Skip to main content
Glama

XGuard — Payment Decision & Discovery

xguard_execute

Destructive

Execute an explicit scoped provider operation, or a supported public-source outcome. intent:demo is free. Never infer a mutation from ambiguous text.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
inputNo
intentNo
operationNo
capabilityNo
idempotency_keyNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed34 schema fields changed
    • changedInput schema / additionalProperties
      Previous value: -falseNew value: +true
    • removedInput schema / description
      Removed value: -"Use intent:'demo' for a free result. Paid outcomes accept supported English/Arabic intents with public sources. Unknown jobs return repair guidance; this is not a general-purpose language model."
    • removedInput schema / properties / action
      Removed value: -{
      -  "type": "string"
      -}
    • removedInput schema / properties / arguments
      Removed value: -{
      -  "oneOf": [
      -    {
      -      "type": "object"
      -    },
      -    {
      -      "description": "JSON-encoded object, as used by tool calls",
      -      "type": "string"
      -    }
      -  ]
      -}
    • removedInput schema / properties / calls
      Removed value: -{
      -  "const": 1
      -}
    • removedInput schema / properties / capability / enum
      Removed value: -[
      -  "extract-preview",
      -  "web-extraction",
      -  "product-offers",
      -  "feed-digest"
      -]
    • removedInput schema / properties / command
      Removed value: -{
      -  "type": "string"
      -}
    • removedInput schema / properties / desired_action
      Removed value: -{
      -  "type": "string"
      -}
    • removedInput schema / properties / function
      Removed value: -{
      -  "additionalProperties": false,
      -  "properties": {
      -    "arguments": {
      -      "type": [
      -        "string",
      -        "object"
      -      ]
      -    },
      -    "name": {
      -      "type": "string"
      -    }
      -  },
      -  "required": [
      -    "name",
      -    "arguments"
      -  ],
      -  "type": "object"
      -}
    • removedInput schema / properties / html
      Removed value: -{
      -  "maxLength": 12288,
      -  "type": "string"
      -}
    • removedInput schema / properties / http
      Removed value: -{
      -  "type": "object"
      -}
    • addedInput schema / properties / idempotency_key
      Added value: +{
      +  "type": "string"
      +}
    • removedInput schema / properties / intent / oneOf
      Removed value: -[
      -  {
      -    "maxLength": 3000,
      -    "type": "string"
      -  },
      -  {
      -    "type": "object"
      -  }
      -]
    • addedInput schema / properties / intent / type
      Added value: +[
      +  "string",
      +  "object"
      +]
    • removedInput schema / properties / limit
      Removed value: -{
      -  "maximum": 30,
      -  "minimum": 1,
      -  "type": "integer"
      -}
    • removedInput schema / properties / max_age_seconds
      Removed value: -{
      -  "default": 0,
      -  "maximum": 60,
      -  "minimum": 0,
      -  "type": "integer"
      -}
    • removedInput schema / properties / name
      Removed value: -{
      -  "type": "string"
      -}
    • removedInput schema / properties / network
      Removed value: -{
      -  "enum": [
      -    "eip155:8453",
      -    "eip155:84532",
      -    "base",
      -    "base-sepolia"
      -  ],
      -  "type": "string"
      -}
    • removedInput schema / properties / operation / description
      Removed value: -"Resolved read-only OpenAPI operation with URL, method and desired action; no remote spec fetching."
    • changedInput schema / properties / operation / type
      Previous value: -"object"New value: +"string"
    • removedInput schema / properties / quantity
      Removed value: -{
      -  "const": 1
      -}
    • removedInput schema / properties / query
      Removed value: -{
      -  "maxLength": 200,
      -  "type": "string"
      -}
    • removedInput schema / properties / requests
      Removed value: -{
      -  "const": 1
      -}
    • removedInput schema / properties / sources
      Removed value: -{
      -  "items": {
      -    "oneOf": [
      -      {
      -        "format": "uri",
      -        "pattern": "^https://",
      -        "type": "string"
      -      },
      -      {
      -        "additionalProperties": false,
      -        "properties": {
      -          "fallbacks": {
      -            "items": {
      -              "format": "uri",
      -              "type": "string"
      -            },
      -            "maxItems": 1,
      -            "type": "array"
      -          },
      -          "url": {
      -            "format": "uri",
      -            "type": "string"
      -          }
      -        },
      -        "required": [
      -          "url"
      -        ],
      -        "type": "object"
      -      }
      -    ]
      -  },
      -  "maxItems": 3,
      -  "type": "array"
      -}
    • removedInput schema / properties / task
      Removed value: -{
      -  "type": "object"
      -}
    • removedInput schema / properties / testnet
      Removed value: -{
      -  "default": false,
      -  "type": "boolean"
      -}
    • removedInput schema / properties / tool
      Removed value: -{
      -  "type": "string"
      -}
    • removedInput schema / properties / toolId
      Removed value: -{
      -  "type": "string"
      -}
    • removedInput schema / properties / tool_id
      Removed value: -{
      -  "type": "string"
      -}
    • removedInput schema / properties / type
      Removed value: -{
      -  "const": "function"
      -}
    • removedInput schema / properties / units
      Removed value: -{
      -  "const": 1
      -}
    • removedInput schema / properties / url
      Removed value: -{
      -  "format": "uri",
      -  "type": "string"
      -}
    • removedInput schema / properties / urls
      Removed value: -{
      -  "items": {
      -    "format": "uri",
      -    "type": "string"
      -  },
      -  "maxItems": 3,
      -  "type": "array"
      -}
    • changedOutput schema / (root)
      Previous value: -{
      -  "anyOf": [
      -    {
      -      "properties": {
      -        "capability": {
      -          "type": "string"
      -        },
      -        "cost": {
      -          "type": "object"
      -        },
      -        "intent": {
      -          "type": "object"
      -        },
      -        "ok": {
      -          "const": true
      -        },
      -        "receipt": {
      -          "type": [
      -            "object",
      -            "null"
      -          ]
      -        },
      -        "result": {
      -          "type": "object"
      -        },
      -        "verification": {
      -          "type": "object"
      -        }
      -      },
      -      "required": [
      -        "ok",
      -        "intent",
      -        "capability",
      -        "result",
      -        "verification",
      -        "cost",
      -        "receipt"
      -      ],
      -      "type": "object"
      -    },
      -    {
      -      "properties": {
      -        "accepts": {
      -          "minItems": 1,
      -          "type": "array"
      -        },
      -        "resource": {
      -          "type": "object"
      -        },
      -        "x402Version": {
      -          "const": 2
      -        }
      -      },
      -      "required": [
      -        "x402Version",
      -        "resource",
      -        "accepts"
      -      ],
      -      "type": "object"
      -    },
      -    {
      -      "properties": {
      -        "error": {
      -          "type": [
      -            "string",
      -            "object"
      -          ]
      -        }
      -      },
      -      "required": [
      -        "error"
      -      ],
      -      "type": "object"
      -    },
      -    {
      -      "properties": {
      -        "error_code": {
      -          "type": "string"
      -        },
      -        "ok": {
      -          "const": false
      -        }
      -      },
      -      "required": [
      -        "ok",
      -        "error_code"
      -      ],
      -      "type": "object"
      -    }
      -  ],
      -  "type": "object"
      -}New value: +null
  2. Changed11 schema fields changed
    • addedInput schema / properties / arguments / oneOf
      Added value: +[
      +  {
      +    "type": "object"
      +  },
      +  {
      +    "description": "JSON-encoded object, as used by tool calls",
      +    "type": "string"
      +  }
      +]
    • removedInput schema / properties / arguments / type
      Removed value: -"object"
    • addedInput schema / properties / calls
      Added value: +{
      +  "const": 1
      +}
    • addedInput schema / properties / function
      Added value: +{
      +  "additionalProperties": false,
      +  "properties": {
      +    "arguments": {
      +      "type": [
      +        "string",
      +        "object"
      +      ]
      +    },
      +    "name": {
      +      "type": "string"
      +    }
      +  },
      +  "required": [
      +    "name",
      +    "arguments"
      +  ],
      +  "type": "object"
      +}
    • addedInput schema / properties / network
      Added value: +{
      +  "enum": [
      +    "eip155:8453",
      +    "eip155:84532",
      +    "base",
      +    "base-sepolia"
      +  ],
      +  "type": "string"
      +}
    • addedInput schema / properties / quantity
      Added value: +{
      +  "const": 1
      +}
    • addedInput schema / properties / requests
      Added value: +{
      +  "const": 1
      +}
    • addedInput schema / properties / toolId
      Added value: +{
      +  "type": "string"
      +}
    • addedInput schema / properties / tool_id
      Added value: +{
      +  "type": "string"
      +}
    • addedInput schema / properties / type
      Added value: +{
      +  "const": "function"
      +}
    • addedInput schema / properties / units
      Added value: +{
      +  "const": 1
      +}
  3. Changed3 schema fields changed
    • addedOutput schema / anyOf
      Added value: +[
      +  {
      +    "properties": {
      +      "capability": {
      +        "type": "string"
      +      },
      +      "cost": {
      +        "type": "object"
      +      },
      +      "intent": {
      +        "type": "object"
      +      },
      +      "ok": {
      +        "const": true
      +      },
      +      "receipt": {
      +        "type": [
      +          "object",
      +          "null"
      +        ]
      +      },
      +      "result": {
      +        "type": "object"
      +      },
      +      "verification": {
      +        "type": "object"
      +      }
      +    },
      +    "required": [
      +      "ok",
      +      "intent",
      +      "capability",
      +      "result",
      +      "verification",
      +      "cost",
      +      "receipt"
      +    ],
      +    "type": "object"
      +  },
      +  {
      +    "properties": {
      +      "accepts": {
      +        "minItems": 1,
      +        "type": "array"
      +      },
      +      "resource": {
      +        "type": "object"
      +      },
      +      "x402Version": {
      +        "const": 2
      +      }
      +    },
      +    "required": [
      +      "x402Version",
      +      "resource",
      +      "accepts"
      +    ],
      +    "type": "object"
      +  },
      +  {
      +    "properties": {
      +      "error": {
      +        "type": [
      +          "string",
      +          "object"
      +        ]
      +      }
      +    },
      +    "required": [
      +      "error"
      +    ],
      +    "type": "object"
      +  },
      +  {
      +    "properties": {
      +      "error_code": {
      +        "type": "string"
      +      },
      +      "ok": {
      +        "const": false
      +      }
      +    },
      +    "required": [
      +      "ok",
      +      "error_code"
      +    ],
      +    "type": "object"
      +  }
      +]
    • removedOutput schema / properties
      Removed value: -{
      -  "capability": {
      -    "type": "string"
      -  },
      -  "cost": {
      -    "type": "object"
      -  },
      -  "intent": {
      -    "type": "object"
      -  },
      -  "ok": {
      -    "const": true
      -  },
      -  "receipt": {
      -    "type": [
      -      "object",
      -      "null"
      -    ]
      -  },
      -  "result": {
      -    "type": "object"
      -  },
      -  "verification": {
      -    "type": "object"
      -  }
      -}
    • removedOutput schema / required
      Removed value: -[
      -  "ok",
      -  "intent",
      -  "capability",
      -  "result",
      -  "verification",
      -  "cost",
      -  "receipt"
      -]
  4. Added

TDQS

C2.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and readOnlyHint=false; the description adds a useful behavioral guardrail ('never infer a mutation') and a cost hint ('intent:demo is free'). However, it does not disclose what side effects may occur, what resources are affected, or any permission/authorization requirements.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and every sentence adds some value: the purpose statement, the free-demo hint, and the mutation caution. The first sentence is ambiguous, but the structure is front-loaded and compact.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive, open-world tool with 5 unrequired parameters, no output schema, and 7 siblings, the description provides almost no information needed to invoke it correctly. There is no parameter guidance, no sibling differentiation, and no explanation of what a 'public-source outcome' is.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate for the 5 undocumented parameters. It only hints at 'intent:demo' and the need for explicit operations, leaving operation, capability, input, and idempotency_key undefined. This is insufficient for an agent to construct a valid call.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

States it executes an operation or outcome, but 'scoped provider operation' and 'supported public-source outcome' are vague and jargon-heavy. It does not differentiate from siblings like xguard_secretless_call or xguard_preflight, leaving the agent to guess what this tool specifically covers.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Offers a caution about not inferring mutations and notes intent:demo is free, but gives no explicit guidance on when to use this tool versus alternatives, no prerequisites, and no examples. The 'never infer a mutation' rule is a safety guardrail, not a usage selector.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.