Skip to main content
Glama

MolTrust MCP Server

Server Details

Verifiable agent identity and trust checks; MolCheck verdicts on mandates; Amazon Ads verdicts.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
99.9% over 42 days
Last Tested
Transport
Streamable HTTP · MCP 2025-11-25
URL
Repository
MoltyCel/moltrust-mcp-server
GitHub Stars
5
Server Listing
MolTrust
ChatGPT
–
Claude
–

TDQS

B3/5.0

Scored across 64 tools

Disambiguation2/5

Several tools overlap heavily: moltrust_credential with issue/verify duplicates moltguard_credential_issue and moltguard_credential_verify; mt_check_badge, mt_get_badge, mt_issue_badge, and moltrust_verify all answer variations of 'is this agent trusted?'; and the five moltproof_* tools are explicit aliases of molcheck_*. The many prefixed families are separable in principle, but inside several families an agent can easily misselect.

Naming Consistency3/5

Names are mostly snake_case with a per-family prefix, which keeps them readable, but the prefix scheme is inconsistent (ads_, canary_, molcheck_, moltproof_, moltguard_, moltrust_, mt_) and verb/noun ordering varies (canary_issue vs molcheck_registry vs mt_get_swarm_graph). Deprecated moltproof_* aliases further break predictability.

Tool Count2/5

64 tools is very heavy, and several are deprecated aliases that add surface without capability. The server does span many legitimate domains (ads, trust scoring, credentials, badges, fantasy, prediction, shopping, travel, salesguard, music), but the count is well past what an agent can comfortably navigate.

Completeness3/5

Coverage is broad across many verticals, but lifecycle operations are uneven: there is no revocation or update path for credentials, badges, or canaries, no agent update/delete or list-agents operation, and mandates are only read/publicly verified. Core issue/verify flows exist, so agents can work around gaps, but the surface is not a complete CRUD lifecycle.

Available Tools

64 tools
ads_checkAInspect

Allow / hold / forbid for one intended Amazon Ads MCP tool call, before it runs.

    Needs your MolTrust API key as the X-API-Key header of the MCP connection (free key:
    POST https://api.moltrust.ch/auth/signup). Counts against your plan like any check.
    Never send Amazon credentials: they are refused.

    Args:
        profile: the `profile` object from ads_mandate_template
        tool: the Amazon Ads MCP tool name, e.g. campaign_management-update_campaign_budget
        arguments: the tool arguments exactly as your agent would send them
        context: your view of the account — campaigns {id: {brand, daily_budget(cents)}},
                 targets {id: {brand, bid(cents)}}, ad_groups, account_daily_total(cents).
                 Values the check cannot derive count as unknown and end in forbid.
    
NameRequiredDescriptionDefault
toolYes
contextNo
profileYes
argumentsYes

Output Schema

NameRequiredDescription
resultYes

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden and does so: auth requirement (X-API-Key header, free key signup URL), cost implication ('counts against your plan like any check'), and the critical fail-closed rule that values the check cannot derive count as unknown and end in forbid. It also states a refusal policy for Amazon credentials, which is exactly the kind of non-obvious context an agent needs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The decision semantics are front-loaded in the first sentence, and the Args block is terse and each line earns its place. The signup URL and the indented docstring layout add slight visual noise, but nothing is redundant prose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described. What an agent must know before calling is present: required inputs, auth mechanism, billing, credential refusal, and the fail-closed rule for under-specified context. Nothing material is missing for a pre-flight policy check.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and the schema gives bare types only, yet the description documents all four parameters: profile (the object from ads_mandate_template), tool (with a concrete example name), arguments (exactly as the agent would send them), and context (with the expected shape and units — campaigns {id: {brand, daily_budget(cents)}}, account_daily_total(cents)). This fully compensates for the undocumented schema and explains the unknown→forbid consequence of incomplete context.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first line states a specific verb-and-object: adjudicating Allow/hold/forbid for one intended Amazon Ads MCP tool call before execution. It is clearly distinguishable from sibling ads_mandate_template (which produces the profile this tool consumes) and from unrelated moltrust_* checks. An agent can tell what this returns (a decision) and when it is invoked (pre-flight).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage timing is explicit ('before it runs') and prerequisites are named: the MolTrust API key must ride as the X-API-Key header, obtainable via a signup POST. It does not explicitly state when NOT to use it or name a competing alternative beyond referencing ads_mandate_template for the profile, so it stops short of full routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ads_mandate_templateAInspect

Build an ads profile and its AAE mandate for one or more Amazon Ads accounts.

    Pure: nothing is stored. Returns `profile` (pass it to ads_check) and `mandate`
    (what /enforce/check evaluates).

    Args:
        account_ids: advertiserAccountId / profileId values the agent may act on
        brands: brands the agent may touch
        daily_budget_cap_usd: largest daily campaign budget; above it: forbid
        hold_threshold_usd: above it a person named in `approvers` must approve
        total_daily_budget_cap_usd: sum of daily budgets on the account after a change
        period_budget_cap_usd: largest lifetime or monthly budget
        max_bid_usd: largest bid
        max_bid_change_percent: largest bid change per step, in percent
        valid_from: RFC 3339 UTC second
        valid_until: RFC 3339 UTC second; after it every call is forbidden
        tools: allowed tool names (default: all documented in ads_onboard)
        mandate_id: your identifier for this mandate
        principal_did: the agency's DID
        principal_public_key: the agency's Ed25519 public key, hex
        approvers: [{"did", "public_key", "role"}] who may approve a hold
    
NameRequiredDescriptionDefault
toolsNo
brandsYes
approversNo
mandate_idNoads-mandate-1
valid_fromNo2026-10-01T00:00:00Z
account_idsYes
max_bid_usdNo
valid_untilNo2026-12-31T23:59:59Z
principal_didNodid:moltrust:<your agency DID>
hold_threshold_usdNo
daily_budget_cap_usdNo
principal_public_keyNo<ed25519 public key, hex>
period_budget_cap_usdNo
max_bid_change_percentNo
total_daily_budget_cap_usdNo

Output Schema

NameRequiredDescription
resultYes

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does disclose a key behavioral trait: 'Pure: nothing is stored.' It also explains enforcement consequences ('valid_until ... after it every call is forbidden'; budget caps mean 'forbid'; hold threshold requires a named approver). It does not cover failure modes or whether signing credentials are mandatory, keeping it below a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and purity lead, returns follow, and the parameter list closes — a sensible front-loaded order. The block is long, but with 0% schema coverage the Args enumeration is largely load-bearing rather than padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 15-parameter tool with no annotations, the description covers purpose, side-effect profile, outputs, and every parameter, and an output schema exists so return-shape detail is not required. It stops short of describing authentication requirements (implied by principal_did/principal_public_key) or error behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must supply all parameter meaning, and it documents every one of the 15 args with units and semantics the schema lacks (USD caps, percent for max_bid_change_percent, RFC 3339 UTC for validity dates, enforcement behavior for caps and hold thresholds). It adds genuine meaning rather than restating field names.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening sentence names a specific verb and compound resource: 'Build an ads profile and its AAE mandate for one or more Amazon Ads accounts.' It also scopes the operation ('for one or more accounts') and distinguishes itself from siblings by naming ads_check and ads_onboard as the downstream/upstream counterparts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description establishes the workflow context clearly: the returned `profile` is 'pass[ed] to ads_check' and `mandate` is 'what /enforce/check evaluates', and the `tools` default references what is 'documented in ads_onboard'. It never states an explicit when-not-to-use or a hard exclusion, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ads_onboardBInspect

How an agent starts with MolTrust Ads: verdicts (allow / hold / forbid) on Amazon Ads MCP tool calls before they run. Plans, key sign-up, SDK, endpoints. No input, no account needed.

NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses that no input and no account are required, which is useful for an authentication-sensitive domain. However, it does not describe whether the operation is read-only, what its output contains (despite an output schema), or any other behavioral traits like rate limits or side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three short sentences with no wasted words. The first sentence is slightly awkwardly phrased as a title-like clause followed by a list, but the key constraint 'No input, no account needed' is front-loaded after the content summary.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the simplicity (zero params, output schema exists), the description is nearly complete: it explains the purpose, the covered topics, and the lack of prerequisites. It could be stronger by stating when this tool should be invoked relative to siblings, but the essential information for an agent to call it is present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so the baseline is 4. The description adds the explicit confirmation 'No input, no account needed,' which aligns with the schema and reassures the agent about the call requirements.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states the tool's purpose as onboarding for MolTrust Ads and lists the concrete content covered: verdicts, plans, key sign-up, SDK, and endpoints. It does not explicitly differentiate itself from siblings like ads_check or moltguard_credential_issue, but the onboarding focus is clear enough for an agent to understand its role.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The only usage hint is 'No input, no account needed,' which tells the agent it can call it without prerequisites. There is no guidance on when to use this tool versus alternatives such as ads_check or the moltguard tools, nor any indication that it should be called first in a workflow.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

canary_eventsAInspect

Your leak events, newest first, each signed by MolTrust and carrying AER material that moltrust-verify recomputes offline (trust list: GET /canary/trust-list). Optionally for one canary. Needs your MolTrust API key as X-API-Key on the MCP connection.

    Args:
        canary_id: only events of this canary (from canary_issue or canary_list)
        limit: page size, at most 200
        offset: where the page starts
    
NameRequiredDescriptionDefault
limitNo
offsetNo
canary_idNo

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so the description carries the full burden and does well: ordering (newest first), the signing/verification model (each event signed by MolTrust and independently re-verifiable offline via moltrust-verify against GET /canary/trust-list), pagination semantics, and the API-key auth requirement. It does not state error or rate-limit behavior, keeping it just short of a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the most important facts (what the events are, ordering, authenticity model) before the Args block. The Args list partially restates signature-level info, but since the schema has no descriptions those lines earn their place; still slightly padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-shape detail is unnecessary, and the description covers auth, ordering, verification path, and all three parameters. It leaves out failure modes (invalid canary_id, offset past the end) but is otherwise sufficient to call the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage the description must carry all three parameters, and it does: canary_id is scoped to one canary and sourced from canary_issue/canary_list, limit is page size capped at 200, offset is the page start. It adds real meaning the bare schema does not, though it could specify units or behavior for out-of-range values.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Your leak events, newest first') plus the defining traits: MolTrust-signed and carrying AER material. It names related siblings (canary_issue, canary_list, moltrust-verify) so an agent can place it in the workflow, though it never explicitly contrasts it with canary_list or molcheck_evidence as the alternative source of related data.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives real operating conditions — scope it to one canary optionally, page size capped at 200, and the X-API-Key auth requirement on the MCP connection — but never says when to reach for this tool versus canary_list or the molcheck_*/moltrust_verify siblings. Usage context is implied rather than routed.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

canary_issueAInspect

Issue a leak canary for one counterparty: a credential to hand to that counterparty. If anyone else presents it at the MolTrust verifier, you get a signed leak event that names the counterparty. Costs what a credential costs. Needs your MolTrust API key as the X-API-Key header of the MCP connection.

    Args:
        counterparty_did: DID of the agent you hand the credential to; it must be a
              registered, unrevoked MolTrust agent
        mode: "bound" (the counterparty may present it) or "decoy" (any presentation
              but yours is a leak, the counterparty's included); both are issued to
              the counterparty's DID
        on_leak: "hold" puts the counterparty on hold in your mandates
                 (POST /canary/enforce-hook), "none" only records the event
        credential_type: the credential type, as in POST /credentials/issue
    
NameRequiredDescriptionDefault
modeNobound
on_leakNohold
credential_typeNoAgentTrustCredential
counterparty_didYes

Output Schema

NameRequiredDescription
resultYes

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden and does so richly: it states the leak-detection effect and signed leak event, the cost ('costs what a credential costs'), the authentication requirement (X-API-Key header), and the side effect of 'hold' mode putting the counterparty on hold. This is well beyond what a bare schema provides.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose is front-loaded in the first sentence, and the structured Args section is easy to scan. There is minor redundancy ('for one counterparty: a credential to hand to that counterparty') and some verbosity, but the length is reasonable for the concept's complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given a novel concept, zero schema descriptions, no annotations, and an output schema that handles return values, the description is complete enough to call the tool correctly. It covers prerequisites, all parameters, authentication, cost, and the leak-event outcome.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, and it does: counterparty_did is a registered unrevoked MolTrust agent DID, mode is explained as 'bound' vs 'decoy' with distinct presentation semantics, on_leak is explained as 'hold' vs 'none' with an endpoint reference, and credential_type is tied to the credential issuance model.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Issue a leak canary for one counterparty: a credential to hand to that counterparty.' It clearly defines what a leak canary is and its effect. However, it does not explicitly distinguish itself from sibling tools like canary_list or canary_events, so sibling differentiation is only implied by the 'issue' action.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains the purpose and prerequisites (API key, counterparty must be registered and unrevoked), which implies when the tool is useful. But it offers no explicit when-to-use guidance, no alternatives, and no exclusions relative to sibling tools like canary_list or canary_events.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

canary_listAInspect

Your leak canaries, newest first: counterparty, mode, reaction on leak and the number of events so far. Paginated with limit/offset; next_offset is null on the last page. Needs your MolTrust API key as X-API-Key on the MCP connection.

NameRequiredDescriptionDefault
limitNo
offsetNo

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations present, the description carries the full burden and does meaningful work: newest-first ordering, limit/offset pagination, the next_offset-null end-of-page sentinel, and the X-API-Key auth requirement on the MCP connection are all disclosed. What it omits is rate limiting, page-size bounds, and an explicit read-only statement, so it falls short of fully covering behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, front-loaded with what the tool returns, followed by pagination mechanics and the auth prerequisite. No filler, and the most decision-relevant information leads.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple two-parameter, zero-required list tool with an output schema, the description covers fields, ordering, pagination, and auth — enough to invoke it correctly. Only the missing sibling routing and explicit read-only framing keep it from being fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and neither parameter has a description, so the description must compensate. It names limit and offset and ties them to pagination, and mentions the next_offset sentinel on the response side, but gives no valid ranges or units beyond the schema defaults.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a clear resource (leak canaries) and enumerates the returned fields (counterparty, mode, reaction on leak, event count), so an agent knows exactly what comes back. It does not explicitly distinguish itself from the nearby siblings canary_events and canary_issue, so differentiation is left to the reader.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use or when-not guidance and no named alternative, even though canary_events and canary_issue sit right next to it. 'Your leak canaries' weakly implies listing one's own canaries, but routing between the three canary tools is left entirely to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molcheck_evidenceBInspect

Verdict plus the decoded transactions that breached the mandate.

    Read-only.

    Args:
        agent: public agent identifier (address / DID / ERC-8004 ref)
    
NameRequiredDescriptionDefault
agentYes

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full behavioral burden. It does disclose 'Read-only', which is the key trait an agent needs for a query tool, but it says nothing about auth requirements, rate limits, or scoping. Since an output schema exists, the return shape is partly covered elsewhere.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the key output description in the first sentence, with the read-only note immediately after. The leftover docstring-style 'Args:' block is slightly noisy but very short and carries the only parameter meaning available.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read tool with an output schema, the definition covers what is returned, the read-only nature, and the identifier format. The notable gap is routing guidance among the many molcheck/moltproof/moltrust siblings, which is what keeps it from being complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and the schema only gives a bare string titled 'Agent', so the description must compensate. It does: 'public agent identifier (address / DID / ERC-8004 ref)' clarifies that the value is public and enumerates three accepted identifier forms, which is meaningful added semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a concrete verb-less but specific output: a verdict plus the decoded transactions that breached the mandate. An agent can infer this is an evidence-retrieval tool, though it does not explicitly contrast itself with the sibling molcheck_verdict, which likely returns the verdict alone.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use guidance, no prerequisites, and no mention of alternatives such as molcheck_verdict or molcheck_verify despite a large family of near-identical sibling tools. The only context offered is 'Read-only.'

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molcheck_mandateBInspect

The committed AAE mandate for an agent (venues, position cap, validity).

    Read-only.

    Args:
        agent: public agent identifier (address / DID / ERC-8004 ref)
    
NameRequiredDescriptionDefault
agentYes

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It usefully declares 'Read-only', which is the key safety signal, but omits auth requirements, whether a missing mandate errors, and any caching or rate-limit behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the resource and its fields, then the read-only flag, then the arg. The docstring formatting is somewhat noisy but every line carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values needn't be described, and the single parameter and read-only nature are covered. The only real gap is routing guidance against the many sibling mandate/verify tools.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the schema only says type string, so the description does the compensating work by defining agent as a 'public agent identifier (address / DID / ERC-8004 ref)'. That materially clarifies the expected identifier format.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific resource (the committed AAE mandate) and enumerates its content (venues, position cap, validity), so an agent knows what it will get. It lacks a clear verb and, crucially, does not distinguish itself from sibling mandate tools like moltproof_mandate or ads_mandate_template.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no when-to-use guidance, no prerequisites, and no mention of the alternative mandate-related siblings. The only context offered is 'Read-only', which is a constraint rather than usage direction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molcheck_registryBInspect

Agents with committed mandates and their current verdict.

    Read-only. Ranks NO_MANDATE / NEEDS_REVIEW lower.
    
NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full disclosure burden. It does contribute two real traits - it is read-only and it sorts NO_MANDATE/NEEDS_REVIEW entries lower - but it says nothing about auth requirements, pagination, or completeness of the listing.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences with the resource description front-loaded and no filler. The fragmentary style is slightly terse for a domain-specific term like 'committed mandates', but nothing is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return shape need not be explained, and there are no parameters to document. However, the description does not clarify the domain terms or how this registry relates to its moltproof_registry sibling, leaving ambiguity about which registry tool to call.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is nothing for the description to disambiguate; the schema is also fully covered. Baseline of 4 applies since no parameter semantics are needed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific resource: agents with committed mandates and their current verdict, ranked by mandate status. That is clear enough to know what is returned, but the verb is implicit (list/query) and there is no differentiation from the sibling moltproof_registry, which appears to cover similar ground.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states 'Read-only' and a ranking preference ('Ranks NO_MANDATE / NEEDS_REVIEW lower'), but gives no guidance on when to reach for this tool versus molcheck_mandate, molcheck_verdict, or moltproof_registry. Usage is only implied by the returned content.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molcheck_verdictBInspect

Verdict + per-check breakdown for an agent against its committed mandate.

    Read-only. Recomputable from public chain data + the public mandate.

    Args:
        agent: agent address, did:moltrust / did:web, or ERC-8004 reference (public)
    
NameRequiredDescriptionDefault
agentYes

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It usefully discloses that the operation is 'Read-only' and 'Recomputable from public chain data + the public mandate,' implying deterministic, no-secret-state behavior. It does not, however, cover error/permission cases or what happens if no mandate is committed, leaving real gaps for a verification tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The definition is front-loaded with the purpose, then the read-only/recomputability note, then the Args block. Every line earns its place and there is no filler. It is terse but appropriately sized for a single-parameter tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, and the one input parameter is fully described. The read-only and recomputable claims give adequate behavioral context. The main shortfall is the lack of routing guidance against the many verification siblings, but for a simple one-arg read tool this is close to complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the single 'agent' parameter has no schema description, so the description must compensate. It does so well by enumerating accepted identifier formats: agent address, did:moltrust / did:web, or ERC-8004 reference, and noting the value is public. This adds substantial meaning beyond the bare 'string' type.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb+resource: it returns a 'Verdict + per-check breakdown for an agent against its committed mandate.' This is far more concrete than a bare name restatement and clearly conveys what the tool produces. It does not explicitly distinguish itself from close siblings like molcheck_verify, molcheck_evidence, or moltproof_verdict, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use or when-not-to-use guidance, and no named alternative among the many molcheck_*/moltproof_* siblings. The mention of 'public chain data + the public mandate' hints at the context but does not tell the agent when verdict is the right call versus verify or evidence.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

molcheck_verifyAInspect

Recompute a verdict from public inputs and check its signature.

    Offline and read-only: no DID/mandate/context is fetched here.

    Args:
        agent: public agent identifier
        mandate: the public AAE Verifiable Credential
        actions: public, already-decoded on-chain actions
        signature: optional prior MolCheck signature to check
    
NameRequiredDescriptionDefault
agentYes
actionsYes
mandateYes
signatureNo

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden, and it does disclose two useful traits: it is read-only and performs no remote fetching. It does not say whether a failed signature check raises an error or returns a negative result, nor how expensive/authoritative the recomputation is. Adequate but incomplete for an unannotated tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The lead sentence states the action, the second states the operating constraint, and the Args block documents each parameter. Front-loaded and free of filler, though the docstring-style indentation is slightly awkward for a tool description.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, and the offline/read-only note covers the main environmental concern. Given four parameters with nested objects and zero schema description coverage, an agent still lacks detail on the expected shape of the mandate and action objects, which is the main gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and there are four parameters including nested objects, so the description must compensate, and it largely does: agent is 'public agent identifier', mandate is 'the public AAE Verifiable Credential', actions are 'public, already-decoded on-chain actions', and signature is 'optional prior MolCheck signature to check'. The 'already-decoded' qualifier is genuinely useful input-shape guidance, though the expected internal structure of mandate/actions remains unspecified.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: recompute a verdict from public inputs and check its signature. It is clearly distinguishable from molcheck_verdict (produce a verdict) and from the moltproof_verify sibling family. It does not, however, explicitly contrast itself with those siblings in the text.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a real usage constraint ('Offline and read-only: no DID/mandate/context is fetched here'), which tells the agent this is a self-contained check rather than a live lookup. It stops short of saying when to choose this over molcheck_verdict or moltproof_verify, or what preconditions the caller must satisfy.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltguard_credential_issueA
Destructive
Inspect

Issue a W3C Verifiable Credential (AgentTrustCredential) for a wallet.

The credential contains the agent's trust score, Sybil score,
ERC-8004 registration status, and MolTrust verification status.
It is cryptographically signed with Ed25519 (JWS).

Args:
    address: Base (EVM) wallet address (0x...)
NameRequiredDescriptionDefault
addressYesBase (EVM) wallet address (0x...)

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly=false, idempotent=false, destructive=true, and the description usefully adds what the credential contains and that it is JWS-signed. However, for a non-idempotent, destructive-flagged mutation it says nothing about what a repeat call does (new credential each time? overwrites/revokes the prior one?), whether it consumes credits, or whether signing keys are managed server-side.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The opening sentence front-loads purpose, followed by one dense sentence on payload and signature. The trailing 'Args:' block is fully redundant with the schema and is the one segment that does not earn its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-shape explanation is correctly omitted, but the description stops short on the operational facts an agent needs before firing a destructive, non-idempotent write: re-issuance semantics, cost, and any prerequisite state on the wallet address.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and there is a single required parameter, so the schema alone fully documents it; the description's Args block merely restates 'Base (EVM) wallet address (0x...)' verbatim. Baseline for a single fully-documented param is a 4, with no added semantics beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (issue) and resource (W3C Verifiable Credential / AgentTrustCredential) and enumerates the credential's payload (trust score, Sybil score, ERC-8004 status, MolTrust status) plus the signing scheme (Ed25519 JWS). It never names its natural counterpart moltguard_credential_verify or the other *_issue_vc siblings, so the boundary between issuance tools is left to the agent.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied by the verb: you issue a credential when you want one for a wallet. There is no explicit statement of when to prefer this over moltguard_credential_verify or the mt_*_issue_vc tools, and no preconditions (e.g., must the address be registered or scored first).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltguard_credential_verifyB
Read-only
Inspect

Verify a MoltGuard Verifiable Credential JWS signature.

Checks the Ed25519 signature and returns the credential payload if valid.

Args:
    jws: JWS compact serialization string from a MoltGuard credential
NameRequiredDescriptionDefault
jwsYesJWS compact serialization string from a MoltGuard credential

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=true, so the safety profile is covered. The description adds useful behavior detail—Ed25519 signature check and payload return on success—but does not describe what happens on invalid signatures (error shape, exception, or null return), leaving a gap for a verification tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded with the core action. The Args section duplicates the schema's own parameter description, which is minor waste, but overall it is efficiently sized.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read-only verification tool with a 100%-covered schema and an output schema present, the description is nearly complete. The only meaningful omission is failure behavior, but return structure is presumably covered by the output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and the single parameter jws is fully documented in the schema. The description's Args line repeats the schema text verbatim without adding format, syntax, or validation details, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb (verify) and a precise resource (MoltGuard Verifiable Credential JWS signature), and adds that it checks the Ed25519 signature and returns the payload on success. This makes the operation clear, though it does not explicitly distinguish itself from the many other *_verify siblings beyond the MoltGuard naming.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance on when to use this tool versus alternatives such as molcheck_verify, molproof_verify, or moltrust_verify. The description implies it is for verifying a MoltGuard credential but offers no conditions, exclusions, or prerequisites for selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltguard_detailB
Read-only
Inspect

Get a detailed agent trust report for a Base wallet address.

Returns full scoring breakdown, wallet history from Blockscout,
ERC-8004 registration, MolTrust DID cross-reference, and Sybil indicators.

Args:
    address: Base (EVM) wallet address (0x...)
NameRequiredDescriptionDefault
addressYesBase (EVM) wallet address (0x...)

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true already covers the safety profile, and the description adds genuine value by disclosing the data sources it aggregates (Blockscout wallet history, ERC-8004 registration, MolTrust DID, Sybil indicators), which implies external calls and possible latency. It stops short of saying anything about caching, rate limits, or behavior when an address has no on-chain history.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded: the one-line purpose comes first, followed by the return contents. Slightly redundant in restating the 'address' parameter that the schema already documents, but otherwise tight with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so the return-value enumeration is a bonus rather than a necessity, and the read-only nature is covered by annotations. What is missing is the disambiguation from moltguard_score/moltguard_sybil and any note on failure or empty-result behavior for unregistered wallets — the main gaps for an agent choosing between near-identical tools.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single 'address' parameter is fully documented in the schema. The description's Args block repeats that same text verbatim (Base EVM address, 0x...), adding no format details, validation rules, or examples beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: a detailed trust report for a Base wallet address, and enumerates the report's components (scoring breakdown, Blockscout history, ERC-8004, DID cross-reference, Sybil indicators). It does not, however, distinguish this from closely named siblings like moltguard_score or moltguard_sybil, so an agent cannot tell purely from the description which to pick.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use guidance and no mention of alternatives. Given siblings moltguard_score and moltguard_sybil cover overlapping ground, the absence of routing ('use this instead of X when you need the full aggregate') leaves selection ambiguous. Usage is only inferable from the word 'detailed'.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltguard_feedA
Read-only
Inspect

Get the top anomaly feed — markets with highest integrity concerns.

Scans the top 20 active Polymarket markets by 24h volume and returns those with anomaly indicators, sorted by anomaly score.

NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription
resultYes

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already establishes that this is a safe read operation. The description adds meaningful behavioral context beyond annotations: it scans the top 20 active Polymarket markets by 24h volume and returns only markets with anomaly indicators, sorted by anomaly score. It does not mention data freshness or rate limits, but that is acceptable given the annotation and output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two concise sentences, with the core purpose front-loaded before the scanning methodology. Every sentence adds useful information without waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a no-parameter, read-only feed with an output schema, the description provides enough context to invoke it correctly: what universe is scanned, how markets are selected, what is returned, and how results are sorted. Safety is covered by annotations and return values by the output schema, so no material gap remains.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the baseline is 4. No parameter semantics need explanation, and the description correctly does not introduce any parameter-related confusion.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: get the top anomaly feed for markets with the highest integrity concerns. It adds useful scope details (Polymarket markets, top 20 by 24h volume, anomaly indicators, sorted by anomaly score), but it does not explicitly differentiate itself from sibling tools such as moltguard_detail, moltguard_market, or moltguard_score.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when this feed is useful by framing it as the top anomaly overview, but it gives no explicit when-to-use vs when-not-to-use guidance and does not name alternatives. An agent can infer appropriate use, but routing to a sibling for detail or individual market inspection is left unstated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltguard_marketA
Read-only
Inspect

Check a Polymarket prediction market for integrity anomalies.

Analyzes volume spikes, price-volume divergence, liquidity ratios,
and outcome price spreads to detect potential manipulation.

Args:
    market_id: Polymarket market/condition ID
NameRequiredDescriptionDefault
market_idYesPolymarket market/condition ID

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so safety is covered. The description adds genuine behavioral context by naming the four analysis dimensions used, but says nothing about cost, rate limits, or what happens when a market ID is unknown or illiquid.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in the first sentence, with analysis detail immediately after. The trailing Args block duplicates schema content and is the only waste, but it is short.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

A single required parameter plus a read-only profile and an output schema means little more is needed; the analysis dimensions give the agent enough to trust the result. Only the behavior on invalid or thin markets is unaddressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the description's 'Args:' line merely restates the schema's own text ('Polymarket market/condition ID') verbatim. No format example or accepted ID variant is added, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Check a Polymarket prediction market for integrity anomalies') and enumerates the exact signals analyzed (volume spikes, price-volume divergence, liquidity ratios, outcome price spreads). This clearly separates it from the credential/registry/reputation siblings, though no sibling is named explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied — you call it when you want to detect manipulation in a specific market — but there is no guidance on when to prefer it over near-domain neighbors like moltguard_score, moltguard_detail, or moltguard_sybil, nor any prerequisites or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltguard_scoreA
Read-only
Inspect

Get an agent trust score for a Base wallet address.

Analyzes on-chain activity, ERC-8004 registration, USDC balance,
counterparty diversity, and MolTrust credentials to produce a 0-100 score.

Args:
    address: Base (EVM) wallet address (0x...)
NameRequiredDescriptionDefault
addressYesBase (EVM) wallet address (0x...)

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true already tells the agent this is a safe read, so the bar is lower; the description still adds real value by disclosing the scoring inputs (on-chain activity, ERC-8004 registration, USDC balance, counterparty diversity, MolTrust credentials) and the output range (0-100). It does not mention rate limits, caching, or behavior for unknown/ineligible addresses.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core sentence is front-loaded and the scoring-signal inventory earns its place. The trailing Args block duplicates the input schema and is mild redundancy rather than value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With one parameter, an output schema, and read-only annotations, the structured fields carry most of the load and the description covers purpose, inputs analyzed, and score range. The main missing piece is how it relates to overlapping trust/reputation siblings.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and there is a single required parameter, so the schema already documents the address format. The description's Args block merely restates the schema description verbatim, adding no new meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ("Get an agent trust score") plus the target subject (Base wallet address), and enumerates the inputs to the score, so the agent knows exactly what the tool computes. It does not, however, distinguish itself from similar-sounding siblings like mt_get_trust_score or moltrust_reputation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance on when to call this versus the many related scoring/reputation siblings in the server. Usage is only implied by the description of what is computed, with no exclusions or prerequisites stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltguard_sybilA
Read-only
Inspect

Scan a Base wallet for Sybil indicators.

Analyzes wallet age, transaction patterns, counterparty diversity,
and funding source to detect potential Sybil wallets.
Also traces funding clusters — if the funder sent ETH to many wallets,
it indicates a Sybil ring.

Args:
    address: Base (EVM) wallet address (0x...)
NameRequiredDescriptionDefault
addressYesBase (EVM) wallet address (0x...)

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true already tells the agent this is a safe, non-mutating scan. The description adds genuine beyond-schema context: it enumerates the heuristics applied and explains that funding-cluster tracing expands the check from a single wallet to the funder's outbound ETH graph, which is important for interpreting results as 'Sybil ring' evidence rather than a per-wallet verdict. Rate limits, latency, and external data sources are not mentioned, keeping it short of a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core purpose is front-loaded and the analysis list is compact and information-dense. The trailing 'Args:' block largely duplicates the input schema's own address description, which is the only redundant element in an otherwise well-structured definition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter read-only scan with an output schema present, the description supplies enough: what it checks, how funding clusters extend the analysis, and the required input. It does not need to explain return values because the output schema carries that, and annotations cover the safety profile.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With a single parameter at 100% schema description coverage, the schema already documents the address fully. The description restates 'Base (EVM) wallet address (0x...)' without adding new constraints or format details, so it neither compensates nor detracts. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening sentence gives a specific verb and resource: 'Scan a Base wallet for Sybil indicators', followed by the concrete signals analyzed (wallet age, transaction patterns, counterparty diversity, funding source, funding clusters). It is clear and unambiguous, but it does not explicitly distinguish itself from nearby trust-scoring siblings like moltguard_score or moltguard_detail, leaving the agent to infer the Sybil-specific scope.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: an agent gathers that this tool should be called when Sybil risk needs checking. There is no explicit 'use this instead of X' routing against moltguard_score or moltguard_detail, and no prerequisites (e.g., whether the address must be on Base mainnet, whether a funded wallet is required).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltproof_evidenceAInspect

Deprecated alias of molcheck_evidence; use that name. Verdict plus the decoded transactions that breached the mandate.

    Read-only.

    Args:
        agent: public agent identifier (address / DID / ERC-8004 ref)
    
NameRequiredDescriptionDefault
agentYes

Output Schema

NameRequiredDescription
resultYes

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It does disclose 'Read-only' and indicates the response content (verdict plus decoded breaching transactions), which is useful. However, it omits auth/prerequisite requirements and any note on whether calling the deprecated alias still behaves identically to the replacement.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The deprecation notice is front-loaded and the whole description is short, with only a small amount of leftover docstring formatting in the Args block. Every sentence carries information; nothing is padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained (though they partially are). With the deprecation routing, read-only disclosure, and parameter format guidance all present, the definition is nearly complete for a simple one-parameter read tool; only auth expectations are unaddressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and the schema documents 'agent' only as a bare string, so the description must compensate. It does: 'public agent identifier (address / DID / ERC-8004 ref)' gives concrete accepted formats that the schema lacks, which is meaningful guidance for the single required parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states the tool is a deprecated alias of molcheck_evidence and summarizes its payload ('verdict plus the decoded transactions that breached the mandate'), which is specific about the resource returned. It distinguishes itself from the sibling molcheck_evidence by naming it directly. It loses a point only because its own purpose is defined entirely by reference to another tool rather than standing alone.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says 'Deprecated alias of molcheck_evidence; use that name' — a direct when/when-not instruction that routes the agent to the correct alternative. There is no ambiguity about whether this tool should be selected.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltproof_mandateAInspect

Deprecated alias of molcheck_mandate; use that name. The committed AAE mandate for an agent (venues, position cap, validity).

    Read-only.

    Args:
        agent: public agent identifier (address / DID / ERC-8004 ref)
    
NameRequiredDescriptionDefault
agentYes

Output Schema

NameRequiredDescription
resultYes

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations supplied, the description carries the full behavioral burden and does disclose 'Read-only,' plus the semantic content of the returned mandate. It does not cover auth/permission requirements or failure modes, which is a gap, but the read-only declaration plus data-shape disclosure is meaningful context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the deprecation notice, followed by a one-line purpose and a short Args block. Efficient, though the docstring-style 'Args:' formatting is slightly verbose for a single parameter.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described, and the deprecation routing plus read-only note plus identifier formats cover what an agent needs to call this correctly. Minor omission of any auth or error context keeps it short of perfect.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% for the single 'agent' parameter, so the description must compensate — and it does by defining the accepted identifier formats ('address / DID / ERC-8004 ref'), which is real value beyond the bare string type in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names the exact resource ('the committed AAE mandate for an agent') and enumerates its contents (venues, position cap, validity), so the agent knows precisely what it retrieves. It also explicitly identifies itself as a deprecated alias and points to the replacement sibling molcheck_mandate, making it trivially distinguishable from that sibling.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states an unambiguous when-not rule: 'Deprecated alias of molcheck_mandate; use that name.' The alternative tool is named and the condition that selects it is explicit, leaving no inference required.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltproof_registryAInspect

Deprecated alias of molcheck_registry; use that name. Agents with committed mandates and their current verdict.

    Read-only. Ranks NO_MANDATE / NEEDS_REVIEW lower.
    
NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription
resultYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden and does disclose two behavioral traits: 'Read-only' and the result ordering rule ('Ranks NO_MANDATE / NEEDS_REVIEW lower'). It omits pagination/limits, but for a deprecated zero-param read tool this is solid disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Deprecation warning is correctly front-loaded, followed by resource and behavior in short clauses. Slightly awkward line breaks and an adjective-free noun phrase cost it a point, but there is essentially no waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, and the tool's real function (route to molcheck_registry) is fully conveyed. Nothing critical is missing for a deprecated alias with no parameters.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Zero parameters (baseline 4) and schema description coverage is 100%, so there is no parameter meaning for the description to add or omit.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description identifies the resource as 'Agents with committed mandates and their current verdict' and explicitly frames this tool as a deprecated alias of molcheck_registry, which lets an agent place it relative to siblings. The purpose is understandable, though the noun phrase lacks an explicit verb (list/query).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives direct, explicit routing: 'Deprecated alias of molcheck_registry; use that name.' An agent knows immediately not to call this and which sibling to call instead — the strongest form of when/when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltproof_verdictAInspect

Deprecated alias of molcheck_verdict; use that name. Verdict + per-check breakdown for an agent against its committed mandate.

    Read-only. Recomputable from public chain data + the public mandate.

    Args:
        agent: agent address, did:moltrust / did:web, or ERC-8004 reference (public)
    
NameRequiredDescriptionDefault
agentYes

Output Schema

NameRequiredDescription
resultYes

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it states 'Read-only' and that results are 'Recomputable from public chain data + the public mandate', disclosing determinism, idempotence and that no private/auth-gated state is involved. It omits any note on latency, caching, or error behavior for an unregistered agent, which keeps it short of a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The deprecation warning is front-loaded, and the body is two short sentences plus a compact arg line with no filler. The pseudo-Google-style 'Args:' block is slightly heavier than needed for a single parameter but remains efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described, and the description covers deprecation, read-only semantics, data provenance and argument formats. For a one-parameter read tool this is nearly sufficient; only edge cases (unknown agent, no mandate committed) are unaddressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, and it does by enumerating the accepted identifier forms: 'agent address, did:moltrust / did:web, or ERC-8004 reference (public)'. That is real semantic value beyond the bare string type, though it gives no validation rules or examples.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names the specific resource and output shape ('Verdict + per-check breakdown for an agent against its committed mandate') and immediately disambiguates from the sibling molcheck_verdict by declaring itself a deprecated alias. An agent can identify both what it returns and which tool it should actually prefer without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly routes the agent away from this tool ('Deprecated alias of molcheck_verdict; use that name'), which is actionable when-to-use guidance. It does not, however, explain when a verdict is the right check versus molcheck_evidence or molcheck_verify, so routing within the broader family is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltproof_verifyAInspect

Deprecated alias of molcheck_verify; use that name. Recompute a verdict from public inputs and check its signature.

    Offline and read-only: no DID/mandate/context is fetched here.

    Args:
        agent: public agent identifier
        mandate: the public AAE Verifiable Credential
        actions: public, already-decoded on-chain actions
        signature: optional prior MolCheck signature to check
    
NameRequiredDescriptionDefault
agentYes
actionsYes
mandateYes
signatureNo

Output Schema

NameRequiredDescription
resultYes

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden, and it does disclose the key safety profile: 'Offline and read-only: no DID/mandate/context is fetched here.' This is meaningful beyond the schema. It stops short of describing failure behavior (e.g., signature-mismatch outcome), which keeps it from a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the most decision-relevant fact (deprecation) ahead of the functional detail, and the Args block is tidy. Slightly longer than strictly necessary due to the enumerated arg list, but every line earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, and the description covers the offline/read-only behavior plus all four undocumented params. Complete enough for an agent to call it correctly, though no guidance on the signature result semantics is given.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, and it documents all four parameters ('public agent identifier', 'the public AAE Verifiable Credential', 'public, already-decoded on-chain actions', 'optional prior MolCheck signature'). It conveys the semantic role of each param but no format or syntax detail.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Recompute a verdict from public inputs and check its signature') and immediately differentiates itself from siblings by naming the canonical tool molcheck_verify. An agent can tell exactly what this does and that it is a deprecated alias without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly routes the agent away from this tool ('Deprecated alias of molcheck_verify; use that name'), which supplies the key when-not-to-use / alternative guidance. It does not fully spell out when the canonical verify is appropriate versus the many other *_verify siblings, so it falls short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltrust_claim_depositA
DestructiveIdempotent
Inspect

Claim MolTrust credits from a USDC deposit on Base.

After sending USDC to the MolTrust wallet on Base (L2),
submit the transaction hash to receive credits.
1 USDC = 100 credits, verified on-chain.

Args:
    tx_hash: Base blockchain transaction hash (0x...)
    did: Your agent's DID to credit
NameRequiredDescriptionDefault
didYesYour agent's DID to credit, e.g. did:moltrust:a1b2c3d4e5f60718
tx_hashYesBase blockchain transaction hash (0x...)

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare non-readOnly, idempotent, and destructive hints; the description adds real behavioral context in the 1 USDC = 100 credit conversion and on-chain verification. However, it never addresses the destructiveHint (what state is consumed by a claim), what happens on a duplicate or invalid tx_hash, or any rate/per-claim limit — gaps an agent needs for a mutating call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose and the deposit-then-claim workflow are front-loaded in two tight sentences. The Args block duplicates the schema's parameter descriptions and could be dropped, which is the only wasted space.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter mutation with an output schema available, the description supplies the essential precondition, the conversion rate, and the verification basis. Missing only the address to send funds to (a sibling tool's job) and error/duplicate handling.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the description's Args block restates the exact same content (0x hash, DID to credit) without adding format rules, validation constraints, or example values beyond the schema. Baseline 3 is appropriate when the schema already carries the semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Claim MolTrust credits from a USDC deposit on Base') and adds the mechanism (submit on-chain tx hash to receive credits), which clearly separates it from read-only siblings like moltrust_credits or moltrust_deposit_history. It doesn't name a sibling explicitly, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit precondition: USDC must first be sent to the MolTrust wallet on Base, then the tx hash is submitted. That is clear usage context, but there is no exclusion or pointer to moltrust_deposit_info (to get the wallet address) or moltrust_deposit_history (to check prior claims).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltrust_credentialC
Destructive
Inspect

Issue or verify a W3C Verifiable Credential.

Args:
    action: Either "issue" or "verify"
    subject_did: DID of the credential subject (required for "issue")
    credential_type: Type of credential (default: "AgentTrustCredential", only for "issue")
    credential: JSON string of the credential to verify (required for "verify")
NameRequiredDescriptionDefault
actionYesEither "issue" or "verify"
credentialNoJSON string of the credential to verify (required for "verify")
subject_didNoDID of the credential subject (required for "issue"), e.g. did:moltrust:a1b2c3d4e5f60718
credential_typeNoType of credential (default: "AgentTrustCredential", only for "issue")AgentTrustCredential

Output Schema

NameRequiredDescription
resultYes

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare destructiveHint=true and idempotentHint=false, but the description never explains the destructive aspect: what issuing persists, whether a credential can be revoked or overwritten, or whether verification has side effects. With a destructive mutation in the mix, the silence is a real gap; the description neither contradicts nor supplements the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The opening sentence is well-formed and front-loaded, but the Args block duplicates parameter descriptions already present in the schema, adding length without value. A tighter description would spend those tokens on sibling routing and destructive-behavior disclosure instead.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, but the description omits the behavioral facts an agent needs for a tool flagged destructive and non-idempotent: auth requirements, side effects of 'issue', and how it relates to the dedicated issue/verify siblings. The conditional parameter notes are the only substantive content.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the description's Args block essentially restates the schema descriptions verbatim (and drops the DID example the schema provides), adding no new meaning. Baseline 3 is appropriate since the schema already carries the parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence states a specific verb pair and resource: issuing or verifying a W3C Verifiable Credential. It is clear what the tool does, but it does not distinguish itself from the many credential siblings (moltguard_credential_issue, moltguard_credential_verify, moltrust_verify), so an agent cannot tell from the description alone why this combined tool exists alongside them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus moltguard_credential_issue or moltguard_credential_verify. The 'required for issue/verify' notes are conditional-parameter facts rather than usage routing, and nothing says when the combined action interface is preferable to the dedicated siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltrust_creditsA
Destructive
Inspect

Manage MolTrust credits: check balance, view pricing, transfer credits, or view transaction history.

Args:
    action: One of "balance", "pricing", "transfer", or "transactions"
    did: Agent DID (required for "balance" and "transactions")
    to_did: Recipient DID (required for "transfer")
    amount: Number of credits to transfer (required for "transfer", must be >= 1)
    reference: Optional reference string for transfers
    limit: Max transactions to return (default 20, for "transactions")
    offset: Pagination offset (default 0, for "transactions")
NameRequiredDescriptionDefault
didNoAgent DID (required for "balance" and "transactions"), e.g. did:moltrust:a1b2c3d4e5f60718
limitNoMax transactions to return (default 20, for "transactions")
actionYesOne of "balance", "pricing", "transfer", or "transactions"
amountNoNumber of credits to transfer (required for "transfer", must be >= 1)
offsetNoPagination offset (default 0, for "transactions")
to_didNoRecipient DID (required for "transfer"), e.g. did:moltrust:a1b2c3d4e5f60718
referenceNoOptional reference string for transfers

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare destructiveHint=true and readOnlyHint=false, so the agent knows some operations here can mutate state. The description adds useful validation context (amount must be >= 1) and action-specific required fields, but it does not disclose whether transfers are irreversible, whether authentication/authorization is required, or what side effects occur beyond the annotation flags.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the main purpose and then organized into a compact Args block, making it easy to scan. The parameter listing duplicates the schema, but given the multi-action nature it remains reasonably efficient and not bloated.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 7-parameter multi-action tool with an output schema and full input schema descriptions, the description covers the action menu and per-action required parameters adequately. It omits some behavioral details such as transfer irreversibility and auth requirements, but annotations cover the destructive nature and the output schema handles return values.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents each parameter in detail. The description largely repeats the schema descriptions, including action-conditional requirements, and adds little semantic meaning beyond what is already structured. Baseline 3 is appropriate when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence names the resource (MolTrust credits) and gives a concrete action menu: check balance, view pricing, transfer credits, view transaction history. It is clear what the tool does, though the multi-action nature means it is less sharply scoped than a single-purpose tool, and it does not explicitly differentiate itself from sibling moltrust_* tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The Args section clearly maps each action to its required parameters, giving an agent the context needed to choose and invoke the right variant. It does not explicitly state when to use this tool versus siblings, but for a multi-action tool the action-level guidance is clear enough to be above baseline.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltrust_deposit_historyC
Read-only
Inspect

Get USDC deposit history for an agent.

Args:
    did: The agent's DID
NameRequiredDescriptionDefault
didYesThe agent's DID, e.g. did:moltrust:a1b2c3d4e5f60718

Output Schema

NameRequiredDescription
resultYes

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true already establishes this is a safe read, so the description's burden is lighter, and it does add that the scope is a single agent and a single asset (USDC). Beyond that it says nothing about whether history is complete or capped, whether time ranges apply, or whether results are paginated — for a tool literally named 'history' those gaps matter.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The opening sentence is front-loaded and efficient, but the 'Args: did: The agent's DID' block is pure duplication of the schema and earns no space. Short overall, but not every line pays for itself.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, and the single parameter is well covered by the schema. What is left unexplained is scope-relevant for a history endpoint: result window, pagination, and ordering — enough of a gap to keep this at minimum-viable rather than complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Only one parameter and schema coverage is 100%, with the schema even supplying a concrete example DID format. The description's 'The agent's DID' adds nothing beyond the schema, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: retrieve USDC deposit history, scoped to an agent. That is unambiguous, but it never distinguishes itself from near-name siblings such as moltrust_deposit_info, moltrust_claim_deposit, or moltrust_credits, so the agent must guess among them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no when-to-use guidance, no exclusions, and no mention of the deposit-related siblings that could plausibly be confused with this one. The agent learns what the tool returns but not when to prefer it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltrust_deposit_infoA
Read-only
Inspect

Get USDC deposit instructions to buy MolTrust credits.

Returns the MolTrust wallet address on Base (Ethereum L2), USDC token contract, conversion rate (1 USDC = 100 credits), and step-by-step instructions.

NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true is consistent with an info-only tool, and the description reinforces this by describing the data returned (wallet address, token contract, conversion rate, steps). It does not mention whether an account/credential is needed to call it, or any rate limits, but with the annotation already covering the safety profile and an output schema covering returns, the remaining gap is modest.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, purpose front-loaded, followed by an enumerated list of what comes back. Nothing redundant and no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter read-only tool with a full output schema, the description covers purpose, network (Base L2), asset, and conversion rate — enough to call it correctly. The only omission is what to do after depositing (e.g., moltrust_claim_deposit), which is a usage-guidance gap rather than a completeness failure.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, which is the baseline-4 case; there is nothing for the description to disambiguate beyond confirming the tool needs no inputs.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Get USDC deposit instructions') plus the business goal ('to buy MolTrust credits'), so the agent knows exactly what this returns. It does not explicitly contrast with near-name siblings such as moltrust_claim_deposit or moltrust_rate, so differentiation is left to inference.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'to buy MolTrust credits' implies the context of use, but there is no explicit when-to-use/when-not guidance and no mention of the natural follow-up tool (moltrust_claim_deposit) after sending funds. Usage is implied rather than stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltrust_erc8004B
Read-only
Inspect

Query the ERC-8004 on-chain agent registry on Base.

Resolve MolTrust agents to their on-chain ERC-8004 identity, fetch Agent Cards,
or look up on-chain agents by their agentId.

Args:
    action: One of "card", "resolve", or "well-known"
    did: Agent DID (required for "card", e.g. "did:moltrust:a1b2c3d4e5f60718")
    agent_id: On-chain ERC-8004 agent ID (required for "resolve", e.g. 21023)
NameRequiredDescriptionDefault
didNoAgent DID (required for "card", e.g. "did:moltrust:a1b2c3d4e5f60718")
actionYesOne of "card", "resolve", or "well-known"
agent_idNoOn-chain ERC-8004 agent ID (required for "resolve", e.g. 21023)

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true already tells the agent this is a safe read, so the description only needs to add context — it contributes the chain (Base) and the fact that data comes from an on-chain registry. It says nothing about latency, caching, what happens when a DID or agentId is not found, or whether 'well-known' touches a network endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded one-line summary, then a compact Args block; every line is short and scannable. The Args section largely duplicates the schema, which is the only noticeable redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need no explanation, and all three actions are enumerated. Still missing enough to call it complete: no routing versus the several registry siblings, no note on which action is the default entry point, and no error/absence behavior for a read that may return nothing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the description's Args block restates the schema text almost verbatim, including the identical example values. The one small addition is the action-to-parameter dependency, which the schema conveys less explicitly; otherwise this is baseline for fully documented parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — query the ERC-8004 on-chain agent registry on Base — and enumerates the three operations (card, resolve, well-known). The multi-mode packaging blurs the single purpose somewhat, and no sibling is named even though molcheck_registry and moltproof_registry appear adjacent.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The Args section implies which mode to use by pairing action values with their required parameters (did for card, agent_id for resolve), which is better than nothing. But there is no explicit guidance on when to choose this registry tool over molcheck_registry or moltproof_registry, nor any stated preconditions or failure paths.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltrust_rateC
Destructive
Inspect

Rate another AI agent (1-5 stars).

Submit a trust rating from one agent to another.

Args:
    from_did: Your agent's DID (the rater)
    to_did: Target agent's DID (the agent being rated)
    score: Rating from 1 (untrusted) to 5 (highly trusted)
NameRequiredDescriptionDefault
scoreYesRating from 1 (untrusted) to 5 (highly trusted)
to_didYesTarget agent's DID (the agent being rated), e.g. did:moltrust:a1b2c3d4e5f60718
from_didYesYour agent's DID (the rater), e.g. did:moltrust:a1b2c3d4e5f60718

Output Schema

NameRequiredDescription
resultYes

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already flag destructiveHint=true and idempotentHint=false, which raises an obvious question the description ignores: does a new rating overwrite a prior one, and is that history lost? Nothing is said about overwrite behavior, auth/ownership checks on from_did, rate limits, or whether self-rating is permitted. It does not contradict the annotations, but it adds almost nothing beyond them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The opening line and the 'Submit a trust rating...' sentence say the same thing, and the Args section duplicates a fully documented schema. The core content is short, but roughly half of it is redundant rather than front-loaded information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists and all three params are schema-documented, so the basics are covered. What is missing for a destructive, non-idempotent write is the effect of re-rating and any identity/permission requirement on from_did — information an agent needs before calling.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the Args block simply repeats the schema descriptions verbatim, so no additional meaning is conveyed. Baseline 3 applies when the schema already documents every parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('rate another AI agent', 'submit a trust rating from one agent to another') with the 1-5 scale spelled out. It is clear on its own, but it never distinguishes itself from nearby endorsement/reputation siblings such as mt_endorse_agent or moltrust_reputation, so an agent must infer the difference.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to use this versus alternatives, no prerequisites (must either agent be registered? does the target need to exist?), and no exclusions. The second line merely restates the first, so the agent gets no routing guidance at all.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltrust_registerB
Destructive
Inspect

Register a new AI agent on MolTrust.

Creates a decentralised identity (DID), issues a W3C Verifiable Credential,
and anchors the agent on the Base blockchain.

Args:
    display_name: Agent name (1-64 chars, alphanumeric/dash/underscore/dot/space)
    platform: Platform identifier (e.g. "openai", "langchain", "custom")
NameRequiredDescriptionDefault
platformYesPlatform identifier (e.g. "openai", "langchain", "custom")
display_nameYesAgent name (1-64 chars, alphanumeric/dash/underscore/dot/space)

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds real context beyond annotations: it discloses that a DID and verifiable credential are created and that the agent is anchored on the Base blockchain, which signals persistence. However, with destructiveHint=true and idempotentHint=false already declared, it never warns about irreversibility, cost, or what happens on repeat/duplicate registration calls.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The first sentence and the three-line summary of created artifacts are well front-loaded and earn their place. The trailing 'Args:' section duplicates the input schema word-for-word and is pure filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, and the description adequately covers what is created. But for a non-idempotent, destructive, blockchain-writing operation in a crowded sibling namespace, the absence of cost/permission/irreversibility guidance leaves meaningful gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the 'Args' block is a verbatim restatement of the schema's own parameter descriptions and adds no new meaning (no format examples or normalization notes). Baseline 3 applies when the schema carries the semantic load.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening sentence states a specific verb and resource ('Register a new AI agent on MolTrust') and the body enumerates the concrete artifacts produced (DID, W3C Verifiable Credential, Base blockchain anchor). It is distinguishable from moltrust_verify/moltrust_credential by naming, though it does not explicitly contrast with sibling registrar tools like mt_register_seed or mt_salesguard_register.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to use this tool versus the many sibling registration/verification tools, and no prerequisites (funding, credits, wallet, prior deposit) are mentioned. The agent must infer usage context entirely from the name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltrust_reputationB
Read-only
Inspect

Get the reputation score for an AI agent.

Returns the aggregate trust score (1-5) and total number of ratings.

Args:
    did: Decentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")
NameRequiredDescriptionDefault
didYesDecentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true already establishes this is a safe read, so the burden is lower. The description adds the return shape (1-5 aggregate plus a rating count), which is useful behavioral context, but says nothing about unrated agents, missing DIDs, or error behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose and return statement are front-loaded and efficient. The subsequent Args section duplicates the schema text with no added value, which is minor waste but not harmful.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description needn't expand further on return values, and the single required parameter is fully documented. What's missing is sibling disambiguation and any note on behavior for unrated or unknown DIDs, which matters given how many adjacent scoring tools exist.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% for the single `did` parameter, so the baseline is 3. The description's Args block reproduces the schema's example string verbatim rather than adding format rules, validation constraints, or DID resolution notes.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — retrieve an AI agent's reputation score — which is clear on its own. However, it does not distinguish itself from plausible siblings such as mt_get_trust_score, moltguard_score, or moltrust_stats, leaving overlap ambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to call this versus the many sibling score/trust tools. There are no exclusions, prerequisites, or conditions given, so the agent must infer selection from names alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltrust_statsB
Read-only
Inspect

Get MolTrust network statistics.

Returns total registered agents, credentials issued, ratings given, and other network health metrics.

NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the safety profile is covered. The description adds useful detail by naming the metrics returned, but 'other network health metrics' is vague and the output schema already defines the actual return shape.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences with the core purpose front-loaded and no filler. The only mild weakness is the trailing catch-all phrase 'and other network health metrics'.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter, read-only stats tool with an output schema, the description supplies enough context to call it correctly. Return-value details are appropriately left to the output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes no parameters, so there is nothing to clarify and the baseline of 4 applies. The schema coverage is 100%, and no additional parameter semantics are needed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb and resource ('Get MolTrust network statistics') and enumerates the metrics returned (registered agents, credentials issued, ratings given). It is unambiguous on its own, though it does not explicitly differentiate itself from similarly named siblings such as mt_get_swarm_stats.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to call this tool versus alternatives, no preconditions, and no exclusions. The name implies it is a read-only dashboard call, but the description leaves usage context to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

moltrust_verifyA
Read-only
Inspect

Verify an AI agent by its DID.

Checks whether the DID is registered and returns verification status
along with the agent's trust card (reputation, credentials, blockchain anchor).

Args:
    did: Decentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")
NameRequiredDescriptionDefault
didYesDecentralised identifier (e.g. "did:moltrust:a1b2c3d4e5f60718")

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the safety profile is covered. The description adds value by disclosing the payload shape (registration status plus reputation, credentials, blockchain anchor), but leaves open what happens for an unregistered DID — error versus a negative status — and says nothing about cost, rate limits, or whether calls are metered against credits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two front-loaded sentences state the action and the result before any detail. The trailing Args block is largely redundant with a 100%-covered schema, a small amount of waste but not enough to undermine the structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the return-value description need not be exhaustive, and one required parameter with full schema coverage keeps the surface simple. The remaining gap is behavioral: no statement of the unregistered/nonexistent-DID outcome, which matters for an agent branching on the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single parameter is fully documented in the schema; the description's Args block restates that text verbatim rather than adding format constraints, alternate DID namespaces, or expected failure modes. Baseline 3 applies when the schema already carries the parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb (verify) plus resource (an AI agent identified by DID), with a concrete statement of what is checked and returned. It does not distinguish itself from the many sibling verify tools (molcheck_verify, moltproof_verify, mt_*_verify), so an agent cannot tell from the text alone which verification surface this belongs to.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by the verb — an agent would call this to check whether a DID is registered — but there is no explicit when-to-use, no prerequisites (e.g. does the agent need to be registered first?), and no routing away from the similarly named verification siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_check_badgeA
Read-only
Inspect

Quick check: is this agent badge-verified by MolTrust?

Returns a simple yes/no with tier and expiry info.

Args:
    did: The DID of the agent to check
NameRequiredDescriptionDefault
didYesThe DID of the agent to check, e.g. did:moltrust:a1b2c3d4e5f60718

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already establishes this is a safe read, so the bar is lower. The description adds useful context about the response shape ('yes/no with tier and expiry'), but says nothing about what happens on an unknown DID, whether expiry is evaluated against now, or any auth/rate constraints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose is front-loaded in the first sentence and the return expectation follows immediately. The trailing Args block duplicates the schema and could be dropped, but overall the description is short and earns most of its space.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so the description needn't detail return structure, and the single required parameter is fully documented. For a one-parameter read tool this is close to complete; only the sibling-routing guidance against mt_get_badge is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single 'did' parameter already carries a concrete format example (did:moltrust:a1b2c3d4e5f60718). The 'Args: did: The DID of the agent to check' block merely restates the schema, adding no new semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('is this agent badge-verified by MolTrust?') and names what is returned ('simple yes/no with tier and expiry info'). It is clear on its own, but it never distinguishes itself from the obvious sibling mt_get_badge, which presumably returns a fuller badge record.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Quick check' implies a lightweight lookup, but the description never says when to prefer this over mt_get_badge or mt_get_trust_score. Usage is only implied by the word 'quick', leaving the agent to guess at the alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_create_interaction_proofAInspect

Create an interaction proof before issuing a SkillEndorsementCredential.

Returns evidence_hash and base_tx_hash anchored on Base L2.
Required before calling mt_endorse_agent. Valid for 72 hours.

Args:
    api_key: MolTrust API key of the agent creating the proof
    agent_a: DID of the first agent in the interaction
    agent_b: DID of the second agent in the interaction
    interaction_type: Type of interaction (e.g. skill_verification, purchase, prediction)
    outcome: Outcome of the interaction: success or failure
NameRequiredDescriptionDefault
agent_aYesDID of the first agent in the interaction
agent_bYesDID of the second agent in the interaction
api_keyYesMolTrust API key of the agent creating the proof
outcomeNoOutcome of the interaction: success or failuresuccess
interaction_typeNoType of interaction (e.g. skill_verification, purchase, prediction)skill_verification

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only tell the agent this is a non-read-only, non-destructive, non-idempotent call; the description adds that the result is anchored on Base L2 with evidence_hash and base_tx_hash, and that the artifact expires in 72 hours. That on-chain anchoring and TTL context is real value beyond the annotations. It does not mention cost/gas implications or what happens if a duplicate proof is requested (relevant given idempotentHint=false).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The first three lines are front-loaded and dense: purpose, outputs, prerequisite, expiry. The trailing Args block duplicates a schema that is already 100% documented, which is wasted surface area, but the rest of the description is tight.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool that issues a short-lived on-chain-anchored proof, the description covers the trigger condition, the dependency on mt_endorse_agent, the return hashes, and expiry, and an output schema exists so result shape need not be spelled out. Minor gaps are the absence of cost, error/retry behavior, and whether the proof is bound to one specific agent pair.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the Args block in the description repeats the schema text almost verbatim, so no new meaning is added for any of the five parameters. The one useful implication — that outcome and interaction_type are constrained to a small value set — is conveyed only as examples, and no enum is enforced in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ("Create an interaction proof") and immediately ties it to a downstream consumer, SkillEndorsementCredential, which separates it from the many mt_* verify/issue siblings. It does not differentiate itself from adjacent proof/evidence tools (moltproof_evidence, molcheck_evidence), but the operation itself is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

"Required before calling mt_endorse_agent" gives an explicit ordering constraint and names the alternative that depends on it. "Valid for 72 hours" tells the agent the proof is short-lived and shouldn't be cached indefinitely. It stops short of saying when not to use it or how to refresh an expired proof.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_endorse_agentA
Idempotent
Inspect

Issue a W3C SkillEndorsementCredential for another agent.

Requires a valid evidence_hash from mt_create_interaction_proof
(max 72h old). Self-endorsement is rejected.
Contributes to the endorsed agent's Trust Score.

Args:
    endorser_api_key: MolTrust API key of the endorsing agent
    endorsed_did: DID of the agent to endorse
    skill: Skill being endorsed (python, javascript, security, prediction, trading, data_analysis, api_integration, smart_contracts, nlp, computer_vision, general)
    evidence_hash: SHA-256 hash from mt_create_interaction_proof (sha256:...)
    evidence_timestamp: ISO 8601 timestamp from mt_create_interaction_proof
    vertical: MolTrust vertical (skill, shopping, travel, prediction, salesguard, sports, core)
NameRequiredDescriptionDefault
skillYesSkill being endorsed (python, javascript, security, prediction, trading, data_analysis, api_integration, smart_contracts, nlp, computer_vision, general)
verticalYesMolTrust vertical (skill, shopping, travel, prediction, salesguard, sports, core)
endorsed_didYesDID of the agent to endorse, e.g. did:moltrust:a1b2c3d4e5f60718
evidence_hashYesSHA-256 hash from mt_create_interaction_proof (sha256:...)
endorser_api_keyYesMolTrust API key of the endorsing agent
evidence_timestampYesISO 8601 timestamp from mt_create_interaction_proof

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly=false, idempotent=true, destructive=false, and the description adds valuable behavioral context: the evidence-hash freshness constraint, self-endorsement rejection, and the downstream effect on the endorsed agent's Trust Score. It doesn't explain idempotent behavior directly, so 4.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core purpose and prerequisites are front-loaded in three tight sentences. The Args block duplicates schema text and adds length without much new information, slightly diluting conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

A mutation/issuance tool with an output schema present, so return values needn't be described. Prerequisites and consequences are covered; the main small gap is not distinguishing from sibling issuance tools, but the definition is complete enough to call correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description's Args section largely restates the schema field descriptions, adding only the renamed 'endorser_api_key' phrasing and cross-referencing mt_create_interaction_proof for two fields, but not meaningfully extending semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Issue') and resource ('W3C SkillEndorsementCredential for another agent'), which clearly distinguishes it from verify/score siblings. It does not explicitly differentiate from other issuance tools like mt_skill_issue_vc, so a 4 rather than 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides concrete prerequisites: a valid evidence_hash from mt_create_interaction_proof no older than 72h, and that self-endorsement is rejected. It lacks explicit guidance on when to choose this over sibling issuance tools, keeping it below 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_fantasy_commitB
DestructiveIdempotent
Inspect

Commit a fantasy lineup with a SHA-256 hash anchored on Base L2.

Creates a FantasyLineupCredential (W3C VC) proving the lineup was
locked before contest start. The commitment hash is tamper-proof.

Args:
    agent_did: Agent DID (e.g. "did:moltrust:a1b2c3d4e5f67890")
    contest_id: Unique contest identifier (e.g. "dk-nfl-sun-main-2026w12")
    platform: Platform name: draftkings, fanduel, yahoo, sleeper, custom
    sport: Sport type: nfl, nba, mlb, nhl, pga, nascar, soccer, custom
    contest_start_iso: Contest start time in ISO 8601 (must be in the future)
    lineup_json: JSON string of lineup object (e.g. '{"QB":"Mahomes","RB1":"Henry"}')
    projected_score: Agent's projected score for this lineup
    confidence: Confidence level 0.0 to 1.0
    entry_fee_usd: Contest entry fee in USD
    contest_type: Contest type (e.g. "classic", "showdown")
NameRequiredDescriptionDefault
sportYesSport type: nfl, nba, mlb, nhl, pga, nascar, soccer, custom
platformYesPlatform name: draftkings, fanduel, yahoo, sleeper, custom
agent_didYesAgent DID (e.g. "did:moltrust:a1b2c3d4e5f67890")
confidenceNoConfidence level 0.0 to 1.0
contest_idYesUnique contest identifier (e.g. "dk-nfl-sun-main-2026w12")
lineup_jsonYesJSON string of lineup object (e.g. '{"QB":"Mahomes","RB1":"Henry"}')
contest_typeNoContest type (e.g. "classic", "showdown")classic
entry_fee_usdNoContest entry fee in USD
projected_scoreNoAgent's projected score for this lineup
contest_start_isoYesContest start time in ISO 8601 (must be in the future)

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly=false, idempotent=true, destructive=true. The description adds useful context beyond them: the output is a W3C VC whose hash is anchored on Base L2, and the lineup is 'locked', implying irreversibility. However, it never explains why the operation is destructive, what cannot be undone after commit, whether the agent DID must be registered first, or what happens if a contest is already started beyond 'must be in the future'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The first paragraph is well front-loaded and earns its place, but the Args block is a verbatim restatement of the input schema's property descriptions and provides no new information to an agent that already receives the schema. Roughly half the text is redundant for a schema-aware caller.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has 10 parameters and an output schema, and the description covers purpose, mechanism, and inputs, so the core is present. It omits preconditions that matter for a destructive, money-attached operation (agent identity/registration requirements, whether failure cases like a past contest start return an error, gas/anchoring latency), leaving gaps for an agent deciding whether to invoke it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description restates the same argument documentation with examples (DID format, contest_id, ISO 8601 format, lineup_json example) and clarifies the acceptance rule 'must be in the future'. It adds examples beyond the schema but largely duplicates it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

First line gives a specific verb (commit) plus resource (fantasy lineup) and states the mechanism (SHA-256 hash anchored on Base L2). It follows with the artifact produced (a FantasyLineupCredential W3C VC) proving the lineup was locked before contest start. It does not explicitly distinguish itself from mt_fantasy_verify or mt_fantasy_history, but the write-vs-read distinction is inferable from 'commit' and 'locked'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use / when-not-to-use guidance and no mention of the sibling tools (mt_fantasy_verify, mt_fantasy_history, mt_prediction_*) that an agent might pick instead. The only usage constraint given is that contest_start_iso must be in the future, which is a precondition rather than routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_fantasy_historyC
Destructive
Inspect

Get fantasy lineup history and stats for an agent.

Returns ITM rate, ROI, projection accuracy, and recent lineups
for the specified agent DID.

Args:
    did: Agent DID (e.g. "did:moltrust:a1b2c3d4e5f67890")
NameRequiredDescriptionDefault
didYesAgent DID (e.g. "did:moltrust:a1b2c3d4e5f67890")

Output Schema

NameRequiredDescription
resultYes

TDQS

C2.7/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description frames this as a retrieval ('Get ... history and stats') while annotations declare readOnlyHint=false and destructiveHint=true. That is a direct contradiction of the safety profile an agent relies on; no side effects, permissions, or destructive behavior are explained.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose and return contents in two short sentences. The trailing Args block restates the schema but is small and not disruptive.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists so return values need no explanation, but for a tool annotated destructive, the description gives zero context about what could be destroyed or what authorization is needed. The contradiction leaves the agent materially misinformed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single 'did' parameter is fully documented with an example. The description merely repeats the same DID example from the schema, adding no extra semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: fetching fantasy lineup history and stats for an agent DID, including the metrics returned (ITM rate, ROI, projection accuracy). It is clearly distinguishable from mutation siblings like mt_fantasy_commit and mt_fantasy_verify, though it never names them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this versus mt_fantasy_verify, mt_fantasy_commit, or other stats tools, and no prerequisites or exclusions. Usage is only implied by the word 'history'.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_fantasy_verifyA
Read-only
Inspect

Verify a fantasy lineup commitment. Public endpoint, no auth required.

Returns the full lineup, timing proof (minutes before contest),
on-chain verification status, and the FantasyLineupCredential.

Args:
    commitment_hash: The 64-char SHA-256 commitment hash
NameRequiredDescriptionDefault
commitment_hashYesThe 64-char SHA-256 commitment hash

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true is consistent with a verification tool, and the description adds value beyond the annotation by disclosing that no auth is needed and what the response contains (lineup, timing proof, on-chain status, credential). It does not discuss failure modes, e.g. what happens for an unknown or unconfirmed hash.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose, then auth, then return payload; the only waste is the Args block, which duplicates the input schema for a single parameter. Overall tight and scannable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema, readOnlyHint, and full schema coverage, the remaining burden is small: auth requirement, payload summary, and param format are all covered. Only error/edge-case behavior is unaddressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description's Args line repeats the schema text verbatim ('The 64-char SHA-256 commitment hash') and adds no format, encoding, or sourcing guidance beyond what the schema already states.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Verify a fantasy lineup commitment'), which is clearly separable from the write-side sibling mt_fantasy_commit and from mt_fantasy_history. It never names those siblings explicitly, so the differentiation is inferred from the verb rather than stated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Public endpoint, no auth required' gives useful call context, but there is no explicit statement of when to use this versus mt_fantasy_commit or mt_fantasy_history. The usage (verify a commitment that was previously committed) is only implied.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_get_badgeB
Read-only
Inspect

Get the Verified by MolTrust badge status for an agent.

Returns badge tier, trust score, grade, issue/expiry dates,
and embeddable SVG URL.

Args:
    did: The DID of the agent to check
NameRequiredDescriptionDefault
didYesThe DID of the agent to check, e.g. did:moltrust:a1b2c3d4e5f60718

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already establishes the safe read-only profile. The description adds the returned fields, but those are also covered by the output schema, and it does not add auth requirements, rate limits, or side-effect context beyond what the annotations provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded, with the core action and return values stated first. The Args section is redundant with the schema, but the overall text remains efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a simple read-only lookup with full schema coverage, an output schema, and readOnlyHint annotations. The description is complete enough to call the tool correctly, though it could better route the agent away from sibling tools.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the schema already documents the single did parameter with an example. The description only restates that it is the DID of the agent to check, adding no meaningful semantics beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Get the Verified by MolTrust badge status for an agent.' It clearly explains what is returned, but does not differentiate itself from closely related siblings such as mt_check_badge or mt_get_trust_score.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies that this tool checks an agent's badge, but it gives no explicit when-to-use guidance, no exclusions, and no comparison with alternatives like mt_check_badge or mt_get_trust_score.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_get_swarm_graphA
Read-only
Inspect

Get the trust propagation graph for an agent (2 hops).

Returns nodes (agents with scores) and edges (endorsements) showing
who endorses this agent and who endorses them.

Args:
    did: DID of the agent to get graph for
NameRequiredDescriptionDefault
didYesDID of the agent to get graph for, e.g. did:moltrust:a1b2c3d4e5f60718

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the safety profile is covered. The description adds genuinely non-obvious context beyond that: the traversal is fixed at 2 hops and the response splits into scored nodes and endorsement edges, which affects how results should be interpreted. It doesn't mention cost, rate limits, or behavior when the agent has no endorsements, keeping it out of the top band.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core sentence is front-loaded and the hop limit is stated immediately, which is the right priority. The trailing Args section duplicates the schema verbatim and is the one piece that doesn't earn its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists and annotations cover read-only semantics, so the description only needs to frame the operation. It does that by disclosing the 2-hop depth and the node/edge shape, leaving little an agent needs to guess before calling it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is a single parameter with 100% schema description coverage, including a concrete example DID, so the schema already carries parameter meaning. The description's Args block only restates the schema's own text, adding nothing new.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ("Get the trust propagation graph for an agent") plus its scope limit (2 hops), and describes what the result contains (nodes with scores, endorsement edges). This is enough to tell it apart from single-value siblings like mt_get_trust_score or aggregate siblings like mt_get_swarm_stats, though no sibling is named explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied by the description of the output: an agent can infer it should call this when it needs endorsement relationships rather than a score. There is no explicit when-to-use statement and no mention of alternatives such as mt_get_trust_score for a plain score lookup.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_get_swarm_statsA
Read-only
Inspect

Get global Swarm Intelligence statistics.

Returns total agents, endorsements, seed agents, average trust score, propagation depth, and top trusted agents.

NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already establishes that this is a safe read operation, and the tool has no parameters. The description adds the scope ('global') and lists the metrics, but it does not disclose freshness, caching, computation window, or any rate/authorization context beyond what annotations and the output schema already provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two concise sentences, front-loads the purpose, and uses the second sentence only to enumerate the returned statistics. There is no filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a parameterless, read-only statistics tool with an output schema, the description is nearly complete: it states the purpose and names the metrics returned. The remaining gap is the lack of routing guidance among the many sibling stats and graph tools.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is no parameter behavior for the description to document. The baseline for a parameterless tool is 4, and no contradiction or missing parameter information is present.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource ('Get global Swarm Intelligence statistics') and enumerates the metrics returned, so the agent knows exactly what the tool provides. It does not distinguish itself from sibling tools such as mt_get_swarm_graph or mt_get_trust_score, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance on when to use this tool versus alternatives. The word 'global' implies aggregate statistics rather than per-agent or graph views, but no sibling tool is named and no inclusion or exclusion conditions are given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_get_track_provenanceB
Read-only
Inspect

Get full provenance details for a music credential.

Returns the complete VerifiedMusicCredential including track
metadata, provenance hash, EU AI Act compliance status,
and on-chain anchor information.

Args:
    credential_id: UUID of the music credential
NameRequiredDescriptionDefault
credential_idYesUUID of the music credential

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already establishes this is a safe read, so the description only needs to add context. It does add useful content by naming what comes back (track metadata, provenance hash, EU AI Act compliance status, on-chain anchor info), but says nothing about error behavior when a credential_id does not exist or whether results are cached/live.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The first sentence is front-loaded and states the purpose immediately, and the return-value list adds value. The trailing Args block duplicates the schema verbatim and is the one mildly wasteful element.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With one required parameter, full schema coverage, an output schema, and a readOnlyHint, the definition covers what an agent needs to invoke it. The only real gap is sibling differentiation, which the description leaves out.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single parameter is documented as 'UUID of the music credential' in the schema. The description's Args block restates that identically without adding format constraints or fallback behavior, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb and resource ('Get full provenance details for a music credential') and enumerates the returned content, so the purpose is unambiguous. However, it never distinguishes itself from close siblings such as mt_verify_music_credential or mt_issue_music_credential, which an agent must otherwise infer.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to use this tool versus mt_verify_music_credential or mt_get_badge, nor any prerequisites or exclusions. The retrieval intent is only implied by 'Get full provenance details'.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_get_trust_scoreA
Read-only
Inspect

Get the Swarm Intelligence Trust Score for an agent (Phase 2).

Score combines direct endorsements, propagated trust from endorsers,
cross-vertical credential bonus, and interaction proof activity.
Returns null/withheld if fewer than 3 independent endorsers (non-seed).
Seed agents get their base score directly.

Args:
    did: DID of the agent to score (e.g. "did:moltrust:a1b2c3d4e5f67890")
NameRequiredDescriptionDefault
didYesDID of the agent to score (e.g. "did:moltrust:a1b2c3d4e5f67890")

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnlyHint=true, so the description carries the behavioral burden and does so well: it discloses the score's inputs (endorsements, propagated trust, credential bonus, interaction proof) and, critically, the withheld/null outcome below 3 independent non-seed endorsers, plus the seed-agent exception. It stops short of stating freshness, caching, or whether repeated calls are stable, which is why it is not a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core paragraph is front-loaded and each sentence earns its place, describing composition then edge-case behavior. The trailing 'Args: did: ...' block is redundant with the input schema and could be dropped, which keeps it from a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description needn't explain return shapes, and it covers the one genuinely surprising outcome (withheld score) plus the seed-agent carve-out. For a single-parameter read tool this is nearly complete; only freshness/versioning of the score is unaddressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single parameter is fully documented. The description's Args block restates the schema text verbatim (including the example DID), adding no semantics beyond what the structured field already provides, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource: it returns the Swarm Intelligence Trust Score for a given agent, and the 'Phase 2' label plus the named score inputs give it a concrete identity. It does not explicitly distinguish itself from nearby siblings like moltrust_reputation or moltguard_score, so an agent must infer which score to call.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied rather than stated: score an agent's trust when you have a DID. The threshold behavior ('fewer than 3 independent endorsers' → withheld) quietly signals when the tool is useful versus premature, but there is no explicit when-to-use/when-not or named alternative among the many sibling scoring tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_issue_badgeA
Destructive
Inspect

Issue a Verified by MolTrust badge for an agent.

Tiers: 'verified' (score 40+, $5), 'trusted' (score 60+, $20).
Badge is valid for 1 year and auto-revokes if trust score drops.

Args:
    did: The DID of the agent to issue a badge for
    tier: Badge tier — 'verified' or 'trusted'
NameRequiredDescriptionDefault
didYesThe DID of the agent to issue a badge for, e.g. did:moltrust:a1b2c3d4e5f60718
tierNoBadge tier — 'verified' or 'trusted'verified

Output Schema

NameRequiredDescription
resultYes

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already flag a mutating, non-idempotent, destructive operation; the description adds real value beyond them by disclosing cost ($5/$20), a 1-year validity window, and automatic revocation on trust-score decline. What's missing is what happens on re-issue (does it charge again / replace the badge), which matters given idempotentHint=false.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Tier economics and validity are front-loaded and compact; every sentence conveys useful information. The trailing Args block duplicates the input schema and could be dropped, but it costs little.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description needn't explain return values, and it covers the decision-relevant facts: price, thresholds, duration, and revocation behavior. Missing only edge-case behavior around re-issuance and prerequisites on the DID itself.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the Args block merely repeats the schema's own wording for 'did' and 'tier' verbatim, adding no syntax, format, or enum constraints beyond what the schema states. Baseline 3 applies since the schema carries the parameter burden.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Issue a Verified by MolTrust badge for an agent'), which cleanly separates it from the sibling read tools mt_check_badge and mt_get_badge. The tier names also identify the concrete artifact being created.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives eligibility thresholds (score 40+ for 'verified', 60+ for 'trusted') and pricing, which tells the agent when issuance is possible. It stops short of naming alternatives (e.g. use mt_check_badge before issuing) or stating exclusions such as whether a badge already exists.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_issue_music_credentialA
Destructive
Inspect

Issue a VerifiedMusicCredential for an AI-generated music track.

Creates a W3C Verifiable Credential proving the provenance of an
AI-generated music track — which tool created it, whether a human
was involved, and what rights apply. Anchored on Base L2.
EU AI Act Article 50(2) compliant.

Args:
    agent_did: DID of the agent/creator (e.g. "did:moltrust:abc123")
    tool: AI tool used (e.g. "Suno API v3.2", "Udio", "Magenta")
    human_oversight: "true", "false", or "partial"
    rights: Rights declaration (e.g. "CC-BY", "All Rights Reserved", "Agent-Wallet")
    track_title: Title of the track
    track_description: Optional description
    genre: Optional genre (e.g. "ambient", "jazz", "classical")
    isrc: Optional ISRC code (ISO 3901)
NameRequiredDescriptionDefault
isrcNoOptional ISRC code (ISO 3901)
toolYesAI tool used (e.g. "Suno API v3.2", "Udio", "Magenta")
genreNoOptional genre (e.g. "ambient", "jazz", "classical")
rightsYesRights declaration (e.g. "CC-BY", "All Rights Reserved", "Agent-Wallet")
agent_didYesDID of the agent/creator (e.g. "did:moltrust:abc123")
track_titleYesTitle of the track
human_oversightYes"true", "false", or "partial"
track_descriptionNoOptional description

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=false and destructiveHint=true, and the description usefully adds that the credential is anchored on Base L2 — an on-chain, likely irreversible write. However it never explains cost/gas, whether re-issuing the same track creates a duplicate credential (annotation says non-idempotent), or why issuance is flagged destructive. Those are the behaviors an agent most needs before invoking a write tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and compliance framing are front-loaded in the first two sentences, then parameters follow in a scannable list. The Args section is redundant with a fully documented schema, which is the only real waste, but the description is appropriately sized for an 8-parameter issuing tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description needn't explain return values, and it covers the substantive gaps: what the credential attests, the anchoring chain, and the regulatory basis. Missing pieces are operational (cost, duplicate handling on re-issue), which keeps it just short of complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so every parameter is already documented, and the Args block largely restates the schema text verbatim. The one meaningful addition is the DID format example, but the enum-like values for human_oversight are already in the schema. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ("Issue a VerifiedMusicCredential for an AI-generated music track") and immediately clarifies what the credential proves: provenance, originating tool, human involvement, and rights. This clearly distinguishes it from mt_verify_music_credential and mt_get_track_provenance, which read rather than issue.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description establishes context (provenance attestation, EU AI Act Article 50(2), Base L2 anchoring) that implies when to use it, but never names an alternative or a when-not-to-use condition. An agent must infer from the sibling names that verification/provenance lookup happens elsewhere.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_prediction_leaderboardB
Read-only
Inspect

Get the prediction market leaderboard — top wallets by prediction score.

Returns wallets ranked by their composite prediction score,
which factors in win rate, ROI, volume, sample size, and recency.

Args:
    limit: Number of entries to return (default 20, max 100)
NameRequiredDescriptionDefault
limitNoNumber of entries to return (default 20, max 100)

Output Schema

NameRequiredDescription
resultYes

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true already tells the agent this is a safe read. The description adds genuine value by disclosing the score composition (win rate, ROI, volume, sample size, recency) and that results are ranked, but it says nothing about pagination, snapshot timing, or how ties or minimum-activity thresholds are handled.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose and ranking explanation are front-loaded and tight. The trailing "Args:" block duplicates the schema field description, which is mild waste but not damaging.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and annotations covering the safety profile, the description needn't explain return values. It covers purpose, ranking basis, and the limit bound, leaving only minor gaps around result freshness and pagination.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single limit parameter is fully documented in the schema, including the default 20 and max 100. The description merely echoes that text verbatim, adding no new semantics, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ("Get the prediction market leaderboard — top wallets by prediction score") and clarifies the ranking basis. It is unambiguous on its own, though it does not explicitly distinguish itself from nearby siblings like mt_prediction_wallet or mt_prediction_link.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to use this versus alternatives, no preconditions, and no exclusions. The reader must infer that mt_prediction_wallet serves per-wallet lookups rather than leaderboard browsing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_prediction_walletA
Read-only
Inspect

Get prediction market profile and track record for a wallet.

Returns the prediction score (0-100), win/loss record, volume, ROI,
score breakdown, and recent market events.

Args:
    address: Prediction market wallet address (0x-prefixed, 42 chars)
NameRequiredDescriptionDefault
addressYesPrediction market wallet address (0x-prefixed, 42 chars)

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true already establishes this is a safe read, so the description only needs to add context. It does add the content of the result (score, win/loss, volume, ROI, breakdown, recent events), but repeats what the output schema likely already declares and says nothing about freshness, caching, or behavior for unknown wallets.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded summary sentence followed by a return-value list and one arg line; no filler. The Args block is redundant with the schema, which keeps it from a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With one documented parameter, readOnly annotations, and an output schema covering the return shape, the description is sufficient to invoke it correctly. Only the routing against mt_prediction_leaderboard is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is one parameter with 100% schema description coverage, and the description restates that same address text verbatim. Nothing extra is added, but the schema already carries the meaning, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Get prediction market profile and track record for a wallet.' An agent can tell this is a per-wallet lookup. It does not distinguish itself from the closest sibling, mt_prediction_leaderboard, which likely also returns prediction-market data.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied by the parameter: pass an address to get that wallet's profile. There is no explicit when-to-use, no exclusion, and no pointer to mt_prediction_leaderboard or mt_prediction_link for the other prediction-market queries.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_register_seedA
Idempotent
Inspect

Register a trusted seed agent in the Swarm Intelligence network (admin only).

Seed agents bootstrap the trust network with a base score.
Requires the ADMIN_KEY for authorization.

Args:
    did: DID of the agent to register as seed
    label: Human-readable label for the seed agent
    base_score: Base trust score (0-100, default 80)
    admin_key: Admin key for authorization
NameRequiredDescriptionDefault
didYesDID of the agent to register as seed, e.g. did:moltrust:a1b2c3d4e5f60718
labelYesHuman-readable label for the seed agent
admin_keyNoAdmin key for authorization
base_scoreNoBase trust score (0-100, default 80)

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare the mutation profile (readOnlyHint=false, destructiveHint=false, idempotentHint=true). The description adds meaningful context beyond that: seed agents bootstrap the network with a base score, and the call requires an admin key — an authorization requirement the annotations do not express. It stops short of describing the effect of a very high base_score or idempotent re-registration behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and authorization requirement are front-loaded in two short sentences, which is the right ordering. The trailing Args block duplicates the schema verbatim and is the only dead weight.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and full annotation coverage, the description supplies the one thing structured fields don't: that this is a privileged bootstrap operation requiring ADMIN_KEY. An agent has enough to call it correctly, though guidance on seed-vs-endorsement selection and re-registration semantics is absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the description's Args block restates the schema text almost verbatim (including the DID example and the base_score range/default). It adds no syntax, constraints, or semantics beyond what the structured fields already carry, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Register a trusted seed agent in the Swarm Intelligence network') and names the domain clearly. It is distinguishable from read-only siblings like mt_get_trust_score or mt_get_swarm_graph, though it doesn't explicitly contrast with other write-path siblings such as mt_endorse_agent or moltrust_register.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The '(admin only)' marker and 'Requires the ADMIN_KEY' line imply the calling context, but the description never says when to register a seed versus using endorsement or registration alternatives, nor what happens on re-registration of an existing DID. Usage is implied rather than directed.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_salesguard_registerAInspect

Register a brand with MT Salesguard.

Creates a new brand identity with a DID and API key.
The API key is used to authenticate product registration
and reseller authorization requests.

Args:
    name: Brand name (e.g. "Nike", "Adidas")
    domain: Brand domain (e.g. "nike.com")
    contact_email: Contact email for the brand (optional)
NameRequiredDescriptionDefault
nameYesBrand name (e.g. "Nike", "Adidas")
domainYesBrand domain (e.g. "nike.com")
contact_emailNoContact email for the brand (optional)

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnly=false, destructive=false, and idempotent=false, so the description usefully adds that the call mints a DID and an API key and that the API key authorizes later reseller and product flows. That goes beyond the annotations. It stops short of stating whether the API key is returned once and unrecoverable, or what happens on a duplicate registration.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in the first two sentences, and the credential purpose is explained before the Args block. The Args block duplicates the schema word for word, so it is mildly redundant but does not obscure the key information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, and the description covers the main side effect: a created identity plus an API key. The remaining gaps are duplicate-registration behavior and whether the API key is shown only once, which matter for a non-idempotent creation tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all three parameters, including the examples for name and domain. The Args block in the description restates the schema verbatim and adds no format, validation, or domain-ownership semantics. That makes it baseline-3 under the high-coverage rule.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: "Register a brand with MT Salesguard" and "Creates a new brand identity with a DID and API key." That is clearly distinguishable from sibling read/verify tools like mt_salesguard_verify, but the description never names those siblings or explains the relationship between register, reseller, and verify.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied: you call this first to obtain the credential needed for "product registration and reseller authorization requests," which hints that mt_salesguard_reseller/verify come after. However, there is no explicit when-to-use/when-not-to-use statement and no mention of what happens if the brand or domain is already registered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_salesguard_resellerA
Read-only
Inspect

Verify reseller authorization via MT Salesguard.

Checks whether a reseller DID has been authorized by a brand
to sell specific products. Returns authorization status, brand info,
authorized SKUs, and expiry.

Args:
    reseller_did: Reseller DID (e.g. "did:web:sneakerstore.com")
NameRequiredDescriptionDefault
reseller_didYesReseller DID (e.g. "did:web:sneakerstore.com")

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint=true annotation is consistent with the query-style description, so the description need not restate safety. It adds the shape of the result ('authorization status, brand info, authorized SKUs, and expiry'), but says nothing about what happens when a DID is unknown or unauthorized, nor about errors or rate limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and return contents are front-loaded in two tight sentences. The trailing Args block duplicates the schema's parameter description and is the only wasted text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

A read-only, single-parameter lookup with an output schema, so most structural burden is covered elsewhere; the description still conveys what is verified and what is returned. Missing only edge-case behavior for unknown or unauthorized DIDs.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Only one parameter, with 100% schema coverage including the same DID example, so the baseline is 3. The description's Args block repeats the schema text verbatim and adds no extra constraints on DID format or validation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource – verifying reseller authorization for a brand's products – and enumerates what comes back (status, brand info, SKUs, expiry). The 'reseller' scope implicitly separates it from the generic mt_salesguard_verify sibling, though no sibling is named.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The purpose sentence implies when to call it (checking whether a reseller DID may sell specific products), but there is no explicit when-to-use/when-not guidance and no comparison to mt_salesguard_verify or mt_salesguard_register.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_salesguard_verifyA
Read-only
Inspect

Verify product provenance via MT Salesguard.

Checks whether a product ID has a valid ProductProvenanceCredential
issued by an authorized brand. Returns brand info, credential hash,
Base anchor, and risk level.

Args:
    product_id: Product identifier (e.g. "AIRMAX-90-WHITE-43")
NameRequiredDescriptionDefault
product_idYesProduct identifier (e.g. "AIRMAX-90-WHITE-43")

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true already establishes that this is a safe read, and the description goes beyond that by explaining what the check actually means (credential issued by an authorized brand) and what comes back: brand info, credential hash, Base anchor, and risk level. It does not mention failure modes or what a negative result looks like, but the semantic framing of 'verify' is a genuine addition over the annotation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core purpose and what-is-returned are front-loaded in the first two sentences with no preamble. The trailing Args block is essentially redundant with the schema, which is minor waste but does not obscure the main content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read-only verification with a full output schema and readOnlyHint, the description supplies enough: what is checked, who must have issued the credential, and a hint at the returned fields. Only the interaction with mt_salesguard_register (issuance prerequisite) is left unstated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the description's Args block is a verbatim repeat of the schema's product_id description, including the same example. No format rules, casing, or source-of-ID guidance is added. With the schema carrying the full load, baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb+resource pair: it checks whether a product ID has a valid ProductProvenanceCredential from an authorized brand. That is far more concrete than a bare 'verify', and the Salesguard/product-provenance framing distinguishes it within the crowded set of *_verify siblings, though it never names or excludes any of them explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The usage is only implied: an agent can infer you call it to validate a product's provenance credential. There is no statement of when to prefer mt_salesguard_verify over mt_shopping_verify, mt_skill_verify, mt_travel_verify, molcheck_verify, or mt_get_track_provenance, and no preconditions (must the product be registered first via mt_salesguard_register?).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_shopping_infoA
Read-only
Inspect

Get MT Shopping API information.

Returns the MT Shopping service info including version, supported endpoints, BuyerAgentCredential schema, and verification details.

NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true already tells the agent this is a safe, side-effect-free read, so the annotation does much of the work. The description adds value by listing what the response contains (version, endpoints, credential schema), but says nothing about authentication requirements, rate limits, or whether the endpoint set is environment-specific.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences with the resource stated first and the return contents second, so it is front-loaded and waste-free. The awkward line breaks and the vague trailing phrase 'verification details' cost it a point but not readability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a no-parameter read-only metadata call with an output schema present, the description covers everything an agent needs to decide to call it: what it returns and that it is informational. The only real gap is the absence of guidance on when to prefer it over the sibling verify/issue_vc tools.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so per the baseline there is nothing for the description to disambiguate. Schema coverage is 100% and the empty object schema is unambiguous.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Uses a specific verb and resource ('Get MT Shopping API information') and enumerates the returned contents: version, supported endpoints, BuyerAgentCredential schema, verification details. It does not explicitly distinguish itself from siblings like mt_shopping_verify or mt_shopping_issue_vc, though 'info' vs 'verify'/'issue_vc' carries some natural differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied rather than stated: an agent can infer this is a discovery/metadata call to make before invoking mt_shopping_verify or mt_shopping_issue_vc. There is no explicit 'use this when...' statement, no mention of prerequisites, and no named alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_shopping_issue_vcA
Destructive
Inspect

Issue a BuyerAgentCredential (W3C Verifiable Credential) for a shopping agent.

Creates a cryptographically signed credential that authorizes an AI agent
to make purchases on behalf of a human, with enforced spend limits.

Args:
    agent_did: DID of the shopping agent (e.g. "did:moltrust:agent123")
    human_did: DID of the authorizing human (e.g. "did:moltrust:human456")
    spend_limit: Maximum spend amount per transaction
    currency: Currency code (e.g. "USDC", "USD")
    categories: Comma-separated allowed categories (e.g. "electronics,books")
    validity_days: Number of days the credential is valid (default 30)
NameRequiredDescriptionDefault
currencyYesCurrency code (e.g. "USDC", "USD")
agent_didYesDID of the shopping agent (e.g. "did:moltrust:agent123")
human_didYesDID of the authorizing human (e.g. "did:moltrust:human456")
categoriesYesComma-separated allowed categories (e.g. "electronics,books")
spend_limitYesMaximum spend amount per transaction
validity_daysNoNumber of days the credential is valid (default 30)

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already disclose readOnlyHint=false, idempotentHint=false and destructiveHint=true, and the description adds real context: the output is a cryptographically signed credential with spend limits enforced and a validity window. However, it never explains the destructive/non-idempotent behavior — e.g. whether re-issuing supersedes or duplicates a prior credential, or whether issued credentials can be revoked — which is the main thing an agent would want clarified for a write operation of this kind.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The summary sentence is front-loaded and the second sentence adds substance about signing and spend limits. The Args block is largely duplicated in the schema, so it is mildly redundant rather than harmful.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 6 parameters, an output schema present and full annotation coverage, the definition is close to sufficient. The remaining gaps are operational rather than structural: no statement about prerequisites, revocation, or what happens to an existing credential when a new one is issued.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The Args section restates the schema descriptions almost verbatim (same examples for DIDs, currency, categories) and adds no extra semantics such as units for spend_limit or supported currency set.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Issue a BuyerAgentCredential (W3C Verifiable Credential) for a shopping agent', then elaborates that it is a signed credential authorizing agent purchases with enforced spend limits. The shopping-agent framing implicitly separates it from the travel and skill credential siblings, so an agent can pick the right domain tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied by the verb 'issue' and the 'on behalf of a human' framing. There is no explicit when-to-use guidance, no mention of the counterpart mt_shopping_verify tool, and no note on prerequisites such as whether the human DID must already be registered before issuing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_shopping_verifyA
Read-only
Inspect

Verify a shopping transaction against a BuyerAgentCredential.

Checks the credential signature, spend limits, trust score, and
returns a verification receipt with approval status.

Args:
    credential_jws: JWS compact serialization of the BuyerAgentCredential
    transaction_amount: Transaction amount (e.g. 189.99)
    transaction_currency: Currency code (e.g. "USDC")
    merchant_id: Merchant identifier string
    item_description: Description of the item being purchased
NameRequiredDescriptionDefault
merchant_idYesMerchant identifier string
credential_jwsYesJWS compact serialization of the BuyerAgentCredential
item_descriptionYesDescription of the item being purchased
transaction_amountYesTransaction amount (e.g. 189.99)
transaction_currencyYesCurrency code (e.g. "USDC")

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true is consistent with a verification operation, so the description need not re-establish the safety profile. It goes beyond annotations by disclosing the specific checks performed (signature, spend limits, trust score) and that a verification receipt with approval status is produced, though it omits what happens on failed verification and any auth or latency requirements.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The opening sentences are well front-loaded and information-dense, but the Args section restates the five input-schema descriptions word for word, which is pure redundancy given 100% schema coverage.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need not be described, and the summary of checks is helpful. However, for a security-critical verification tool with only a readOnlyHint annotation, the definition leaves open the failure semantics (does denial return a receipt with approval status false, or raise an error?) and whether the credential must be issued by a specific sibling first.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the Args block duplicates the schema descriptions verbatim ('Merchant identifier string', 'Transaction amount (e.g. 189.99)'), adding no new semantics. The one small gain is illuminating what credential_jws should be a credential of, which the schema already states. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb+resource ('Verify a shopping transaction against a BuyerAgentCredential') and enumerates what is checked (signature, spend limits, trust score). It does not explicitly name sibling tools such as mt_shopping_issue_vc or mt_shopping_info, so differentiation relies on naming convention rather than stated contrast.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: an agent can infer this is the step after issuing a shopping credential, but the description states no prerequisites (e.g. do you need a credential from mt_shopping_issue_vc first?) and no when-not conditions or alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_skill_auditA
Idempotent
Inspect

Audit an AI agent skill (SKILL.md) for security risks.

Fetches the SKILL.md from a URL, computes its canonical SHA-256 hash,
and runs an 8-point security audit checking for prompt injection,
data exfiltration, tool scope violations, and metadata completeness.
Score starts at 100 with deductions per finding. Passing score: >= 70.

Args:
    github_url: URL to the skill (GitHub repo or direct HTTPS link to SKILL.md)
NameRequiredDescriptionDefault
github_urlYesURL to the skill (GitHub repo or direct HTTPS link to SKILL.md)

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations: it discloses the URL fetch, SHA-256 hashing, an 8-point check breakdown, a 100-point start with per-finding deductions, and a pass threshold. It stops short of covering failure handling for unreachable/invalid URLs or what the hash is used for downstream, so it is rich but not exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the purpose, then mechanics, then the scoring rule, all in a compact block; the Args section is somewhat redundant with the schema but harmless. No filler sentences beyond that redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return formatting need not be explained, and the description gives enough on mechanics and scoring to call the tool confidently. It could be stronger by linking the computed hash to sibling tools (mt_skill_issue_vc / mt_skill_verify) that presumably consume it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the description simply restates the schema's own wording for github_url ('GitHub repo or direct HTTPS link to SKILL.md'). No additional format details, redirect behavior, or auth requirements are added beyond what the schema already provides, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Audit an AI agent skill (SKILL.md)') and enumerates exactly what the audit covers (prompt injection, data exfiltration, tool scope violations, metadata completeness). An agent can distinguish this from sibling verification/issuance tools like mt_skill_verify or mt_skill_issue_vc purely from the description.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The passing-score threshold (>= 70) implies this is a gate/validation step, but the description never states when to prefer this over mt_skill_verify or what to do with a failing result. Usage is inferable rather than explicit, and no alternatives or exclusions are named.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_skill_issue_vcA
Destructive
Inspect

Issue a VerifiedSkillCredential for an AI agent skill.

Fetches SKILL.md, runs security audit, and if score >= 70, issues a
W3C Verifiable Credential signed with Ed25519 (JWS compact serialization).
Requires x402 payment ($5 USDC) when paywall is active.

Args:
    author_did: DID of the skill author (e.g. "did:base:0x...")
    repository_url: URL to the skill repository or SKILL.md
NameRequiredDescriptionDefault
author_didYesDID of the skill author (e.g. "did:base:0x...")
repository_urlYesURL to the skill repository or SKILL.md

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnly=false, destructive=true, idempotent=false; the description adds substantial context beyond that — the audit side effect, the score threshold that gates issuance, the signing format (W3C VC, Ed25519, JWS compact), and a monetary cost. It does not say what happens on a sub-70 score (error vs. silent no-op) or whether re-issuing for the same skill is safe, and the destructiveHint=true is left unexplained since nothing described is actually destroyed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core behavior, threshold, and payment requirement are front-loaded in three tight sentences. The trailing 'Args:' section is pure duplication of the input schema and is the one part that does not earn its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no explanation, and both required parameters are fully covered. What remains thin is failure-mode behavior and idempotency semantics for a non-idempotent, money-consuming issuance operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both parameters fully. The 'Args:' block repeats the schema descriptions verbatim and adds no new semantics (no format validation, no allowed URL schemes, no DID resolution caveats). Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Issue a VerifiedSkillCredential for an AI agent skill') and enumerates the internal pipeline (fetch SKILL.md, audit, sign with Ed25519). It does not name the near-siblings it must be distinguished from (mt_skill_audit for audit-only, mt_skill_verify for verification), so the agent still has to infer the boundary.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a clear triggering context: a credential is issued only if the audit score is >= 70, and payment of $5 USDC is required when the paywall is active. That is real prerequisite information, but there is no explicit exclusion or 'use X instead when...' routing to mt_skill_audit / mt_skill_verify.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_skill_verifyA
Read-only
Inspect

Verify an AI agent skill by its canonical SHA-256 hash.

Checks if a VerifiedSkillCredential has been issued for this skill hash.
Returns credential details if verified.

Args:
    skill_hash: Canonical skill hash (e.g. "sha256:a1b2c3...")
NameRequiredDescriptionDefault
skill_hashYesCanonical skill hash (e.g. "sha256:a1b2c3...")

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With readOnlyHint already declaring that this is a safe read operation, the description adds useful behavioral context: it checks credential issuance and returns credential details if verified. It does not describe the unverified case, but it otherwise gives a clear behavioral picture for a read-only verification tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded with the verification purpose. The Args block duplicates the schema's parameter description, which is slightly redundant, but the overall structure is efficient and easy to scan.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple one-parameter read-only verification tool with an output schema, the description covers the purpose, input meaning, and success behavior sufficiently. The main gap is that it does not explicitly state what happens when no credential exists, but the output schema likely covers return details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the single skill_hash parameter is already documented in the schema. The description repeats the same example and adds no extra syntax or format guidance beyond what the schema provides. This matches the baseline for full schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: verify an AI agent skill by its canonical SHA-256 hash. It also clarifies that the check is for an issued VerifiedSkillCredential. It does not explicitly distinguish this from sibling tools such as mt_skill_audit or mt_skill_issue_vc, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description makes the use case implicit: look up whether a VerifiedSkillCredential exists for a given skill hash. It does not state when to use this versus sibling verification or issuance tools, nor does it give exclusions or prerequisites. This is enough for an implied usage pattern but not explicit routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_travel_infoA
Read-only
Inspect

Get MT Travel service information and available endpoints.

Returns service description, supported segments, and API endpoints for the MT Travel booking trust protocol.

NameRequiredDescriptionDefault

No parameters

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With readOnlyHint=true already declared, the description adds useful behavioral context by disclosing the kind of information returned: service description, supported segments, and API endpoints. It does not mention authentication requirements, rate limits, or any conditions under which the information might be unavailable, but for a read-only informational tool the disclosed return content is substantive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two short sentences and front-loads the core purpose: getting MT Travel service information and available endpoints. The second sentence adds concrete return content. It is efficient, though slightly redundant by restating "MT Travel" and "service information" in both sentences.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter, read-only informational tool with an output schema, the description is mostly complete. It tells the agent what category of data comes back, and the output schema can carry the exact return shape. The main missing piece is when an agent should prefer this tool over its many siblings, but the core operation is adequately covered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so there is no parameter semantics to clarify and the baseline is 4. The schema is empty and fully covered, and the description correctly does not invent parameters or filtering options.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific verb and resource: retrieving MT Travel service information, including supported segments and API endpoints. This is a real purpose statement rather than a tautology. However, it does not differentiate this tool from nearby siblings like mt_shopping_info or the mt_travel_issue_vc/mt_travel_verify family, so an agent must infer that this is the read-only metadata/endpoint discovery tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no explicit guidance on when to call this tool versus alternatives. It does not say whether this should be used before attempting travel bookings, before issuing travel VCs, or instead of other travel-related tools. The usage context is only implied by the word "info" and the returned endpoint list.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_travel_issue_vcA
Destructive
Inspect

Issue a TravelAgentCredential (W3C Verifiable Credential) for a booking agent.

Creates a cryptographically signed credential that authorizes an AI agent
to book travel on behalf of a principal (company/human), with enforced
segment permissions and spend limits.

Args:
    agent_did: DID of the travel agent (e.g. "did:base:0x...")
    principal_did: DID of the authorizing entity (e.g. "did:base:acme-corp")
    segments: Comma-separated allowed segments (e.g. "hotel,flight,car_rental")
    spend_limit: Maximum spend amount per booking
    currency: Currency code (e.g. "USDC")
    traveler_name: Name of the authorized traveler (optional)
    validity_days: Number of days the credential is valid (default 30)
NameRequiredDescriptionDefault
currencyYesCurrency code (e.g. "USDC")
segmentsYesComma-separated allowed segments (e.g. "hotel,flight,car_rental")
agent_didYesDID of the travel agent (e.g. "did:base:0x...")
spend_limitYesMaximum spend amount per booking
principal_didYesDID of the authorizing entity (e.g. "did:base:acme-corp")
traveler_nameNoName of the authorized traveler (optional)
validity_daysNoNumber of days the credential is valid (default 30)

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already flag a non-idempotent, destructive write, and the description adds real context: the output is a cryptographically signed credential, permissions and spend limits are enforced inside it, and validity is time-bounded. It stops short of stating side effects such as whether a new credential supersedes a prior one or what authorization the caller needs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The three-sentence summary is well front-loaded and earns its place, but the seven-item Args block duplicates the schema verbatim at 100% coverage, adding length without information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema available, return shape need not be described, and annotations plus the description cover the write's safety profile and semantics. The main remaining gap is lifecycle behavior — whether issuing again invalidates prior credentials and what the caller must hold to issue.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the Args block largely restates identical text ('DID of the travel agent', 'Comma-separated allowed segments', etc.) without adding format constraints, valid segment values, or currency semantics. Baseline 3 applies when the schema already does the documentation work.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with a specific verb+resource ('Issue a TravelAgentCredential') and immediately defines what the credential is (a W3C Verifiable Credential authorizing an AI booking agent on behalf of a principal). This clearly separates it from mint/verify/info siblings such as mt_travel_verify, mt_travel_info, and mt_skill_issue_vc.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by the word 'Issue' and by the described effect (authorizes an agent with segment and spend limits), but the description never states when to call it versus mt_travel_verify, mt_travel_info, or the parallel *_issue_vc tools. No preconditions (e.g. a prior registration or funding step) are mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_travel_verifyA
Read-only
Inspect

Verify a travel booking against a TravelAgentCredential.

Runs a 10-step verification pipeline: VC signature, expiry, agent DID match,
segment authorization, spend limit, currency, daily cap, trust score,
delegation chain, and traveler binding.

Args:
    agent_did: DID of the booking agent (e.g. "did:base:0x...")
    vc_json: The TravelAgentCredential as a JSON string
    merchant: Merchant domain (e.g. "hilton.com")
    segment: Booking segment: hotel, flight, car_rental, or rail
    amount: Booking amount
    currency: Currency code (e.g. "USDC")
NameRequiredDescriptionDefault
amountYesBooking amount
segmentYesBooking segment: hotel, flight, car_rental, or rail
vc_jsonYesThe TravelAgentCredential as a JSON string
currencyYesCurrency code (e.g. "USDC")
merchantYesMerchant domain (e.g. "hilton.com")
agent_didYesDID of the booking agent (e.g. "did:base:0x...")

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint=true annotation is consistent with a verification operation. Beyond annotations, the description discloses the full ten-step pipeline (signature, expiry, DID match, segment authorization, spend limit, currency, daily cap, trust score, delegation chain, traveler binding), which is genuinely useful behavioral context an agent cannot get from structured fields. It stops short of saying whether a failed verification raises an error or returns a negative verdict.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action and the pipeline list, which is the highest-value content. The trailing Args block is redundant given 100% schema coverage and a third of the text could be cut, but overall the description is short and skimmable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Six required parameters are all documented, an output schema exists so return values needn't be explained, and the ten-check pipeline conveys the depth of what happens. The remaining gap is outcome semantics — success/failure reporting and whether any state is written despite the read-only hint.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the Args block in the description is essentially a verbatim restatement of the schema descriptions (agent_did, merchant, currency examples included). It adds no meaning beyond the schema — notably, `segment` is not actually constrained to an enum despite the four enumerated values, which the description could have clarified as an allowed-value contract.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — "Verify a travel booking against a TravelAgentCredential" — and enumerates the ten checks performed, which makes it unmistakable against siblings like mt_travel_issue_vc and mt_travel_info. An agent can pick this tool without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: an agent infers this is a pre-booking credential check, but the description never says when to call it versus mt_shopping_verify, moltguard_credential_verify, or the travel issue/info siblings. No preconditions, no statement of what a caller should do on failure, and no exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

mt_verify_music_credentialA
Read-only
Inspect

Verify a VerifiedMusicCredential by its ID.

Checks whether a music credential is valid (not revoked),
returns provenance summary including tool, human oversight,
rights, and on-chain anchor status.

Args:
    credential_id: UUID of the music credential
NameRequiredDescriptionDefault
credential_idYesUUID of the music credential

Output Schema

NameRequiredDescription
resultYes

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

readOnlyHint=true is consistent with the wording and the description goes beyond annotations by disclosing what is actually checked (revocation) and what the response summarizes (tool, human oversight, rights, on-chain anchor status). It does not cover failure semantics, such as what is returned for an unknown or non-existent credential ID, which keeps it below 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose is front-loaded in the first sentence, the second sentence efficiently explains what verification reports, and there is no filler. The trailing Args block is redundant with a 100%-documented schema and slightly bloats an otherwise tight definition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read-only verification tool with an output schema, the description supplies enough: what is being checked, what the result summarizes, and the safety profile via annotations. The remaining gap is edge-case behavior (unknown ID, malformed UUID, anchors pending), which an agent might want before calling.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is a single parameter and schema description coverage is 100%; the Args block merely restates the schema text ('UUID of the music credential') verbatim. It adds no positional or format nuance beyond the schema, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific verb ('Verify') and a specific resource ('VerifiedMusicCredential by its ID'), then states the exact semantic of the check ('valid (not revoked)'). That clearly separates it from the many sibling write tools such as mt_issue_music_credential and from the other domain verifiers (mt_skill_verify, mt_travel_verify).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a clear condition for calling it: you have a credential ID and want to know if it is still valid / revoked and what provenance it carries. It stops short of explicit exclusions or naming the alternative tool (e.g. the issuer, or a broader reputation lookup), so it lands at 4 rather than 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 42 tool updates
    • Changedmoltguard_credential_issue1 field changed
      • addedInput schema / properties / address / description
        Added value: +"Base (EVM) wallet address (0x...)"
    • Changedmoltguard_credential_verify1 field changed
      • addedInput schema / properties / jws / description
        Added value: +"JWS compact serialization string from a MoltGuard credential"
    • Changedmoltguard_detail1 field changed
      • addedInput schema / properties / address / description
        Added value: +"Base (EVM) wallet address (0x...)"
    • Changedmoltguard_market1 field changed
      • addedInput schema / properties / market_id / description
        Added value: +"Polymarket market/condition ID"
    • Changedmoltguard_score1 field changed
      • addedInput schema / properties / address / description
        Added value: +"Base (EVM) wallet address (0x...)"
    • Changedmoltguard_sybil1 field changed
      • addedInput schema / properties / address / description
        Added value: +"Base (EVM) wallet address (0x...)"
    • Changedmoltrust_claim_deposit2 fields changed
      • addedInput schema / properties / did / description
        Added value: +"Your agent's DID to credit, e.g. did:moltrust:a1b2c3d4e5f60718"
      • addedInput schema / properties / tx_hash / description
        Added value: +"Base blockchain transaction hash (0x...)"
    • Changedmoltrust_credential4 fields changed
      • addedInput schema / properties / action / description
        Added value: +"Either \"issue\" or \"verify\""
      • addedInput schema / properties / credential / description
        Added value: +"JSON string of the credential to verify (required for \"verify\")"
      • addedInput schema / properties / credential_type / description
        Added value: +"Type of credential (default: \"AgentTrustCredential\", only for \"issue\")"
      • addedInput schema / properties / subject_did / description
        Added value: +"DID of the credential subject (required for \"issue\"), e.g. did:moltrust:a1b2c3d4e5f60718"
    • Changedmoltrust_credits7 fields changed
      • addedInput schema / properties / action / description
        Added value: +"One of \"balance\", \"pricing\", \"transfer\", or \"transactions\""
      • addedInput schema / properties / amount / description
        Added value: +"Number of credits to transfer (required for \"transfer\", must be >= 1)"
      • addedInput schema / properties / did / description
        Added value: +"Agent DID (required for \"balance\" and \"transactions\"), e.g. did:moltrust:a1b2c3d4e5f60718"
      • addedInput schema / properties / limit / description
        Added value: +"Max transactions to return (default 20, for \"transactions\")"
      • addedInput schema / properties / offset / description
        Added value: +"Pagination offset (default 0, for \"transactions\")"
      • addedInput schema / properties / reference / description
        Added value: +"Optional reference string for transfers"
      • addedInput schema / properties / to_did / description
        Added value: +"Recipient DID (required for \"transfer\"), e.g. did:moltrust:a1b2c3d4e5f60718"
    • Changedmoltrust_deposit_history1 field changed
      • addedInput schema / properties / did / description
        Added value: +"The agent's DID, e.g. did:moltrust:a1b2c3d4e5f60718"
    • Changedmoltrust_erc80043 fields changed
      • addedInput schema / properties / action / description
        Added value: +"One of \"card\", \"resolve\", or \"well-known\""
      • addedInput schema / properties / agent_id / description
        Added value: +"On-chain ERC-8004 agent ID (required for \"resolve\", e.g. 21023)"
      • addedInput schema / properties / did / description
        Added value: +"Agent DID (required for \"card\", e.g. \"did:moltrust:a1b2c3d4e5f60718\")"
    • Changedmoltrust_rate3 fields changed
      • addedInput schema / properties / from_did / description
        Added value: +"Your agent's DID (the rater), e.g. did:moltrust:a1b2c3d4e5f60718"
      • addedInput schema / properties / score / description
        Added value: +"Rating from 1 (untrusted) to 5 (highly trusted)"
      • addedInput schema / properties / to_did / description
        Added value: +"Target agent's DID (the agent being rated), e.g. did:moltrust:a1b2c3d4e5f60718"
    • Changedmoltrust_register2 fields changed
      • addedInput schema / properties / display_name / description
        Added value: +"Agent name (1-64 chars, alphanumeric/dash/underscore/dot/space)"
      • addedInput schema / properties / platform / description
        Added value: +"Platform identifier (e.g. \"openai\", \"langchain\", \"custom\")"
    • Changedmoltrust_reputation1 field changed
      • addedInput schema / properties / did / description
        Added value: +"Decentralised identifier (e.g. \"did:moltrust:a1b2c3d4e5f60718\")"
    • Changedmoltrust_verify1 field changed
      • addedInput schema / properties / did / description
        Added value: +"Decentralised identifier (e.g. \"did:moltrust:a1b2c3d4e5f60718\")"
    • Changedmt_check_badge1 field changed
      • addedInput schema / properties / did / description
        Added value: +"The DID of the agent to check, e.g. did:moltrust:a1b2c3d4e5f60718"
    • Changedmt_create_interaction_proof5 fields changed
      • addedInput schema / properties / agent_a / description
        Added value: +"DID of the first agent in the interaction"
      • addedInput schema / properties / agent_b / description
        Added value: +"DID of the second agent in the interaction"
      • addedInput schema / properties / api_key / description
        Added value: +"MolTrust API key of the agent creating the proof"
      • addedInput schema / properties / interaction_type / description
        Added value: +"Type of interaction (e.g. skill_verification, purchase, prediction)"
      • addedInput schema / properties / outcome / description
        Added value: +"Outcome of the interaction: success or failure"
    • Changedmt_endorse_agent6 fields changed
      • addedInput schema / properties / endorsed_did / description
        Added value: +"DID of the agent to endorse, e.g. did:moltrust:a1b2c3d4e5f60718"
      • addedInput schema / properties / endorser_api_key / description
        Added value: +"MolTrust API key of the endorsing agent"
      • addedInput schema / properties / evidence_hash / description
        Added value: +"SHA-256 hash from mt_create_interaction_proof (sha256:...)"
      • addedInput schema / properties / evidence_timestamp / description
        Added value: +"ISO 8601 timestamp from mt_create_interaction_proof"
      • addedInput schema / properties / skill / description
        Added value: +"Skill being endorsed (python, javascript, security, prediction, trading, data_analysis, api_integration, smart_contracts, nlp, computer_vision, general)"
      • addedInput schema / properties / vertical / description
        Added value: +"MolTrust vertical (skill, shopping, travel, prediction, salesguard, sports, core)"
    • Changedmt_fantasy_commit10 fields changed
      • addedInput schema / properties / agent_did / description
        Added value: +"Agent DID (e.g. \"did:moltrust:a1b2c3d4e5f67890\")"
      • addedInput schema / properties / confidence / description
        Added value: +"Confidence level 0.0 to 1.0"
      • addedInput schema / properties / contest_id / description
        Added value: +"Unique contest identifier (e.g. \"dk-nfl-sun-main-2026w12\")"
      • addedInput schema / properties / contest_start_iso / description
        Added value: +"Contest start time in ISO 8601 (must be in the future)"
      • addedInput schema / properties / contest_type / description
        Added value: +"Contest type (e.g. \"classic\", \"showdown\")"
      • addedInput schema / properties / entry_fee_usd / description
        Added value: +"Contest entry fee in USD"
      • addedInput schema / properties / lineup_json / description
        Added value: +"JSON string of lineup object (e.g. '{\"QB\":\"Mahomes\",\"RB1\":\"Henry\"}')"
      • addedInput schema / properties / platform / description
        Added value: +"Platform name: draftkings, fanduel, yahoo, sleeper, custom"
      • addedInput schema / properties / projected_score / description
        Added value: +"Agent's projected score for this lineup"
      • addedInput schema / properties / sport / description
        Added value: +"Sport type: nfl, nba, mlb, nhl, pga, nascar, soccer, custom"
    • Changedmt_fantasy_history1 field changed
      • addedInput schema / properties / did / description
        Added value: +"Agent DID (e.g. \"did:moltrust:a1b2c3d4e5f67890\")"
    • Changedmt_fantasy_verify1 field changed
      • addedInput schema / properties / commitment_hash / description
        Added value: +"The 64-char SHA-256 commitment hash"
    • Changedmt_get_badge1 field changed
      • addedInput schema / properties / did / description
        Added value: +"The DID of the agent to check, e.g. did:moltrust:a1b2c3d4e5f60718"
    • Changedmt_get_swarm_graph1 field changed
      • addedInput schema / properties / did / description
        Added value: +"DID of the agent to get graph for, e.g. did:moltrust:a1b2c3d4e5f60718"
    • Changedmt_get_track_provenance1 field changed
      • addedInput schema / properties / credential_id / description
        Added value: +"UUID of the music credential"
    • Changedmt_get_trust_score1 field changed
      • addedInput schema / properties / did / description
        Added value: +"DID of the agent to score (e.g. \"did:moltrust:a1b2c3d4e5f67890\")"
    • Changedmt_issue_badge2 fields changed
      • addedInput schema / properties / did / description
        Added value: +"The DID of the agent to issue a badge for, e.g. did:moltrust:a1b2c3d4e5f60718"
      • addedInput schema / properties / tier / description
        Added value: +"Badge tier — 'verified' or 'trusted'"
    • Changedmt_issue_music_credential8 fields changed
      • addedInput schema / properties / agent_did / description
        Added value: +"DID of the agent/creator (e.g. \"did:moltrust:abc123\")"
      • addedInput schema / properties / genre / description
        Added value: +"Optional genre (e.g. \"ambient\", \"jazz\", \"classical\")"
      • addedInput schema / properties / human_oversight / description
        Added value: +"\"true\", \"false\", or \"partial\""
      • addedInput schema / properties / isrc / description
        Added value: +"Optional ISRC code (ISO 3901)"
      • addedInput schema / properties / rights / description
        Added value: +"Rights declaration (e.g. \"CC-BY\", \"All Rights Reserved\", \"Agent-Wallet\")"
      • addedInput schema / properties / tool / description
        Added value: +"AI tool used (e.g. \"Suno API v3.2\", \"Udio\", \"Magenta\")"
      • addedInput schema / properties / track_description / description
        Added value: +"Optional description"
      • addedInput schema / properties / track_title / description
        Added value: +"Title of the track"
    • Changedmt_prediction_leaderboard1 field changed
      • addedInput schema / properties / limit / description
        Added value: +"Number of entries to return (default 20, max 100)"
    • Changedmt_prediction_link3 fields changed
      • addedInput schema / properties / address / description
        Added value: +"Prediction market wallet address (0x-prefixed, 42 chars)"
      • addedInput schema / properties / did / description
        Added value: +"Optional MolTrust DID to link (e.g. \"did:moltrust:a1b2c3d4e5f60718\")"
      • addedInput schema / properties / platform / description
        Added value: +"Platform name (default: \"polymarket\")"
    • Changedmt_prediction_wallet1 field changed
      • addedInput schema / properties / address / description
        Added value: +"Prediction market wallet address (0x-prefixed, 42 chars)"
    • Changedmt_register_seed4 fields changed
      • addedInput schema / properties / admin_key / description
        Added value: +"Admin key for authorization"
      • addedInput schema / properties / base_score / description
        Added value: +"Base trust score (0-100, default 80)"
      • addedInput schema / properties / did / description
        Added value: +"DID of the agent to register as seed, e.g. did:moltrust:a1b2c3d4e5f60718"
      • addedInput schema / properties / label / description
        Added value: +"Human-readable label for the seed agent"
    • Changedmt_salesguard_register3 fields changed
      • addedInput schema / properties / contact_email / description
        Added value: +"Contact email for the brand (optional)"
      • addedInput schema / properties / domain / description
        Added value: +"Brand domain (e.g. \"nike.com\")"
      • addedInput schema / properties / name / description
        Added value: +"Brand name (e.g. \"Nike\", \"Adidas\")"
    • Changedmt_salesguard_reseller1 field changed
      • addedInput schema / properties / reseller_did / description
        Added value: +"Reseller DID (e.g. \"did:web:sneakerstore.com\")"
    • Changedmt_salesguard_verify1 field changed
      • addedInput schema / properties / product_id / description
        Added value: +"Product identifier (e.g. \"AIRMAX-90-WHITE-43\")"
    • Changedmt_shopping_issue_vc6 fields changed
      • addedInput schema / properties / agent_did / description
        Added value: +"DID of the shopping agent (e.g. \"did:moltrust:agent123\")"
      • addedInput schema / properties / categories / description
        Added value: +"Comma-separated allowed categories (e.g. \"electronics,books\")"
      • addedInput schema / properties / currency / description
        Added value: +"Currency code (e.g. \"USDC\", \"USD\")"
      • addedInput schema / properties / human_did / description
        Added value: +"DID of the authorizing human (e.g. \"did:moltrust:human456\")"
      • addedInput schema / properties / spend_limit / description
        Added value: +"Maximum spend amount per transaction"
      • addedInput schema / properties / validity_days / description
        Added value: +"Number of days the credential is valid (default 30)"
    • Changedmt_shopping_verify5 fields changed
      • addedInput schema / properties / credential_jws / description
        Added value: +"JWS compact serialization of the BuyerAgentCredential"
      • addedInput schema / properties / item_description / description
        Added value: +"Description of the item being purchased"
      • addedInput schema / properties / merchant_id / description
        Added value: +"Merchant identifier string"
      • addedInput schema / properties / transaction_amount / description
        Added value: +"Transaction amount (e.g. 189.99)"
      • addedInput schema / properties / transaction_currency / description
        Added value: +"Currency code (e.g. \"USDC\")"
    • Changedmt_skill_audit1 field changed
      • addedInput schema / properties / github_url / description
        Added value: +"URL to the skill (GitHub repo or direct HTTPS link to SKILL.md)"
    • Changedmt_skill_issue_vc2 fields changed
      • addedInput schema / properties / author_did / description
        Added value: +"DID of the skill author (e.g. \"did:base:0x...\")"
      • addedInput schema / properties / repository_url / description
        Added value: +"URL to the skill repository or SKILL.md"
    • Changedmt_skill_verify1 field changed
      • addedInput schema / properties / skill_hash / description
        Added value: +"Canonical skill hash (e.g. \"sha256:a1b2c3...\")"
    • Changedmt_travel_issue_vc7 fields changed
      • addedInput schema / properties / agent_did / description
        Added value: +"DID of the travel agent (e.g. \"did:base:0x...\")"
      • addedInput schema / properties / currency / description
        Added value: +"Currency code (e.g. \"USDC\")"
      • addedInput schema / properties / principal_did / description
        Added value: +"DID of the authorizing entity (e.g. \"did:base:acme-corp\")"
      • addedInput schema / properties / segments / description
        Added value: +"Comma-separated allowed segments (e.g. \"hotel,flight,car_rental\")"
      • addedInput schema / properties / spend_limit / description
        Added value: +"Maximum spend amount per booking"
      • addedInput schema / properties / traveler_name / description
        Added value: +"Name of the authorized traveler (optional)"
      • addedInput schema / properties / validity_days / description
        Added value: +"Number of days the credential is valid (default 30)"
    • Changedmt_travel_verify6 fields changed
      • addedInput schema / properties / agent_did / description
        Added value: +"DID of the booking agent (e.g. \"did:base:0x...\")"
      • addedInput schema / properties / amount / description
        Added value: +"Booking amount"
      • addedInput schema / properties / currency / description
        Added value: +"Currency code (e.g. \"USDC\")"
      • addedInput schema / properties / merchant / description
        Added value: +"Merchant domain (e.g. \"hilton.com\")"
      • addedInput schema / properties / segment / description
        Added value: +"Booking segment: hotel, flight, car_rental, or rail"
      • addedInput schema / properties / vc_json / description
        Added value: +"The TravelAgentCredential as a JSON string"
    • Changedmt_verify_music_credential1 field changed
      • addedInput schema / properties / credential_id / description
        Added value: +"UUID of the music credential"
  2. 3 tool updates
    • Addedcanary_events
    • Addedcanary_issue
    • Addedcanary_list
  3. 10 tool updates
    • Addedmolcheck_evidence
    • Addedmolcheck_mandate
    • Addedmolcheck_registry
    • Addedmolcheck_verdict
    • Addedmolcheck_verify
    • Changedmoltproof_evidence2 fields changed
      • changedInput schema / title
        Previous value: -"moltproof_evidenceArguments"New value: +"evidenceArguments"
      • changedOutput schema / title
        Previous value: -"moltproof_evidenceOutput"New value: +"evidenceOutput"
    • Changedmoltproof_mandate2 fields changed
      • changedInput schema / title
        Previous value: -"moltproof_mandateArguments"New value: +"mandateArguments"
      • changedOutput schema / title
        Previous value: -"moltproof_mandateOutput"New value: +"mandateOutput"
    • Changedmoltproof_registry2 fields changed
      • changedInput schema / title
        Previous value: -"moltproof_registryArguments"New value: +"registryArguments"
      • changedOutput schema / title
        Previous value: -"moltproof_registryOutput"New value: +"registryOutput"
    • Changedmoltproof_verdict2 fields changed
      • changedInput schema / title
        Previous value: -"moltproof_verdictArguments"New value: +"verdictArguments"
      • changedOutput schema / title
        Previous value: -"moltproof_verdictOutput"New value: +"verdictOutput"
    • Changedmoltproof_verify2 fields changed
      • changedInput schema / title
        Previous value: -"moltproof_verifyArguments"New value: +"verifyArguments"
      • changedOutput schema / title
        Previous value: -"moltproof_verifyOutput"New value: +"verifyOutput"
  4. 3 tool updates
    • Addedads_check
    • Addedads_mandate_template
    • Addedads_onboard
  5. 53 tool updates
    • First observedmoltguard_credential_issue
    • First observedmoltguard_credential_verify
    • First observedmoltguard_detail
    • First observedmoltguard_feed
    • First observedmoltguard_market
    • First observedmoltguard_score
    • First observedmoltguard_sybil
    • First observedmoltproof_evidence
    • First observedmoltproof_mandate
    • First observedmoltproof_registry
    • First observedmoltproof_verdict
    • First observedmoltproof_verify
    • First observedmoltrust_claim_deposit
    • First observedmoltrust_credential
    • First observedmoltrust_credits
    • First observedmoltrust_deposit_history
    • First observedmoltrust_deposit_info
    • First observedmoltrust_erc8004
    • First observedmoltrust_rate
    • First observedmoltrust_register
    • First observedmoltrust_reputation
    • First observedmoltrust_stats
    • First observedmoltrust_verify
    • First observedmt_check_badge
    • First observedmt_create_interaction_proof
    • First observedmt_endorse_agent
    • First observedmt_fantasy_commit
    • First observedmt_fantasy_history
    • First observedmt_fantasy_verify
    • First observedmt_get_badge
    • First observedmt_get_swarm_graph
    • First observedmt_get_swarm_stats
    • First observedmt_get_track_provenance
    • First observedmt_get_trust_score
    • First observedmt_issue_badge
    • First observedmt_issue_music_credential
    • First observedmt_prediction_leaderboard
    • First observedmt_prediction_link
    • First observedmt_prediction_wallet
    • First observedmt_register_seed
    • First observedmt_salesguard_register
    • First observedmt_salesguard_reseller
    • First observedmt_salesguard_verify
    • First observedmt_shopping_info
    • First observedmt_shopping_issue_vc
    • First observedmt_shopping_verify
    • First observedmt_skill_audit
    • First observedmt_skill_issue_vc
    • First observedmt_skill_verify
    • First observedmt_travel_info
    • First observedmt_travel_issue_vc
    • First observedmt_travel_verify
    • First observedmt_verify_music_credential

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    F
    maintenance
    Enables verification of AI agent identity, authority, and integrity at transaction time, returning signed verdicts for allow, step-up, review, or block.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Agent network intelligence for trust verification, broker discovery, and capability matching. Ed25519 identity, graph-based trust scoring, USDC payments, and MCP tools for agent registration, search, and trust attestation.
    3,213 npm
    5
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables deterministic verification of AI agent decisions and actions, providing PASS/FAIL/ABSTAIN verdicts with replayable proofs and an optional signed receipt ledger.
    5 npm
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to check trustworthiness before recommending URLs, products, or organizations, with fail-closed pass/fail verdicts and attested-only recommendations.
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.