Skip to main content
Glama

Citation receipts: attest (0.0100 signed, 0.0400 logged) or verify (free)

attest

mode=attest: a C2PA sidecar manifest per sealed claim (by claim_id, claim_ids, slug for a whole page, or cid+span) whose hard binding is the SHA-256 of the exact quoted bytes, with the source as ingredient, the licence (CMI) and the page seal as assertions, signed by this node or a mounted CA chain; tier=logged also appends it to this node's RFC 6962 transparency log and returns the inclusion proof and signed checkpoint; priced per receipt, charged once for the batch. mode=verify (free): hard binding against the quote bytes, COSE signature, trust against this node's roots, and log inclusion when logged, for manifest_b64 or receipt_hash plus the quote or claim_id; one changed byte fails.

Input Schema

NameRequiredDescriptionDefault
cidNo
modeNoattest
slugNo
spanNo
tierNo
quoteNoverify: the exact text the receipt should bind
claim_idNo
claim_idsNo
x_paymentNo
work_tokenNo
manifest_b64Noverify: the receipt's manifest
receipt_hashNoverify: a receipt stored on this node

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With annotations declaring readOnlyHint=false, destructiveHint=false, and idempotentHint=false, the description goes well beyond them by disclosing pricing semantics, the transparency-log side effect of tier=logged (appends to an RFC 6962 log and returns inclusion proof and signed checkpoint), the signing authority (node key or mounted CA chain), and the strictness of verification ('one changed byte fails'). This is exactly the extra behavioral context annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The content is dense and information-rich, but it is delivered as two enormous run-on sentences heavy with semicolons and parentheticals, which hurts scannability. Front-loading is weak: mode behavior and pricing are interleaved rather than prioritized.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex dual-mode tool with no output schema and sparse schema docs, the description covers both directions of the workflow, the response artifacts (inclusion proof, signed checkpoint, verification outcome), and the cost model. It stops short of describing the return payload shape in detail and omits the payment/auth requirement tied to x_payment and work_token.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 25% across 12 params, so the description must compensate, and it largely does: it explains the roles of claim_id, claim_ids (whole-page batch), slug, cid+span, manifest_b64, receipt_hash, quote, mode, and tier. Only x_payment and work_token are left unaddressed, which is a modest gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb+resource per mode: 'mode=attest' produces a C2PA sidecar manifest bound to quoted bytes, and 'mode=verify' checks hard binding, COSE signature, trust, and log inclusion. The 'citation receipts' framing is concrete and distinct from siblings like read_page or package_check, though it never names a sibling to route against.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It clearly separates the two modes and their cost model ('priced per receipt, charged once for the batch' vs 'mode=verify (free)'), which is real when-to-use guidance. It does not, however, state prerequisites (e.g., that attest requires payment/auth or which mode precedes which) or compare against any sibling tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources