Skip to main content
Glama

federation_node_report_in

The mothership link (CO 486): a self-hosted node reports in to the hub on its own initiative (poll-shaped, node-initiated — the hub never calls the node). NODE-SIGNED, not operator-token'd: the node's identity IS its signature over the canonical envelope { node_id, nonce, timestamp, route }, verified against its bound key (federation_node_key_bind). Carries version, catalog digest, and journal head; advances the node's liveness clock (minutes), which is separate from the operator's manager standing (days) — a dark node never accelerates its operator's decay. Fails closed on a bad/absent/replayed signature or a stale timestamp. No operator token required; the signature is the auth. Returns: { ok: true, last_report_in, report_in_count } or { error, code }. Example: call federation_node_report_in with arguments {}.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
algYesSignature algorithm of the bound key.
nonceYesA fresh single-use nonce (part of the signed envelope).
node_idYesThe reporting node.
versionNoThe node runtime version.
signatureYesbase64 signature over the canonical envelope, by the node bound key.
timestampYesISO timestamp, within the accepted skew window (part of the signed envelope).
journal_headNoThe node journal head (git commit hash) for hub attestation.
catalog_digestNoCompact digest of the node catalog subtree.

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. Added

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only say the operation is not read-only, not idempotent, not destructive. The description adds substantial behavior: advancing liveness clock separately from operator standing, dark-node semantics, fail-closed on bad/absent/replayed signatures/stale timestamps, and no-token auth. This goes far beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but nearly every clause carries unique information about auth, liveness, failure, and return shape. It loses a point for the awkward 'Example: call ... with arguments {}' note, which is confusing given five required parameters, and for being somewhat run-on.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite no output schema, it states the exact success and error return shapes. With high schema coverage and complex auth/liveness semantics, the description covers auth, failure modes, side effects, and independence from operator standing, making it complete enough for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema already documents all 8 parameters with 100% coverage, so the baseline is 3. The description adds valuable auth/envelope context (signed envelope over node_id, nonce, timestamp, route; version/catalog digest/journal head as payload) that explains why parameters exist, though it does not add per-field syntax.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('a self-hosted node reports in to the hub') with a clear resource and direction (node-initiated, hub never calls the node). This differentiates it from sibling federation tools and leaves no ambiguity about the operation's role.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides clear context: this is the node's own initiative, not a hub call, and it explicitly says no operator token is required because the signature is the auth. It does not enumerate alternative tools or exclusions, but the context is sufficient to select it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.6/5.0
Disambiguation4/5

Tools are grouped by clear domain prefixes (federation_*, introspection_*, moltbook_*) with each targeting a distinct resource+action (bond_post/release/status, key_challenge/bind/status, journal_append/read). The primary near-overlap — catalog_search_multi vs catalog_search_grouped_multi — is explicitly disambiguated in descriptions. Minor confusion risk exists among the four knowledge tools (federation_help, federation_why, about_us_about, how_to_about) but their purposes (how/why/manual/walkthrough) are distinct enough.

Naming Consistency3/5

The dominant `federation_<verb>_<noun>` pattern (create_tenant, list_agents, bond_release) is strong, but it's mixed with bare-noun tools (federation_arena, federation_offer, federation_solvency, federation_pricesheet, federation_help) and noun-noun variants (federation_manager_tree, federation_tenant_info). Non-federation tools use a loose `<domain>_<verb>` or single-token convention (legal_get, web_research, about_us_about). Readable overall, but conventions are noticeably mixed across the surface.

Tool Count2/5

At 72 tools this crosses the 50+ threshold for an extreme count. While the federation's scope is genuinely broad (manager lifecycle, tenants, catalog, agents, bonds, keys, journal, canon, introspection, social, email, research), the surface is bloated — roughly 15 bare introspection tools (list_nodes, probe, confidence, diff, coverage_gaps, co_decisions, climb_history, change_graph, change_reach, corpus_*) cover meta-self-knowledge that could plausibly collapse into fewer verbs. Agents would face a very large selection space.

Completeness5/5

The tool surface is exhaustively complete for the federation domain: applicant and operator sides of admittance, full manager lifecycle (create/list/freeze/attest/bond/key), full tenant lifecycle (create/list/info/update/suspend/delete/enter), catalog discovery with change-detection, pricing, solvency, latency, journaling, governance, legal, and even external outreach (email/moltbook/research). No dead ends exist — every write has a corresponding read/status path, and branched platform tools are intentionally deferred behind enter_tenant rather than omitted.

Resources