Skip to main content
Glama
Sign In

Privi Ledger

by io.github.canoydario847-cloud
OverviewDiscussionsAdmin

Save an AI use case

gov_ai_usecase_save
Idempotent

Add or update an entry in your agency's AI use case inventory (OMB M-25-21). Every change creates a new version and is written to your tamper-evident 'ai-inventory' log. Requires the organization API key.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "use_case": "<use_case>",
      "actor": "<actor>"
    },
    "name": "gov_ai_usecase_save"
  }
}

Input Schema

NameRequiredDescriptionDefault
actorYesWho is making the change (person or agent)
mergeNoMerge into the existing record (true) or replace it (false)
use_caseYesAI use case record in OMB M-25-21 reporting fields. Required: use_case_id, name, stage (pre_deployment|pilot|deployed|retired), high_impact, purpose, outputs, sourcing (in_house|vendor|both), involves_pii, custom_code. Optional: bureau, contact_email, topic_area, ai_classification, withhold_from_public, expected_benefits, start_date, vendor_name, ato_system_name, data_description, open_data_link, pia_link, demographic_features, code_link, monitoring_streams (Ledger stream IDs), waivers [{practice, justification}], practices {name: {done, evidence, date}} with names: pre_deployment_testing, impact_assessment, independent_review, ongoing_monitoring, operator_training, fail_safe, appeal_process, public_feedback

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations cover the safety profile (mutation, non-destructive, idempotent), and the description adds genuinely useful context beyond them: every change creates a new version, writes go to a tamper-evident 'ai-inventory' log, and an API key is required. Slight tension with idempotentHint=true, since 'every change creates a new version' implies repeated identical calls could still mint new versions, but a no-op call arguably is not a change, so this is not a hard contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, zero waste, and the core action is front-loaded before the audit/auth details. Nothing redundant or padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with full annotation coverage, a fully documented nested schema, and no output schema, the description supplies the missing behavioral context (versioning, audit log, auth). What remains absent is return-value/pagination behavior, which is minor here since no output schema exists and the call semantics are self-contained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, including a detailed nested use_case object, so the schema already carries the parameter burden. The description adds only the log-stream name context and no syntax or format detail beyond the schema, making baseline 3 correct.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource: 'Add or update an entry in your agency's AI use case inventory (OMB M-25-21)'. This clearly distinguishes the write operation from the read-oriented siblings gov_ai_inventory / gov_ai_inventory_check / gov_ai_inventory_export, though it never names any sibling explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides a real prerequisite ('Requires the organization API key') and hints at versioning behavior, but gives no explicit when-to-use guidance versus the other gov_ai_inventory tools or when merge should be preferred. Usage context is implied rather than spelled out.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Privi Ledger toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources