Sunaiva Gate — Agent Rule Enforcement
Server Details
MCP enforcement layer that intercepts AI agent actions and blocks rule violations before execution.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 3.5/5 across 16 of 16 tools scored. Lowest: 2.4/5.
Most tools have clearly distinct purposes (e.g., CRUD for custom rules, mode management, validation). However, the presence of several not-implemented tools (e.g., get_rules) that overlap conceptually with working tools (list_custom_rules) introduces minor ambiguity.
All tool names follow a consistent verb_noun snake_case pattern (e.g., add_custom_rule, get_audit_log). The pattern is predictable and easy to parse for an agent.
With 16 tools, the set is slightly above the ideal range but still well-scoped for a rule enforcement API. No tool feels redundant, and the count is justified by the breadth of functionality.
Coverage is decent for custom rules and modes, but several critical tools are not implemented (get_rules, update_rules) and there is no way to inspect built-in rules via the API. This creates notable gaps in the lifecycle.
Available Tools
16 toolsadd_custom_ruleAInspect
Create a custom detection rule in the backend. Requires API key (Pro+).
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Rule name | |
| tier | No | Optional tier restriction | |
| pattern | No | Detection pattern (regex or keyword) | |
| severity | Yes | Severity on match | |
| description | No | Optional description | |
| detection_pattern | No | Compiled regex detection pattern |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It states creation occurs 'in the backend' and requires API key, but does not disclose other behaviors like whether duplicates are checked, validation steps, or side effects beyond creation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with front-loaded purpose. No unnecessary words. Could potentially be more concise by combining, but current is acceptable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Tool is moderately complex (6 parameters, 2 required) with no output schema. Description provides no information about return value (e.g., the created rule's ID) or confirmation. Lacks completeness for a creation tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All 6 parameters are described in the schema (100% coverage), so the description adds no extra meaning. Baseline of 3 is appropriate; description does not elaborate on parameter usage or constraints.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states 'Create a custom detection rule in the backend,' using a specific verb ('Create') and resource ('custom detection rule'). It distinguishes well from siblings like update_custom_rule, delete_custom_rule, list_custom_rules, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Mentions requirement for API key (Pro+), which provides context on authentication. However, no guidance on when to use this tool versus alternatives (e.g., update_custom_rule, apply_preset) or when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
apply_presetAInspect
Apply a preset bundle, activating all its included rules. Requires API key (Pro+).
| Name | Required | Description | Default |
|---|---|---|---|
| preset_id | Yes | ID of the preset to apply |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It mentions authentication requirements but does not disclose behavioral traits like destructiveness, reversibility, or side effects of applying a preset.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise with two short sentences, front-loading the action and essential prerequisite. No extraneous words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with one parameter and no output schema, the description provides the core action and a key requirement. However, it lacks details on idempotency, state changes, or further behavioral context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is only one parameter (preset_id) with complete schema description coverage (100%). The description adds no extra meaning beyond 'ID of the preset to apply,' so baseline score of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Apply a preset bundle, activating all its included rules,' which is a specific verb and resource. It distinguishes from sibling tools like list_presets or add_custom_rule.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes a prerequisite ('Requires API key (Pro+).') but does not explicitly state when to use this tool versus alternatives or when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
audit_verifyCInspect
[Planned — not yet implemented on the remote endpoint, returns NOT_IMPLEMENTED] Forward-linked hash-chain / ed25519 audit-log verification is not yet built in this backend.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description transparently states that the tool returns NOT_IMPLEMENTED, which is the current behavior. However, it lacks details on intended behavior, prerequisites, or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that efficiently conveys the tool's status and intended function. No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool is a placeholder, the description adequately covers its unimplemented status. However, for a fully functional tool, it would lack details on the verification process, output, and prerequisites.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, so schema coverage is 100%. The description adds no parameter info, but with zero parameters, baseline is 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description mentions 'Forward-linked hash-chain / ed25519 audit-log verification', which suggests a purpose, but immediately states it's not implemented. This makes the purpose vague and not actionable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No usage guidance is provided. The description only indicates that the tool is not implemented, offering no direction on when or why to use it versus siblings like get_audit_log.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_custom_ruleAInspect
Delete a custom rule. Requires API key (Pro+).
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | Rule ID to delete |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses the destructive nature of the tool ('Delete') and an authentication requirement, adding value beyond the schema. However, no annotations are provided, and the description omits details like side effects, reversibility, or error conditions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the purpose, followed by a necessary prerequisite. No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple delete tool with one parameter and no output schema, the description covers the purpose and a key prerequisite. It is reasonably complete, though it could mention expected outcomes or error handling.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with the parameter 'id' described as 'Rule ID to delete'. The description does not add additional meaning beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states 'Delete a custom rule' with a specific verb and resource, clearly distinguishing it from sibling tools like add_custom_rule, update_custom_rule, and list_custom_rules.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states 'Requires API key (Pro+)', providing a prerequisite for use. It implies when to use this tool (to delete a rule) but does not explicitly exclude alternatives or provide when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_audit_logBInspect
View recent gate decisions — blocks, warnings, passes, and bypasses.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max entries to return (default 50) | |
| rule_id | No | Accepted for forward-compatibility but NOT applied server-side — the backend only honors limit/cursor. Filter the returned entries client-side. |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits. It reveals that 'rule_id' is accepted but not applied server-side, which is a helpful gotcha. However, it does not mention pagination behavior (e.g., cursor), ordering, rate limits, or authentication requirements. The transparency is partial.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence, front-loaded with the verb and resource, and concisely lists the types of decisions. It wastes no words while conveying essential purpose. Slightly more structure (e.g., bullet points for categories) could improve scannability, but current form is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema or annotations, the description covers basic purpose and a parameter gotcha. But it omits output format, ordering (e.g., by time), and pagination mechanism (only limit, no cursor mentioned). For a list tool, these gaps reduce completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but the description adds meaningful nuance: for 'rule_id' it clarifies that it is not applied server-side and instructs filtering client-side, which goes beyond the schema description. This extra context helps the agent avoid misuse.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool views recent gate decisions and lists the categories (blocks, warnings, passes, bypasses). It is specific about the resource (gate decisions) and the action (viewing). However, it does not explicitly differentiate from siblings like 'audit_verify' or 'log_bypass', though the purpose is distinct enough.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives like 'audit_verify' or 'log_bypass'. There is no mention of context, prerequisites, or exclusions. This is a significant gap for effective tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_rule_modesAInspect
List all enforcement-mode overrides configured for the authenticated customer. Requires an account (Dev+).
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description only adds the account requirement, failing to disclose pagination, limits, or what constitutes an 'override' beyond the obvious list operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with a requirement note, efficiently conveying purpose and prerequisite. No wasted words, but could be better structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simplicity (no params, no output schema), the description is minimally adequate but lacks details on pagination, response format, or behavior beyond listing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, so the schema already conveys everything. The description adds context about scope ('for the authenticated customer'), which is helpful but not required.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'List' and a distinct resource 'enforcement-mode overrides', clearly differentiating from sibling tools like set_rule_mode and reset_rule_mode.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions a prerequisite (Dev+ account) but provides no explicit guidance on when to use this tool versus alternatives like get_rules or set_rule_mode.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_rulesBInspect
[Planned — not yet implemented on the remote endpoint, returns NOT_IMPLEMENTED] List active validation rules. Available today via the local npx @sunaiva/gate package.
| Name | Required | Description | Default |
|---|---|---|---|
| preset | No | Filter by preset name | |
| category | No | Filter by category |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description bears full responsibility for behavioral disclosure. It warns that the tool is planned and returns NOT_IMPLEMENTED on the remote endpoint, which is valuable. However, it does not discuss authentication, rate limits, or what happens on success (if implemented). The local package note adds context but is not strictly about tool behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences: first states purpose and caveat, second provides an alternative. No redundant information. Front-loaded with the key action.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the planned status and local alternative, but lacks context about what 'active validation rules' are, how they differ from custom rules, and what the output might look like (no output schema). For a list tool with potential unavailability, more context would be beneficial.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptive parameter names and descriptions. The tool description adds no additional meaning beyond the schema, as it only restates the purpose. Baseline of 3 is appropriate given high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'List active validation rules,' specifying a verb and resource. It also distinguishes from sibling tools like list_custom_rules by noting this deals with 'active validation rules' and provides a local alternative. However, the caveat about being planned and not yet implemented might cause some confusion.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool vs. alternatives. It mentions that the functionality is available locally via a package, but does not compare with siblings like list_custom_rules or list_presets. An agent would need to infer use cases without clear direction.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_custom_rulesAInspect
List all custom rules for the authenticated customer. Requires API key (Pro+).
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description covers authentication requirements but does not disclose other behavioral traits such as read-only nature, rate limits, or what happens when no rules exist.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that leads with the core action, making it easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple list tool with no parameters and no output schema, the description is adequate but lacks details like pagination, return format, or ordering.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, so the input schema has full coverage. The description does not need to add parameter details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'list' and resource 'custom rules for the authenticated customer'. This distinguishes it from sibling tools like add_custom_rule, delete_custom_rule, and update_custom_rule.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions a prerequisite ('Requires API key (Pro+)') but provides no guidance on when to use this tool versus alternatives like get_rules or list_presets.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_presetsAInspect
List available rule preset bundles. Requires API key (Dev+).
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry the full burden for behavioral disclosure. It only mentions an auth requirement but does not state that the tool is read-only, idempotent, or what the response format is. For a simple list operation, this is insufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short, front-loaded sentences with no unnecessary words. Every sentence earns its place: the first states the purpose, the second states a requirement.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple (no parameters, no output schema), so the description is mostly adequate. It could mention that it returns an array of preset objects or that it does not modify data, but given low complexity, it is reasonably complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are no parameters, so schema coverage is 100%. The description adds no parameter info, but the baseline for 0 parameters is 4. The description does not need to add meaning beyond what the schema provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'List available rule preset bundles,' which is a specific verb ('List') and resource ('rule preset bundles'). It distinguishes from sibling tools like 'apply_preset' (applying) and 'add_custom_rule' (adding) since it only lists existing presets.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a prerequisite ('Requires API key (Dev+)') but does not explicitly guide when to use this tool versus alternatives like 'apply_preset' or 'list_custom_rules.' The context is implied (list before applying), but no exclusions or comparisons are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
log_bypassAInspect
Record an intentional rule bypass with justification. Cannot bypass constitutional rules.
| Name | Required | Description | Default |
|---|---|---|---|
| reason | Yes | Justification for the bypass | |
| rule_id | Yes | ID of the rule to bypass |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It discloses the constraint on constitutional rules but does not mention any side effects, permissions, or consequences of recording a bypass. For a mutation-like action, this is insufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, no fluff, and quickly conveys the purpose and a key constraint. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description should ideally clarify the return value (e.g., confirmation or log entry). It also lacks context on whether bypasses are temporary or permanent. However, for a simple recording tool, it covers the basics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for both parameters. The description adds only the constraint about constitutional rules, which is an implicit parameter validation. This adds minimal value beyond the schema, so a baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Record' and the resource 'intentional rule bypass', and adds a specific constraint ('Cannot bypass constitutional rules'). This distinguishes the tool from siblings like update_rules or add_custom_rule.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides one key exclusion (constitutional rules) but does not give explicit guidance on when to use this tool versus alternatives like update_rules or audit_verify. The context for usage is implied but not fully articulated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
reset_rule_modeAInspect
Remove a mode override for a rule, reverting it to its default enforcement mode. Requires API key (Pro+).
| Name | Required | Description | Default |
|---|---|---|---|
| rule_id | Yes | Rule ID whose override to remove |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It indicates a mutation (removing override) and a prerequisite, but does not explain potential side effects (e.g., what if no override exists) or whether the change is reversible. Minimal but acceptable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no wasted words. Action is front-loaded and the requirement is appended succinctly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter mutation with no output schema, the description is fairly complete. It includes a usage prerequisite (Pro+). Could mention error cases or lack of effect if no override exists, but not essential.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the description of the parameter (rule_id) mirrors the schema's own description. No additional meaning is added beyond rephrasing. Baseline score applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'remove' and the resource 'mode override for a rule', with the specific outcome 'reverting it to its default enforcement mode'. It distinguishes itself from sibling 'set_rule_mode' by implying the opposite action.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a precondition (requires API key Pro+) but does not explicitly state when to use this tool versus alternatives like 'set_rule_mode'. Usage is implied but lacks explicit guidance for the agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
set_rule_modeAInspect
Set enforcement mode (shadow/advisory/enforce) for a specific rule. Requires API key (Pro+).
| Name | Required | Description | Default |
|---|---|---|---|
| mode | Yes | Enforcement mode | |
| rule_id | Yes | Rule ID to configure | |
| agent_id | No | Optional: scope override to a specific agent ID |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so the description carries the transparency burden. It mentions the auth requirement but does not disclose whether the operation is destructive, reversible, or idempotent. However, the action itself (setting a mode) is straightforward and the enum values are clear.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence that is front-loaded with the core action and includes necessary context (mode options, auth requirement). No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is a simple setter with no output schema. The description provides the core purpose and auth requirement but omits what the tool returns (e.g., success/failure). For a straightforward tool, this is adequate but not complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents each parameter. The description adds no additional meaning beyond listing the modes. Baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: to set enforcement mode (shadow/advisory/enforce) for a specific rule. It uses a specific verb ('Set') and resource ('enforcement mode for a specific rule'), and distinguishes from siblings like 'update_custom_rule' which updates rule definitions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for setting a rule's mode but provides no explicit guidance on when to use this tool versus alternatives (e.g., reset_rule_mode). It does mention an auth requirement (API key Pro+), which is helpful but insufficient for full usage guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ship_confidence_checkBInspect
[Planned — not yet implemented on the remote endpoint, returns NOT_IMPLEMENTED] Ship Confidence Gate (Rule 42) dual-tier authorization is not yet built in this backend.
| Name | Required | Description | Default |
|---|---|---|---|
| label | No | Human-readable label of the publish action (optional) | |
| artifact_id | Yes | The artifact being shipped (e.g. '@sunaiva/gate@1.1.0') | |
| command_preview | No | First 300 chars of the command that triggered the check (optional) |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description clearly states the tool is not implemented and returns NOT_IMPLEMENTED. This fully discloses its current behavior, which is valuable for an agent to know it will fail if called.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence, concise and front-loaded with the key information about implementation status. Minor repetition ('Planned — not yet implemented' could be tighter), but overall efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a stub tool with no output schema and no nested objects, the description adequately conveys that the tool is not functional. However, it lacks details on intended behavior or when it might be available, which could be useful for planning.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the description adds no new meaning beyond what the schema already provides. The description does not elaborate on parameter semantics, but baseline 3 is appropriate given high coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states the tool is for 'Ship Confidence Gate (Rule 42) dual-tier authorization' but explicitly says it is not implemented. The intended purpose is unclear because it describes a planned feature that does not exist; the actual behavior is a stub returning NOT_IMPLEMENTED.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool. It mentions it is not implemented, implying it should not be used, but provides no alternative tools from the sibling list (e.g., validate_action, get_rules) that might serve a similar purpose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_custom_ruleCInspect
Update an existing custom rule. Requires API key (Pro+).
| Name | Required | Description | Default |
|---|---|---|---|
| id | Yes | Rule ID to update | |
| name | No | ||
| tier | No | ||
| pattern | No | ||
| severity | No | ||
| description | No | ||
| detection_pattern | No |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It only discloses authentication requirement. No mention of mutation behavior, idempotency, error handling, or side effects. Inadequate for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, concise and front-loaded. First sentence states purpose, second states requirement. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Tool has 7 parameters and no output schema. Description omits update semantics (full vs partial), field update rules, and expected response. Inadequate for a medium-complexity mutation tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 14%, with id described. Description adds no parameter explanation (e.g., severity enum, pattern vs detection_pattern). Fails to compensate for low schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Update an existing custom rule', specifying verb and resource. It distinguishes from sibling tools like add_custom_rule and delete_custom_rule, and adds a requirement (API key Pro+).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives (e.g., add_custom_rule, update_rules). No when-not-to-use or contextual advice beyond the API requirement.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_rulesAInspect
[Planned — not yet implemented on the remote endpoint, returns NOT_IMPLEMENTED] Enable/disable is not backed by any route in this API; use set_rule_mode (shadow/advisory/enforce) instead, or the local npx @sunaiva/gate package.
| Name | Required | Description | Default |
|---|---|---|---|
| enable | No | Rule IDs to enable | |
| disable | No | Rule IDs to disable |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description fully discloses the tool's behavior: it is planned, not implemented, and returns NOT_IMPLEMENTED. It also states that enable/disable is not backed by any route.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is brief and to the point, containing only essential information: status warning and redirect. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a non-functional placeholder tool, the description is fully complete. It explains what the tool would do, that it is not implemented, and what to use instead.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% so baseline is 3. The description adds value by explaining that despite the parameter names, the tool does not actually support enable/disable functionality.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the intended action (enable/disable rules) and immediately clarifies that it is not implemented. It distinguishes from sibling tools by directing to 'set_rule_mode' as the alternative.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs the agent not to use this tool because it is not implemented. Provides two specific alternatives: 'set_rule_mode' and the local package 'npx @sunaiva/gate'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
validate_actionAInspect
Check if a proposed action passes all active validation rules. Returns allowed/blocked with rule violations.
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | The action to validate | |
| context | No | Optional additional context |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses read-only validation behavior and return format, but lacks detail on side effects, prerequisites, or how 'active validation rules' are determined.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no wasted words. Front-loaded with purpose, immediately followed by output behavior.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple validation check without output schema or annotations, the description adequately covers purpose and output. However, it lacks context about the relationship to sibling tools managing rules.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with clear descriptions. The tool description adds marginal value by contextualizing the 'action' parameter as the proposed action, but doesn't further explain 'context'.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states verb 'Check' and resource 'action', and specifies the output 'allowed/blocked with rule violations'. It distinctly differentiates from sibling tools like add_custom_rule and get_rules.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like ship_confidence_check or audit_verify. No mention of prerequisites or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!