Skip to main content
Glama

agent-access-index

Check whether an agent may fetch a URL

access_check_url
Read-onlyIdempotent

Given a URL, say whether an AI agent may fetch it, on what terms, and at what price. Reads robots.txt for a generic agent and for every AI user-agent the operators document, the Content-signal and Content-Usage directives, any RSL licence the origin links, and the live response to an honestly-identified request.

Verdicts: allowed (it served us), allowed_if_identified (the written policy permits this but bot management refused an anonymous request — signing as a named crawler is the documented route), charged (there is a price, quoted where the rail will show one), blocked (the site disallows the agents that would want this, with nothing to buy), and unknown (the origin did not answer, or the URL is not there).

Never evades: no CAPTCHA solving, no proxies, no spoofed user-agents. Refusals come back as findings with the evidence attached.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlYesAbsolute http(s) URL of the page to check, e.g. https://example.com/article
skipWellKnownNoSkip the five well-known probes; faster, and they are almost always absent
includeEvidenceNoInclude every request made, with status and headers (default false: it is large)

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond readOnlyHint/openWorldHint/idempotentHint by disclosing how the check is performed (robots.txt, Content-signal/Content-Usage, RSL licences, a live honestly-identified request) and the operating stance: no CAPTCHA solving, no proxies, no spoofed user-agents. It also states that refusals surface as findings with evidence rather than errors, which is exactly the behavioral context an agent needs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the one-line purpose, then mechanism, then the full verdict space, then the non-evasion guarantee. The long parenthetical verdict definitions are justified because no output schema exists — each sentence carries information the caller cannot get elsewhere.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description must convey the result space itself, and it enumerates all five verdicts with their meanings and the conditions under which each arises. Combined with the annotations covering the safety profile and 100% parameter coverage, an agent has everything needed to invoke and interpret this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all three parameters (url, skipWellKnown, includeEvidence) are already documented in the schema. The description adds no syntax or trade-off detail for skipWellKnown or includeEvidence (e.g. what 'five well-known probes' means for verdict confidence), so it does not exceed the baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with a precise verb+resource: 'Given a URL, say whether an AI agent may fetch it, on what terms, and at what price.' The enumerated verdict vocabulary ('allowed', 'charged', 'blocked', 'unknown') makes the scope unmistakable. It never names the sibling tools (access_explain_verdicts, access_list_agents), so the differentiation is only implicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied rather than stated: the reader infers this is the pre-fetch permission check, and 'Refusals come back as findings' hints at how to interpret output. There is no explicit when-to-use, when-not-to-use, or pointer to access_explain_verdicts when the caller needs the reasoning behind a verdict.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.