Skip to main content
Glama

pabandi_verify_sd_jwt

Verify a W3C VC / IETF SD-JWT selective-disclosure trust presentation (<disclosure_1><disclosure_2>~). Returns verified disclosed claims (trust_band, deposit_basis_points, zero_deposit_eligible) without exposing raw PII or exact score. Free public verification tool.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "presentation": "<presentation>"
    },
    "name": "pabandi_verify_sd_jwt"
  }
}

Input Schema

NameRequiredDescriptionDefault
presentationYesTilde-separated SD-JWT presentation string (<issuer-jwt>~<disclosure_1>~...~)

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It does disclose two meaningful behaviors: the response shape (disclosed claims only) and a privacy guarantee (no raw PII, no exact score exposed), plus that verification is free/public. It does not say what happens on invalid signature or malformed presentation (error vs. unverified result), nor whether issuer trust anchors or expiry are checked.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two front-loaded sentences that lead with the verb, resource, and format. The trailing 'Free public verification tool' is slightly promotional but still carries useful access information. There is no filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter tool with no output schema, the description usefully names the returned claim fields (trust_band, deposit_basis_points, zero_deposit_eligible) and states the privacy constraint on output. The main gap is failure semantics — an agent cannot tell whether an invalid presentation raises an error or returns an unverified verdict.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the single 'presentation' parameter is already documented as a tilde-separated SD-JWT string; the description mostly restates that with an example. It adds only the decomposition into issuer JWT plus disclosure segments, which is marginal beyond the schema. Baseline 3 applies when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb ('Verify') plus a precise resource and format ('W3C VC / IETF SD-JWT selective-disclosure trust presentation'), and shows the concrete wire shape with the tilde-separated example. That format specificity separates it from siblings such as pabandi_verify_ed25519_receipt, pabandi_verify_passport, and pabandi_verify_trust_attestation, though it never names those alternatives explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no when-to-use / when-not-to-use guidance and no routing to or away from the other verify_* siblings. The only implied context is that it operates on a presentation string a caller already holds, and 'Free public verification tool' hints at an unauthenticated path but does not state preconditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.