Wever Labs Agentic Rails

Handoff scope check

wever_handoff-scope-check

Read-only

Agent Handoffs: submit a delegation setup: optionally the sending agent and its own access (tools, data and spending), and each task it hands to another agent with what the task needs (tools, data and spending) and what the receiver gets: its tools, data and spending, how the access reaches it (a grant made for the task, the receiver’s own standing access, a credential several agents share or the sender’s own credential), when it ends and whether the receiver can pass it on. The signed report names every handoff where the sender’s access travels with the task, through the sender’s own credential or a grant copying the sender’s whole scope, then every tool, data set and spending amount granted beyond what the task needs, every shared credential, every need the grant leaves out, every grant that outlives the task and every grant the receiver can pass on, with the fix for each. This reads agent-to-agent task delegation: a buyer acting for a human principal is wever_delegated-identity-check, an agent meant to change nothing is wever_read-only-scope-check and one agent’s access against its own authority grant is wever_authority-scope-check. Verdict sender_access_travels, scope_gaps, scope_unverified or scoped_to_task. POST /api/handoff-scope-check. Reads only the material in the call: no network request, fetch, money movement, message, sharing, configuration change or external write. Paid URL: 0.10 USDC per call on Base via x402 exact, with the shared 10 signed-wallet free calls per rolling 30 days. Bind X-Wever-Wallet-Proof to the exact JSON arguments and the tool route. Returns a report with an Ed25519 signed receipt. Contract: /api/agent-handoffs-contract. Human page: https://weverlabs.com/agent-handoffs/.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "delegations": "<delegations>"
    },
    "name": "wever_handoff-scope-check"
  }
}

Input Schema

Name	Required	Description
`label`	No	Optional name recorded in the report.
`sender`	No	The sending agent.
`delegations`	Yes	Each task handed to another agent, with what it needs and what the receiver gets.
`sender_access`	No

Schema Changelog

Changes observed during successful MCP inspections.

AddedNov 10, 2026

TDQS

A4.5/5.0

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly/openWorld/destructive, and the description reinforces them with 'no network request, fetch, money movement, message, sharing, configuration change or external write'. It adds substantial context the annotations cannot: x402 pricing (0.10 USDC on Base), the 10 free signed-wallet calls per 30 days, the X-Wever-Wallet-Proof binding to exact JSON args and route, and an Ed25519 signed receipt. It does not explain what makes a call fail payment or how partial/unverifiable input is handled.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the operation and outcome, and the sibling routing sentence is efficient. However the opening sentence is a long chain of nested clauses and the '(tools, data and spending)' triple is repeated verbatim three times, which bloats an otherwise tight definition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a nested, four-parameter evaluation tool with no output schema, the description covers input shape, evaluation surface, verdict values, read-only guarantee, cost and payment proof, receipt type, and links to the contract and human page. Nothing material needed to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 75%, so the schema carries most of the burden, but the description still adds a usable conceptual model: the contrast between what a task 'needs' versus what the receiver 'gets', and the four ways access can reach the receiver, when it ends, and whether it can be passed on. Some of this restates enum meanings already present in the schema, so it is value-adding rather than essential.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a concrete verb and resource — submits a delegation setup (sender access, per-task needs, receiver grant, via/ends/redelegation) and returns a signed report — then enumerates exactly what the report flags. It also explicitly distinguishes itself from three named siblings, so an agent can route without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit when-not-to-use routing: a buyer acting for a human principal goes to wever_delegated-identity-check, an agent meant to change nothing to wever_read-only-scope-check, and sender access against its own authority grant to wever_authority-scope-check. The condition that selects this tool (agent-to-agent task delegation) is stated, along with the four possible verdicts.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Wever Labs Agentic Rails tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources

Need Help?