Tyton

This connector has been deprecated

This is a duplicate listing. Use Tyton instead, which follows Tyton's entry in the official MCP Registry.

Record runtime evidence

record_audit_runtime

DestructiveIdempotent

Saves bounded runtime evidence to the same audit run: sanitized observations from a real browser, authorized backend inspection or a destination UI, with the consent state and observation time. Does not run a browser or send events. A check whose evidence type does not prove it is stored as unknown. Returns the updated findings and report link.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "url": "<url>",
      "observed_at": "<observed_at>",
      "consent_state": "<consent_state>",
      "checks": "<checks>"
    },
    "name": "record_audit_runtime"
  }
}

Input Schema

Name	Required	Description
`url`	Yes
`checks`	Yes
`audit_id`	No	audit run ID returned by Tyton; each audit run has its own ID
`revision`	No	latest run revision; 0 for the first write of a new audit session, then the revision returned by the previous write
`audit_key`	No	private audit write capability returned by Tyton; a secret that authorizes changes to this audit only
`request_id`	No	UUID identifying one mutation; a repeated request_id with identical content is treated as a retry
`observed_at`	Yes
`consent_state`	Yes

Output Schema

Name	Required	Description	Default
`url`	Yes
`kind`	Yes
`source`	Yes
`status`	Yes
`context`	No
`session`	No
`decision`	No
`findings`	Yes
`inventory`	No
`reportUrl`	No
`capturedAt`	Yes
`components`	No
`limitations`	Yes
`nextActions`	Yes
`reportSaved`	Yes
`observations`	No
`schemaVersion`	Yes

Schema Changelog

Changes observed during successful MCP inspections.

First observedOct 18, 2026

TDQS

A3.7/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations cover the safety profile (write, idempotent, destructive), so the bar is lower, yet the description still adds real behavior: the unknown-state fallback for non-proving evidence types and the return payload ('updated findings and report link'). It does not explain why destructiveHint=true for what reads as an append, nor that audit_key is the authorizing secret — those gaps keep it from a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four tight sentences, front-loaded with the core action and followed by the negative constraint, the edge-case rule, and the return. Efficient overall, though the 'sanitized observations... without payloads' clause partially restates the schema's evidence field description.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description need not detail return values, and the brief return note is sufficient. It covers the append semantics, the source types, the fallback rule and the consent/time dimensions, leaving only the audit_key authorization prerequisite and the destructive-write consequence unexplained for an 8-param mutation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50%: the write-control params (audit_id, revision, audit_key, request_id) are documented in-schema, while required params url, observed_at, consent_state and checks are bare. The description touches consent state, observation time and sanitization ('without payloads, identifiers or credentials'), but that sanitization note duplicates the schema's evidence description and adds no format or enum mapping.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Saves bounded runtime evidence to the same audit run') and enumerates the evidence sources (browser, backend inspection, destination UI). It differentiates functionally from browser-running siblings via 'Does not run a browser or send events', but never names the sibling tools it must be distinguished from (record_audit_context, submit_findings), leaving the routing to inference.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The negative guidance ('Does not run a browser or send events') implies this is for supplying evidence already gathered rather than collecting it, which steers the agent away from audit_site/check_live_setup. However, there is no explicit when-to-use statement, no prerequisite for obtaining audit_key/revision first, and no named alternative for the collection case.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Tyton tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources

Need Help?