Skip to main content
Glama

VerifiMind PEAS - RefleXion Trinity

Coordination Handoff Read

coordination_handoff_read

Read the most recent coordination handoff record(s).

TEMPORARILY DISABLED — this tool is contained pending a security repair (incident VM-IR-2026-07-28-COORD-01) and always returns a denial.

This read path returned complete handoff bodies from a caller-selected namespace with no authenticated ownership check. It is closed to every caller — with or without a key — while owner-scoped access control is rebuilt. No record body is returned.

All arguments are accepted for schema stability and are ignored.

Input Schema

NameRequiredDescriptionDefault
countNo
agent_idNo
pioneer_keyNo

Output Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed3 schema fields changed
    • removedInput schema / properties / agent_id / description
      Removed value: -"Filter to handoffs from this agent only (optional)."
    • removedInput schema / properties / count / description
      Removed value: -"Number of records to return (default: 1, max: 50)."
    • removedInput schema / properties / pioneer_key / description
      Removed value: -"Optional access key. If omitted, reads from the shared\n\"anonymous\" namespace."
  2. First observed

TDQS

A4.2/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden and does so thoroughly: it discloses that every call returns a denial, that no record body is returned, that all arguments are accepted but ignored, and even cites the incident identifier. This is exactly the behavioral context an agent needs to avoid wasting calls or misinterpreting an empty result as data.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The disabled notice is front-loaded in the second sentence, ahead of the security rationale, which is the right ordering for an agent skimming for viability. There is minor redundancy between 'always returns a denial' and 'No record body is returned', and the incident-history sentence is more for human maintainers than for the caller.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return shape need not be explained, and the description fully covers the one thing that matters — that every call is denied. Given the tool is non-functional, nothing essential is missing; only a pointer to a working alternative read path would improve it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and three parameters exist, so the description must compensate — and it does, by stating that all arguments are ignored, which makes their individual semantics moot for this version. It does not explain what count, agent_id, or pioneer_key were originally meant to select, but since the tool denies all calls, that omission carries little practical risk.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence states a specific verb and resource (read the most recent coordination handoff record(s)), and the sibling list makes the create/read distinction obvious without opening schemas. The immediate follow-up nullifies that purpose by declaring the tool disabled, which is honest but means the nominal purpose is never actually realizable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says the tool is closed to every caller, with or without a key, so the agent knows there is no condition under which to call it — a strong negative guideline. It stops short of routing the agent to an alternative (e.g., coordination_handoff_create or coordination_team_status), which would be the natural next step in a toolset with sibling coordination tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.