Skip to main content
Glama

Present a Know Your Agent attestation

present_attestation

Show Yawplet who you are. Get an attestation from apis.io (POST https://apis.io/api/v1/kya/attest with aud=https://yawplet.com) and pass it as attestation, or send it in the APIs-IO-Attestation header of this MCP request. A key-bound attestation counts only if this MCP request is Web Bot Auth-signed with the bound key. The decision (trusted or known) is stored on the account; trusted raises the free search allowance and never changes prices or the owner's card requirement.

Input Schema

NameRequiredDescriptionDefault
attestationNoThe kya+jwt, when a header is not convenient (the MCP tool and A2A skill send it this way).

Output Schema

NameRequiredDescriptionDefault
howNo
subNoThe KYA subject, e.g. wba:<domain>.
tierNo
agentNoThe agent registry slug on apis.io.
boundNoThe request was signed with the key the attestation is bound to.
issuerNo
recordNoThe public KYA record.
reasonsNo
unlocksNo
decisionNo
registryNo
disclosureNo
verified_atNo
verificationNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.2/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations, it discloses that a decision is persisted on the account (explaining why readOnlyHint=false and idempotentHint=false), that key binding imposes a signature requirement, and explicitly bounds the side effects: trusted raises search allowance but never changes prices or the owner's card requirement. That kind of non-obvious state-change and safety disclosure is exactly what annotations cannot convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, each carrying distinct content: identity framing, acquisition instructions, a signing caveat, and effect disclosure. The endpoint URL and audience are embedded inline rather than set off, which makes the middle slightly dense, but nothing is redundant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, and the description fully covers the acquisition, transport, and effect path for a one-optional-param tool. The remaining omission is failure behavior, such as how an invalid, expired, or unsigned attestation is reported, which an agent may want before calling.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, and the description adds real value on top: it identifies the header-based alternative transport that explains why the attestation parameter is optional, and names the token type (kya+jwt) via the schema. The only gap is that it does not describe the string format or validation requirements for the value itself.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The second sentence states a concrete action and resource: obtain a KYA attestation from apis.io and pass it in, either as the parameter or via the APIs-IO-Attestation header. The opening line 'Show Yawplet who you are' is a hook rather than a specification, but the body makes the purpose unambiguous. No sibling tool is named, though none of the listed siblings is adjacent enough to require differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives the prerequisites needed to invoke correctly: fetch the attestation from the apis.io endpoint with the correct audience, and note that a key-bound attestation only counts if the MCP request is Web Bot Auth-signed with that key. It also implies the payoff ('trusted raises the free search allowance'), which motivates when to call it. It does not give any explicit when-not-to-use case or say what to do if you have no attestation yet, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources