Skip to main content
Glama

Gateway rules check

wever_gateway-rules-check
Read-only

Agent Access: submit the rules a gateway or policy layer enforces, each with where it is written (policy document, decision record, versioned or unversioned configuration, code only or nowhere) and its source, its owner and owner type, when it last changed and was last reviewed, whether it is reviewed when the toolset changes and the tools it covers, plus the toolset with when it last changed and the tools it serves now. The signed report gives each rule written, owned and current, and names every rule written nowhere or held only in live configuration or code, owned by no one, by an agent or only as a vendor default, reviewed before the last toolset change or still naming retired tools, and not reviewed when the toolset changes. Which routes the gateway reaches is wever_gateway-coverage-check and which instruction governs one action is wever_policy-precedence-check. A summary sample is wever_gateway-rules-sample on https://weverlabs.com/mcp-free. Verdict unwritten_rules, rule_gaps, rules_unverified or rules_governed. POST /api/gateway-rules-check. Reads only the material in the call: no network request, fetch, money movement, message, sharing, configuration change or external write. Paid URL: 0.10 USDC per call on Base via x402 exact, with the shared 10 signed-wallet free calls per rolling 30 days. Bind X-Wever-Wallet-Proof to the exact JSON arguments and the tool route. Returns a report with an Ed25519 signed receipt. Contract: /api/agent-access-contract. Human page: https://weverlabs.com/agent-access/.

Input Schema

NameRequiredDescriptionDefault
labelNoOptional name recorded in the report.
rulesYesEach rule the gateway or policy layer enforces.
toolsetNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=false, destructiveHint=false, and the description reinforces this with 'reads only the material in the call: no network request, fetch, money movement, message, sharing, configuration change or external write.' It adds pricing (0.10 USDC x402 exact on Base), the 10 free signed-wallet calls per rolling 30 days, the X-Wever-Wallet-Proof binding requirement, and an Ed25519 signed receipt. Apart from error/failure modes, the behavioral profile is well covered.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose is front-loaded, but the core sentence is a long comma-chained run-on that forces the reader to parse field lists inline. Most content earns its place, yet the same semantics could be carried in noticeably fewer words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description carries return-value burden and does so by enumerating what the signed report flags (rules written nowhere, held only in live config, owned by no one or by an agent, reviewed before the last toolset change, naming retired tools). The contract and human page URLs are given for deeper detail; only error/edge-case behavior is left unaddressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 67%, and the description compensates by spelling out the meaning of each nested rule field — where it is written (including 'code only or nowhere'), owner and owner type (including agent and vendor default), last changed and reviewed, review-on-toolset-change, and covered tools — plus the toolset's changed date and current tools. It adds interpretive meaning (e.g. 'still naming retired tools') rather than restating schema text.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening states a specific verb and resource: submit the gateway/policy rules with their written location, ownership, review dates and covered tools, plus the toolset. It also names the exact verdict set (unwritten_rules, rule_gaps, rules_unverified, rules_governed), so the agent knows precisely what is being evaluated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It routes explicitly to siblings: route reach is wever_gateway-coverage-check and single-action precedence is wever_policy-precedence-check, with a free sample via wever_gateway-rules-sample. That is a clear when-to-use-which map plus a low-cost trial path.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.