Skip to main content
Glama

SQLGuard — Execution Certificate Firewall

Session Cert — legacy non-wealth ($0.25 / 10)

sqlguard_session
Read-onlyIdempotent

LEGACY / OFF TABLE as wealth and primary buy path. Prefer sqlguard_challenge → Exact Pilot unlock $100 or Gateway invoice $299+. Endpoint kept for burn compatibility only. Doctrine: no_money_no_service.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
agent_idYesAgent or wallet id that will own the session

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
priceNo
slotsNo
productNo
endpointNo

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description adds context that this endpoint is legacy and not part of the primary buy path, but it doesn't explain what happens on invocation, what 'burn compatibility' involves, or any authentication/policy details beyond the cryptic doctrine.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded with the legacy/off-table status and the preferred alternative path. However, fragments like 'burn compatibility' and 'no_money_no_service' are jargon-heavy and may not be meaningful to every agent, slightly reducing clarity despite the compactness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has only one parameter, a rich output schema, and strong annotations, so the formal metadata carries much of the burden. Still, the description never defines the tool's actual function, leaving the purpose ambiguous; an agent cannot confidently select or invoke a tool when the description only explains what it is not and when to avoid it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is only one parameter and schema description coverage is 100%, so the schema already documents agent_id as 'Agent or wallet id that will own the session.' The description adds no further meaning about the parameter, leaving the baseline 3 appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description never states what the tool actually does; 'Session Cert' is only labeled as legacy/non-wealth and 'kept for burn compatibility only.' This restates the title and gives a negative scope without defining the core action or resource, so an agent cannot tell what invoking it accomplishes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly steers agents away: 'Prefer sqlguard_challenge → Exact Pilot unlock $100 or Gateway invoice $299+.' It also states the only remaining use case ('burn compatibility only') and the policy 'no_money_no_service,' leaving little doubt about when to use this tool versus alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

B3.1/5.0
Disambiguation1/5

Multiple tools occupy the same job: challenge and pilot both sell the $100/7-day PASS; buy/catalog/cert/session/workday/validate are all legacy prepaid paths; handshake/protocol/require/sdk all provide onboarding/compliance guidance. Descriptions add PRIMARY/LEGACY labels, but an agent still has to parse heavy cross-references to avoid picking the wrong payment or authorization tool.

Naming Consistency4/5

All tool names share the consistent sqlguard_ prefix and lower_snake_case style, and each name maps to a recognizable concept. However, the set mixes noun labels (denials, gravity, session) with verb labels (bind, buy, verify), so it is not a strict verb_noun API convention.

Tool Count3/5

24 tools sits at the top of the 'heavy but borderline' range. Many could be collapsed because the legacy prepaid paths (session, workday, cert, buy, catalog, validate) are explicitly marked OFF TABLE for the primary wealth path, leaving redundant surface area.

Completeness4/5

The core lifecycle is well covered: handshake/onboarding, challenge/pilot unlock, bind/gate/verify pre-execution checks, denials inventory, effects verification, and client status. Minor gaps exist only around explicit invoice/refund/revocation tooling, but those appear to be handled externally or by expiry.