Skip to main content
Glama

Verify Agent Attestation

verify_agent_attestation
Read-onlyIdempotent

Verify an agent's IATP codebase/config attestation (Ed25519, fail-closed). Returns JSON validity result. Compliance: EU AI Act Art. 14, KYA-OS, IETF AID. Cost $0.02 per call.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
agent_didNoOptional peer DID that must match the attestation agent_id.
attestationYesIATP Ed25519 attestation envelope to verify (fail-closed).

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
okNoTrue when the tool completed without a validation error.
toolNoTool name that produced this payload.
errorNoFailure reason when valid is false.
validNoWhether the Ed25519 attestation verified.
paymentNoSettlement receipt after x402 or sandbox payment.
agent_idNoAgent id bound in the attestation.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly, idempotent, non-destructive, and non-open-world behavior. The description adds useful extra disclosure: the verification is fail-closed, returns a JSON validity result, cites compliance frameworks, and costs $0.02 per call. This complements the annotations without contradicting them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with the core purpose. The following sentences add relevant operational details (fail-closed, JSON result, compliance, cost) without verbose fluff. It is not perfectly minimal because compliance citation names are somewhat lengthy, but every segment earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the high schema coverage, annotations, and an output schema, the description is largely complete: it states the input purpose, key behavioral trait, return type, and compliance framing. It does not explain the shape of the attestation envelope beyond the schema's own description, but the output schema and parameter schema reduce that burden.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the schema already describes agent_did as an optional DID that must match the attestation agent_id, as well as the attestation object. The description does not add substantial parameter-level meaning, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly names the verb ('Verify') and a specific resource ('an agent's IATP codebase/config attestation') and adds technical detail ('Ed25519, fail-closed'). This is more specific than just the tool name, though it does not explicitly distinguish itself from siblings like verify_agent_trust or memory.verify_attestation, so it falls just short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no direct guidance about when to use this tool versus alternatives such as issue_agent_attestation, verify_agent_trust, or memory.verify_attestation. The compliance references imply compatibility, but there is no explicit when-to-use, prerequisites, or 'use instead' guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources