. Each tool corresponds to a meaningful dataset, so the count feels justified rather than padded.

Completeness4/5

The surface covers a wide array of governance and compliance domains, including AI regulation, financial enforcement, sanctions, and legal screening, with no critical dead ends for typical lookups. However, it lacks some common regulatory areas (e.g., SEC, HIPAA, GDPR) and offers only read-only access, which is acceptable but not exhaustive.

Resources