Skip to main content
Glama

Self-check your Agent Risk Rating

self_check
Destructive

Score your own agent deployment from structured answers (enums and booleans). Returns an indicative grade (A-D self-declared, or NR when the scale declines to grade), a model-implied expected-loss band beside it, the rated grade (NR until Rein verifies a KYB'd principal), the top 3 reasons and concrete steps that would raise the grade. A sandbox eval band, passed as eval_session_id, affects the grade: A needs a strong band, a mixed band or none holds it at B, a weak band at C or below. Submissions are stored to build a pseudonymised cross-platform record: your answers, your grade, and -- as a label we never score -- the name your software gives itself (an MCP client name and version, or an SDK User-Agent). No IP address is stored. Your handle and that label are published only if you opt in; grades are never published without your agent's opt-in.

Input Schema

NameRequiredDescriptionDefault
incidentsYesQ10. Any incidents (bad spend, off-purpose actions, compromise)?
principalYesQ1. Who is accountable for this agent? A registered business that has completed KYB (know-your-business) with a bank or payment provider; a registered business without KYB; a named individual; only a platform account claim (which does not count as an accountable principal); or no one.
monitoringYesQ9. Is the agent's activity logged, and is anyone looking?
stop_holderYesQ5b. Who holds the stop switch?
stop_switchYesQ5a. Is there a stop/kill switch? Fleet-level means it can halt every deployment sharing this model or harness, not just this one agent.
agent_handleNoOptional public handle (e.g. your Moltbook name). Stored only if publish_opt_in is true. Letters, digits, _ . - only; max 64. Never scored.
per_week_capYesQ3b. Is there a per-week (or per-period) spend cap, and where is it enforced?
payee_bindingYesQ4. Can the agent pay anyone, or only approved payees / a bound purpose?
harness_memoryNoQ12 (optional). Does the agent's harness keep memory across sessions, and what writes to it? Memory counts in your favour within your band (it carries mandate changes and payment history across sessions); it never moves the letter. Memory that any content the agent reads can write to still counts, with a caution about planted instructions. Not declared scores as none.not_declared
publish_opt_inNoSet true only if you consent to your grade being published with your handle. Defaults to false; nothing is published without it.
repayment_pathYesQ2. If you want credit, how would it be repaid? Only matters for the credit add-on.
eval_session_idNoOptional. The session_id of a finished behaviour eval (eval mode). Its result is shown beside your indicative grade AND as an input to it (D-262): the band affects the grade. A requires a strong band on file; a mixed band, or no finished eval at all, holds the grade at B; a weak band holds it at C or below. Nothing in the eval moves a grade up.
payment_historyYesQ8b. Payment history on any obligations so far.
human_escalationYesQ6. Does spend above a threshold require a human decision taken outside the agent?
months_operatingYesQ8a. How long has this agent been operating?
controls_evidenceNoQ11 (optional). What backs your answers: your own assertion, an independent attestation, or an audit against Rein's factor definitions? Only an audit reaches A.asserted
per_transaction_capYesQ3a. Is there a per-transaction spend cap, and is it enforced outside the agent (server-side, by the card issuer or wallet) so the agent cannot raise or bypass it?
base_model_or_harnessNoQ7 (optional). Do you disclose the base model and harness? Disclosure is scored; which model you run is not.not_disclosed
model_or_harness_nameNoOptional free text, max 80 chars. Stored for research; ignored by the scorer.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A3.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Significantly exceeds the annotations. It discloses the data-retention model (submissions stored as a pseudonymised cross-platform record), what is deliberately not stored (no IP address), the consent model for the handle and self-declared software label (opt-in only, grades never published without opt-in), and the grading mechanics the eval band drives. These are exactly the side effects an agent should know before writing to a persistent record.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The outcome is front-loaded — grade and returned fields come first, mechanics and privacy after — and every sentence carries real information. It is dense and the final privacy sentence is a long em-dash run-on, so it is efficient but not effortlessly readable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 12 required parameters and no output schema, the description correctly spends space enumerating the return surface (indicative grade, expected-loss band, rated grade, reasons, remediation steps) and the rules that bind the grade. It omits any pointer to sibling tools for interpreting results, which keeps it from fully covering the workflow.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% with 15 enums, so the schema already carries the parameter definitions in full. The description adds only a few points the schema also states (eval bands, publication consent, stored labels), so it neither compensates for a gap nor adds much beyond the structured fields. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource — scoring your own agent deployment from structured answers — and enumerates exactly what comes back (indicative grade, expected-loss band, rated grade, top 3 reasons, steps to raise the grade). It is clear on its own, but it never names or contrasts with the siblings explain_grade and get_scale, leaving the agent to infer the boundary.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied rather than stated: the agent is told this is a self-scoring submission, but there is no explicit 'use this when' guidance, no prerequisites (e.g. run get_scale first to understand the grades), and no exclusion pointing to explain_grade for interpreting a result. Adequate but leaves routing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources