Tool-result size governor for MCP
Server Details
Per-route output budgets for MCP: windowing, spill artifacts, signed omission receipts.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-03-26
- URL
TDQS
Scored across 3 tools
Each tool has a distinct action on a distinct object: fetch_slice retrieves payload slices, shape_result produces shaped windows plus receipts, verify_receipt validates receipts. No overlap or plausible confusion between them.
All three names follow a clean verb_noun snake_case pattern (fetch_slice, shape_result, verify_receipt). Fully predictable and consistent.
Three tools map exactly onto the narrow shape/spill/fetch/verify pipeline this server governs. Each tool earns its place, and no bloat or trivial padding is present.
The surface covers the core lifecycle: shape a result, re-fetch a spilled slice, and verify the omission receipt. Minor gap: no tool to enumerate or purge spilled artifacts, though receipts appear to carry artifact references so agents can work around it.
Available Tools
3 toolsfetch_sliceBInspect
Re-fetch a narrower slice of your own spilled payload, byte-exact, checksum re-verified. unknown_artifact is a clean error.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| offset | No | ||
| artifact_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose real behavior: byte-exact retrieval, checksum re-verification, and that unknown_artifact is a clean error. It omits offset/limit boundary behavior, pagination semantics, and any auth or rate-limit context, so it is helpful but incomplete.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the core action and followed by the integrity guarantee and error case. Nothing is padded, though the terseness borders on cryptic for jargon like 'spilled payload'.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 3-parameter tool with no annotations and no output schema, the description covers the purpose, integrity guarantee, and one error case, but leaves limit/offset semantics and slice-size defaults unaddressed, so an agent could still mis-invoke it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% for three parameters. The description hints that the call produces a 'narrower slice' (mapping loosely to limit/offset) and references artifact_id via the unknown_artifact error, but gives no format, units, or boundary meaning for any of the three.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource: re-fetching a narrower slice of your own spilled payload. The 'your own spilled payload' framing implicitly separates it from shape_result and verify_receipt, though it doesn't name them explicitly, so it falls just short of the top band.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is only implied: 'narrower slice of your own spilled payload' tells the agent this follows a prior spill and narrows it, but there is no explicit when-to-use, when-not, or named alternative among the siblings. Adequate but leaves routing to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
shape_resultCInspect
Shape one tool result under your per-route budgets -> shaped window + signed omission receipt. Trial: first 100 shaped results free once per operator; then $0.001/result (X-PAYMENT header) or a plan.
| Name | Required | Description | Default |
|---|---|---|---|
| args | No | ||
| text | No | ||
| route | Yes | ||
| result | No | ||
| tool_args | No | ||
| fixture_tool | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose meaningful behavior: per-result pricing, an X-PAYMENT header requirement, a 100-result free trial, and the fact that output includes a signed omission receipt (implying truncation). It still omits what gets omitted or discarded, whether shaping is reversible, and any auth requirements beyond payment.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the action and outputs before the pricing clause, with no obvious filler. It is compact for the amount of information conveyed, though the arrow notation is terse to the point of ambiguity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with six undocumented parameters, nested objects, no annotations, and no output schema, the description is far too thin. An agent cannot determine what to put in args, result, tool_args, or fixture_tool from this definition alone.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across six parameters, including nested objects (args, result, tool_args), so the description must compensate and largely does not. 'Per-route budgets' weakly hints at the required 'route' parameter, but args, text, result, tool_args, and fixture_tool are entirely unexplained in both schema and description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a verb ('Shape') and resource ('one tool result') and names the outputs ('shaped window + signed omission receipt'), so the general action is inferable. However, 'shape' is opaque jargon that is never defined, and the description never distinguishes this from the sibling tools fetch_slice and verify_receipt, leaving the agent to guess the division of labor.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to call this versus fetch_slice or verify_receipt, nor on prerequisites (e.g., that a route must be configured with budgets). The only context given is pricing and trial terms, which describe cost, not usage conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_receiptCInspect
Verify a signed omission receipt.
| Name | Required | Description | Default |
|---|---|---|---|
| receipt | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure, and it barely does so. It does not state whether verification is a read-only operation, what happens on a failed or malformed signature, whether it throws versus returning a result, or any authentication/rate-limit requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The single sentence is front-loaded and free of filler, so it is structurally clean. But at this length it reads as under-specification rather than deliberate conciseness, since a non-trivial cryptographic verification tool needs more substance.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given a nested-object parameter with zero schema descriptions, no output schema, and no annotations, the description omits nearly everything an agent needs: the receipt's shape, the meaning of a successful/failed verification, and the return value. It is not adequate for the tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% and the single parameter is an opaque nested object with no documented properties. The phrase "signed omission receipt" hints at what the object contains, but it gives no field names, expected encoding, or format, so an agent cannot construct the argument without guessing.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description pairs a clear verb ("Verify") with a named resource ("signed omission receipt"), so the general action is identifiable. However, "omission receipt" is unexplained domain jargon and the description offers nothing to distinguish this tool from siblings like fetch_slice or shape_result, leaving the purpose only partially clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool, what preconditions apply (e.g., where the receipt came from), or what to use instead for related tasks. Usage can only be inferred from the single word "Verify" in the description.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
- First observed
fetch_slice - First observed
shape_result - First observed
verify_receipt
Related MCP Connectors
Agent Token Budget MCP — hard per-session token + spend cap with signed budget-exhausted
Paid remote MCP for context-budget routing, schema cost estimates, usage audits, and readiness.
Paid remote MCP for context budgets, progressive loading, schema slimming, and readiness.
Remote MCP for C2PA disclosure policy MCP, structured receipts, audit logs, and reviewer-ready evide
Related MCP Servers
- AlicenseAqualityBmaintenanceRetired snapshot of the former 15-tool Apache-2.0 beta. Use Living Stack Community for the free seven-tool proof edition; Complete Local is the paid runtime with memory, recovery, signed traces, release verification, and multi-agent workflows.14Apache 2.0
- FlicenseNot gradedqualityBmaintenanceEnables AI agents and multi-agent frameworks to throttle outbound LLM API calls with multi-provider token-bucket and sliding-window limiting, plus predictive token-consumption budgeting to avoid TPM/RPM throttling. It runs deterministically over MCP with zero dependencies, returning rate-limit decisions and telemetry for any client such as Claude Desktop or Cursor.7-
- AlicenseNot gradedqualityCmaintenanceBudget management and cost tracking MCP server for autonomous agents, enabling budget creation, cost recording, spending projections, and alert rules.MIT
- AlicenseNot gradedqualityBmaintenanceLocal-first cost tracking and model routing for MCP agents with offline token counting, budget alerts, and spend reports.15 npmMIT
Glama MCP Gateway
Add one secure layer between your agents and this server.