Skip to main content
Glama

trust.receipt-verify

Verify a BlindOracle receipt against the parts a buyer cannot check alone: is the proof_id really in BlindOracle's append-only proof rail, does its payload still hash to the stored row, and does the row's HMAC-SHA256 verify against the signing key. Also recomputes content_sha256 and confirms the Base payment, so one call is a complete answer. Deterministic, no LLM. The self-checkable half is free forever in the published verify-blindoracle-receipt skill (RQ-BO-RECEIPT-VERIFY-01). Called with a delegation_token (the delegator's) and the deliverable_sha256 you received, it closes a delegation chain instead: a signed AgentDelegationClosure saying whether what you received matches what the delegate sealed. (x402: $0.01 USDC per call)

Tool call template

This tool declares no required parameters. Add optional parameters from the input schema as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {},
    "name": "trust.receipt-verify"
  }
}

Input Schema

NameRequiredDescriptionDefault
taskNoTask/query text for this SKU

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds substantial behavior beyond the annotations: it is deterministic with no LLM, one call is a complete answer, and it carries a metered cost of $0.01 USDC per call via x402. That cost disclosure is important context given readOnlyHint=false and idempotentHint=false — each call has a payment side effect, which explains the non-idempotent hint. It does not describe failure output or what a failed verification returns, which keeps it off a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core verification purpose is front-loaded, which is good, but the prose is dense and mixes three ideas — the three proof checks, the free-skill alternative, the delegation mode, and the price — in one block. Sentences like 'so one call is a complete answer' are promotional rather than operational, and the pricing note is buried in a trailing parenthetical.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description does well to name the return artifact in delegation mode (a signed AgentDelegationClosure), but it never states the response shape for the primary verification mode. More seriously, it does not reconcile the delegation_token/deliverable_sha256 inputs with the single 'task' schema property, leaving an agent uncertain how to supply the inputs it just described.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is nominally 100%, but the only schema property is a generic 'task' field described as 'Task/query text for this SKU', while the description tells the caller to pass a delegation_token and a deliverable_sha256. Those named inputs do not exist in the schema, so the description actively creates ambiguity about how to actually invoke the tool rather than clarifying the parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Verify a BlindOracle receipt', and enumerates the exact checks performed (proof rail membership, payload hash match, HMAC-SHA256 against the signing key, content_sha256 recomputation, Base payment). That is far more concrete than the title alone. It does not explicitly name a sibling MCP tool it is meant to replace or complement, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives a clear decision rule: use this for the 'parts a buyer cannot check alone', while the self-checkable half is free in the published verify-blindoracle-receipt skill. It also names a second mode (delegation closure via delegation_token plus deliverable_sha256). It does not contrast against nearby siblings such as attestation.single-use-seal or bundle.delegation-chain, so no explicit exclusion is stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.