Skip to main content
Glama

ActionGuard Protocol Inspector Agent

actionguard_check_drift

Read-only

Verify whether an MCP server's tools schema or descriptions have drifted from a pinned Dual-Hash.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlYesThe target MCP server endpoint URL
pinnedSchemaHashYesPinned 64-char hex SHA-256 schema hash

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint=true annotation already establishes that this is a non-mutating check, so the description only needs to add context. It does convey that both schemas and descriptions are compared against a pinned value, but it never explains what 'Dual-Hash' means, whether a mismatch is returned as a boolean/verdict, or how the two hashes differ.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler; the verb and object lead immediately. The only cost is the unexplained 'Dual-Hash' term, which spends words without fully informing the reader.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter read-only check with no output schema, the description covers the what but not the outcome: it does not say whether the result is a pass/fail verdict, a diff, or which of schema vs. description drifted. With annotations covering safety, this is adequate but leaves a real gap in interpreting the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% for both parameters, so url and pinnedSchemaHash are already fully documented as endpoint and 64-char hex SHA-256 hash. The description's mention of a 'pinned Dual-Hash' loosely reinforces pinnedSchemaHash but adds no format, sourcing, or acquisition detail beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Verify) and resource (an MCP server's tools schema or descriptions) plus the comparison basis (a pinned Dual-Hash), so the operation is unambiguous. It does not, however, distinguish itself from the sibling actionguard_inspect, leaving the boundary between 'check drift' and 'inspect' to inference.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use or when-not-to-use guidance, and the only sibling, actionguard_inspect, is never mentioned even though it is the obvious alternative for examining a server. The agent must guess whether drift checking is a pre-flight step, a post-deploy audit, or a substitute for inspection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.