Skip to main content
Glama

PG1 Sovereign Threat Intelligence

preflight_check

PG1 Sovereign Threat Intelligence: ONE call before an agent acts. Give the action you are about to take and its target; PG1 runs every relevant check in parallel and returns one decision: no_flags, flagged or unknown, with merged reasons, per-check results and latency. no_flags means no flags found in the checks run, never "safe". Fail closed: any check that does not finish makes the decision unknown, never no_flags. Actions: pay (a wallet address: sanctions + wallet age; or an https x402 URL: the endpoint's payTo sanctions and age, network/asset sanity, TLS, domain age), open (a URL or hostname: phishing/look-alike reputation + domain age), install (a package: give ecosystem npm or pypi; target name or name@version), patch (a CVE id, or "vendor product version"), trust_agent (an agent's URL or domain: its A2A agent card, domain age and reputation). Payment: $0.01 via x402 (params._meta["x402/payment"]) or a Gumroad licence key, after 5 free calls a day per caller shared with every other paid tool. Results are signed (see verify_result).

Input Schema

NameRequiredDescriptionDefault
chainNoFor pay to a wallet: the chain (default base).
actionYesWhat you are about to do.
targetYesWhat you are about to do it to: a wallet address, URL, hostname, package name (name or name@version), CVE id or "vendor product version", or an agent URL/domain.
ecosystemNoFor install: the package registry.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full behavioral burden and does so: it defines the exact decision vocabulary (no_flags/flagged/unknown), states that no_flags never means 'safe', and commits to fail-closed semantics where any unfinished check forces 'unknown'. It also discloses latency, signed results, and payment/rate-limit mechanics.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core contract (one call, action+target in, one decision out) before drilling into action-specific rules and pricing. The middle is dense with stacked parentheticals, which costs a little readability, but every sentence carries distinct information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, yet the description fully specifies the return shape (single decision, merged reasons, per-check results, latency). It also covers pricing, the 5-free-calls-per-day shared limit, and points to verify_result for signature validation, leaving no material gap for a 4-parameter tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, but the description goes well beyond the terse enum descriptions by giving per-action target semantics (wallet address vs x402 URL for pay, URL/hostname for open, ecosystem plus name@version for install, CVE or 'vendor product version' for patch, agent URL/domain for trust_agent) and notes chain defaults to base for wallet pay.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: takes an action+target and runs all relevant PG1 checks in parallel, returning one merged decision. It explicitly positions itself against the sibling single-check tools by promising 'every relevant check' in 'ONE call before an agent acts'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Clearly frames the use context (a preflight decision before an agent acts) and details which action values are supported and what target each expects. It does not, however, explicitly tell the agent when to prefer it over the granular sibling checks (check_wallet_sanctions, check_package, etc.) or when a single-purpose check is enough.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.