Skip to main content
Glama

Tyton

Audit a public page

audit_site
DestructiveIdempotent

Inspects one public page's HTML and saves a partial audit report, without signup. Takes the audit session fields and the page URL, plus optional sanitized HTML supplied by the agent, which is stored as unverified evidence. One session can hold several related components. Returns evidence, limitations and discovery actions, not a full tracking-health verdict.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlYesthe site to audit
htmlNoAuthorized, sanitized page HTML, including local previews. The entire JSON-RPC request is limited to 256 KiB after JSON escaping, so a larger page needs a focused capture. Page markup only, without private source or personal data.
freshNobypass the short public-page cache when verifying a change
audit_idNoaudit run ID returned by Tyton; each audit run has its own ID
revisionNolatest run revision; 0 for the first write of a new audit session, then the revision returned by the previous write
audit_keyNoprivate audit write capability returned by Tyton; a secret that authorizes changes to this audit only
request_idNoUUID identifying one mutation; a repeated request_id with identical content is treated as a retry

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlYes
kindYes
sourceYes
statusYes
contextNo
sessionNo
decisionNo
findingsYes
inventoryNo
reportUrlNo
capturedAtYes
componentsNo
limitationsYes
nextActionsYes
reportSavedYes
observationsNo
schemaVersionYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With annotations already declaring readOnlyHint=false, destructiveHint=true, idempotentHint=true, the description adds real context beyond them: the write is a 'partial audit report', agent-supplied HTML is stored as 'unverified evidence', one session can hold several components, and the return set is explicitly bounded ('evidence, limitations and discovery actions, not a full tracking-health verdict'). It does not explain what destructiveness/revision overwrite means, which is a gap given destructiveHint=true.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Effectively four sentences, front-loaded with the core action and scope, with no filler. It is dense but every clause carries information; only the session/return-value sentence could be tightened.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so omitting return-field detail is fine, and the safety profile is carried by annotations. The description covers scope, evidence trust level, and session grouping, but given the large audit-lifecycle sibling family it leaves the agent guessing about sequencing (begin_audit → audit_site → submit_findings).

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the schema itself documents all seven parameters thoroughly (audit_key as a secret capability, revision semantics, request_id retry behavior). The description only loosely gestures at them ('the audit session fields and the page URL, plus optional sanitized HTML'), adding little beyond the schema, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('Inspects one public page's HTML and saves a partial audit report') and scopes it clearly ('one session can hold several related components', 'not a full tracking-health verdict'). An agent can distinguish it from read-only siblings like read_audit or tracking_status. The relationship to lifecycle siblings begin_audit / record_audit_context / submit_findings is not spelled out, so it falls short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: 'without signup' and 'verifying a change' (via the fresh parameter) give contextual hints, but there is no explicit when-to-use, when-not-to-use, or named alternative among the many audit siblings. The agent must infer that this is the single-page inspection entry point versus begin_audit or read_audit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources