Skip to main content
Glama

registeroracle

register_provider

Add or update an ICT third-party provider in the DORA Register of Information (Art. 28). Tracks all ITS-required fields: LEI, service type, criticality, data location, exit plan, etc.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
leiNoLegal Entity Identifier (20-char)
notesNo
countryNoCountry of HQ (ISO 3166-1 alpha-2)
cloud_typeNo
criticalityNo
provider_idNoUnique ID (auto-generated if empty)
audit_rightsNo
contract_endNoContract end (YYYY-MM-DD)
recovery_slaNo
service_typeNo
data_locationNoData storage/processing location
provider_nameYesName of ICT third-party provider
certificationsNo
contract_startNoContract start (YYYY-MM-DD)
subcontractingNoUses sub-outsourcing?
annual_cost_eurNoAnnual cost in EUR
exit_plan_existsNoExit strategy documented?
substitutabilityNo
function_supportedNoBusiness function supported
notification_clauseNo
last_risk_assessmentNo

TDQS

B3.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of disclosing behavioral traits, but it only says 'Add or update.' It does not mention overwrite semantics, required permissions, auto-generated provider_id, validation behavior, or reversibility, which are critical for a mutating tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is only two sentences with no filler, which is concise and front-loaded. However, the second sentence is a loose list ending with 'etc.,' which is slightly less structured than it could be.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a 21-parameter tool with no annotations and no output schema, yet the description is a brief high-level overview. It does not explain return values, update behavior, which parameters are required in practice, or key constraints like provider_id auto-generation, making it incomplete for reliable invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 52%, so the description should compensate for undocumented parameters. It lists a few key ITS fields (LEI, service type, criticality, data location, exit plan) but adds no meaning for the many optional fields like notes, audit_rights, certifications, notification_clause, and last_risk_assessment. The 'etc.' is vague and unhelpful.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the specific verb 'Add or update' with a clear resource ('ICT third-party provider in the DORA Register of Information'), which immediately distinguishes this write/upsert tool from sibling read tools like get_provider and list_providers.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'Add or update' gives clear context for when to use this tool, but it does not explicitly name alternatives or state when not to use it. It is sufficiently clear for a write operation, though no exclusions are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.7/5.0
Disambiguation5/5

Each tool targets a clear, distinct function: CRUD operations, analytics, validation, and export. There is no meaningful overlap between gap_analysis and validate_roi—one identifies data quality gaps while the other formally checks ITS compliance.

Naming Consistency4/5

Most tools follow a verb_noun pattern (list_providers, get_provider, export_its, validate_roi), but a few use noun_noun or noun_verb forms (concentration_risk, gap_analysis, ctpp_check, health_check). The naming is readable and consistent in style (snake_case), but not uniformly verb-led.

Tool Count5/5

The 10 tools are well-scoped for a DORA Register of Information domain, covering list/get/register, multiple analysis perspectives, validation, export, and health check. Each tool earns its place without redundancy.

Completeness4/5

The surface covers the core lifecycle (create, read, update via register_provider, list, export, validate) and adds useful analysis tools. The only notable gap is a delete_provider tool for removing deprecated or erroneous entries, but this is a minor omission.