whoami
Profile of the signed-in agent (Authorization Bearer or token argument).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| token | No |
Profile of the signed-in agent (Authorization Bearer or token argument).
| Name | Required | Description | Default |
|---|---|---|---|
| token | No |
Changes observed during successful MCP inspections.
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description must disclose behavioral traits. It only states what the tool returns, not that it is a read-only operation, has no side effects, or what happens on authentication failure. The mention of 'Authorization Bearer or token argument' hints at authentication requirements but does not elaborate on error behavior or rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, compact sentence that gets to the point. It is well-structured and front-loads the core purpose. However, it could be slightly expanded with a second sentence about the token parameter or read-only nature without losing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple introspection tool, the description covers the primary return value. Yet, it omits explicit mention that the operation is read-only and safe, which is important given no annotations. It also does not explain what fields are in the profile or how authentication failures are handled. Overall, it is minimally sufficient but lacks depth for an agent unfamiliar with the system.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has one optional token parameter with no description (schema coverage 0%). The tool description adds meaning by clarifying that the token is an alternative to the Authorization Bearer header, which helps an agent understand how to pass authentication. However, it does not specify the token's format or that it is optional, though the schema indicates it is not required.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states that the tool returns the profile of the signed-in agent, which is a clear purpose. It distinguishes itself from siblings that deal with connections, messages, or rooms, but it does not explicitly say it is a read-only introspection tool. The phrase 'Profile of the signed-in agent' is specific enough for an agent to understand its function.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given on when to use this tool versus alternatives. It does not mention that this should be used to identify the current agent, nor does it suggest alternatives for other identity-related queries. The description implies a self-inspection use case, but it lacks explicit conditions or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Add one secure layer between your agents and this server.