Skip to main content
Glama

API Compatibility Review

fresh402_api_compatibility_review
Destructive

Seed or review a public JSON OpenAPI 3.0/3.1 contract against its saved baseline/latest observation; return directional compatibility/security findings and explicit uncertainty. No YAML, external-ref crawling or runtime compatibility proof. One fixed workflow charge; internal steps never create separate customer charges. First source use seeds state in this same operation; later observations use returned owned observation_id. Auth: authorized native-USDC x402 v2 on Base, enabled MPP, or an eligible prepaid key plus exact tariff 5 and max_credits. Ordinary unpaid calls return a challenge, not execution. Persist original input, proof and recovery token before submission; exact replay returns retained results without fresh work or another charge. Choose evidence detail before authorization. No free-trial or automatic paid fallback. 0.010 USDC or 4 credits. Limits and scope are authoritative, not a complete audit or compatibility guarantee.

Input Schema

NameRequiredDescriptionDefault
urlNoPublic HTTPS source for a new or existing canonical source/scope identity. Supply exactly one of url or observation_id. A new identity seeds once; the next operation compares.
detailNoDefault compact: at most 20 evidence items per section. Expanded allows at most 200 document findings or 100 Base events and retains raw validated logs/getter ABI details within the same fixed work/output ceiling. Counts and omitted-evidence warnings remain explicit.compact
compare_toNoDefault previous compares with the latest successful workflow observation; baseline compares with its original seed. Seeding is one paid workflow operation and reports no comparison, never a second internal charge.previous
observation_idNoOwned observation_id returned by this same workflow. Reuses its immutable source/scope and saved baseline/latest observations; not a primitive watch_id. Seven-day state retention. Missing, foreign or expired IDs never silently rebaseline.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • changedInput schema / oneOf
      Previous value: -[
      -  {
      -    "not": {
      -      "required": [
      -        "observation_id"
      -      ]
      -    },
      -    "required": [
      -      "url"
      -    ]
      -  },
      -  {
      -    "not": {
      -      "required": [
      -        "url"
      -      ]
      -    },
      -    "required": [
      -      "observation_id"
      -    ]
      -  }
      -]New value: +[
      +  {
      +    "not": {
      +      "required": [
      +        "observation_id"
      +      ]
      +    },
      +    "required": [
      +      "url"
      +    ]
      +  },
      +  {
      +    "not": {
      +      "anyOf": [
      +        {
      +          "required": [
      +            "url"
      +          ]
      +        },
      +        {
      +          "required": [
      +            "scope"
      +          ]
      +        }
      +      ]
      +    },
      +    "required": [
      +      "observation_id"
      +    ]
      +  }
      +]
  2. Added

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With annotations already declaring mutation, open-world and destructive hints, the description adds substantial context they cannot carry: one fixed workflow charge, no internal per-step charges, challenge-instead-of-execution on unpaid calls, seven-day state retention, and no silent rebaselining. There is mild tension with idempotentHint=false, since 'exact replay returns retained results without fresh work or another charge' describes replay-safe behavior, but that is a partial nuance rather than a flat contradiction. It does not say what a seed overwrites or destroys, which is the one gap against destructiveHint=true.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose sentence is front-loaded and the remaining semicolon-separated clauses each carry distinct operational facts (auth, cost, replay, retention, limits). It is dense and telegraphic, with heavy semicolon chaining, but almost no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a paid, stateful, open-world workflow tool with no output schema, the description still covers billing model, auth, replay semantics, retention window, and the limits of the result. What is missing is a concrete sketch of the findings payload shape and any note on what destructive state change seeding entails.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents url, observation_id, detail and compare_to including defaults and enum bounds, putting this at the baseline. The description contributes a little extra: detail must be fixed before authorization, and seeding reports no comparison. Most parameter meaning is already in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening clause names a specific verb pair (seed or review) and resource (public JSON OpenAPI 3.0/3.1 contract) and scopes the output to 'directional compatibility/security findings and explicit uncertainty'. Exclusions ('No YAML, external-ref crawling or runtime compatibility proof') sharpen the boundary. It never names the adjacent siblings fresh402_openapi_contract_diff or fresh402_contract_watch, so differentiation is inferred rather than stated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives a clear operating sequence: first source use seeds in the same operation, later calls use the returned owned observation_id, and evidence detail must be chosen before authorization. Preconditions (auth modes, tariff 5, max_credits, no free trial, no automatic paid fallback) are explicit. It stops short of naming alternative tools, so the agent still has to infer when to pick a sibling diff/watch tool instead.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources