Skip to main content
Glama

metadata-audit

Fetch any HTTP/HTTPS URL and extract metadata leaks (HTTP headers, meta tags, HTML comments, third-party trackers). Costs $0.05 USDC on Base via x402.

Input Schema

NameRequiredDescriptionDefault
urlYesAbsolute HTTP/HTTPS URL to audit

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so the description carries the full burden. It does disclose a genuinely important trait: the $0.05 USDC charge on Base via x402, which tells the agent this is a paid, outbound-network operation. It does not say whether payment is charged on failure, whether internal/private URLs are permitted, timeout/rate-limit behavior, or whether results are stored – significant omissions for an unannotated tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, purpose front-loaded, with the cost constraint second. Nothing is wasted and no sentence merely restates the tool name.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter fetch tool the description covers purpose and pricing, and no output schema means return values need not be explained. However, an unannotated paid network tool should still state failure/charge behavior and any fetch restrictions; those gaps leave the agent uncertain about consequences of calling it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema documents the single 'url' parameter at 100% coverage as an 'Absolute HTTP/HTTPS URL to audit.' The description's phrase 'any HTTP/HTTPS URL' only reinforces the scheme restriction already in the schema, adding no new semantics such as SSRF restrictions, redirect handling, or auth requirements.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb ('Fetch') plus resource ('any HTTP/HTTPS URL') and an enumerated list of what is extracted: headers, meta tags, HTML comments, trackers. That is enough to distinguish it from siblings like threat-scan or breach-check, though it never explicitly names which sibling covers adjacent needs.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by the verb and extraction list – an agent can infer 'call this when you want to know what a URL leaks.' There is no explicit when-to-use, when-not-to-use, or alternative named among the many privacy-sweep siblings, so routing still requires guesswork.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.