FaultKey · CausalLayer
Server Details
Deterministic AI-liability attribution: signed, Bitcoin-anchored vendor/deployer/user fault split.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- smq9sn5jck-coder/causallayer-mcp
- GitHub Stars
- 2
- Server Listing
- casuallayer-mcp
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.2/5 across 10 of 10 tools scored.
Most tools have distinct purposes, but submit_incident and submit_otel_trace both create certificates from different input sources, and verify_certificate and verify_certificate_recompute both verify but via different methods. Descriptions and input types make them distinguishable, so ambiguity is low.
All names use snake_case and generally follow a verb_noun pattern (e.g., submit_incident, verify_certificate). Deviations like verify_certificate_recompute (verb_noun_modifier) and evaluate_prospective_response (verb_adjective_noun) are minor and remain predictable.
10 tools is well within the ideal 3-15 range and maps cleanly to the domain: incident submission, text extraction, pre-response gating, certificate verification, remediation simulation, jurisdiction analysis, and issuer/anchor metadata queries. Each tool serves a distinct workflow step without redundancy.
The core lifecycle (extract → submit → verify → analyze) is well covered. However, several tools reference external catalog endpoints (e.g., /jurisdiction/catalog, /remediation/catalog, /gate/thresholds) that are not exposed as MCP tools, forcing an agent to make separate HTTP calls to use these tools effectively. This is a minor workaround, not a critical gap.
Available Tools
10 toolsevaluate_prospective_responseAInspect
Deterministic prospective-evaluation gate (FK-METHOD-2026-006). Pass a ProposedAction BEFORE the agent delivers a response; receive one of three verdicts: 'allow', 'require_revision' (with specific factor-keyed directives), or 'block'. Uses the same four-factor engine that issues post-hoc certificates, so a single incident chains: prospective_pre_image -> response -> certificate -> anchor. This is a policy gate on structured action metadata, NOT a content safety classifier on raw prose. Thresholds are per-jurisdiction (EU strictest, US most permissive); read via GET /api/v2/gate/thresholds. Overrides are allowed but REQUIRE a governance rationale so the audit trail is complete. Cost: 1 credit. Pure deterministic.
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | The structured ProposedAction to evaluate. | |
| overrides | No | Optional per-call threshold override. Rationale REQUIRED for audit. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses several important behavioral traits: determinism, credit cost, per-jurisdiction thresholds, override requirements with governance rationale, and its relationship to the certificate engine. It could add more about error handling or exact return structure, but the provided details are substantive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Every sentence in the description carries meaningful information: method reference, usage timing, verdicts, engine linkage, exclusion, threshold access, override policy, cost, and determinism. It is front-loaded with the core purpose and contains no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (nested action object, overrides) and absence of an output schema, the description covers the core aspects: what input is expected, what verdicts to expect, when to call, and governance constraints. It does not specify exact response structure, but the verdict list is sufficient for an agent to understand the contract.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and each property already has a description, so the baseline is 3. The tool description adds meaning beyond the schema by explaining that the 'action' parameter is a structured ProposedAction (not prose) and that 'overrides' require a governance rationale for audit. This enriches the schema's formal definitions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as a 'Deterministic prospective-evaluation gate' that evaluates a ProposedAction and returns one of three verdicts. It distinguishes itself from sibling verification tools by explicitly positioning it as a pre-response gate rather than a post-hoc certificate tool, and it clarifies it is not a content safety classifier.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states clearly WHEN to use it: 'Pass a ProposedAction BEFORE the agent delivers a response.' It also provides exclusion guidance: 'NOT a content safety classifier on raw prose.' While it does not explicitly name alternative sibling tools, it gives enough context to infer appropriate use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
extract_incidentAInspect
Claude-powered structured extractor. Parses unstructured text (news articles, court filings, emails, PDFs, incident reports, logs) into the typed JSON schema required by submit_incident. Returns a ready-to-submit incident object with extracted agents, events, severity, jurisdiction, and financial impact. NOTE: This is a pre-processing convenience tool — the deterministic scoring engine itself remains LLM-free. Cost: 10 credits.
| Name | Required | Description | Default |
|---|---|---|---|
| text | Yes | Unstructured text to extract from. Can be a news article, court filing, incident report, email, PDF text, log output, or any description of an AI incident. | |
| context_hint | No | Optional hint about the source type (e.g., 'court filing', 'news article', 'internal incident report') to improve extraction accuracy. | |
| jurisdiction_hint | No | Optional ISO country code hint if the jurisdiction is known (e.g., 'AU', 'US', 'EU'). |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses important behavioral traits beyond any annotations: it is 'Claude-powered' (LLM-based), a 'pre-processing convenience tool' with a deterministic scoring engine that remains LLM-free, and it costs 10 credits. This gives the agent awareness of non-determinism, cost, and its auxiliary role. It does not mention potential failure modes or rate limits, but the provided context is substantial given no annotations exist.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is composed of three sentences plus a note. It leads with the tool's core function, then describes the output and adds important caveats. Each sentence earns its place, though the length is slightly above minimal. No fluff is present, and key details (cost, LLM nature) are efficiently included.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having no output schema and no annotations, the description covers the essential context: what the tool does, what it returns, its relationship to submit_incident, cost, and its LLM-based nature. It is complete enough for an agent to use it correctly without needing additional documentation. A perfect score is withheld because it does not mention error handling or clarify the 'agents, events' fields in more detail.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides 100% coverage for all three parameters, so the description does not need to explain them. The description adds contextual value by detailing the output (agents, events, severity, jurisdiction, financial impact) which indirectly relates to the text and hint parameters, but it does not elaborate on parameter syntax or formats beyond the schema. This aligns with the baseline 3 for high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as an extractor that parses unstructured text into a typed JSON schema, explicitly naming the resource (unstructured text) and the output format required by submit_incident. It distinguishes itself from sibling tools by positioning itself as a pre-processing convenience for incident submission, not as a submission, evaluation, or simulation tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states that the tool parses text into the schema required by submit_incident, which strongly implies it should be used before submission to prepare incident data. It provides clear context for when to use it, though it does not explicitly mention alternatives or when not to use it. The note about being a pre-processing tool adds further clarity.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_anchor_statusAInspect
Return the index of all CausalLayer Tessera anchor batches, or one batch's full JSON (signed Merkle root, leaves, OpenTimestamps proof reference). FREE.
| Name | Required | Description | Default |
|---|---|---|---|
| version | No | Optional anchor version, e.g. '2026-05-16-v1.6.4-simulation-calibration'. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses the return types (index or full JSON) and the JSON contents (signed Merkle root, leaves, OpenTimestamps proof reference), but does not explicitly state safety (read-only) or other behavioral traits like side effects or potential empty results.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, information-dense sentence. It front-loads the verb and resource, then delivers the two modes and key JSON fields without wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with one optional parameter and no output schema, the description covers the essential return behavior and contents. It lacks details like response format for the index (e.g., array of versions) but is otherwise sufficient for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% (version is described). The description adds semantic value by implying that the optional version parameter distinguishes between retrieving all batches (index) and a single batch (full JSON), which is not fully explicit in the schema alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Return') and names the resource ('CausalLayer Tessera anchor batches') with clear modes: index of all batches or one batch's full JSON. This differentiates it from siblings like verify_certificate and query_issuer_registry, which serve distinct purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage (when you need anchor batch data, use this tool) and adds 'FREE' as a hint, but it does not explicitly state when to use this vs alternatives or list any exclusions. It provides clear context but lacks direct alternative differentiation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
query_issuer_registryAInspect
Return the CausalLayer issuer registry, or one issuer record. The registry lists all trusted public-key fingerprints, key algorithms, validity windows, and the anchor-log repo for each active issuer. FREE — no API key required.
| Name | Required | Description | Default |
|---|---|---|---|
| issuer_id | No | Optional issuer id, e.g. 'causallayer-prod-2026-q2'. If omitted, returns the full registry. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description adds useful context: access is free/no API key required, and only active issuers are included. It does not mention response format, error handling, or rate limits, but the read-only nature is clear from 'Return,' and the auth trait is disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the main action, and no redundant information. Every word contributes to understanding what the tool does.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-optional-param query tool, the description adequately covers purpose, data fields, and access requirements. It lacks edge-case behavior (e.g., invalid issuer_id) but is otherwise sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The sole parameter issuer_id is fully described in the schema (optional, example, behavior when omitted). The description merely echoes this information without adding new semantic details, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Return') and clearly identifies the resource (CausalLayer issuer registry) and its contents (fingerprints, algorithms, validity windows, anchor-log repo). It distinguishes itself from siblings like verify_certificate by focusing on registry retrieval rather than verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit usage guidance or alternatives are mentioned. The description implies use when needing issuer registry data, but it does not specify when not to use it or compare it to sibling tools such as verify_certificate.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
query_jurisdiction_overlayAInspect
Multi-jurisdiction overlay (FK-METHOD-2026-004). Given a canonical attributable apportionment (party-id -> share), the union of all jurisdiction role tags on each actor, and the union of jurisdiction-specific flags, return side-by-side post-overlay shares for AU, EU, US, UK, CA (or a chosen subset) with the specific rules that fired in each, citation URLs, and a parties × jurisdictions matrix. v1 ships full implementations for AU and EU; US/UK/CA are research stubs marked is_stub: true. Use GET /api/v2/jurisdiction/catalog to discover support and stub status. Cost: 1 credit. Pure deterministic.
| Name | Required | Description | Default |
|---|---|---|---|
| flags | Yes | Union of jurisdiction-specific flags. AI Act / PLD flags drive the EU overlay; ACL / CPS 230 / VAISS flags drive the AU overlay. | |
| actors | Yes | All actors with the union of jurisdiction-specific role tags. EU and AU tags coexist on the same actor record. | |
| attributable | Yes | Canonical pre-overlay apportionment as { party_id: share }. Sum should approximate 1.0; the function renormalises within tolerance. | |
| jurisdictions | No | Optional subset to compute. Defaults to all five. | |
| primaryJurisdiction | No | Engine-level jurisdiction string (e.g. 'EU', 'DE', 'AU'). Used by the EU gate to decide engagement. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses key behavioral traits: full implementations for AU/EU, research stubs for US/UK/CA with `is_stub: true`, pure determinism, credit cost, and the need to consult a catalog for support. It also describes the return format. This is exemplary transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but appropriately sized for a complex tool. It front-loads the core purpose, then adds stub status, discovery, cost, and determinism in separate clauses. Every sentence earns its place, though it is slightly long.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (5 nested parameters, no output schema), the description adequately covers return values, stub limitations, and a discovery mechanism. It could mention error handling or the role of primaryJurisdiction, but the schema covers the latter. Overall it is sufficiently complete for an agent to invoke correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds conceptual meaning by framing the three required parameters ('attributable apportionment', 'union of jurisdiction role tags', 'union of jurisdiction-specific flags') and notes optional subset selection. This adds value beyond the schema's individual field descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with a specific verb ('return') and resource ('multi-jurisdiction overlay'), enumerating the output components (post-overlay shares, rules fired, citation URLs, matrix). It distinguishes itself from siblings by specifying its unique computation and jurisdictions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides context on when to use the tool (given a canonical apportionment, actor tags, and flags) and includes a clear pre-flight instruction to check the catalog for stub status. It does not explicitly name alternative tools, but the context is sufficient for correct selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
simulate_remediationAInspect
Counterfactual remediation simulator. Given a certificate's verdict + fourFactorScoring + agents and a list of remediation IDs from the FK-METHOD-2026-003 catalog, return the apportioned shares each remediation would have produced (in isolation) and the composite shares if they all stack. Every remediation cites a specific statute or standard. GET /api/v2/remediation/catalog for the list of IDs. Cost: 1 credit (same price as verify_certificate). Pure deterministic; same inputs produce a byte-identical result.
| Name | Required | Description | Default |
|---|---|---|---|
| agents | Yes | Agent registry (id + type) so the simulator can map remediation targetType to specific party ids. | |
| verdict | Yes | The verdict block from the CausalCertificate. | |
| remediations | Yes | List of remediation IDs from the catalog (e.g. vendor_adversarial_eval_suite, deployer_human_in_loop). Each may optionally pin appliedToParty to a specific agent id. | |
| fourFactorScoring | Yes | The fourFactorScoring block from the CausalCertificate. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the transparency burden. It discloses determinism ("Pure deterministic; same inputs produce a byte-identical result"), cost (1 credit), and points to the catalog endpoint. However, it does not explicitly state whether the operation has side effects, requires special permissions, or what the exact response structure is. The deterministic and cost details add value, but the absence of side-effect or permission disclosure is a gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is four sentences, all informative: purpose, inputs/outputs, catalog reference, and cost/determinism details. It is front-loaded with the main purpose and each sentence adds distinct value; however, it is slightly longer than strictly necessary, earning a 4 rather than 5.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with four nested parameters and no output schema, the description explains the high-level output (apportioned shares individually and in composite) and provides the catalog endpoint. It lacks a detailed output format example or edge-case guidance, but the deterministic and cost information, combined with the clear input/output description, makes it sufficiently complete for an agent to understand when and how to invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so baseline is 3. The description adds context by grouping parameters ("verdict + fourFactorScoring + agents and a list of remediation IDs") and explaining that remediations come from the FK-METHOD-2026-003 catalog and cite statutes/standards. This complements the schema but does not substantially elevate semantic understanding beyond what the property descriptions already provide.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb and resource: "Counterfactual remediation simulator" that takes a certificate's verdict, fourFactorScoring, agents, and remediation IDs to return apportioned shares. It distinguishes itself from siblings by focusing on simulating remediation outcomes rather than verification or other functions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use the tool: when needing to simulate counterfactual remediation outcomes from a certificate's verdict and scoring. It also gives a prerequisite (GET /api/v2/remediation/catalog for IDs) and mentions cost parity with verify_certificate, though it does not explicitly name alternatives or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
submit_incidentAInspect
Submit an AI incident for deterministic causal liability attribution. Returns a signed CausalCertificate, per-agent liability allocation, evidence-chain completeness, regulatory mapping, and (where keys are configured) a Bitcoin-anchored proof. Cost: 50 credits. Three guardrails apply: PII scan, deterministic-only acknowledgement, and minimum evidence.
| Name | Required | Description | Default |
|---|---|---|---|
| title | Yes | ||
| agents | Yes | ||
| events | Yes | ||
| category | No | ||
| currency | No | ||
| severity | No | ||
| description | No | ||
| jurisdiction | No | ||
| pii_acknowledged | No | G1: Set to true ONLY if caller has confirmed PII handling is permitted by their data agreement. False payloads with detected PII will be rejected. | |
| deterministic_only | Yes | G2: Must be true. Acknowledges CausalLayer is deterministic and not LLM-based. | |
| financial_impact_cents | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. It explicitly lists the return values (signed CausalCertificate, liability allocation, evidence-chain completeness, regulatory mapping, Bitcoin proof) and discloses the cost and guardrails. This is a solid amount of transparency, though it does not explain failure modes or exact evidence thresholds, which would push it to a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences long and front-loaded with the main purpose. Each sentence adds critical information: purpose, return values, cost, and guardrails. There is no fluff or repetition, making it concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description provides a comprehensive overview of what the tool does, what it returns, its cost, and its guardrails. For a complex submission tool with 11 parameters and no output schema, this is reasonably complete. However, it does not elaborate on the 'minimum evidence' requirement or error handling, leaving some gaps for an agent trying to use the tool confidently.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 18% (2 out of 11 parameters have descriptions). The description mentions guardrails that map to `pii_acknowledged` and `deterministic_only`, but it does not explain the meaning or purpose of other parameters such as `agents`, `events`, `severity`, or `jurisdiction`. The description does not compensate for the low schema coverage, leaving many parameters underspecified.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with a specific verb and resource: 'Submit an AI incident for deterministic causal liability attribution.' This clearly identifies the tool's primary function and distinguishes it from siblings like submit_otel_trace (which submits telemetry) and evaluate_prospective_response (which evaluates responses). The purpose is unambiguous and the resource is well-defined.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context on when to use this tool: to submit an AI incident for liability attribution. It also mentions cost (50 credits) and three guardrails (PII scan, deterministic-only acknowledgement, minimum evidence), which help the agent understand prerequisites and constraints. However, it does not explicitly mention alternatives or exclusions, so it falls short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
submit_otel_traceAInspect
Convert an OpenTelemetry OTLP JSON trace into a FaultKey incident and return the same deterministic CausalCertificate as submit_incident. Each span becomes an event; service.name groups spans into agents; W3C trace_id and span_id propagate as evidence pointers on the causal graph edges. Cost: 50 credits (same as submit_incident). Three guardrails apply: PII scan, deterministic-only acknowledgement, and minimum evidence (auto-satisfied when the trace has at least 1 span).
| Name | Required | Description | Default |
|---|---|---|---|
| otlp | Yes | OTLP JSON payload with resourceSpans[]. See https://opentelemetry.io/docs/specs/otlp/#json-protobuf-encoding | |
| title | Yes | ||
| category | No | ||
| currency | No | ||
| jurisdiction | No | ||
| pii_acknowledged | No | G1: Set to true ONLY if PII handling is permitted by your data agreement. OTLP traces frequently leak user/session ids in attributes. | |
| deterministic_only | Yes | G2: Must be true. Acknowledges CausalLayer is deterministic. | |
| financial_impact_cents | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and does an excellent job: it discloses the cost (50 credits), the three guardrails (PII scan, deterministic-only, minimum evidence), and the trace-to-incident mapping details (span/event, service.name grouping, evidence pointer propagation). This gives the agent critical behavioral context beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is four sentences, each adding distinct value: primary purpose, mapping logic, cost, and guardrails. It is front-loaded with the main action, uses semicolons for compactness, and contains no filler or redundancy. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity and lack of output schema, the description covers the major aspects: purpose, mapping, cost, and guardrails. However, it leaves some ambiguity about behavior in edge cases (e.g., zero spans) and does not explain the return format beyond 'CausalCertificate' (though that is presumably covered by submit_incident). The schema fills some gaps, so the overall package is strong but not exhaustive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 38%, so the description needs to compensate. It adds meaningful context for some parameters via guardrails (PII scan aligns with pii_acknowledged, deterministic-only aligns with deterministic_only) and mentions OTLP payloads, but it does not explain the remaining parameters (title, category, currency, jurisdiction, financial_impact_cents). While it partially fills the gap, it falls short of fully compensating for low schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool converts an OpenTelemetry OTLP JSON trace into a FaultKey incident and returns a CausalCertificate, distinguishing it from submit_incident by referencing the same certificate. It also specifies the mapping behavior (spans to events, service.name to agents) and propagation of trace/span IDs, making the purpose specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It implicitly tells when to use the tool (when you have an OTLP trace) by stating its core function, and it relates to submit_incident by noting it returns the same certificate. However, it does not explicitly state when not to use it or provide direct alternatives beyond mentioning submit_incident. This is clear enough for an agent to infer, but a more explicit comparison would improve it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_certificateAInspect
Independently verify a CausalCertificate end-to-end (signature, Merkle integrity, issuer status against the registry). Cost: 1 credit. In production env, certificates from non-active issuers are rejected.
| Name | Required | Description | Default |
|---|---|---|---|
| certificate | Yes | CausalCertificateV1 object as returned by submit_incident.certificate |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure. It adds valuable context: a cost of 1 credit and production-environment rejection for certificates from non-active issuers. However, it does not explain side effects (if any), return format, or failure modes beyond issuer rejection.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two compact sentences: the first declares the core action and scope, the second adds cost and production-specific behavior. No fluff or repetition; information is front-loaded and efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers purpose, cost, and a key environmental behavior, but it does not describe the output/return value, and there is no output schema to fill that gap. Given the complexity of 'end-to-end' verification, an agent would benefit from knowing what the tool returns (e.g., success status, report, reasons for failure).
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the parameter description ('CausalCertificateV1 object as returned by submit_incident.certificate') is explicit and helpful. The tool description does not add further detail beyond echoing the certificate object, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool verifies a CausalCertificate end-to-end, listing specific verification dimensions (signature, Merkle integrity, issuer status). This specific verb+resource+scope distinguishes it from siblings like verify_certificate_recompute, which likely has a narrower focus.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies use for independent verification and mentions production behavior, but it does not explicitly state when to choose this tool over alternatives such as verify_certificate_recompute or query_issuer_registry. No exclusions or alternative comparisons are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_certificate_recomputeAInspect
Independently re-derive a CausalCertificate from its canonical input and compare byte-for-byte against the claimed certificate. This is the strongest verification path: it requires no trust in the issuer or signing key. Cost: 1 credit (same price as verify_certificate). Returns PASS only if every checked field (certificateId, request_hash, merkleRoot, verdict, causalGraph, fourFactorScoring, deviationTaxonomy, euRuleOverlay, cascadeAttenuation, damages, underwriting) matches identically.
| Name | Required | Description | Default |
|---|---|---|---|
| certificate | Yes | The CausalCertificate object claimed by the issuer. | |
| canonicalInput | Yes | The original incident body that produced the certificate — the same JSON originally posted to submit_incident or submit_otel_trace. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It covers key traits: costs 1 credit, returns PASS only on exact byte-for-byte match, enumerates the exact fields checked, and clarifies the trust model (no trust in issuer/key). It does not explicitly state what happens on mismatch or whether the operation is read-only, but the nature of a verification/recompute tool makes this implicit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is succinct and front-loaded with the core action. It efficiently packs essential information: the verification approach, trust model, cost, and the strict PASS condition with a field list. No superfluous words or redundant details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has two complex object parameters, no annotations, and no output schema. The description covers the primary behavior, cost, and success criteria, and it distinguishes the tool from siblings. However, it lacks an explicit comparison to verify_certificate (beyond cost) and does not describe the failure response or edge-case behavior, which would make it fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% for both parameters. The schema already describes certificate as 'The CausalCertificate object claimed by the issuer' and canonicalInput as 'the original incident body that produced the certificate — the same JSON originally posted to submit_incident or submit_otel_trace.' The tool description adds no new parameter-level details beyond the schema, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb and resource: 'Independently re-derive a CausalCertificate from its canonical input and compare byte-for-byte against the claimed certificate.' It also distinguishes itself from the sibling verify_certificate by emphasizing it is the 'strongest verification path' requiring no trust in issuer, making its unique purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for when to use this tool over alternatives: it is the strongest verification path and requires no trust in issuer or signing key. It also notes cost equivalence with verify_certificate, implying it can be used as an independent check. However, it does not explicitly state when NOT to use it or name an alternative like 'for standard verification, use verify_certificate'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
AlicenseAqualityBmaintenanceBitcoin-anchored provenance for AI outputs; enables stamping, verifying, and tracing outputs with offline-verifiable canonical roots.3Apache 2.0
emilia-mcp-serverofficial
AlicenseAqualityAmaintenanceThe accountability layer for AI agents — a named human's signed yes before an agent does anything irreversible (payment, record change, deploy), then an offline-verifiable Trust Receipt. Apache-2.0, formally verified.17846Apache 2.0- Flicense-qualityCmaintenanceTamper-evident cryptographic audit trail for LLM outputs. Compliance logging for AI agent decisions.
- AlicenseAqualityBmaintenanceCryptographic receipts for AI outputs — signed, chain-anchored, $0.001/call663MIT
Your Connectors
Sign in to create a connector for this server.