Skip to main content
Glama

how.is domain & IP intelligence

Crawler identity check

bot_verify
Read-onlyIdempotent

Verify a crawler's identity: is this visitor (IP + user-agent) really Googlebot, Bingbot, GPTBot, ClaudeBot, Applebot, PerplexityBot..., an impostor using the name, another bot, or likely a person? Checked against each operator's published IP lists and forward-confirmed reverse DNS, plus 7 days of bot-observatory firewall data on the network and TLS (JA4) fingerprint. Price $0.005 per call. Free sample: {"ip": "66.249.66.1", "ua": "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"}. Returns: data: verdict (verified / impostor / unknown_bot / likely_human_or_unclassified), confidence, automation_likely, claimed, identified_as{operator, method, evidence}, reasons[], how_to_act, checks{published_ranges, reverse_dns, asn}, observatory{network, fingerprint, claimed_family, impostors_seen}.

Input Schema

NameRequiredDescriptionDefault
ipYesThe visitor's public IPv4 or IPv6 address
uaNoThe User-Agent header it sent (omit or empty if none)
ja4NoOptional TLS JA4 fingerprint, e.g. t13d1516h2_8daaf6152771_02713d6af862

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly/idempotent/openWorld/non-destructive, so the bar is lower, and the description goes further: it discloses the evidence sources (published IP lists, forward-confirmed reverse DNS, 7 days of observatory network and JA4 data), the $0.005 per-call cost, and the full verdict taxonomy. It stops short of stating rate limits or error behavior, but adds substantial beyond-schema context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core question and outcome categories before pricing, sample payload, and return fields. The return-field enumeration is dense but justified given there is no output schema; a couple of clauses (the bot list) could be trimmed without loss.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description compensates fully by enumerating the returned fields (verdict, confidence, identified_as, checks, observatory) and the verdict enum. Combined with the free sample call, an agent has everything needed to invoke and interpret results.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3, but the description adds meaning by explaining that identity is judged on IP + user-agent and that JA4 is a TLS fingerprint feeding the observatory check — clarifying what each input contributes to the verdict rather than just restating types.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Verify a crawler's identity') and immediately enumerates the outcome space (real Googlebot/Bingbot/GPTBot, impostor, other bot, human). This is clearly distinguishable from siblings like bot_verify_batch and bot_observatory, which are bulk/observational variants.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when the tool is relevant by framing it as a single-visitor identity check with the required inputs, but it never names bot_verify_batch or bot_observatory as alternatives or states when not to use it. The price note hints at per-call economics but not routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources