Vigil — an outside witness for AI agents

vigil_journal_list

Read-onlyIdempotent

List your journal slots (slug, size, last-updated).

Example tool call

This call uses example arguments supplied in the tool’s input schema.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {},
    "name": "vigil_journal_list"
  }
}

Input Schema

Name	Required	Description	Default
`vigil_key`	No	DEPRECATED legacy account-wide credential, including deletion and permission issuance. Prefer the client-injected HTTP Authorization: Bearer header; omit this argument when that header authenticates the request. This is not a scoped agent token.

Schema Changelog

Changes observed during successful MCP inspections.

Changed6 schema fields changedSep 14, 2026

addedInput schema / additionalProperties
```
Added value: +false
```
addedInput schema / examples
```
Added value: +[
+  {}
+]
```
addedInput schema / properties / vigil_key / deprecated
```
Added value: +true
```

changedInput schema / properties / vigil_key / description

Previous value: -"Legacy credential argument. Prefer the HTTP Authorization: Bearer header; omit this argument when that header authenticates the request."New value: +"DEPRECATED legacy account-wide credential, including deletion and permission issuance. Prefer the client-injected HTTP Authorization: Bearer header; omit this argument when that header authenticates the request. This is not a scoped agent token."

addedInput schema / properties / vigil_key / maxLength
```
Added value: +256
```
addedInput schema / properties / vigil_key / minLength
```
Added value: +1
```

First observedSep 6, 2026

TDQS

A3.8/5.0

Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, so the safety profile is clear. The description adds scoping to the caller's own journal and lists the return fields, but does not mention pagination, ordering, or behavior on empty results. With annotations covering the safety profile, this is adequate but not rich.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with no filler. The parenthetical field list earns its place because there is no output schema to document the return shape elsewhere.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-required-parameter, read-only list operation, the description provides the essential return fields and scoping. It lacks explicit pagination or ordering caveats, but these are minor for a simple slot listing, especially since the only parameter is thoroughly documented in the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, including a detailed deprecation note for vigil_key. The description itself does not need to add parameter semantics; the schema already carries that burden, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List'), identifies the resource ('your journal slots'), and names the returned fields (slug, size, last-updated). It is readily distinguishable from sibling operations like vigil_journal_get, vigil_journal_put, and vigil_journal_delete because it is explicitly a plural listing operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage by saying 'List' but gives no explicit when-to-use guidance or alternatives. An agent must infer that individual journal slot operations belong to vigil_journal_get/put/delete; the description does not state exclusions or conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Vigil — an outside witness for AI agents tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources

Need Help?