Skip to main content
Glama

identity_get_challenge

Request a real, time-boxed agent-liveness challenge from Wicked Identity for an already-registered wallet. Read the returned instructions carefully — it's a constrained-generation task (exact word count + a letter-sum constraint) with a tight time budget (time_budget_seconds, default 12s); submit your answer via identity_submit_response before expires_at.

Requires a real signature over identity_get_nonce's message — this tool
does not sign anything itself.

Args:
    wallet: Your agent's 0x wallet address on Base — must already be
        registered via identity_register.
    nonce: The nonce from a fresh identity_get_nonce call.
    signature: The 0x-prefixed ECDSA signature over that nonce's message.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
nonceYes
walletYes
signatureYes

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it discloses the time-boxed nature, a default 12s budget, the expires_at deadline, that the task is constrained generation (exact word count + letter-sum), and critically that it does not sign anything itself and requires a real signature over the nonce message. Rate limits and failure modes are unstated, keeping it from a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose, then the crucial 'read the instructions carefully' caution and deadline, then args. The Args block is slightly verbose, but each sentence carries operative information, so nothing is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutating, multi-step, signature-gated tool, the description covers the whole lifecycle: prerequisite registration, nonce acquisition, signing responsibility, the challenge's constraints and deadline, and the downstream submission tool. Since an output schema exists, return values need no elaboration, and referenced fields (instructions, time_budget_seconds, expires_at) are enough to orient the agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must fully compensate, and it does: wallet is defined as the 0x Base address that must already be registered, nonce as coming from a fresh identity_get_nonce call, and signature as the 0x-prefixed ECDSA signature over that nonce's message. Every parameter gains meaning beyond the bare schema types.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb (request/obtain) plus resource (time-boxed agent-liveness challenge) with an explicit scope ('for an already-registered wallet'). It clearly positions itself against siblings: it needs identity_get_nonce output and feeds identity_submit_response, so an agent can place it in the flow without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives strong conditions and prerequisites: wallet must be registered via identity_register, nonce must come from a fresh identity_get_nonce call, and the answer must be submitted via identity_submit_response before expires_at. It names the downstream alternative tool but does not state explicit when-not-to-use or error/rejection conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.