Skip to main content
Glama

Interaction Trust

agentic_interaction_trust

Read-onlyIdempotent

Triage the trust evidence for an agent-mediated interaction (identity, operator or principal authorization, tool scope, session authentication, action intent) before a high-stakes action executes. Returns a triage recommendation, trust signal, and the specific missing trust evidence. Required tool arguments: actor, target_surface, requested_action, decision_stage, dated_sources, risk_question. Grades supplied evidence; it does not independently verify source truth. Obtain the source records requested by inputSchema before asking for a decision-ready result. Do not fabricate missing evidence. Illustrative example arguments (synthetic; replace with your own data): {"actor":{"declared_type":"ai_agent","declared_name":"Example Shopping Agent","operator":"Example Consumer","declared_user_agent":"ExampleShoppingAgent/1.0","authentication_context":"session_cookie"},"target_surface":"checkout","requested_action":"complete purchase of two restricted-delivery items","asset_or_resource":"order-123","decision_stage":"pre_execution","dated_sources":[{"id":"ait-1","source_type":"agent_identity_claim","title":"Declared agent identity header","date":"2026-05-28"}],"risk_question":"Is this agent-mediated checkout ready to allow, step up, or route to human review?","requested_output":"structured_json"}. This product offers 2 free trial attempts for agentic_interaction_trust: call MCP free_trial_status, then MCP free_trial with that tool's own inputSchema arguments; no HTTP adapter or wallet is needed. HTTP alternative: /v1/trial; GET that URL for input_schema and example_request, then POST raw tool arguments there (not an MCP/A2A envelope). Both transports share the allowance and daily capacity is limited. Other tools are not included in this trial. Evaluation on paid endpoints requires a signed Base USDC payment for the exact request, or Pro access. Discovery is free. Keep the original request and X-Payment-Signature for result recovery within 24 hours. Current prices: https://interaction-trust.agendamcp.dpdns.org/.well-known/x402. Do not pay automatically. Evidence triage only: no factual-truth verification, no legal, compliance, sanctions, or financial advice. Human review is required before any commercial action.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
actorYes
notesNo
dated_sourcesYes
risk_questionYes
decision_stageYes
target_surfaceYes
requested_actionYesThe concrete action the agent, automated client, or delegated actor is trying to perform.
requested_outputNostructured_json
asset_or_resourceNoOptional account, endpoint, order, transaction, MCP tool, A2A capability, or other resource under review.

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
actorNo
watch_nextYes
limitationsNo
trust_signalYes
evidence_gapsYes
target_surfaceYes
requested_actionYes
supplied_sourcesYes
asset_or_resourceNo
not_advice_noticeYes
readiness_contractNo
top_risk_dimensionsNo
source_record_reviewNo
human_review_requiredYes
triage_recommendationYes
decision_readiness_labelYes
decision_readiness_scoreYesHeuristic 0-100 score for evidence-pack readiness for a human trust-routing decision. This is not approval, clearance, fraud adjudication, cybersecurity monitoring, identity verification, legal advice, compliance advice, financial advice, or transaction authorization.
minimum_sources_before_actionYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, non-destructive, closed-world, but the description adds substantive context: it grades supplied evidence and 'does not independently verify source truth,' warns against fabricating evidence, and names the return payload (recommendation, trust signal, missing evidence). It also discloses trial allowances, shared capacity, and a 24-hour result-recovery window. Consistent with annotations; no contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core purpose and constraints are front-loaded and useful, but the description then carries a large amount of commercial boilerplate (trial mechanics, HTTP alternative, x402 pricing, payment-signature recovery, legal disclaimers) that dilutes the actionable content. Several sentences serve billing rather than tool selection.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 9-parameter tool with an output schema present (so return values need not be re-explained), the description covers purpose, required inputs, evidence-only limitations, an example, and access mechanics. It is largely complete, with the main gap being enum-level semantics for decision_stage and source_type.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is low (22%), so the description must compensate. It explicitly lists the six required arguments (actor, target_surface, requested_action, decision_stage, dated_sources, risk_question) and provides a fully worked synthetic example showing nested actor fields, source objects, and requested_output. It does not explain the meaning of each enum value, so it stops short of a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb (triage) and resource (trust evidence for an agent-mediated interaction) and enumerates the evidence dimensions it weighs (identity, operator/principal authorization, tool scope, session auth, action intent). It also states what is returned. Sibling differentiation exists but is framed around trial/billing workflow rather than task selection, so it falls short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It clearly states the triggering condition ('before a high-stakes action executes') and the prerequisite workflow ('obtain the source records requested by inputSchema before asking for a decision-ready result', 'Do not fabricate missing evidence'). It also spells out the free-trial call sequence via siblings free_trial_status and free_trial. No explicit when-not-to-use beyond the evidence-only scope caveat.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources