Verify audit
verify_auditValidate the tamper-evident audit hash chain for a bond.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| bond_id | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |
verify_auditValidate the tamper-evident audit hash chain for a bond.
| Name | Required | Description | Default |
|---|---|---|---|
| bond_id | Yes |
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |
Changes observed during successful MCP inspections.
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is fully covered. The description contributes the useful fact that the target is a hash chain (implying integrity checking rather than a simple status read), but says nothing about what happens when the chain fails validation or how expensive the check is.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One front-loaded sentence with no filler, and the key differentiator (tamper-evident hash chain) appears immediately. It is efficient, though arguably too terse to stand alone as a complete definition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple (one read-only parameter) and has an output schema plus rich annotations, so return values and safety need not be explained. Still, the definition leaves the agent without any cue about when to invoke verification or how to interpret a negative result, which is a meaningful gap for a verification tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the single required parameter bond_id has no title beyond 'Bond Id' and no explanation. The phrase 'for a bond' weakly implies bond_id selects the bond, but the description adds no format, source, or failure semantics for that identifier.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description pairs a specific verb ('Validate') with a specific resource ('tamper-evident audit hash chain') scoped to 'a bond', which no sibling tool (activate_bond, list_bonds, slash_bond, etc.) duplicates. It is unambiguous what the tool does, though it does not name a sibling or explicitly contrast itself with bond_status.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to run this verification, whether it should be called before/after a state-changing operation such as release_bond or slash_bond, or whether it is cheap enough to call routinely. The only usage signal is the implicit 'for a bond' scope.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Add one secure layer between your agents and this server.