Skip to main content
Glama

Is It Trust Ready — agent-trust-readiness scanner

Server Details

Scan any website or MCP server for agent-trust-readiness; returns a signed, verifiable scorecard.

Status
Healthy
Last Tested
Transport
Streamable HTTP
URL
Repository
mnemom/mcp
GitHub Stars
0
Server Listing
Mnemom

Glama MCP Gateway

Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.

MCP client
Glama
MCP server

Full call logging

Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.

Tool access control

Enable or disable individual tools per connector, so you decide what your agents can and cannot do.

Managed credentials

Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.

Usage analytics

See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.

100% free. Your data is private.
Tool DescriptionsA

Average 4.3/5 across 8 of 8 tools scored.

Server CoherenceA
Disambiguation5/5

Each tool targets a distinct resource and action: agent identity, reputation rating, badge generation, orientation, website scanning, directory search, reputation attestation, and scan verification. The descriptions explicitly differentiate overlapping areas like get_reputation vs get_agent and verify_reputation vs verify_scan.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern with lowercase snake_case (get_agent, scan_trust, verify_scan). The prefix verbs (get, scan, search, verify) clearly indicate the action, and nouns are specific, maintaining a predictable and uniform style.

Tool Count5/5

With 8 tools, the server is well-scoped for its purpose. Each tool covers a necessary function in the agent-trust-readiness and website-scanning domain, without redundancy or bloat. The count fits comfortably within the ideal 3-15 range.

Completeness5/5

The tool set provides complete coverage for the stated domain: orientation, discovery, identity, reputation, badge generation, reputation verification, website scanning, and scan verification. There are no dead ends—every workflow from initial lookup to verification is supported, and nothing critical appears missing.

Available Tools

8 tools
get_agentA
Read-onlyIdempotent
Inspect

Look up an agent's public identity and trust state by ID — the accountable record other agents and humans can rely on.

ParametersJSON Schema
NameRequiredDescriptionDefault
agent_idYesAgent identifier (e.g. smolt-abc123)

Output Schema

ParametersJSON Schema
NameRequiredDescription
idYesAgent identifier (e.g. smolt-abc123).
nameNoAgent name (2-32 chars, alphanumeric + hyphens).
callerNoWhich projection THIS response is. `org_member` receives the owner field set; `anonymous`/`authenticated` receive the reduced public set (id, name, claimed, created_at, last_seen, status, avatar_url, caller). Read this instead of inferring why a field is absent.
groupsNoActive groups this agent belongs to, name-ordered; `[]` when none. Present on org-fleet rows.
org_idNoThe agent's organization binding. Required as an input by the org-scoped tools (fleet listing, posture assignment). Identifies an organization, not a person.
publicNoWhether the agent's identity record is publicly discoverable. Distinct from Trust Rating visibility, which is always public.
statusNoDerived from last_seen (active = seen within the last hour).
claimedNoWhether a human or organization has claimed accountability for this agent. On the owner projection this is derived from the ownership column; the owning user's identifier itself is not returned.
last_seenNo
agent_hashNoThe canonical public identity hash (first 16 hex chars) used as the gateway lookup key and as the input to verify_agent_binding. Owner projection only. Not a credential and not reversible to one.
avatar_urlNo
claimed_atNo
created_atNo
containment_statusNoContainment state of the agent.
aip_enforcement_modeNo
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the description does not need to cover these. It adds useful context about the content (public identity and trust state) and the tool's authoritative nature ('accountable record'). It does not describe error behavior or rate limits, but given the annotations, the added context is sufficient without being redundant.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, well-structured sentence that is front-loaded with the core functionality ('Look up an agent's public identity and trust state by ID') and then enriches with the purpose ('the accountable record other agents and humans can rely on'). No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a simple read-only tool with one parameter, strong annotations, and a likely output schema (not shown). The description covers the tool's niche and value proposition. It does not mention the behavior for non-existent agent IDs, but the output schema and annotations make the description adequate for a tool of this complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already provides 100% coverage for the single parameter agent_id, including an example format ('e.g. smolt-abc123'). The description only states 'by ID', which aligns with the schema but adds no new parameter-specific meaning. Since the schema is detailed, the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Look up an agent's public identity and trust state by ID'. It specifies the exact resource (agent identity) and the type of information (public identity and trust state). The phrase 'the accountable record other agents and humans can rely on' distinguishes this from sibling tools like get_reputation or verify_reputation, which focus on reputation or verification.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context for when to use this tool: when you need the authoritative identity and trust state of an agent. It positions this as the reliable source ('accountable record'), which implies it should be used over other tools for canonical agent lookups. However, it does not explicitly mention exclusions or alternatives, such as 'for reputation scores, use get_reputation'.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_reputationA
Read-onlyIdempotent
Inspect

Look up an AI agent's published Trust Rating — Mnemom's portable reliability signal for autonomous software, computed from the agent's own verified activity record. Returns the rating plus the technical factors behind it. Free, public, read-only: every registered agent's rating is published by standard (the visibility field is the reputation-publication axis, distinct from identity-record visibility).

ParametersJSON Schema
NameRequiredDescriptionDefault
agent_idYesAgent identifier (e.g. smolt-abc123)

Output Schema

ParametersJSON Schema
NameRequiredDescription
tierNo
gradeYesAAA–D or NR.
scoreYes
claimedNo
agent_idYes
trend_30dNo
agent_nameNo
componentsYes
confidenceYes
visibilityYesReputation-publication axis — whether this agent's Trust Rating is published. Every registered agent's reputation is `public` by accountability standard (the default; that is the whole point of a portable, verifiable rating); `private` is a rare owner opt-out that 403s the read to non-owners. This is DISTINCT from `Agent.public` (the identity-record visibility axis) — they share the word "public" but govern different things.
computed_atNo
is_eligibleYes
next_compute_atNoNext scheduled recompute — the 00/06/12/18 UTC cron slot strictly after `computed_at` (`floor(computed_at/6h)*6h + 6h`). Null when `computed_at` is null.
checkpoint_countYes
a2a_trust_extensionNoA2A trust extension for interop. Only present on `GET /reputation/{agent_id}` (not on batch/compare rows).
checkpoint_accountingNoStructured breakdown of how checkpoints were counted toward the score. `analyzed` is the scoring population; `excluded` buckets are mutually exclusive and `analyzed + synthetic + insufficient_thinking + quarantined = total`. Null for legacy rows computed before this field existed.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false. The description adds that it is free and public, and explains the concept of a 'portable reliability signal' and the role of the 'visibility' field, providing context beyond the structured annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no wasted words. Information is front-loaded with the core action, followed by brief clarification. Every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has only one parameter, full annotations, and an output schema (present but not shown), the description is complete. It explains the rating concept and does not need to detail return values as the output schema covers that.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with one parameter 'agent_id' described as 'Agent identifier'. The description adds minimal extra meaning (implies agent registration), but the schema already defines it adequately. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses specific verbs ('Look up') and identifies the resource ('AI agent's published Trust Rating'). It clearly distinguishes from siblings like 'get_agent' or 'get_reputation_badge' by focusing on the rating and its technical factors.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description states the tool is 'Free, public, read-only', which implies safe usage. However, it does not explicitly contrast with alternatives like 'verify_reputation' or 'search_reputation_directory'. Given the sibling count, more explicit when-to-use guidance would improve clarity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_reputation_badgeA
Read-onlyIdempotent
Inspect

Get an embeddable Trust Rating badge for an agent — returns the badge image URL plus ready-to-paste Markdown and HTML snippets for a README or agent card.

ParametersJSON Schema
NameRequiredDescriptionDefault
agent_idYesAgent identifier (e.g. smolt-abc123)

Output Schema

ParametersJSON Schema
NameRequiredDescription
agent_idYesThe agent the badge is for (echoed from the request).
badge_urlYesCanonical SVG Trust Rating badge image URL (always on api.mnemom.ai).
html_embedYesPaste-ready HTML badge snippet.
profile_urlYesHuman-readable reputation profile page (on www.mnemom.ai).
verified_urlYesPublic cryptographic verification URL for the rating.
markdown_embedYesPaste-ready Markdown badge snippet.
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint, idempotentHint, and destructiveHint, so the description need not restate safety. It adds value by detailing the output (badge URL, Markdown, HTML snippets), which is not fully covered by the output schema. No contradictions with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Single sentence efficiently delivers purpose and output details with no superfluous words. Front-loaded with the action and resource.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple single-parameter tool with an output schema, the description provides sufficient high-level understanding of what is returned. No missing information given the low complexity and annotation coverage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with a clear description for agent_id. The tool description adds no further detail beyond the schema, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the tool retrieves an embeddable Trust Rating badge, specifying it returns a badge image URL along with Markdown and HTML snippets. This differentiates it from sibling tools like get_reputation (which likely returns data) and verify_reputation (which likely verifies claims).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage when an embeddable badge is needed, but provides no explicit guidance on when to use this tool versus alternatives like get_reputation or verify_reputation. No exclusions or context about prerequisites are mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_startedA
Read-onlyIdempotent
Inspect

Zero-auth, no-args orientation: who Mnemom is, the surface map, how to authenticate and what it unlocks, and the value tools to try right now (headlining scan_trust + the reputation reads).

ParametersJSON Schema
NameRequiredDescriptionDefault
tokenNoOptional Dojo try-me invite token. When supplied and valid, returns the token-gated dojo briefing manifest (the same content as GET /v1/dojo/try-me/resolve); omit for public orientation.

Output Schema

ParametersJSON Schema
NameRequiredDescription
whoYesOne-line positioning.
verifyYesHow to verify signed artifacts in-band (verify, don't trust).
try_nowYesZero-auth value tools to call right now.
doctrineYes
skill_pathYesThe two-step on-ramp to declaring and advertising capabilities as A2A skills in a signed, portable AgentCard.
value_propYesWhat Mnemom does for an agent.
surface_mapYesStable links to the canonical read-only surfaces.
authenticateYesHow to authenticate and what auth unlocks.
developer_pathYesThe developer hero on-ramp: the npx one-liner plus the intent-named MCP prompt-skills (try-me, onboard_an_agent, become_sovereign). Advertisement only — no functional dependency on those prompts existing yet.
showcase_agentYesA real Mnemom-owned agent the try_now reputation reads target, so the loop runs verbatim.
sovereignty_pathYesThe five-step on-ramp to becoming a sovereign, accountable agent, composed from existing tools. Walked end to end by the become_sovereign MCP prompt.
visibility_modelYesDisambiguates the two axes that share the word 'public': reputation-publication visibility (public by standard) vs identity-record visibility (agent.public), plus the caller-context self-description.
what_we_keep_private_and_whyYes
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint true, destructiveHint false, idempotentHint true. The description adds behavioral context: it is 'zero-auth' (no authentication required) and describes the dual behavior with an optional token for a 'dojo briefing'. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, dense sentence that front-loads key information: 'Zero-auth, no-args orientation'. Every part serves a purpose, listing the content and headline tools without waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool is an orientation, the description fully covers its purpose, the optional token behavior, and what the output contains. An output schema exists to document return values. It is complete for an entry-point tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with a single optional 'token' parameter described. The description adds meaning by explaining the two modes (public vs. token-gated) and what each returns, providing context beyond the schema's parameter description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool provides a 'zero-auth, no-args orientation' covering 'who Mnemom is, the surface map, how to authenticate and what it unlocks, and the value tools to try right now'. It specifically highlights 'scan_trust + the reputation reads', distinguishing it from sibling tools that are more specific actions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies this is the entry point for new users, as it says 'orientation' and lists what it provides. It mentions an optional token for token-gated content but does not explicitly state when to use versus alternatives. However, the context is clear: use this first to understand the system before using other tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

scan_trustA
Read-onlyIdempotent
Inspect

Scan a website's agent-trust-readiness and return a signed scorecard (Trust, plus an Access axis on newer rubrics). Zero-auth. Results are CACHED for up to 24h — check cached and scannedAt on the result; pass fresh: true to force a re-scan (rate-limited). Proxies to the SSRF-locked isittrustready scanner; the Ed25519 signature + permalink are preserved verbatim. Rubric + docs: https://www.isittrustready.ai/rubric and https://docs.mnemom.ai/.

ParametersJSON Schema
NameRequiredDescriptionDefault
urlYesDomain or URL to scan, e.g. "example.com" or "https://example.com".
freshNoForce a fresh re-scan instead of the cached result (results are cached up to 24h; the engine rate-limits re-scans). Equivalent to the scanner's rescan flag.

Output Schema

ParametersJSON Schema
NameRequiredDescription
gradeYesTrust letter grade (A+…F).
scoreYes0–100 weighted overall TRUST score.
accessNoThe independent Access/discoverability axis (never blended with Trust). Present from the two-axis rubric (0.3.0+).
cachedNoTrue when served from the scanner's 24h cache rather than a fresh scan.
schemaYesiitr-scan schema version string (e.g. "iitr-scan/v0.N").
targetYesNormalized host that was scanned.
permalinkNoShareable /r/ permalink (only on /r/ responses; transport field).
scannedAtNoWhen this scorecard was produced. Results are cached up to 24h — pass fresh:true to scan_trust to force a re-scan.
signatureYesEd25519 signature over the canonical result (transport field; stripped before verify).
categoriesNoTrust-axis categories with per-category scores + checks.
verificationNoSelf-describing in-band verification block {alg, kid, jwks, canonicalization} — how to verify this scorecard's signature. Self-describing, so signed-EXCLUDED (stripped before verify).
rubricVersionNoRubric version (e.g. "0.4.0").
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, destructiveHint. Description adds caching behavior, rate-limits on fresh scans, proxy to SSRF-locked scanner, Ed25519 signature preservation, and rubric link – substantial value beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences: first covers core purpose, second adds caching, fresh, proxy, signature, and rubric details. Efficient but packs many details into one sentence; could be slightly better structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Tool has 2 params with 100% schema coverage, an output schema, and rich annotations. Description covers purpose, caching, fresh flag, proxy, signature, and rubric reference, making it complete for the tool's complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%. Description adds context on caching and fresh flag behavior (e.g., rate-limited) that complements schema descriptions, but schema already explains parameters well.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool scans a website for agent-trust-readiness and returns a signed scorecard with Trust and Access axes. It distinguishes from sibling tools like verify_scan or get_reputation by focusing on scanning trust readiness.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides clear usage context: zero-auth, caching up to 24h, check cached/scannedAt fields, pass fresh:true for re-scan. Does not explicitly exclude alternatives or mention when not to use, but context is sufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_reputation_directoryA
Read-onlyIdempotent
Inspect

Resolve an agent name or id-prefix to a real agent_id over the PUBLIC reputation directory (only agents whose reputation visibility is public). Zero-auth. The arriving-agent entry point: discover a concrete agent_id, then call get_reputation / verify_reputation on it.

ParametersJSON Schema
NameRequiredDescriptionDefault
qNoName search (ilike) or agent-id prefix match.
pageNo1-based page number for pagination. Default 1.
sortNoResult ordering. Default "score" (highest-rated first); other supported keys order by recency or name.score
gradeNoFilter to one grade (e.g. `AAA`, `B`, `NR`).
per_pageNoNumber of results per page. 1–100, default 20.
confidenceNoFilter to agents at a given reputation-confidence level (driven by how much evidence backs the score).

Output Schema

ParametersJSON Schema
NameRequiredDescription
pageYes
totalYes
agentsYes
per_pageYes
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint. Description adds that it is zero-auth and only searches public reputation agents, providing context beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences that front-load essential information: purpose, scope, usage flow. No superfluous content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given output schema exists, annotations present, and parameter descriptions complete, the description covers purpose, usage, and next steps adequately. No gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and description does not add additional parameter details beyond the schema descriptions. Baseline 3 applies as no extra value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Uses verb 'resolve' and specifies converting name/id-prefix to agent_id. Distinguishes from siblings by stating it's the entry point to discover agent_id for subsequent calls to get_reputation/verify_reputation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly advises to use this tool to discover a concrete agent_id, then call get_reputation/verify_reputation. Also notes zero-auth and public visibility, clarifying when it is appropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_reputationA
Read-onlyIdempotent
Inspect

Attest an agent's Trust Rating — returns a Merkle-root + hash-chain attestation (hash_chain_valid) proving the rating derives from an unbroken, append-only checkpoint chain, plus a pointer to the signed integrity certificate. This is a chain-integrity attestation, NOT an in-band Ed25519 signature check (that parity is verify_scan, for website scorecards).

ParametersJSON Schema
NameRequiredDescriptionDefault
agent_idYesAgent identifier (e.g. smolt-abc123)

Output Schema

ParametersJSON Schema
NameRequiredDescription
gradeYes
scoreYes
agent_idYes
computed_atYes
verificationYes
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, so the safety profile is clear. The description adds valuable context that this is a chain-integrity attestation and not a signature check, which prevents misuse. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with core action and output, no unnecessary words. The contrast with verify_scan is efficiently stated. Ideal conciseness and structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema exists (covers return values), annotations provide safety profile, and the description explains purpose and exclusions, the description is fully complete for this tool's context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% (only one parameter, agent_id, with description). The description does not add new information beyond the schema's parameter description, so baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it attests an agent's trust rating by returning a Merkle-root + hash-chain attestation, and explicitly distinguishes it from verify_scan for website scorecards. Verb 'attest' plus specific resource 'Trust Rating' is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes an explicit when-not: 'NOT an in-band Ed25519 signature check (that parity is verify_scan)'. However, it does not mention when to use this vs get_reputation or get_reputation_badge, which are sibling tools for reputation retrieval. The guidance is present but not exhaustive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_scanA
Read-onlyIdempotent
Inspect

Verify a website scan scorecard's Ed25519 signature IN-BAND (verify, don't trust). Pass a scan (a scorecard from scan_trust) or a url to re-scan; returns {verified, key_id, canonicalization} checked against the public key at mnemom://iitr/jwks. Zero-auth. Spec + rubric: https://www.isittrustready.ai/rubric and https://docs.mnemom.ai/.

ParametersJSON Schema
NameRequiredDescriptionDefault
urlNoAlternatively, a domain/URL to re-scan and then verify.
scanNoA scan scorecard previously returned by scan_trust (or iitr's /r/ JSON), passed back verbatim to verify. Same shape as scan_trust's result; the signature is checked against mnemom://iitr/jwks.

Output Schema

ParametersJSON Schema
NameRequiredDescription
key_idYesThe signing key id (kid) checked.
reasonNoWhy verification failed or could not be evaluated (absent when verified).
verifiedYesTrue iff the signature verifies against the in-band JWKS.
algorithmYesAlways "Ed25519".
scorecardNoThe scorecard verified (present when re-scanned via `url`).
canonicalizationYesThe exact canonicalization used (so the verdict is reproducible).
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false. The description goes beyond these by adding 'Zero-auth' (authentication requirements) and 'IN-BAND (verify, don't trust)' (trust model), as well as the specific public key source at mnemom://iitr/jwks. This enriches the behavioral context without contradicting the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loading the core purpose and return shape before providing supplementary links. It contains no filler or fluff; every clause adds value (e.g., 'Zero-auth', 'IN-BAND'), and the spec/rubric links are useful without bloating the text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the rich output schema and the presence of annotations, the description is largely complete: it covers input modes, the verification target, authentication requirements, and the key source. It could be slightly more complete by explicitly distinguishing from verify_reputation, but that is a minor gap given the tool's name and the context provided by the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides 100% parameter coverage with detailed descriptions for both `scan` and `url`, including the oneOf relationship and expectation that `scan` is passed verbatim from scan_trust. The description's 'Pass a `scan` ... or a `url` to re-scan' merely restates what the schema already documents, adding no new semantic meaning for parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Verify a website scan scorecard's Ed25519 signature IN-BAND (verify, don't trust).' This clearly states what the tool does and distinguishes it from sibling tools like verify_reputation, which likely handles reputation certificates rather than scan scorecards. The reference to scan_trust further anchors the tool's role.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear usage context: pass a `scan` (a scorecard from scan_trust) or a `url` to re-scan, which tells the agent when this tool is appropriate. However, it does not explicitly contrast with verify_reputation or state any exclusionary conditions, though the 'scan scorecard' phrasing implies the boundary. The provided spec links offer additional guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Discussions

No comments yet. Be the first to start the discussion!

Related MCP Servers

View all MCP Servers

Try in Browser

Your Connectors

Sign in to create a connector for this server.