Skip to main content
Glama

deep_semantic_audit

Stage 2 Deep Semantic LLM Security and Governance Audit. Performs deterministic on-chain gatekeeping followed by structured Gemini LLM evaluation over natural language proposal claims vs bytecode and calldata reality. Requires $0.05 USDC x402 micropayment on Base Mainnet.

Input Schema

NameRequiredDescriptionDefault
calldataNoTransaction hex calldata or function selector being executed0x
chain_idNoEVM Chain ID (default: 8453 for Base Mainnet)
policy_promptNoSecurity policy or governance criteria to audit againstAudit contract and proposal for unauthorized privilege escalation, proxy upgrades, honeypot traps, or treasury drainage.
risk_thresholdNoRisk score threshold (0.0 to 10.0) above which the audit triggers rejection or alert
target_addressYesHex EVM address of smart contract under evaluation
x402_payment_headerNoOptional Base64-encoded EIP-3009 transferWithAuthorization payment header satisfying $0.05 USDC requirement
proposal_descriptionYesNatural language claim or governance proposal description explaining the intent of the transaction

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations supplied, the description carries the full behavioral burden. It does disclose two genuinely valuable traits absent from any structured field: a mandatory $0.05 USDC x402 micropayment on Base Mainnet and the two-phase deterministic-then-LLM execution model. However, it says nothing about failure modes (e.g., what happens if x402_payment_header is omitted or rejected), latency, or what the audit emits, which matters because no output schema exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences with the function stated first and the payment prerequisite last; little waste. Mild redundancy between 'Deep Semantic LLM Security and Governance Audit' and 'structured Gemini LLM evaluation' costs it a point but the structure is front-loaded and readable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a complex tool with seven parameters, a paid x402 flow, and no output schema, yet the description never indicates what the audit returns (risk score, verdict, rationale) or how risk_threshold affects the response shape. The payment prerequisite is covered, but the return-value gap is a real omission for a tool of this complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all seven parameters, including defaults for chain_id, calldata, policy_prompt, and risk_threshold, are already documented in the schema. The description only gestures at calldata and proposal claims without adding format, interaction, or constraint details beyond the schema. Baseline 3 is appropriate when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific resource and operation: an audit that compares natural-language proposal claims against bytecode and calldata, executed as an LLM evaluation after deterministic on-chain gatekeeping. The verb 'Audit' is abstract and the jargon ('Stage 2', 'deterministic on-chain gatekeeping') demands inference, but the core function is recoverable. It never names siblings like scan_dao_proposals or check_token_honeypot, so an agent cannot distinguish it from them without reading schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use or when-not-to-use guidance. 'Stage 2' weakly implies a pipeline ordering, but the description never says which stage-1 tool precedes it or when an agent should prefer check_token_honeypot or scan_dao_proposals instead. Usage is left entirely to inference from the tool's name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.