Skip to main content
Glama

Connection review

connection_review
Read-onlyIdempotent

Requires the account session, current X-Organization-Id and CSRF for writes. Read today's private TLS review without starting a scan. One review per account, organization, origin and UTC day. Starting requires current domain monitoring rights. The account has three starts per UTC day. Retries return the same review. The scanner samples one public IP, with three stages and a 170-second deadline. Partial results do not establish safety. GET never starts a scan. The shared realtime channel reports stage changes. Reports expire after 26 hours.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
idYesOwned tab ID from list_tabs.

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added
  2. Removed
  3. Added

TDQS

A3.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (readOnly, idempotent, openWorld=false, destructive=false), the description discloses a great deal: one review per account/org/origin/UTC-day, three starts per day, retries returning the same review, scanner IP sampling, three stages, a 170-second deadline, that partial results do not establish safety, and a 26-hour expiry. This is exactly the behavioral context annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The text is dense with distinct facts and every sentence carries information, with no filler. It is slightly back-loaded: the auth/CSRF preamble leads rather than the core "read the review" purpose, which would be better front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter, read-only tool with no output schema, the description covers timing, idempotency, expiry and results caveats thoroughly. Its only real omission is clarifying the relationship to the sibling review_connection, whose name is nearly identical.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is only one parameter and schema description coverage is 100%, with 'id' documented in-schema as an owned tab ID from list_tabs. The description adds no additional parameter meaning, which is the expected baseline when the schema already does the work.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: "Read today's private TLS review without starting a scan." That is clear and actionable. However, it does not differentiate itself from the very close sibling review_connection, so an agent cannot tell from the text which of the two to pick.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by "without starting a scan" and the note that "GET never starts a scan", which contrasts with a starting path. But no alternative tool (review_connection, cancel_connection_review) is named, and there are no explicit when/when-not conditions routing the agent between siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.