Skip to main content
Glama

SQLGuard — Execution Certificate Firewall

Handshake — what do you need?

sqlguard_handshake
Read-onlyIdempotent

FIRST tool on connect. Asks: What do you need? Pass { need: "…" }. Org/migrate/mutate/production → sqlguard_challenge (POST /v1/challenge → Exact unlock /v1/challenge/unlock amount 100000000). Company invoice → /gateway $299+. Session/Cert OFF TABLE as primary. Call before sqlguard_catalog when unsure.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
needNoWhat you need in one sentence (e.g. 'authorize one INSERT', 'bind human Intent Mandate', 'burst of writes', 'prepaid credits', 'portable gate before execute')
agent_idNoOptional agent or wallet id for routing context

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
askNo
matchedNo
optionsNo

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark the operation readOnly and idempotent, so the description does not need to restate that. The description adds behavioral context beyond annotations by explaining the handshake's routing behavior, the challenge unlock amount, and explicit exclusions like 'Session/Cert OFF TABLE as primary.'

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense and front-loaded with the core handshake behavior, then moves to routing decisions. The routing notation is compact but slightly cryptic ('/gateway $299+', 'Exact unlock /v1/challenge/unlock amount 100000000'), which prevents a perfect conciseness score.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema and full parameter schema, the description covers when to call, what to pass, how to route, and key exclusions. It could be more explicit about what the handshake returns, but the output schema handles that, so this is reasonably complete for an orchestration-first tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so parameters are already documented in the schema. The description reinforces the central need parameter with 'Pass { need: "…" }' but does not add meaningfully beyond the schema. This matches the baseline for full schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific role: 'FIRST tool on connect' and 'Asks: What do you need?', making the handshake-and-route purpose unmistakable. It also distinguishes itself from siblings by saying 'Session/Cert OFF TABLE as primary' and 'Call before sqlguard_catalog when unsure.'

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit routing conditions: 'Org/migrate/mutate/production → sqlguard_challenge', 'Company invoice → /gateway $299+', and 'Call before sqlguard_catalog when unsure.' It tells the agent when to use this tool first and when a different tool is appropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

B3.1/5.0
Disambiguation1/5

Multiple tools occupy the same job: challenge and pilot both sell the $100/7-day PASS; buy/catalog/cert/session/workday/validate are all legacy prepaid paths; handshake/protocol/require/sdk all provide onboarding/compliance guidance. Descriptions add PRIMARY/LEGACY labels, but an agent still has to parse heavy cross-references to avoid picking the wrong payment or authorization tool.

Naming Consistency4/5

All tool names share the consistent sqlguard_ prefix and lower_snake_case style, and each name maps to a recognizable concept. However, the set mixes noun labels (denials, gravity, session) with verb labels (bind, buy, verify), so it is not a strict verb_noun API convention.

Tool Count3/5

24 tools sits at the top of the 'heavy but borderline' range. Many could be collapsed because the legacy prepaid paths (session, workday, cert, buy, catalog, validate) are explicitly marked OFF TABLE for the primary wealth path, leaving redundant surface area.

Completeness4/5

The core lifecycle is well covered: handshake/onboarding, challenge/pilot unlock, bind/gate/verify pre-execution checks, denials inventory, effects verification, and client status. Minor gaps exist only around explicit invoice/refund/revocation tooling, but those appear to be handled externally or by expiry.