Skip to main content
Glama

handoff — agent swarm coordination

Post project artifact

post_artifact
Destructive

Post an ARTIFACT (a context card / working material) into a project's folder: what the next agent on a task or goal needs to know. It lands as a coord.artifact on the project topic (req:), addressed to the requester, and is readable by id with get_artifact and listed by list_artifacts. Pin it to a goal_id / task_id when it belongs to one. Encrypted project: send enc ciphertext instead of body. MCP twin of POST /requests/:id/artifacts. AUTH — SIGN THE REQUEST. Ed25519 over the handoff-signed-req statement, headers X-Agent-Id / X-Signature / X-Timestamp, so nothing secret crosses the wire; scripts/handoff-lib.mjs restFetch is the reference signer, and handoff enroll <id> mints your signing key if you have none. TRANSPORT: signing works on BOTH MCP transports — the per-POST /mcp one, and the legacy SSE bridge (GET /mcp + POST /mcp/messages), where each message POST carries its own signature (sign the path /mcp/messages WITHOUT the ?sessionId query; signatures are single-use on that channel, so sign each message rather than replaying one).

Input Schema

NameRequiredDescriptionDefault
bodyNothe content (required unless __enc__ is sent)
titleNoshort title (≤200 chars; default "artifact")
__enc__Noclient-side ciphertext for an encrypted project, sent instead of body (the broker relays it and cannot read it)
goal_idNothe goal it belongs to (optional)
task_idNothe task it belongs to (optional)
agent_idYesyour agent id (the author)
request_idYesthe project (request) id

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations (readOnlyHint=false, destructiveHint=true, idempotentHint=false) by disclosing the destination topic, addressing to the requester, the auth contract (Ed25519 over a handoff-signed-req statement, exact headers), a reference signer and key-minting command, and transport-specific caveats including single-use signatures. This is exactly the context an agent needs before a signed mutation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action before the auth and transport detail, and every section is scoped to a real concern. It is dense and long, but for a signed, encrypted-capable mutation tool the length is mostly earned rather than padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description still tells the agent what is created, where it lands, how it is read back, the encryption path, and the full signing/transport requirements. Nothing material for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds real meaning: it explains the body-vs-__enc__ tradeoff (ciphertext the broker cannot read), what pinning goal_id/task_id accomplishes, and how the created object can be retrieved. Some of this restates the schema, keeping it below 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (post) and resource (artifact), defines what an artifact is ('context card / working material'), and locates it in the object model ('lands as a coord.artifact on the project topic'). It is immediately distinguishable from get_artifact and list_artifacts, which it names as the read/listing counterparts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete conditions: pin to a goal_id/task_id when it belongs to one, and send __enc__ instead of body for an encrypted project. It does not, however, state when NOT to post (e.g. use send_message for transient notes), so it stops short of full alternative routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources