Skip to main content
Glama

Output Verification

decision_check

Run pre_action_check and attach a short-lived ES256 readiness receipt bound to the exact request and action hashes. The receipt is evidence of this Gate result, not authorization. Require decision_verify to return gate_passed before using it in an enforcement path. Required tool arguments: run_id, actor, requested_action, target, risk_tier, claims, evidence. Supply claim evidence and configure the deployment's ES256 signing key; without it the receipt is unavailable. A receipt is not authorization. Illustrative example arguments (synthetic; replace with your own data): {"run_id":"synthetic-readiness-001","actor":{"id":"example-agent","type":"ai_agent","operator":"Example owner"},"requested_action":"prepare a supplier recommendation for review","target":{"id":"example-supplier","type":"counterparty"},"risk_tier":"low","claims":[{"claim_id":"c1","claim":"The example record says registration is active.","support_level":"direct","evidence_ids":["e1"],"supporting_quotes":[{"evidence_id":"e1","quote":"Registration active"}]}],"evidence":[{"evidence_id":"e1","name":"Synthetic registry excerpt","source_type":"official_document","content":"Registration active"}]}. This product offers 5 free trial attempts for agent_output_verification: call MCP free_trial_status, then MCP free_trial with that tool's own inputSchema arguments; no HTTP adapter or wallet is needed. HTTP alternative: /v1/agent-output/trial; GET that URL for input_schema and example_request, then POST raw tool arguments there (not an MCP/A2A envelope). Both transports share the allowance and daily capacity is limited. Other tools are not included in this trial. Evaluation on paid endpoints requires a signed Base USDC payment for the exact request, or Pro access. Discovery is free. Keep the original request and X-Payment-Signature for result recovery within 24 hours. Current prices: https://output-verification.agendamcp.dpdns.org/.well-known/x402. Do not pay automatically. Evidence triage only: no factual-truth verification, no legal, compliance, sanctions, or financial advice. Human review is required before any commercial action.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
actorYes
claimsYes
run_idYesCaller-generated correlation identifier. Resubmit the same run_id after adding evidence or approval.
targetYes
approvalNo
evidenceYes
risk_tierYes
policy_contextNo
requested_actionYes
unsupported_claimsNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
run_idYes
receiptNoShort-lived readiness receipt attached by decision_check. The legacy pre_action_check response omits it.
decisionYes
decision_idYes
limitationsYes
reason_codeYes
verificationYes
blocking_gapsYes
policy_checksNo
policy_versionYes
receipt_statusNoPresent on decision_check. unavailable fails the signed Gate path closed.
approval_requiredYes
evidence_requestsYes
human_review_requiredYes
not_authorization_noticeYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

B3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=false and idempotentHint=false, so a write that is not idempotent is expected. The description adds real value by disclosing the short-lived ES256 receipt, binding to request/action hashes, the signing-key prerequisite, and the 'not authorization' caveat. However it says little about retries, resubmission semantics, or what happens when signing key is absent beyond 'receipt unavailable.'

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description buries the tool's function under referral to a sibling, then devolves into a long free-trial/marketing paragraph about agent_output_verification, HTTP alternatives, pricing, and payment instructions that have nothing to do with calling decision_check. The result is bloated and off-topic for the task at hand.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 10-parameter tool with 10% schema coverage and no nested-object warnings, the description should clarify the meaning and requirements of parameters. Instead, a large fraction of the text is trial/pricing content irrelevant to the tool, while critical behavioral details (idempotency handling, receipt lifetime, key-missing behavior) are only glossed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 10%, so the description carries most of the burden, yet it only lists the seven required argument names without explaining semantics. It does supply one detailed example payload, which helps agents infer nested shapes, but leaves the meaning of risk_tier, claims, and evidence largely to the raw schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description pivots around 'Run pre_action_check and attach a short-lived ES256 readiness receipt,' which conflates this tool with a sibling's behavior rather than stating its own distinct purpose. It never cleanly says decision_check produces a Gate result plus a signed receipt distinct from pre_action_check. The name/mechanism is inferable, but the core verb+resource framing is muddied by leading with the sibling tool call.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives a clear ordering rule: require decision_verify to return gate_passed before using the result in an enforcement path, and it explicitly disclaims authorization. This frames when the result is valid for enforcement, though it doesn't contrast decision_check against pre_action_check directly.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources