Skip to main content
Glama

Evidence bundle for one obligation (paid, x402; preview free)

evidence_bundle

PAID (x402). For ONE obligation (article-50, article-53 GPAI transparency, dora or cra) and an optional subject via https://councilof.ai/api/evidence-bundle: selected existing card objects with signature fields and any retained inclusion proofs, an OSCAL assessment-results wrapper and an assembly manifest. Assembly does not verify input-card signatures. A returned unsigned manifest reports its signing status and unsigned reason. If signing throws after settlement, the route returns PAID_NOT_DELIVERED without a delivered bundle or manifest; preserve the settlement receipt and reconcile before reissue, without automatically retrying or paying again. Zero selected cards stays an empty bundle; preview=true here, or the free evidence_bundle_preview tool, shows the count first. No new measurement, full OSCAL conformance or conformity determination is established. Article 53 output is evidence for review, not a legal determination; grants no status. Without x_payment the tool returns the actual 402 challenge; read its terms for each request. Supported-card verification is free at https://councilof.ai/gspc-verify. Measurement, not certification.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
previewNotrue = the free preview (relevant-card count and first cards); nothing is charged.
subjectNoOptional: a model id, vendor or instrument the cards must name.
x_paymentNoThe X-PAYMENT header value signed against accepts[] from the previous 402. Omit to receive the challenge.
obligationYesarticle-50, article-53, dora or cra.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
toolNo
routeNo
statusYesPAYMENT_REQUIRED, DELIVERED, NOT_DEPLOYED, UNREACHABLE, UNREADABLE_RESPONSE, BAD_ARGUMENTS or HTTP_<code>
acceptsNo
resourceNo
deliverableNo
http_statusNo
x402VersionNo
delivery_stateNo
settlement_stateNo
payment_presentedNo
not_a_certificationNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: discloses the x402 payment model, the 402 challenge flow, the PAID_NOT_DELIVERED failure mode after settlement, and instructs not to auto-retry or re-pay. It also discloses that assembly does not verify input-card signatures and that an unsigned manifest reports its signing status/reason — rich behavioral context not captured by readOnlyHint/idempotentHint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the most decision-relevant facts (PAID, one obligation, endpoint) and keeps the failure/payment caveats tight. It is still dense and caveat-heavy across many sentences, but each sentence carries operational weight, so waste is low.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a paid, multi-step, non-idempotent tool this is close to complete: payment acquisition, preview path, empty-bundle behavior, failure handling, and caveats on what the output does and does not establish. An output schema exists, so omitted return-value detail is acceptable.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents obligation, subject, preview and x_payment. The description reinforces meaning (obligation names, subject intent, preview = count only) but adds little syntax or format beyond what the schema provides. Baseline 3 applies when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource: it assembles an evidence bundle for ONE named obligation (article-50, article-53, dora, cra) plus optional subject, and enumerates the payload (card objects with signature fields, inclusion proofs, OSCAL assessment-results wrapper, manifest). An agent can distinguish it from evidence_bundle_preview (free) and the other evidence siblings without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives clear routing: use preview=true or the free evidence_bundle_preview tool to check counts first, and omit x_payment to receive the actual 402 challenge. It also states scope exclusions (no new measurement, no full OSCAL conformance, not a legal determination). However it does not differentiate this tool from the other evidence-emitting siblings (rwa_evidence, server_evidence, art50_marking_evidence).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.