Skip to main content
Glama
Sign In

HiveAttest

by io.github.srotzin
OverviewDiscussionsAdmin

attest_smsh_verify

Verify a SMSH-Stamp v1 receipt (C8/C12: smsh-stamp-verifier). Validates schema, version, algorithm, timestamp, and Ed25519 signature. Reference-grade implementation. Wire format normative; production-grade is Layer B.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "receipt": "<receipt>"
    },
    "name": "attest_smsh_verify"
  }
}

Input Schema

NameRequiredDescriptionDefault
receiptYesSMSH-Stamp v1 receipt object
pubkey_b64urlNoOverride trust anchor Ed25519 public key (base64url, 32 bytes)
max_age_secondsNoReject receipts older than this many seconds

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must disclose behavior. It does list the validation steps (schema, version, algorithm, timestamp, signature) and notes it is reference-grade, which adds context. However, it does not state whether the tool is read-only, what it returns on success/failure, or any side effects. This is a partial disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is brief and front-loads the core purpose. References like 'C8/C12' and 'Layer B' are unexplained, which slightly hampers clarity, but overall it is efficiently written without wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a verification tool with no output schema and no annotations, the description is incomplete. It lacks details about what the tool returns (e.g., boolean, detailed report), how invalid receipts are handled, and what 'Layer B' production-grade means. The cryptic references and missing return behavior leave significant gaps for an agent deciding to invoke it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides comprehensive descriptions for all three parameters (receipt, pubkey_b64url, max_age_seconds), so schema coverage is 100%. The description itself adds no additional parameter details beyond what the schema already contains, fitting the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool verifies a SMSH-Stamp v1 receipt and lists the validations performed (schema, version, algorithm, timestamp, Ed25519 signature). This distinguishes it from other verify tools by the receipt type, though it does not explicitly differentiate from sibling tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions 'Reference-grade implementation' and 'Wire format normative', implying this is for verification against a normative spec, but it does not explicitly state when to use this tool over alternatives or when not to use it. The 'Layer B' reference is cryptic and lacks context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All HiveAttest toolsInspect
Try in Browser
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources