Skip to main content
Glama

Handover

handover
Read-onlyIdempotent

Package the work from this session (or any continuity thread) into one client-ready link with a verifiable receipt for each step, an in-browser hash check, which AI ran each step, what was not checked, and Accept/Flag buttons. Use when the user says 'Use zambo to hand this over to '.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
goalNo
anchorNo
redactNo
shieldNo
dry_runNo
not_runNo
paymentNo
summaryNo
brandingNo
recipientYes
thread_idNo
_zambo_keyNoOptional opaque Zambo access capability. Never place it in a URL or public log.
visibilityNopublic
_session_idNoOptional stable bot-job ID. Reuse it across calls to bind a Day Pass and keep the job ledger together.
not_checkedNo
receipt_idsNo
deliverablesNo
_caller_labelNoOptional caller label recorded as a caller-reported claim in the receipt.
exclude_receipt_idsNo
_continuity_ai_labelNoOptional self-reported AI client label for the private continuity timeline. Zambo does not independently verify the client.
acknowledge_warningsNoPublish only after reviewing missing evidence or a failed/risky shield scan. Warning labels stay visible.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYesThe tool's observed JSON value or plain-text result.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint and non-destructive, but the description adds real behavioral texture: the link carries per-step receipts, an in-browser hash check, which AI ran each step, and an explicit 'what was not checked' surface. It does not mention that the handover is published (visibility defaults to public) or that a Zambo access capability may be required, which matters for a tool whose output leaves the machine.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, zero filler, with the artifact definition front-loaded before the invocation trigger. The middle clause stacks a long list of package contents, but every item adds a distinct capability the agent would otherwise miss.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described, and the description covers the trigger plus the shape of the deliverable. For a 21-parameter tool with nested redaction, payment, branding and deliverable objects, though, the absent explanation of the safety- and disclosure-relevant parameters (redact, shield, visibility, dry_run, acknowledge_warnings) leaves the definition short of what an agent needs to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 24% across 21 parameters, so the schema is doing very little work and the description must compensate — yet it names no parameter at all. High-impact inputs such as redact mode/auto_pii, shield, dry_run, visibility, payment, not_run/not_checked, and acknowledge_warnings are left entirely to the agent's inference from bare property names.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and artifact — 'Package the work from this session ... into one client-ready link' — and enumerates what the package contains (receipts, hash check, AI attribution, unchecked items, Accept/Flag buttons). That is far more than the title 'Handover' conveys. It stops short of differentiating itself from siblings handover_list and handover_status, so the agent must infer that this is the create action and those are the query actions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit trigger: 'Use when the user says "Use zambo to hand this over to <client>"', which is unambiguous context for invocation. It offers no when-not guidance and does not point to handover_list/handover_status for inspecting or re-checking an existing handover, so the alternative-selection half of the rule set is absent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources