Skip to main content
Glama

Verify a Patina attestation

verify_attestation
Read-onlyIdempotent

Check whether a Patina attestation really was signed by Patina. Every Patina score ships with an EIP-191 signed message; hand this tool that message and signature and it returns the address it recovered, the address Patina publishes, and whether the two match. IMPORTANT, AND THE WHOLE POINT: you do not need this tool, and where you can, you should not use it. A signature is worth something precisely because ANYONE can check it offline, with no call to Patina, using viem's recoverMessageAddress or ethers' verifyMessage. If you ask Patina's own server whether Patina's own signature is good, you are trusting Patina again and the signature has bought you nothing. That is why this returns the recovered address rather than a bare yes: compare it yourself. Attestations also EXPIRE: the message carries an expiresAt line inside the signed bytes, and a genuine signature past that date means the score was true when issued and should be fetched again, not that anybody forged anything.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
messageYesThe exact `message` string from the attestation, newlines and all.
signatureYesThe `signature` from the attestation, 0x-prefixed.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses that the tool returns the recovered address rather than a bare boolean, enabling independent comparison, and explains why that design exists. It also reveals expiration semantics: a genuine signature past expiresAt means the score was valid when issued and should be refetched, not that it was forged. Annotations already mark readOnly and idempotent; the description adds meaningful behavioral context without contradicting them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is longer than typical, but every sentence earns its place: core purpose, return value, why to avoid the tool, offline alternatives, and expiration caveat. It is front-loaded with the primary check and scoping, and the warning is presented as 'IMPORTANT, AND THE WHOLE POINT,' making the structure easy to follow. There is no filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no output schema, the description covers the return values, the rationale for the return shape, and the expiration edge case, giving an agent enough to decide whether and how to call it. It omits explicit error behavior for malformed signatures or mismatched addresses, but the strong 'do not use this tool' guidance reduces the impact of that gap. Overall it is highly complete for its complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, with both message and signature already described precisely ('newlines and all', '0x-prefixed'). The description restates the parameters but adds no new format or syntax details beyond the schema. Baseline 3 is appropriate because the schema carries the parameter documentation burden.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Check whether a Patina attestation really was signed by Patina.' It clearly scopes the tool to signature verification and distinguishes it from siblings like check_threshold or get_patina_score by stating the return tuple: recovered address, published address, and match. This is unambiguous and immediately tellable apart from other tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly instructs when not to use the tool: 'you do not need this tool, and where you can, you should not use it,' and names offline alternatives (viem's recoverMessageAddress, ethers' verifyMessage). It explains the reasoning—server-side verification reintroduces trust in Patina—giving a clear condition for avoidance. This is strong usage guidance beyond any sibling description.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A4.5/5.0
Disambiguation5/5

Each tool serves a clearly distinct purpose: check_threshold is a yes/no gate, get_patina_score provides the full score breakdown, resolve_identity offers anonymous handle-based lookups, and verify_attestation handles signature verification. Even the overlapping get_patina_score and check_threshold are well-differentiated by their descriptions.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern with snake_case: check_threshold, get_patina_score, resolve_identity, verify_attestation. The verbs are specific and the nouns clearly indicate the target resource or action, making the pattern predictable.

Tool Count5/5

Four tools is well-scoped for a focused trust-score API. Each tool adds a distinct capability—gating, detailed lookup, handle resolution, and attestation verification—without redundancy or bloat. The count feels proportionate to the domain.

Completeness5/5

The tool surface covers the core workflows: retrieving a score, checking against a threshold, resolving identity from a handle while preserving privacy, and verifying attestations independently. No obvious missing operations exist for the stated purpose of querying and verifying Patina trust signals.