x402-data-gateway
Server Details
Twenty-two paid x402 and MPP tools for agent discovery, payment safety, data, and DeFi.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- epistemedeus/x402-url-extractor
- GitHub Stars
- 1
- Server Listing
- x402-data-gateway
Tool Definition Quality
Average 4.6/5 across 22 of 22 tools scored. Lowest: 4/5.
Several tools cluster around the same domain: there are multiple audit tools, multiple preflight tools, multiple receipt/settlement tools, and two wallet-policy-conformance tools. The descriptions are carefully distinguished with 'use X instead' notes, but an agent would still need to read closely to separate `agent_discoverability_audit` from `agent_surface_budget_audit` and `seller_integrity_audit` from `payment_offer_preflight`.
Most names follow a readable, snake_case pattern with a domain prefix or action stem, such as `morpho_position`, `transaction_receipt`, `wallet_enrich`, and `contract_qualified_search`. The convention is not fully uniform—`read`, `extract`, `scan`, and `schemaforge` are standalone verbs or compounds, and `agent_surface_budget_audit` is a much longer construction—but the style is consistent enough to navigate.
22 tools is at the heavy end of a data-gateway scope, especially since they spread across x402 discovery, Morpho lending, web domain audits, wallet policy, and blockchain receipts. Each tool explains its existence, but the set feels broader than one central data-gateway concern.
The tools form a coherent read-only x402/agent-commerce lifecycle: catalog search, discoverability, surface/seller integrity, payment offer preflight, settlement proof, and transaction receipt verification. There are some peripheral tools that do not directly serve x402, and no payment or execution action exists, but the read-only audit gate is intentionally complete and lacks dead ends.
Available Tools
22 toolsagent_discoverability_auditAudit Agent Service DiscoverabilityAInspect
Measure one service's brand-blind rank, source-family coverage, expected-route presence, canonical-vs-alias listing identity, duplicate records, competitors, and exact-price drift across ten public machine-service discovery views. Supply runtimeUrl with an exact GET route to derive the comparison price from one coherent live unsigned x402 or MPP offer; otherwise expectedPriceUsd remains caller-supplied. Set surfaceAudit to check the target's public Agent Card, ERC-8004 registration document, and action catalog. Set materializationAudit with an exact GET or POST route to distinguish Coinbase seller ineligibility from provider acceptance without exact-resource Bazaar materialization. Catalog queries use no credentials or payments. Results are point-in-time provider and catalog evidence, not demand, seller trust, settlement, or future-rank proof.
| Name | Required | Description | Default |
|---|---|---|---|
| payTo | No | Optional EVM payTo for alias matching | |
| route | No | Optional expected exact path | |
| intent | Yes | Brand-blind capability description | |
| method | No | Exact route method for the optional Coinbase materialization audit. Defaults to GET; runtimeUrl is GET-only. | |
| origin | Yes | Public HTTPS service origin | |
| runtimeUrl | No | Optional exact same-origin HTTPS GET URL whose unpaid x402 or MPP offer supplies the runtime price reference. Requires route and an exactly matching pathname. | |
| surfaceAudit | No | When true, inspect the target's public Agent Card, ERC-8004 registration document, and action catalog for the expected route through bounded same-origin fetches. | |
| expectedPriceUsd | No | Optional exact route price expected by the caller. A coherent runtimeUrl offer takes precedence and caller drift is reported. | |
| materializationAudit | No | When true with route and method, distinguish Coinbase seller ineligibility from provider acceptance without exact-resource Bazaar materialization. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full transparency burden and largely meets it: it discloses that catalog queries use no credentials or payments, that results are point-in-time evidence, and that materializationAudit avoids exact-resource materialization. The schema description also adds bounded same-origin fetches. It does not fully state side effects or rate limits, but 'bounded' and 'no credentials/payments' cover the main risk areas.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The purpose is front-loaded in the first sentence, followed by parameter-mode guidance and caveats. Every sentence contributes meaning, but the density of jargon (brand-blind rank, canonical-vs-alias, ERC-8004, Bazaar materialization) makes it heavy; appropriate for the domain but not light.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema and no annotations, the description compensates well by explaining orchestration of runtimeUrl, expectedPriceUsd, surfaceAudit, materializationAudit, and the limits of the evidence produced. It does not describe the return shape or all combinations of parameters, but for a specialized audit tool it gives enough for an agent to select and call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3, but the description adds valuable cross-parameter semantics: runtimeUrl takes precedence over expectedPriceUsd, surfaceAudit and materializationAudit each trigger specific audit scopes, and materializationAudit requires route and method. This goes beyond the individual parameter descriptions in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening sentence names a specific action ('Measure') and a precise resource: one service's discoverability across ten machine-service discovery views, with enumerated metrics like brand-blind rank, expected-route presence, and exact-price drift. This clearly differentiates the tool from siblings like agent_surface_budget_audit or seller_integrity_audit by focusing on listing and discovery evidence.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit conditions for optional behaviors: supply runtimeUrl to derive price from a live x402/MPP offer, set surfaceAudit for Agent Card/ERC-8004 checks, and set materializationAudit to distinguish Coinbase ineligibility. It also provides exclusions by stating results are not demand, seller trust, settlement, or future-rank proof, though it does not name alternative sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
agent_surface_budget_auditAudit Agent Surface BudgetAInspect
Measure one public service's credential-free MCP tools/list, OpenAPI, or both declared discovery surfaces before any tool call or target payment. Use agent_discoverability_audit for catalog reach and rank, seller_integrity_audit for one exact operation's response contract, or this tool for byte budgets, heaviest definitions, missing selection contracts, and progressive-discovery fixes. Unselected surfaces are not fetched or judged. It follows no redirect, calls no target tool, sends no credential or target payment, and returns no target schema, response body, or session identifier.
| Name | Required | Description | Default |
|---|---|---|---|
| origin | Yes | Credential-free public HTTPS service origin on port 443, with no path or query. | |
| mcpPath | No | Exact root-relative MCP streamable-HTTP path. | /mcp |
| openApiPath | No | Exact root-relative OpenAPI JSON path. | /openapi.json |
| surfaceMode | No | Audit MCP only, OpenAPI only, or both. Unselected surfaces are not fetched or judged. | both |
| mcpBudgetBytes | No | Maximum preferred raw MCP tools/list response size in bytes. | |
| openApiBudgetBytes | No | Maximum preferred raw OpenAPI document size in bytes. |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| mcp | Yes | |
| actions | Yes | |
| openapi | Yes | |
| product | Yes | |
| request | Yes | |
| version | Yes | |
| boundary | Yes | |
| decision | Yes | |
| checkedAt | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It does this unusually well by explicitly stating that the tool follows no redirect, calls no target tool, sends no credential or target payment, and returns no target schema, response body, or session identifier. These safety and side-effect disclosures are highly relevant for agent invocation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but every sentence earns its place: the first states the core action, the second routes to sibling tools, and the third covers safety and non-side-effects. It is front-loaded with the most important information and contains no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has six parameters, an output schema, and no annotations, the description provides enough context for an agent to select and invoke it correctly. It explains purpose, alternatives, safety behavior, surface-selection semantics, and what will not be returned, while the output schema covers return-structure details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the input schema already documents all six parameters thoroughly. The description adds useful context about byte budgets and unselected surfaces, but it does not need to explain individual parameters; the baseline of 3 is appropriate when the schema carries the parameter-level detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb ('Measure') and a precise resource: a public service's credential-free MCP tools/list, OpenAPI, or both discovery surfaces. It also names sibling tools and clarifies what this tool does not do, making it easily distinguishable from agent_discoverability_audit and seller_integrity_audit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says when to use this tool ('before any tool call or target payment') and gives exact routing guidance: use agent_discoverability_audit for catalog reach and rank, seller_integrity_audit for a single operation's response contract, and this tool for byte budgets, heaviest definitions, and progressive-discovery fixes. It also states that unselected surfaces are not fetched or judged, which clarifies selection behavior.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
contract_qualified_searchSearch Contract-Qualified ServicesAInspect
Search Agent402 and the official MPP catalog for paid machine services that both match a capability intent and guarantee buyer-required JSON response paths. Use agent_discoverability_audit when you are measuring one known seller's catalog reach or rank, seller_integrity_audit when you already know the exact seller route to inspect, or payment_offer_preflight when you already have one exact callable GET URL. This search excludes SameDayDesk-owned supply and unresolved routes before audit, uses no credential or wallet, sends no seller POST or target payment, reads no paid response body, and returns only a query digest.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum candidates audited and returned across Agent402 and MPP. | |
| query | Yes | Capability intent sent to Agent402 and used locally to rank MPP catalog metadata. Do not include credentials or private values. | |
| requiredPaths | Yes | Buyer-required dotted success-response paths that every returned seller schema must guarantee recursively. | |
| maxPriceDisplayUnits | No | Maximum advertised per-call price in each source's display currency. |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| product | Yes | |
| request | Yes | |
| sources | Yes | |
| version | Yes | |
| boundary | Yes | |
| decision | Yes | |
| rejected | Yes | |
| checkedAt | Yes | |
| qualified | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It discloses exclusions (SameDayDesk-owned supply, unresolved routes), states it uses no credentials or wallet, sends no seller POST or payment, reads no paid response body, and returns only a query digest. This is strong behavioral disclosure, though it doesn't explicitly mention rate limits or error handling, but for a search tool this is quite thorough.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is moderately long but every sentence provides value: it specifies sources, matching criteria, alternative tools, exclusions, and behavioral guarantees. The alternative tool list adds length but is crucial for usage guidance. No filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 4 params with 100% schema coverage, output schema present, and no nested objects, the description is complete. It covers purpose, usage boundaries, exclusions, side-effect guarantees, and return nature. The output schema handles return values, so no gap there.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% for all four parameters, each with detailed descriptions including constraints and purpose. The description adds the context that 'query' is a capability intent and that 'requiredPaths' must be dotted success-response paths, but these are largely echoed in schema descriptions. Baseline 3 is appropriate since schema does heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states it searches Agent402 and MPP for paid machine services that match capability intent and guarantee required JSON response paths. It names the specific resources and the filtering criterion, distinguishing it from sibling audit tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly names three sibling tools and specifies their use cases versus this tool: agent_discoverability_audit for measuring a known seller's catalog reach, seller_integrity_audit when a specific seller route is known, and payment_offer_preflight when an exact callable GET URL exists. This gives clear when-to-use versus when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
deep_auditAudit Complete AI Search ReadinessAInspect
Run one read-only AI-search-readiness audit for a public business domain: company, technology, contact, and DNS/email evidence from enrich, plus the live structured-data gap analysis and paste-ready JSON-LD template from schemaforge. Use enrich for company facts only or schemaforge for structured-data remediation only. The template contains placeholders for real data; the score is diagnostic, no site changes are made, and it does not guarantee AI citations.
| Name | Required | Description | Default |
|---|---|---|---|
| city | No | Optional city the business serves; used only to contextualize the generated structured-data template. | |
| domain | Yes | Public business domain or URL. The hostname is normalized and the audit starts at its HTTPS homepage; any supplied path or query is ignored. | |
| vertical | No | Optional structured-data template profile. med-spas is currently specialized; unsupported values fall back to it. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It proactively discloses: read-only operation ('read-only'), no site changes ('no site changes are made'), diagnostic nature of the score ('the score is diagnostic'), placeholders in the template ('The template contains placeholders for real data'), and a limitation ('does not guarantee AI citations'). These go well beyond a minimal description.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the primary purpose. Every clause adds value: the first sentence defines scope and components, the second gives alternative directives and important caveats. There is no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a composite tool (enrich + schemaforge) with no output schema, yet the description covers what the tool does, what it returns (gap analysis, JSON-LD template, diagnostic score), its limitations, and how it relates to siblings. Given the complexity, the description is complete enough for an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already documents all 3 parameters at 100% coverage. The description adds a little context (e.g., 'public business domain' and the mention of template placeholders) but does not materially enrich the meaning of individual parameters. Per calibration, baseline 3 is appropriate when schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource: 'Run one read-only AI-search-readiness audit for a public business domain.' It enumerates concrete components (company, technology, contact, DNS/email evidence, structured-data gap analysis, JSON-LD template) and explicitly distinguishes itself from sibling tools by directing users to 'enrich' for company facts only or 'schemaforge' for structured-data remediation only.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage guidance is explicit: 'Use `enrich` for company facts only or `schemaforge` for structured-data remediation only.' This clearly states when to use this tool versus its alternatives. It also sets expectations with 'one read-only audit' and 'public business domain,' making the applicable scope unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
enrichEnrich Company DomainAInspect
Inspect a public company domain and return structured identity, technology, social, contact, DNS, email-infrastructure, and AI-readiness evidence. Use schemaforge instead for a paste-ready JSON-LD template and remediation diff, or deep_audit when both outputs are required together. Public data only; this tool makes no site changes.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Public company domain or URL, for example stripe.com. Use enrich for company evidence; use wallet_enrich for an EVM address. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full behavioral burden. It explicitly discloses that the tool uses public data only and makes no site changes, effectively communicating a read-only safety profile. It also describes the output as structured evidence, setting expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three focused sentences: the first states the tool's action and output categories, the second gives precise alternatives, and the third clarifies the data scope and non-mutating nature. No filler, every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite lacking an output schema, the description enumerates the major output domains (identity, tech, social, contact, DNS, email-infrastructure, AI-readiness) and clearly situates the tool among siblings. This is sufficient for an agent to decide when to invoke it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and already provides a clear description of the 'domain' parameter with an example and a pointer to wallet_enrich. The main description reinforces the parameter but adds no new parameter-level semantics beyond what the schema already conveys, meriting the baseline score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb ('Inspect') and resource ('public company domain'), and enumerates the exact categories of evidence returned (identity, technology, social, contact, DNS, email-infrastructure, AI-readiness). It also distinguishes itself from siblings by naming schemaforge and deep_audit as alternatives.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit guidance is provided: use schemaforge for JSON-LD templates/remediation diff, deep_audit when both outputs are needed, and the tool is scoped to public data with no site changes. This gives clear when-to-use and when-not-to-use context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
extractExtract Web Page as Structured JSONAInspect
Fetch a public HTTP(S) page and return compact extraction signals for programmatic inspection: title, meta description, Open Graph/Twitter metadata, JSON-LD, headings, links, text excerpt, and AI-readiness flags. Use read instead when you need the page body as LLM-ready Markdown rather than metadata or a link inventory. Does not execute JavaScript; follows redirects and applies SSRF, timeout, and response-size guards.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Public HTTP(S) URL. Choose extract for metadata, JSON-LD, headings, links, and a text excerpt; use read for cleaned full-body Markdown. Content is fetched without JavaScript rendering. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It transparently states that JavaScript is not executed, redirects are followed, and SSRF, timeout, and response-size guards are applied. It does not mention the exact output format or error behaviors, but for a low-complexity fetch tool this is solid coverage beyond the obvious read-only nature.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is exceptionally concise: two sentences. The first sentence lists the return content categories, and the second provides the alternative tool and salient behavioral guards. Every word adds value with no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the low complexity (one required parameter, no output schema), the description fully covers the tool's purpose, output signals, alternative usage, and safety behaviors. It is complete enough for an agent to select and invoke the tool without missing critical information.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The parameter description adds meaningful usage guidance by reiterating when to use extract vs. read and noting no JavaScript rendering, which goes beyond a mere type/format definition. This adds practical semantics for selecting the right tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Fetch') and clearly identifies the resource ('public HTTP(S) page') and the output (compact extraction signals: title, meta description, Open Graph/Twitter metadata, JSON-LD, headings, links, text excerpt, AI-readiness flags). It also distinguishes itself from the sibling tool 'read' by explicitly contrasting metadata/link inventory vs. full-body Markdown, which is strong sibling differentiation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use 'extract' (need metadata, JSON-LD, headings, links, text excerpt) and when to use 'read' instead (need the page body as LLM-ready Markdown). This directly addresses the main alternative among siblings and gives clear decision criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
morpho_market_underwriteUnderwrite Morpho MarketAInspect
Underwrite one Base Morpho market with independent GraphQL, REST, and direct-RPC evidence for configuration integrity, liquidity, utilization, concentration, borrower health bands, recent history, bad debt, and PreLiquidation availability. Use morpho_position or morpho_protection for one borrower's current position or protection plan, and morpho_preliquidation_replay for the economics of one completed historical event. Read-only evidence with explicit disagreements; no opaque risk score or transaction action.
| Name | Required | Description | Default |
|---|---|---|---|
| marketId | Yes | Morpho market ID on Base mainnet |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the full transparency burden. It discloses that the tool is read-only, aggregates evidence from three independent sources, will present explicit disagreements, and will not produce an opaque score or execute a transaction. This is solid behavioral disclosure, though it could mention failure modes or cost implications of the multi-source evidence gathering, hence not a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single dense paragraph that front-loads the verb and resource, enumerates the evidence categories, then pivots to alternatives and behavioral constraints. Every sentence provides distinct value, though the long list of evidence types makes it somewhat heavy. Overall it is efficient and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is complex (multi-source evidence for underwriting) and has no output schema, so the description must convey what the agent receives. It explains the evidence domains, the multi-source approach, and the output style (explicit disagreements, no risk score). It could be more explicit about the report's structure or format, but the description is complete enough for a knowledgeable agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema covers the single `marketId` parameter completely (100% coverage) with a pattern and description. The description adds minimal semantic value beyond the schema: it clarifies that the market is on Base and that a single market is underwritten, but these are largely already implied or stated in the schema. Baseline 3 is appropriate when schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Underwrite one Base Morpho market' and enumerates the exact evidence dimensions (configuration integrity, liquidity, utilization, concentration, borrower health bands, recent history, bad debt, PreLiquidation availability). It clearly distinguishes itself from siblings by naming the alternatives for one-borrower positions, protection plans, and historical replays.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool (underwriting a whole market) and when not to: it directs the agent to `morpho_position` or `morpho_protection` for one borrower's current position/protection, and `morpho_preliquidation_replay` for a single historical event. It also sets expectations ('no opaque risk score or transaction action'), which guides invocation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
morpho_positionInspect Morpho Borrower PositionAInspect
Inspect one Base borrower across Morpho markets and return position balances, LTV, health factor, liquidation headroom, direct-RPC verification, and caller-selected collateral-price stress scenarios. Use morpho_protection when you need exact repay or add-collateral amounts and unsigned transaction templates, morpho_market_underwrite for market-wide risk, or morpho_preliquidation_replay for one completed historical event. Read-only; no wallet, signing, broadcast, or custody.
| Name | Required | Description | Default |
|---|---|---|---|
| shocks | No | Collateral price shocks in percent | |
| address | Yes | Borrower EVM address on Base mainnet |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and clearly states 'Read-only; no wallet, signing, broadcast, or custody,' which is a key behavioral disclosure. It also adds context about direct-RPC verification and caller-selected stress scenarios, but does not fully detail edge-case behavior or response structure, preventing a top score.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise: a single dense sentence explaining purpose and outputs, followed by sibling comparisons and a safety note. No filler or redundancy; every sentence contributes information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For an inspection tool with two simple parameters and no output schema, the description covers the essentials: what it inspects, what it returns, how to choose alternatives, and safety. It is sufficiently complete for an agent to decide when and how to invoke it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema provides 100% coverage for both parameters (address, shocks), so the baseline is 3. The description adds meaning by referring to 'caller-selected collateral-price stress scenarios,' which clarifies the intent behind the `shocks` parameter beyond its raw schema description, earning a 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Inspect one Base borrower across Morpho markets') and enumerates concrete outputs ('position balances, LTV, health factor, liquidation headroom, direct-RPC verification, and caller-selected collateral-price stress scenarios'). It also distinguishes itself from sibling tools by naming alternatives, making the purpose unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly gives when-to-use guidance: 'Use morpho_protection when you need exact repay or add-collateral amounts and unsigned transaction templates, morpho_market_underwrite for market-wide risk, or morpho_preliquidation_replay for one completed historical event.' It also notes the read-only nature, informing safe usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
morpho_preliquidation_replayReplay Morpho PreLiquidationAInspect
Reconstruct one successful Base Morpho PreLiquidation transaction from its receipt and the exact block state, returning repaid and seized assets, protocol-oracle valuation, gross incentive, configured health window, and transaction gas before off-chain costs. Use morpho_market_underwrite for current market risk, morpho_position for a current borrower, or morpho_protection for a future protection plan. Historical read-only evidence; no transaction simulation, wallet, signing, or broadcast.
| Name | Required | Description | Default |
|---|---|---|---|
| transactionHash | Yes | Successful Base transaction containing a Morpho PreLiquidate event |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| chain | Yes | |
| events | Yes | |
| product | Yes | |
| version | Yes | |
| boundary | Yes | |
| eventCount | Yes | |
| transaction | Yes | |
| verification | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description must carry the full burden. It explicitly states 'Historical read-only evidence; no transaction simulation, wallet, signing, or broadcast,' disclosing it is a safe read operation with no side effects. It also describes the inputs (receipt and exact block state) and outputs, providing a clear behavioral contract. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, dense and front-loaded. The first sentence packs purpose and key output types; the second sentence gives alternative tool guidance and safety constraints. No fluff or repetition. Ideal for quick agent parsing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With an output schema present, the description needn't detail return values. It covers purpose, usage boundaries, safety profile, and parameter context. For a read-only, single-parameter tool, this description is thorough and leaves no critical gaps for an agent to misinterpret.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% (single transactionHash with description 'Successful Base transaction containing a Morpho PreLiquidate event'). The description adds the context that the tool uses the receipt and exact block state to reconstruct the transaction, providing extra meaning about how the hash is used. It also clarifies the hash must be for a successful transaction, reinforcing the schema. This goes beyond the schema, so a 4 is justified.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reconstructs a successful Base Morpho PreLiquidation transaction from its receipt and exact block state, listing specific outputs (repaid/seized assets, oracle valuation, incentive, health window, gas). It explicitly contrasts with sibling tools by naming morpho_market_underwrite, morpho_position, and morpho_protection for different use cases, distinguishing it from other Morpho tools and general transaction receipt tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit guidance on when to use this tool (historical read-only evidence for past transactions) and when to use alternatives (current market risk: morpho_market_underwrite; current borrower: morpho_position; future plan: morpho_protection). Also states what the tool does not do (simulation, wallet, signing, broadcast). This is exceptional guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
morpho_protectionPlan Morpho Borrower ProtectionAInspect
Calculate two alternative protection plans for one Base Morpho borrower under a selected collateral-price shock and target health factor: partial repayment or added collateral. Each plan includes the bounded asset amount, expected stressed health factor, evidence basis, and unsigned ERC-20 approval plus Morpho call templates. Use morpho_position for diagnosis without an action plan, morpho_market_underwrite for market-wide risk, or morpho_preliquidation_replay for a completed historical event. Read-only; no wallet, signing, broadcast, or custody.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | Borrower EVM address on Base mainnet. | |
| executionBufferBps | No | Additional repayment or collateral amount buffer in basis points for debt accrual and integer rounding; 25 means 0.25%. | |
| targetHealthFactor | No | Target Morpho health factor after the selected collateral-price shock; must be greater than 1 and at most 5. | |
| protectAgainstShockPct | No | Collateral-price shock percentage to withstand, from -99 through 0; for example -10 models a 10% price decline. |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| chain | Yes | |
| inputs | Yes | |
| quotes | Yes | |
| source | Yes | |
| address | Yes | |
| product | Yes | |
| version | Yes | |
| boundary | Yes | |
| fetchedAt | Yes | |
| invariants | Yes | |
| positionCount | Yes | |
| actionableCount | Yes | |
| latestIndexedAt | Yes | |
| unverifiedCount | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Description declares 'Read-only; no wallet signing, broadcasting, or custody' which covers external side effects, but lacks explicit statements about in-memory state mutation, though 'read-only' implies no state changes. No annotation exists to add credibility.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Compact but dense description. It is structured with use-cases, alternatives, read-only note, template list. Not wordy, but rich.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The output schema exists, and the description includes plan components (bounded asset amount, stressed health, evidence basis, ERC-20 approval plus Morpho stack). Context is given through sibling tool references and output/input schema, sufficient for a read-only calculation tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Parameter descriptions in the schema are substantive: address pattern, basis-point buffer meaning with default and range, target health with exclusive min and max, and collateral shock range with -10 example. No parameter details are in the description, but schema coverage is 100% and the encoding is clear.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Calculate two alternative protection plans for one Base Morpho borrower under a selected collateral-price shock and target health') and explicitly differentiates from sibling tools by naming the alternatives (morpho_position for diagnosis, morpho_market_underwrite for market-wide risk, morpho_preliquidation_replay for historical events).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit when-to-use guidance ('Use `morpho_position` for a diagnosis without a plan, `morpho_market_underwrite` for market-wide risk, or `morpho_preliquidation_replay` for a completed historical event') and states read-only constraints, wallet signing, broadcasting, custody.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
opportunity_preflightPreflight Agent Work OpportunityAInspect
Agent work opportunity -> deterministic attempt, verify-first, or abandon preflight using caller-supplied cost and selection assumptions plus dated platform evidence. Returns break-even probability, expected surplus, hard gates, and source-linked evidence. No claim, bid, payment, or submission.
| Name | Required | Description | Default |
|---|---|---|---|
| hours | Yes | Estimated human and agent work time in hours for one complete attempt. | |
| slots | No | Number of independently paid winner or worker slots. | |
| platform | No | Optional platform slug used to attach dated platform-health evidence when a matching card exists. | |
| rewardUsd | Yes | Maximum gross reward in USD if the opportunity is selected and paid. | |
| acceptance | No | How completion is accepted: deterministic proof, machine score, review deadline, discretionary judgment, or unknown. | unknown |
| computeUsd | No | Expected model, API, hosting, and compute spend in USD for one attempt. | |
| settlement | No | How the reward is funded and paid: direct, escrow, platform balance, discretionary, unfunded, or unknown. | unknown |
| agentAccess | No | Whether the platform explicitly allows agent participation, is agent-only, mixes agents and humans, is human-only, or remains unknown. | unknown |
| competition | No | Known number of competing submissions or workers; use 0 when unknown. | |
| hourlyCostUsd | Yes | Internal opportunity cost per hour in USD. | |
| reusableValueUsd | No | Conservative USD value of reusable code, research, distribution, or other assets created by the attempt. | |
| mandatorySpendUsd | No | Non-recoverable cash spend in USD required before the opportunity can settle. | |
| selectionProbabilityPct | No | Caller-supplied probability, from 0 to 100, of receiving the reward; omit to receive a verify-first decision. |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| gates | Yes | |
| input | Yes | |
| product | Yes | |
| version | Yes | |
| boundary | Yes | |
| decision | Yes | |
| economics | Yes | |
| platformEvidence | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the burden. It discloses non-mutating behavior ('No claim, bid, payment, or submission'), states inputs (caller assumptions, dated platform evidence) and outputs (probability, surplus, gates, evidence), giving a solid behavioral profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences: purpose arrow, output summary, and side-effect disclaimer. Every sentence adds distinct value and the most important information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 13 parameters and no annotations, the description plus 100%-covered schema and output schema provide a complete enough picture. It could add example scenarios or failure modes, but it is not missing critical operational context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 100% parameter coverage, so baseline is 3. The description only adds aggregate context ('caller-supplied cost and selection assumptions', 'dated platform evidence') rather than per-parameter meaning, which is acceptable because the schema already documents every parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description explicitly frames the tool as preflight analysis of an agent work opportunity, listing concrete outputs (break-even probability, expected surplus, hard gates, source-linked evidence) and a clear non-action boundary ('No claim, bid, payment, or submission'), which distinguishes it from action-oriented siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Clear context: use with caller-supplied cost and selection assumptions plus dated platform evidence before deciding among deterministic attempt, verify-first, or abandon. It excludes submission, claims, and payment, though it does not name specific alternative tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
payment_offer_preflightPreflight x402 and MPP OfferAInspect
Compare x402 and MPP payment challenges, terms, and seller-declared JSON success-response readiness for one exact public HTTPS GET route before buyer authorization, including URL and realm binding, expiry, cross-protocol economic parity, and exact-route OpenAPI evidence. Use agent_discoverability_audit instead when you need to know whether catalogs rank or expose a service. This tool uses no target credential, signature, or target payment, follows no redirect, never reads the paid target body, and reads only the same-origin public OpenAPI document under a strict size cap. A seller declaration is advisory and does not establish runtime validity, seller trust, utility, or settlement reliability.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Exact public HTTPS GET route whose unpaid x402 and MPP challenge headers and same-origin OpenAPI success-response declaration should be inspected before buyer authorization. Credential-like query keys, fragments, unresolved parameters, local hosts, redirects, and non-public IPs are rejected. | |
| catalog | No | Optional caller-supplied catalog candidate. When present, the tool compares it with every live unsigned offer across request, protocol, amount, network, asset, recipient, and expiry. |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| offers | Yes | |
| parity | Yes | |
| target | Yes | |
| product | Yes | |
| version | Yes | |
| boundary | Yes | |
| decision | Yes | |
| findings | Yes | |
| checkedAt | Yes | |
| protocols | Yes | |
| offerCount | Yes | |
| catalogCoherence | Yes | |
| responseContract | Yes | |
| responseContractAcquisition | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description fully discloses behavioral traits: it uses no target credential/signature/payment, follows no redirects, never reads the paid target body, and only reads a same-origin public OpenAPI document under a strict size cap. It also clearly warns that seller declarations are advisory and not proof of validity/trust/reliability.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Though dense, every sentence carries critical information: purpose, usage contrast, safe-operation boundary, and advisory nature. It is front-loaded with the core action and then systematically covers constraints. No fluff or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is fully sufficient for an agent to understand the tool's scope, limitations, and input expectations. It addresses all key aspects: exact route requirement, comparison dimensions, safety guarantees, and the advisory nature of results. The presence of an output schema further reduces the need to explain return values, and the description still outlines what evidence is gathered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and the description adds substantial meaning beyond the schema. For the url parameter, it explains that the route's unpaid challenge headers and OpenAPI declaration will be inspected. For the catalog parameter, it details exactly how the comparison is performed (across request, protocol, amount, network, asset, recipient, and expiry). This goes well beyond the raw schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Compare') and resource ('x402 and MPP payment challenges, terms, and seller-declared JSON success-response readiness') for a precise target (one exact public HTTPS GET route). It clearly distinguishes itself from siblings by explicitly naming agent_discoverability_audit as the alternative when catalog ranking/exposure is needed.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool ('before buyer authorization'), what it covers (URL/realm binding, expiry, parity, OpenAPI evidence), and when not to use it (explicitly directing to agent_discoverability_audit for the alternative use case). It also clarifies what the tool does not do (no credentials, no redirects, no reading paid body).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
readRead Web Page as MarkdownAInspect
Fetch a public HTTP(S) page and return its readable body as cleaned Markdown for LLM context, preserving headings, links, and lists while dropping navigation, ads, scripts, headers, footers, asides, and forms. Use extract instead when you need metadata, JSON-LD, Open Graph/Twitter tags, or a link inventory. Markdown is capped at 40,000 characters and no JavaScript is executed.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Public HTTP(S) URL whose readable body is needed as Markdown. Content is fetched without JavaScript rendering and may be truncated at 40,000 characters. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does so well: it states the output is cleaned Markdown, that navigation/ads/scripts/header/footer/aside/form elements are dropped, that the markdown is capped at 40,000 characters, and that no JavaScript is executed. This gives the agent a realistic model of the tool's behavior without needing annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences: first states core function and transformations, second points to an alternative, third states the two key constraints (cap and no JS). No filler or repetition; the information density is high and it front-loads the purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with one parameter and no output schema, this description fully covers inputs, outputs, transformations, limitations, and alternatives. The only potential missing piece is explicit return type, but the description says 'return its readable body as cleaned Markdown' which is sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema covers the sole parameter (url) with a description that reproduces almost all details (public HTTP(S), needed as Markdown, no JS, truncation at 40k). Since schema coverage is 100% and the description does not add new detail beyond the schema, the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb phrase 'Fetch a public HTTP(S) page and return its readable body as cleaned Markdown,' precisely identifying the action and resource. It also distinguishes itself from the sibling tool by noting 'Use extract instead when you need metadata...' so it avoids ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly names the alternative tool ('Use extract instead') and lists the conditions (metadata, JSON-LD, Open Graph/Twitter tags, link inventory) where that alternative is preferred. It also implicitly defines when to use this tool: anytime the readable body as Markdown is needed, especially for LLM context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
scanScan GitHub Repository Before InstallAInspect
Static supply-chain security scan of a public GitHub repo before an agent installs/runs it. Flags exfil sinks, obfuscation, credential reads, install-time curl|bash. risk=clean|suspicious|dangerous.
| Name | Required | Description | Default |
|---|---|---|---|
| repo | Yes | Public GitHub repo: owner/name or URL |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| repo | Yes | |
| risk | Yes | |
| branch | Yes | |
| summary | Yes | |
| findings | Yes | |
| scannedAt | Yes | |
| disclaimer | Yes | |
| filesScanned | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description must reveal behavioral characteristics beyond what a machine would infer. It does provide safety-relevant behavior details: it flags specific risk signals (exfiltration sinks, obfuscation, credential reads, install-time curl|bash) and a tri-state risk verdict, giving the agent a reasonably complete behavioral picture of the scan.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact: three dense sentences, with semicolon-separated list of risk flags, and a clear risk-delimited output. No filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has an output schema defining the risk result and a modest single input parameter. The description does not fully specify whether the scan executes code locally, network-access requirements, or specific permissions. However, for a public-repo static scanner with a clear output score, this is largely a complete context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema fully documents the 'repo' parameter (owner/name or URL). The description adds only marginal context (that the repo must be public and is on GitHub), which is useful but not a transformative explanation of parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Scan' with a clear resource ('public GitHub repository') and temporal scope ('before an agent installs/runs it'), distinguishing it as a supply-chain security scanner rather than a general code-generation or procurement tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It clearly situates the tool's purpose: security scanning of public repos prior to install. However, it does not explicitly state when not to use it (e.g., for PRIVATE repos or after code execution) or name alternative tools, though the static-context makes the intended trigger scenario strong enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
schemaforgeGenerate Business JSON-LDAInspect
Analyze a public business site and return a deterministic, paste-ready JSON-LD template plus the live structured-data gap diff and ranked fixes. Use deep_audit instead when the same call must also return company, technology, contact, and DNS/email evidence. Generated markup contains placeholders that must be replaced with real business values; this tool makes no site changes and does not guarantee AI citations.
| Name | Required | Description | Default |
|---|---|---|---|
| city | No | Optional city the business serves; used to contextualize the generated structured-data template. | |
| site | Yes | Public business homepage or representative landing-page URL. Live HTML must be directly fetchable; JavaScript is not executed. | |
| vertical | No | Optional structured-data template profile. med-spas is currently the specialized profile; unsupported values fall back to it. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full responsibility for behavioral disclosure. It does well by stating that the output is deterministic, contains placeholders requiring replacement, makes no site changes, and does not guarantee AI citations. This goes beyond basic read/write hints. A slight gap is not covering rate limits or authentication, but for an analysis tool this is sufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, each serving a distinct purpose: purpose and outputs, alternative guidance, and caveats. It is front-loaded with the main functionality and has no redundant or filler content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema and moderate complexity, the description gives a solid overview of expected outputs (template, diff, fixes) and key constraints (placeholders, no site changes). It does not describe the structure of the diff or fixes, but the core usage context is well covered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents each parameter. The description adds no additional parameter-level detail beyond what the schema provides (e.g., the `site` fetchability and JS behavior are already in the schema). Therefore, baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Analyze') and clearly identifies the resource ('public business site') and the outputs ('JSON-LD template', 'gap diff', 'ranked fixes'). It also distinguishes itself from the sibling tool `deep_audit` by noting when to prefer the alternative, making the purpose unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly provides an alternative tool ('Use `deep_audit` instead') and states the condition for switching (when company, technology, contact, and DNS/email evidence are needed). This gives clear when-to-use and when-not-to-use guidance, which is rare and highly useful for an agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
seller_integrity_auditAudit Seller Machine BuyabilityAInspect
Use this after a buyer integration fails, a seller changes a paid route, or before the next paid retry or release. Audit one exact paid GET or POST seller route against buyer-required JSON success paths. GET verifies constructible non-secret input, exact request binding, live x402 and MPP economics, and optional Bazaar eligibility; POST performs static-safe OpenAPI contract analysis and sends no target request. Use payment_offer_preflight instead when you already have one exact callable GET URL and only need its current unpaid offer before buyer authorization, or agent_discoverability_audit for catalog rank and identity. Uses no target credential, signature, or target payment and retains no seller schema, body, or query values.
| Name | Required | Description | Default |
|---|---|---|---|
| route | Yes | Exact paid GET or POST path declared by the seller, without query or template parameters. | |
| method | No | POST receives static OpenAPI response-contract analysis without sending a target request. | GET |
| origin | Yes | Credential-free public HTTPS seller origin on port 443. | |
| referral | No | Optional x402 receipt-derived acquisition label. It cannot change payment or delivery. | |
| requireBazaar | No | When true, missing Bazaar discovery metadata becomes a repair finding for live-probed GET routes. | |
| requiredPaths | No | Buyer-required dotted success-response paths that the seller schema must guarantee recursively. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the behavioral disclosure burden. It does so thoroughly: GET performs live verification of x402 and MPP economics, POST performs static-safe OpenAPI analysis and sends no target request, and no target credential, signature, payment, or retained schema/body/query values are used.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but well-structured: usage triggers first, then operation details, then exclusions and safety guarantees. Every sentence adds value and no words are wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with six params, no annotations, and no output schema, the description is remarkably complete. It covers when to use it, what GET vs POST do, which sibling to choose instead, and what data is not used or retained, leaving the agent well-equipped to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents every parameter. The description adds useful behavioral context, such as 'live x402 and MPP economics' and 'static-safe OpenAPI contract analysis,' but it does not materially expand the per-parameter semantics beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description is specific: it audits one exact paid GET or POST seller route against buyer-required JSON success paths. It names the resource, verb, and scope, and explicitly distinguishes itself from sibling tools payment_offer_preflight and agent_discoverability_audit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The first sentence gives explicit trigger conditions: after a buyer integration fails, after a seller changes a paid route, or before the next paid retry or release. It also names alternatives and the exact conditions under which to use them instead.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
settlement_proofVerify Base USDC SettlementAInspect
Verify one claimed canonical Base USDC settlement after execution by matching a successful transaction receipt to the exact recipient, atomic amount, and optional payer. Use payment_offer_preflight before authorization when you need to inspect an unpaid x402 or MPP offer instead. This tool reads only public Base receipt and log data; it reads no merchant ledger and performs no wallet, signing, broadcast, custody, or execution action.
| Name | Required | Description | Default |
|---|---|---|---|
| payer | No | Optional expected canonical Base USDC payer. | |
| recipient | Yes | Expected canonical Base USDC recipient. | |
| amountAtomic | Yes | Expected positive USDC amount in six-decimal atomic units. | |
| transactionHash | Yes | Base mainnet transaction hash containing the claimed canonical USDC transfer. |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| asset | Yes | |
| chain | Yes | |
| product | Yes | |
| request | Yes | |
| version | Yes | |
| boundary | Yes | |
| decision | Yes | |
| findings | Yes | |
| checkedAt | Yes | |
| settlement | Yes | |
| transaction | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full responsibility for behavioral disclosure. It explicitly states the tool 'reads only public Base receipt and log data' and 'performs no wallet, signing, broadcast, custody, or execution action,' which is strong transparency for a verification tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, each earning its place: purpose and matching criteria, alternative tool guidance, and safety/read-only behavior. The description is front-loaded and free of filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity, the presence of an output schema, and 100% schema parameter coverage, the description sufficiently covers purpose, usage context, behavioral constraints, and parameter intent. No critical context is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds the notion of 'exact' matching and 'optional payer,' but it does not materially enrich parameter semantics beyond the schema's own descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Verify') with a precise resource ('claimed canonical Base USDC settlement') and defines the matching criteria (successful transaction receipt, exact recipient, atomic amount, optional payer). This clearly differentiates it from generic receipt tools like transaction_receipt and from preflight tools like payment_offer_preflight.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states when to use the tool ('after execution') and names a specific alternative for a different scenario: 'Use payment_offer_preflight before authorization when you need to inspect an unpaid x402 or MPP offer instead.' This gives clear contextual guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
solana_transaction_receiptInspect Solana Transaction ReceiptAInspect
Inspect one finalized Solana mainnet transaction signature and return normalized success or failure status, slot, block time, fee, SPL-token owner deltas, and canonical USDC deltas. Supply recipient, amount, and optional payer when an exact settlement claim must be verified; use transaction_receipt for Base or Ethereum. Raw instructions and logs are excluded, and this tool performs no wallet, signing, broadcast, custody, or execution action.
| Name | Required | Description | Default |
|---|---|---|---|
| mint | No | Optional SPL-token mint; defaults to canonical Solana USDC. | |
| payer | No | Optional expected token payer owner; requires recipient and amountAtomic. | |
| recipient | No | Optional expected token recipient owner. | |
| signature | Yes | Finalized Solana mainnet transaction signature. | |
| amountAtomic | No | Optional expected positive token amount in atomic units; requires recipient. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description takes on full responsibility. It discloses what is returned (success/failure status, slot, block time, fee, deltas), what is excluded (raw instructions and logs), and explicitly states what the tool does NOT do ('no wallet, signing, broadcast, custody, or execution action'). This is strong behavioral disclosure, though it could additionally address error handling for non-finalized signatures.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact yet information-dense. The first sentence states the core action and outputs, the second provides usage context and an alternative, and the third clarifies exclusions and non-actions. Every sentence serves a purpose with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has five parameters (one required), no output schema, and no annotations, so the description must carry significant weight. It does so by covering purpose, specific return fields, exclusions, and chain specificity. However, given the complexity of the return data, a more detailed description of the response format would improve completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already covers all parameters with descriptions (100% coverage), so the baseline is 3. The description adds value by relating parameters to the settlement verification use case ('Supply recipient, amount, and optional payer when an exact settlement claim must be verified') and indicating that mint defaults to canonical USDC, enhancing the schema's dependency notes.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool 'Inspect one finalized Solana mainnet transaction signature' and lists the specific return values (status, slot, block time, fee, SPL-token owner deltas, canonical USDC deltas). It distinguishes itself from the sibling `transaction_receipt` by explicitly noting that it is for Base or Ethereum.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use this tool: 'Supply recipient, amount, and optional payer when an exact settlement claim must be verified' and for alternative chains, 'use transaction_receipt for Base or Ethereum.' It also clarifies exclusions and non-actions, offering clear context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
stateful_wallet_policy_conformanceEvaluate Stateful Wallet Policy ConformanceAInspect
Evaluate safe standardized observations from wallet policies that track prior or concurrent requests. Use wallet_policy_conformance instead for one-request action shape, method, chain, token, recipient, amount, and function controls. This tool separately tests sequential cumulative limits, signed-but-unbroadcast accounting, ABI extraction, concurrent oversubscription, counter-reference failure, and application serialization. It accepts no credentials, counter values, wallet or resource IDs, signatures, transactions, or raw provider responses and does not run the provider tests itself.
| Name | Required | Description | Default |
|---|---|---|---|
| network | Yes | Network identifier used by the tested stateful profile. | |
| protocol | Yes | Payment or execution protocol bound by the tested stateful profile. | |
| provider | Yes | Wallet or delegated-signer provider name. | |
| profileId | Yes | Caller-defined stateful policy profile identifier with no credential, wallet, or counter secret. | |
| observations | Yes | Unique standardized stateful observations. Raw provider responses, signatures, transactions, counter values, credentials, wallet IDs, and resource IDs are rejected. |
Output Schema
| Name | Required | Description |
|---|---|---|
| product | Yes | |
| profile | Yes | |
| results | Yes | |
| boundary | Yes | |
| complete | Yes | |
| decision | Yes | |
| evaluatedAt | Yes | |
| unsafeCases | Yes | |
| schemaVersion | Yes | |
| inconclusiveCases | Yes | |
| strictBudgetPassed | Yes | |
| applicationVerified | Yes | |
| missingRequiredCases | Yes | |
| standardSchemaVersion | Yes | |
| providerNativeVerified | Yes | |
| providerNativeUnverified | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the behavioral burden and does well by stating it 'accepts no credentials, counter values, wallet or resource IDs, signatures, transactions, or raw provider responses' and 'does not run the provider tests itself.' It does not explicitly state whether the operation is read-only or has side effects, but the evaluative framing and input restrictions strongly imply a safe, non-mutating test.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, front-loaded with the core purpose, then the alternative tool, then the distinguishing test scope and input constraints. Every sentence earns its place, and the structure is easy to scan.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with five required parameters, no annotations, and an output schema, the description is complete: it explains what the tool evaluates, how it differs from the sibling, what inputs are forbidden, and what it does not do. The output schema presumably covers return values, so no further return-format detail is needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds meaningful context by enumerating the tested behaviors (sequential cumulative limits, signed-but-unbroadcast accounting, ABI extraction, concurrent oversubscription, counter-reference failure, application serialization) that map to the observation `case` enum. It also reinforces the schema's rejection of unsafe inputs, adding value beyond the parameter descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Evaluate safe standardized observations from wallet policies that track prior or concurrent requests.' It clearly distinguishes this tool from its sibling by naming `wallet_policy_conformance` and contrasting the one-request controls it handles.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly directs users to `wallet_policy_conformance` for one-request action shape, method, chain, token, recipient, amount, and function controls, while stating this tool is for stateful cumulative, concurrency, and serialization tests. This provides clear when-to-use and when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
transaction_receiptInspect Transaction ReceiptAInspect
Inspect one Base or Ethereum transaction hash and return normalized success or revert status, block time, gas and fee fields, decoded ERC-20 Transfer events, and canonical USDC transfers. Use settlement_proof instead when you must verify an exact canonical Base USDC recipient, amount, and optional payer claim. Raw logs are excluded; this tool performs no wallet, signing, broadcast, custody, or execution action.
| Name | Required | Description | Default |
|---|---|---|---|
| network | No | Receipt network. Defaults to Base mainnet. | base |
| transactionHash | Yes | Mined Base or Ethereum transaction hash whose normalized receipt should be returned. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description fully discloses behavioral scope: what is returned (normalized status, block time, gas/fees, decoded transfers), what is excluded (raw logs), and what actions are NOT performed (wallet, signing, broadcast, custody, execution). This transparency goes beyond a simple 'inspect' and sets proper expectations for a read-only inspection tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences with a clear front-loaded purpose, followed by an alternative and exclusions. Every sentence contributes value without redundancy or fluff, maintaining high information density in a compact structure.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema, the description enumerates the main returned categories, states exclusions, and gives a fallback for deeper verification. For a 2-parameter, 1-required tool, this is complete and leaves minimal ambiguity for an agent deciding whether to invoke it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with both parameters described clearly. The description adds little beyond the schema for parameters; it restates the hash as 'mined' but doesn't add format or semantic details beyond what the schema's pattern and descriptions provide. According to the rubric, baseline 3 is appropriate when schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Inspect one Base or Ethereum transaction hash' and enumerates specific outputs (normalized success/revert status, block time, gas and fee fields, decoded ERC-20 Transfer events, canonical USDC transfers). It distinguishes itself from `settlement_proof` by naming the alternative, making the tool's specific role unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly provides usage guidance with a direct alternative: 'Use `settlement_proof` instead when you must verify an exact canonical Base USDC recipient, amount, and optional payer claim.' It also clarifies exclusions ('Raw logs are excluded') and non-actions ('performs no wallet, signing, broadcast, custody, or execution action'), giving clear when-to-use and when-not-to-use context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
wallet_enrichEnrich Base Wallet or ContractAInspect
Inspect a public Base or EVM address and return an agent-ready on-chain profile: EOA or contract type, native and curated token holdings, token/NFT metadata, proxy evidence, activity, and a derived profile label. Use enrich for a company domain; the two tools accept different identifiers and return different evidence. Read-only public chain data; no wallet action or custody.
| Name | Required | Description | Default |
|---|---|---|---|
| address | Yes | Public Base or EVM 0x address. Use wallet_enrich for on-chain evidence; use enrich for a company domain. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the burden. It discloses the read-only nature ('Read-only public chain data; no wallet action or custody') and lists the evidence types returned, which sets expectations. It does not mention error handling or edge cases, but for a single-address inspection tool, this is fairly transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, each earning its place: main purpose, usage guidance, and safety disclosure. The description is front-loaded with the operation and scoped output, making it efficient and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With one parameter and no output schema, the description provides a comprehensive summary of what the tool does, what it returns, when to use it, and its safety profile. It is slightly lacking in explicit output format details or potential failure modes, but is sufficiently complete for an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the parameter description already explains the address and directs to use wallet_enrich vs enrich. The tool description adds that it 'Inspect[s] a public Base or EVM address' and returns a profile, but it does not introduce new parameter-level semantics; the schema already carries the burden.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Inspect' with a clear resource ('public Base or EVM address') and enumerates the output components (EOA/contract type, token holdings, NFT metadata, proxy evidence, activity, derived profile label). It also distinguishes from sibling `enrich` by identifier type, making the purpose unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states 'Use `enrich` for a company domain; the two tools accept different identifiers and return different evidence.' This gives clear when-to-use guidance and directly contrasts with the closest alternative. The read-only note further implies a safe analysis use case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
wallet_policy_conformanceEvaluate Agent Wallet Policy ConformanceAInspect
Evaluate safe standardized allow, deny, and error observations from an agent wallet or delegated signer. Use this after running a bounded provider policy test matrix to distinguish explicit provider-policy enforcement from validation or generic provider failures and to test exact execution shape separately from operation allowlisting. Accepts no credentials, wallet IDs, signatures, transactions, or raw provider responses; it evaluates caller-supplied observations and does not run the provider tests itself.
| Name | Required | Description | Default |
|---|---|---|---|
| network | Yes | Network identifier used by the tested profile. | |
| protocol | Yes | Payment or execution protocol bound by the tested profile. | |
| provider | Yes | Wallet or delegated-signer provider name. | |
| profileId | Yes | Caller-defined policy profile identifier with no credential or wallet secret. | |
| observations | Yes | Unique standardized observations. Raw provider responses, signatures, transactions, credentials, and wallet IDs are rejected. |
Output Schema
| Name | Required | Description |
|---|---|---|
| product | Yes | |
| profile | Yes | |
| results | Yes | |
| boundary | Yes | |
| complete | Yes | |
| decision | Yes | |
| evaluatedAt | Yes | |
| unsafeCases | Yes | |
| schemaVersion | Yes | |
| exactShapePassed | Yes | |
| inconclusiveCases | Yes | |
| missingRequiredCases | Yes | |
| standardSchemaVersion | Yes | |
| providerNativeVerified | Yes | |
| providerNativeUnverified | Yes | |
| notEvaluatedByWalletPolicy | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the behavioral disclosure burden. It clearly states 'Accepts no credentials, wallet IDs, signatures, transactions, or raw provider responses; it evaluates caller-supplied observations and does not run the provider tests itself,' which conveys the tool's safe, non-executing nature. It does not describe output behavior, but an output schema exists to cover that.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two dense sentences: the first states the core action and object, the second provides usage timing and input restrictions. Every sentence earns its place with no filler or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with five required parameters, a nested observations schema, and an output schema, the description covers purpose, usage context, and input safety constraints well. It does not need to explain return values because an output schema exists; the only minor gap is not explicitly contrasting with the stateful sibling tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with meaningful descriptions for all five parameters, so the baseline is 3. The description adds value by emphasizing that observations are safe, standardized, caller-supplied, and that raw provider responses and credentials are rejected, which reinforces the profileId and observations constraints.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Evaluate safe standardized allow, deny, and error observations from an agent wallet or delegated signer.' It clearly distinguishes itself from siblings like stateful_wallet_policy_conformance by stating it evaluates caller-supplied observations and does not run provider tests itself.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Use this after running a bounded provider policy test matrix' and explains the analytical goal: distinguishing provider-policy enforcement from validation/generic failures and separating execution shape from allowlisting. It does not name alternative tools or provide when-not-to-use guidance, but the usage context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user or an account that owns the GitHub organization, then choose Claim with GitHub.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables agents to access production-grade paid MCP tools with real on-chain x402 v2 settlement, including EVM wallet risk scoring, payload normalization, and facilitator discovery, all discoverable via Bazaar-compatible metadata.MIT
- AlicenseNot gradedqualityBmaintenanceProduction-grade suite of monetized tools for autonomous AI agent-to-agent commerce, enabling payments and task execution via x402 protocol and MCP.428MIT
- AlicenseBqualityCmaintenanceExposes 25 paid API endpoints as MCP tools for AI agents, with payments in USDC on Base mainnet via the x402 protocol, enabling tasks like web search, company intelligence, and crypto research.2568MIT
- AlicenseAqualityAmaintenanceAgentic payments on Solana: an agent can pay x402 / HTTP 402 paywalls in USDC, hold a pre-paid balance or a subscription, and buy datasets or settle store checkouts. All 15 tools run behind fail-closed spending caps ($1 per payment, $10 per day by default), and settlement is non-custodial through a program-owned escrow that releases 99% to the creator.18149MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.