Skip to main content
Glama

Magist

Server Details

Deterministic, cited regulatory research for product launches; legal information, not legal advice.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2025-06-18
URL
Repository
magist-io/magist-mcp-server
GitHub Stars
0
Server Listing
Magist MCP Server

TDQS

A4.1/5.0

Scored across 9 tools

Disambiguation4/5

Most tools map to distinct resource+action pairs (compute over a product, search vs lookup a regulation, fetch enforcement, find counsel/vendors, validate ids, verify proofs). However, lookup_regulation already returns 'the Controls that may satisfy it' while find_controls takes a regulation id and returns those same controls, creating a genuine overlap boundary an agent could misselect on.

Naming Consistency5/5

All nine tools follow a clean verb_noun convention (compute_requirements, find_controls, find_counsel, find_vendors, get_enforcement, list_feature_catalog, lookup_regulation, search_regulations, verify_ai_answer). No mixing of camelCase or alternate verb styles.

Tool Count5/5

Nine tools is well-scoped for a compliance research server, and each tool corresponds to a distinct capability (compute, discover, validate, verify). No tool feels redundant or padded.

Completeness4/5

The surface covers the full research lifecycle: id validation (list_feature_catalog), product computation, regulation search/lookup, control/vendor/counsel discovery, enforcement history, and proof verification. Minor gaps exist (no direct get-by-id control endpoint independent of a regulation), but agents can work around them via find_controls.

Available Tools

9 tools
compute_requirementsCompute regulatory requirementsA
Idempotent
Inspect

Run Magist’s deterministic compliance engine over a product description (features, target markets, audience age bands, optional business model) and return the regulations and Controls that may be triggered, a complexity tier with a numeric score, a blocker count, and a per-audience cohort breakdown. The call also creates or refreshes an idempotent public report URL for the receipt, retained for up to 90 days. Deterministic and reproducible: the same inputs always produce the same output, with no LLM in the path. Returns which obligations may apply for research purposes; it is not a determination that they do apply, and does not replace counsel. Consult a licensed attorney before relying on the result.

ParametersJSON Schema
NameRequiredDescriptionDefault
marketsYesTarget market codes, e.g. ["eu","us","california","uk"]. Call list_feature_catalog for the full set of valid ids; an id outside the catalog is rejected with an actionable error.
featuresYesProduct feature ids from the closed catalog, e.g. ["account-creation","text-chat","iap","ai-content-gen"]. Call list_feature_catalog for the full set of valid ids; an id outside the catalog is rejected with an actionable error.
audiencesNoAudience age bands. Exactly these three ids exist.
businessModelNoOptional business-model context (role, participants, transactionInvolvement, dataHandling). Validated server-side via the same allowlist as /api/compute-requirements.

TDQS

A4.2/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Explains the otherwise puzzling readOnlyHint=false: the call 'creates or refreshes an idempotent public report URL for the receipt, retained for up to 90 days,' which matches idempotentHint=true and destructiveHint=false. It also discloses determinism ('same inputs always produce the same output, with no LLM in the path') and a legal caveat, adding substantial context the annotations cannot convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads purpose and outputs before side effects and the disclaimer, and each sentence carries information. The closing legal caveat is slightly verbose across two sentences but is genuinely relevant to correct reliance on the result.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description carries the full burden of describing return values and does so thoroughly (regulations and Controls triggered, numeric complexity score, blocker count, cohort breakdown), plus the report-URL side effect and determinism guarantee. Nothing an agent needs to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents every parameter, including the closed-catalog constraint and the audience enum. The description restates the input categories (features, markets, age bands, optional business model) but adds no syntax or format detail beyond the schema, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Run Magist's deterministic compliance engine over a product description') and enumerates the outputs: regulations/Controls, complexity tier, blocker count, cohort breakdown. An agent can distinguish it from lookup/search siblings because this tool computes derived requirements rather than retrieving existing records.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives situational context (research purposes, not a legal determination, consult counsel) and points to list_feature_catalog for valid ids via the schema. However it never states when to prefer this over alternatives like lookup_regulation or search_regulations, so routing guidance is only implied.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

find_controlsFind compliance controlsA
Read-onlyIdempotent
Inspect

Given a regulation id, return the compliance Controls that may satisfy it, each with a priority signal (blocker / required / evaluate / best-practice) and a short summary of the work involved. Returns research information about typical control mappings, not a determination that a given product needs them. Consult counsel for scoping.

ParametersJSON Schema
NameRequiredDescriptionDefault
regulationIdYesMagist regulation id, e.g. "coppa".

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, non-destructive and closed-world, so safety is covered. The description adds real behavioral context beyond that: what the output contains (priority signal tiers and a work summary) and a caveat that results are research mappings rather than a product-specific determination, which sets expectations about the answer's authority.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the action and its input, followed by the return shape and a caveat. No redundancy, and the priority-tier enumeration is the kind of detail an agent cannot get from structured fields (there is no output schema).

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter, read-only lookup with no output schema, the description supplies the missing return-value semantics (priority tiers, summary), the caveat about interpretation, and confirms scope. Nothing an agent needs to call it correctly is absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single parameter documents its format, example ('coppa'), pattern and length. The description only restates the parameter's role ('Given a regulation id') without adding lookup syntax, accepted id source, or error behavior, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('return the compliance Controls that may satisfy [a regulation id]') and enumerates the returned payload fields (priority signal values, short summary). The scoping sentence ('research information about typical control mappings, not a determination that a given product needs them') implicitly separates it from the requirements/determination sibling, so an agent can tell what this is not.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied through the framing 'Given a regulation id', which signals when the tool is callable but not when it should be preferred over siblings like lookup_regulation or compute_requirements. No explicit when-not-to-use or alternative routing is provided; 'Consult counsel for scoping' is legal advice, not tool guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

find_counselFind licensed counselA
Read-onlyIdempotent
Inspect

Search Magist’s open counsel directory for law firms by jurisdiction and practice area. Returns an editorial / firm-claimed directory to help a user identify licensed attorneys to consult. Inclusion is not endorsement; verify bar status and conflicts independently before engaging.

ParametersJSON Schema
NameRequiredDescriptionDefault
languageNoOptional preferred language. Accepted for forward-compatibility; not yet a filter at launch.
jurisdictionYesJurisdiction code, e.g. "us", "us-ca", "eu", "uk". A country/region name ("Australia", "United States") is also accepted and resolved to its code; the code actually searched comes back as `resolvedJurisdiction`. A code matches itself and its sub-jurisdictions, never the reverse — a firm listed only for "us" is not returned for "us-mt".
practiceAreaNoOptional practice-area / compliance-domain id, e.g. "data-privacy", "age-verification".

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only, idempotent, non-destructive, closed-world behavior. The description adds substantive context beyond that: the results are an editorial/firm-claimed directory, inclusion is not endorsement, and bar status plus conflicts must be verified independently — useful trust-boundary information for an agent relaying results.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the action and filters, followed by a short caveat. Every clause earns its place with no redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, but the description characterises the return qualitatively (directory listing of firms) and the annotations cover the safety profile. For a low-complexity read-only search, this is nearly complete; return shape and pagination are left implicit.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents jurisdiction resolution, sub-jurisdiction matching, and the forward-compatibility caveat for 'language'. The description adds no parameter detail beyond mentioning jurisdiction and practice area, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — 'Search Magist's open counsel directory for law firms' — plus the filter dimensions (jurisdiction, practice area). This clearly distinguishes it from siblings like find_vendors and find_controls, which target different directories.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description frames the intent ('help a user identify licensed attorneys to consult') but names no alternatives and gives no explicit when-to-use/when-not conditions relative to sibling lookup tools. Usage is implied rather than guided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

find_vendorsFind implementation vendorsA
Read-onlyIdempotent
Inspect

Given a Control id, list third-party vendors and in-house approaches that may implement it, with effort/cost signals and a source-disclosure (editorial research vs vendor submission). Magist does not accept payment from vendors and does not rank or endorse them. Returns a neutral catalog for research; evaluate fit independently.

ParametersJSON Schema
NameRequiredDescriptionDefault
controlIdYesMagist Control id, e.g. "age-verification-process".
jurisdictionNoOptional market/region filter, e.g. "eu". Applied only when a vendor declares supported regions.

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and closed-world, so the safety profile is covered. The description adds genuinely non-structured context: what the result contains (vendors, in-house approaches, effort/cost signals, source disclosure) and the editorial neutrality policy ('does not accept payment', 'does not rank or endorse'). It stops short of 5 only because return formatting/pagination is unaddressed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tightly written sentences: the operation and its scope come first, the payload description second, and the trust/neutrality caveat last. No sentence is filler and nothing is buried.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description correctly takes on the burden of saying what comes back, and annotations handle the safety profile. The only unaddressed items are the optional jurisdiction filter's effect and result volume/pagination, which are minor for a catalog lookup.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with controlId format and jurisdiction semantics fully documented in the schema, so the baseline is 3. The description only restates the controlId precondition and never mentions the jurisdiction filter or how region matching behaves, adding no meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb and resource ('list third-party vendors and in-house approaches') scoped by a Control id, and it even characterizes the payload ('effort/cost signals and a source-disclosure'). It does not differentiate itself from siblings like find_controls or find_counsel, which also operate on the compliance catalog, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied via the input precondition ('Given a Control id') and the framing sentence 'Returns a neutral catalog for research; evaluate fit independently.' There is no explicit when-to-use vs. when-not, and no alternative tool (e.g. find_controls for discovering the controlId first) is named.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_enforcementGet enforcement actionsA
Read-onlyIdempotent
Inspect

Return recent regulatory enforcement actions from Magist’s catalog, optionally filtered by regulation id and a since-date. Each action includes the penalty, authority, a primary-source link, and (where authored) a practitionerAnalysis: a hedged, third-person editorial note on what the action illustrates, informational context that never addresses a specific product. penaltyAmount is null when no monetary amount is recorded (pending, confidential, annulled, or non-monetary outcomes; the amount string carries the honest description). Returns historical facts about what regulators have done: informational context, not a prediction about a specific product.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax actions to return (default 10, max 50).
sinceNoISO date (YYYY-MM-DD) or year (YYYY). Returns actions on or after this date.
regulationIdNoFilter to actions related to this regulation id.

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint/idempotentHint/destructiveHint=false, so safety is covered; the description goes beyond that by disclosing payload shape (penalty, authority, primary-source link, practitionerAnalysis) and the important null semantics of penaltyAmount with its listed causes. It omits pagination/ordering behavior and the default sort, which would have made this a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action and filters, then the response contents; every sentence carries information. The closing 'historical facts... informational context, not a prediction about a specific product' partially repeats the earlier disclaimer about practitionerAnalysis, costing a little efficiency.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description must carry return-value meaning, and it does: it enumerates the returned fields and explains the null-penalty case. What is missing is volume/ordering behavior (limit defaults are only in the schema) and any hint about response size or how actions are sorted, but the agent has enough to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so limit, since, and regulationId are already fully documented with bounds, patterns, and format. The description only restates the two filter parameters and says nothing new about limit or default values, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Return recent regulatory enforcement actions from Magist's catalog') plus the two optional filters, so the agent knows exactly what this fetch returns. It does not name or contrast any sibling (e.g. lookup_regulation vs search_regulations), so it stops short of full sibling differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by the filtering language ('optionally filtered by regulation id and a since-date'), which tells the agent it is a browsable, filterable list endpoint. There is no explicit when-to-use statement, no stated alternative when the agent wants a single action's detail, and no prerequisites.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_feature_catalogList supported features and marketsA
Read-onlyIdempotent
Inspect

Return Magist’s closed catalogs of valid product feature ids and target market ids, each with a short human-readable label -- the exact identifiers compute_requirements accepts as "features" and "markets". Use this to validate ids before calling compute_requirements; ids outside these catalogs are rejected with an actionable error. Deterministic and reproducible; this is reference data, not itself a regulatory determination.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds traits they cannot express: deterministic/reproducible output, failure behavior for invalid ids, and a framing caveat that this is reference data rather than a regulatory determination.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with what is returned and who consumes it, followed by the how-to-use constraint. No filler; the em-dash clause and the determinism caveat each add distinct information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no input parameters and no output schema, the description carries full burden and discharges it: it says what comes back (ids plus labels), how to use it, what happens on invalid input, and how to interpret the result. Nothing needed to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Zero parameters, so the baseline is 4. The description still usefully characterizes what the returned identifiers are (closed catalogs of valid feature/market ids with short labels) and where they are consumed, which is as much parameter-adjacent meaning as a no-arg tool can carry.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource (return the closed catalogs of valid feature ids and market ids) and immediately anchors them as 'the exact identifiers compute_requirements accepts as features and markets'. An agent can distinguish this from lookup/search siblings without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit workflow instruction: validate ids here before calling compute_requirements, and explains the consequence of skipping it (ids outside the catalogs are rejected with an actionable error). The alternative tool and the condition that selects it are both named.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

lookup_regulationLook up a regulationA
Read-onlyIdempotent
Inspect

Look up one regulation by its Magist id and return structured research information: title, citation, jurisdiction, status, review dates, a plain-language summary, and the Controls that may satisfy it. Returns facts about what a regulation says, not a determination of how it applies to a specific product. Consult counsel for situation-specific questions.

ParametersJSON Schema
NameRequiredDescriptionDefault
idYesMagist regulation id, e.g. "gdpr", "coppa", "ai-act". Use search_regulations to discover ids.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly=true, idempotent=true, openWorld=false, destructive=false, so the safety profile is covered. The description adds genuine behavioral context beyond that: it discloses the shape of the returned research record and an important scope constraint (factual lookup only, no applicability determination), which sets correct expectations for the caller.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the verb, resource, and return contents, followed by the scope disclaimer. Every sentence carries distinct information — no restatement of the title, no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description must describe the return value, and it does so thoroughly (the enumerated fields including Controls). Combined with the read-only annotations and the fully documented id parameter, an agent has everything needed to call this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single id parameter already documents the Magist id format, examples, and the pointer to search_regulations for discovery. The description only restates 'by its Magist id', adding no syntax or format detail beyond the schema, so the baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Look up one regulation by its Magist id') with explicit singular scope, which separates it from the multi-item search_regulations sibling, and enumerates what the result contains (title, citation, jurisdiction, status, review dates, summary, Controls). An agent can tell exactly what this tool returns without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description draws a clear boundary: it 'returns facts about what a regulation says, not a determination of how it applies to a specific product,' and directs situation-specific questions to counsel. That implicitly routes the agent away from applicability work (compute_requirements) and toward find_counsel, though neither sibling is named explicitly.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_regulationsSearch regulationsA
Read-onlyIdempotent
Inspect

Search Magist’s regulation corpus by keyword with optional filters (jurisdiction, domain, status, content-review status, coverage depth). Returns a paginated list of matching regulations with permanent citation URLs. Deterministic: the same query and filters return the same results every time. Returns research information for discovery, not a determination of which regulations apply to a specific product.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoPage size (default 10, max 25).
queryNoFree-text keywords. Optional; omit to browse with filters only.
domainNoCompliance domain ids, e.g. ["data-privacy","age-verification"].
offsetNoPagination offset (default 0).
statusNoLifecycle status filter, e.g. "active", "proposed".
jurisdictionNoJurisdiction codes/names, e.g. ["EU","US"].
coverageDepthNoFilter by editorial coverage depth.
contentReviewStatusNoFilter by practitioner-review state.

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, so the bar is lower; the description adds determinism, pagination behavior, and the citation-URL return shape. It still omits result-count limits or empty-result behavior, keeping it below a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four tight sentences, front-loaded with the core action and filters before the return/behavioral clauses. No filler, though the determinism sentence is somewhat marginal given the idempotentHint annotation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description correctly covers return shape (paginated list with permanent citation URLs). The only gap is guidance against the closest sibling, lookup_regulation, which an agent facing both tools would need.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents every parameter including defaults and enums. The description's filter list adds consolidation but no new syntax or format detail beyond the schema, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (search) and resource (Magist's regulation corpus) and enumerates the filter dimensions, so the scope is unambiguous. It does not explicitly distinguish itself from the sibling lookup_regulation, which likely retrieves a single known regulation, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The closing sentence gives a clear when-not ('discovery, not a determination of which regulations apply to a specific product'), which implicitly routes determination-style questions to compute_requirements. It does not name any sibling outright or state prerequisites, so it is strong context without full alternative routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_ai_answerVerify a Magist citationA
Read-onlyIdempotent
Inspect

Verify a Magist grounding-proof token: the "groundingProof" field on a regulation or control record from the REST API (GET /api/v1/regulations/{id} or /api/v1/controls/{id}) when the server has signing enabled. MCP tool responses do not carry these tokens. Proves the citation was genuinely served by Magist's server for that exact atom at that exact corpus version; it does NOT verify legal correctness or that any obligation applies to a product. Returns valid:false with a reason when the token is missing, malformed, unsigned, or fails signature verification; this is expected when the record never carried a token (signing is an opt-in server setting).

ParametersJSON Schema
NameRequiredDescriptionDefault
tokenYesThe groundingProof object exactly as received on a prior response (carries alg, mgstId, corpusVersion, quoteHash, nonce, and the signature fields). Pass it back unmodified.

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only, idempotent, non-destructive semantics, so the bar is lower, yet the description still adds the prerequisite that signing is an opt-in server setting and enumerates the exact failure modes (missing, malformed, unsigned, signature failure) that yield valid:false. It stops short of describing the success payload shape or any rate/auth considerations, so it is strong but not exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action, then prerequisites, then the negative scope, then error behavior. Dense but every clause carries information; the only cost is that the middle sentence packs several constraints into one long clause chain.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description must carry return semantics, and it does by explaining the valid:false plus reason outcome and when that is expected rather than an error. For a single-parameter verification tool with a nested token object, nothing an agent needs to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is already 100% and the nested groundingProof fields are documented in the schema, so the baseline is 3. The description pushes past the baseline by constraining usage — the object must be passed back exactly as received and unmodified — which is a real semantic constraint the schema alone does not state.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Verify a Magist grounding-proof token') and immediately scopes it to the 'groundingProof' field on regulation/control records, which no sibling tool touches. The purpose is unmistakable versus lookup_regulation or search_regulations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says where the token comes from (GET /api/v1/regulations/{id} or /api/v1/controls/{id} with signing enabled) and explicitly warns that MCP tool responses do not carry these tokens, which prevents a whole class of misuse. It also states the boundary condition — it does NOT verify legal correctness or obligation applicability.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 9 tool updates
    • First observedcompute_requirements
    • First observedfind_controls
    • First observedfind_counsel
    • First observedfind_vendors
    • First observedget_enforcement
    • First observedlist_feature_catalog
    • First observedlookup_regulation
    • First observedsearch_regulations
    • First observedverify_ai_answer

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    F
    maintenance
    Provides regulatory and compliance intelligence from free government sources, including rules, recalls, enforcement actions, and comment deadlines, classified by industry and severity.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables review-gated, local-first monitoring of AI legislation, regulations, litigation, sanctions, court rules, and ethics guidance by collecting and verifying leads from official sources, managing human review workflows, and generating digests and exports.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables physicians to generate source-based legal information packages by matching questions to official legislation and reasoned high court decisions, with citation-verified and conditional assessments rather than categorical legal opinions.
    379 npm
    AGPL 3.0
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.