get_sandbox_access_requirementsRead the testnet-only authentication, standing-mandate, and verification requirements without issuing credentials.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false. The description adds meaningful behavior beyond the annotations by promising that no credentials are issued and by scoping the requirements to testnet. This strengthens the safety profile without contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One compact sentence that front-loads the resource and ends with the key safety qualifier. Every word earns its place and there is no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a parameterless, read-only informational tool with clear safety annotations, the description fully equips an agent to invoke it correctly. No output schema exists, but the tool name and description sufficiently convey the nature of what is returned.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and the schema coverage is 100%, so inputs are fully understood from the schema alone. With 0 parameters the baseline is 4; there is no parameter information the description could add.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Read'), a well-defined resource ('testnet-only authentication, standing-mandate, and verification requirements'), and an explicit side-effect qualifier ('without issuing credentials'). This clearly differentiates it from sibling tools that issue credentials or manage mandates.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'testnet-only' qualifier and 'without issuing credentials' strongly imply it is for inspecting sandbox prerequisites before any issuance action. It gives clear context but does not explicitly name alternatives or exclusion conditions, so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Add one secure layer between your agents and this server.
The set has multiple near-synonymous read and recovery surfaces, e.g. get_commerce_purchase_status vs get_purchase_recovery_status vs recover_authorized_purchase vs recover_commerce_purchase, and discover_assurance_services vs discover_commerce_index vs get_discovery_manifest vs search_verified_offers. Long descriptions are required to tell them apart, so misselection is likely.
All names follow a readable snake_case verb_noun pattern, with get_, request_, create_, verify_, and recover_ prefixes used consistently. The main deviation is read operations split across get_/discover_/inspect_/search_/list_, which is still understandable but not perfectly uniform.
At 50 tools this is in the extreme-mismatch band for an MCP server. Even with a broad payment/commerce/discovery domain, dozens of get/status/recovery tools could be consolidated or parameterized.
The toolset covers the major lifecycles: registration, wallet, funding, payment, commerce offer/purchase/fulfillment/refund, mandates, and verification. Minor gaps such as no service unregister/update, no payment-request cancellation, and no wallet deletion are workable but not fatal.