Skip to main content
Glama

Approval replay check

wever_approval-replay-check
Read-only

Agent Oversight: submit the approval record (who approved, and where recorded the exact tool and arguments approved or the approval as worded) and the call as executed or as reconstructed after context compaction. The signed report says whether execution replays exactly what was approved, naming every argument that differs, was dropped or was added, with both values, and whether the tool matches. An approval with no exact arguments reads as unprovable. Tool-call approvals: approved documents against their current version are wever_approval-version-check. Verdict drifted, unprovable or exact. POST /api/approval-replay-check. Reads only the material in the call: no network request, fetch, money movement, message, sharing, configuration change or external write. Paid URL: 0.10 USDC per call on Base via x402 exact, with the shared 10 signed-wallet free calls per rolling 30 days. Bind X-Wever-Wallet-Proof to the exact JSON arguments and the tool route. Returns a report with an Ed25519 signed receipt. Contract: /api/agent-oversight-contract. Human page: https://weverlabs.com/agent-oversight/.

Input Schema

NameRequiredDescriptionDefault
labelNoOptional name recorded in the report.
approvalYes
executedYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well past the annotations by disclosing the auth binding requirement (X-Wever-Wallet-Proof bound to the exact JSON arguments and tool route), the pricing and quota model (0.10 USDC per call on Base via x402, 10 signed-wallet free calls per rolling 30 days), and the return artifact (report with Ed25519 signed receipt, verdicts drifted/unprovable/exact). It restates the read-only guarantee already in readOnlyHint, but the added auth, cost, and receipt details carry real weight.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded and the key routing sentence is present, but phrasing is dense and occasionally ungrammatical ('where recorded the exact tool and arguments approved or the approval as worded'), and the operational tail (endpoint path, payment scheme, contract link, human page) crowds the semantic core. Nothing is outright redundant, but the sentences are long and would benefit from restructuring.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a no-output-schema tool the description supplies what matters: the inputs to provide, what the report asserts, the three verdict values, and the signed-receipt guarantee. Combined with annotations covering the safety profile and the x402/pricing detail, an agent has enough to call and interpret it correctly; only the 'label' parameter and report field names remain underspecified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With only 33% schema description coverage and two nested objects, the description does substantive work: it explains that 'approval' carries who approved and either the exact tool plus arguments or the approval as worded, and that 'executed' may be an executed log or a reconstruction after compaction (mapping to the source enum). It also flags the consequence of supplying only a prose summary. It never mentions 'label', leaving one parameter uncovered in both places.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: submit an approval record plus the executed call and receive a signed report on whether execution replays the approval. It also names the closest sibling (wever_approval-version-check) and the distinction (approved documents vs. current version), so an agent can separate the two without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a clear routing rule to wever_approval-version-check for document-version approvals, and explains the edge condition that an approval with no exact arguments 'reads as unprovable'. It does not, however, distinguish itself from other replay-flavored siblings such as wever_policy-replay-check, so the exclusion set is partial rather than complete.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.