Skip to main content
Glama

Server Details

Spending control for AI agents: approved budgets, a decision before each payment, signed receipts.

Ownership verified
Status
Healthy
Uptime
95.1% over 21 days
OAuth
Works in Glama
Last Tested
Transport
Streamable HTTP · MCP 2024-11-05
URL
ChatGPT
–
Claude
–

TDQS

B3.3/5.0

Scored across 23 tools

Disambiguation2/5

The read/write pairs (agentmail vs agentmail_read) are actually clean, but `stripe` and `stripe_demo` have byte-identical descriptions pointing at the same base URL, and `lst-637408c1b10f` / `lst-a23997bcffc7` give an agent no way to know which service they hit without reading URLs buried in prose. `pay` also overlaps conceptually with every `<merchant>` tool, since those tools also 'pay'.

Naming Consistency2/5

There is a partial `_read` suffix convention, but the base names mix opaque hashes (lst-a23997bcffc7), domains (agentmail, stripe), and verb-like or noun-like lifecycle names (pay, request_budget, budget_request_status, card_link, x402). Two of the most important tools have meaningless generated identifiers, so no user or agent can predict what they do from the name.

Tool Count3/5

23 tools is heavy but not absurd for a gated-payments proxy, since each underlying API legitimately needs a read and a write entry. However, the list is inflated by duplicated entries (stripe/stripe_demo with identical descriptions and URL) and hash-named endpoints rather than by distinct capabilities.

Completeness4/5

The core lifecycle is well covered: pay/x402 for spending, my_budget and request_budget/budget_request_status for funding, approval_status for escalations, receipt for proof, plus verify_identity and card_link for onboarding blockers. Gaps are minor but real — no way to list past payments/decisions, no revoke of a mandate, and no cancel of a pending payment.

Available Tools

23 tools
agentmailAgentmail · writeA
Destructive
Inspect

Create, change or pay at https://api.agentmail.to through Regent (POST, PUT, PATCH or DELETE). Every call is a gated decision under the agent's spend limit; a payment the owner has not pre-approved is parked for them (ESCALATION_REQUIRED) and executes on a retry with the same idempotency_key after approval. The credential never reaches the agent.

NameRequiredDescriptionDefault
bodyNoJSON body (optional)
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoPOST
user_tokenNoThe human's OIDC id_token when acting for a person.
idempotency_keyNoYour own key for this call. If the call is parked for a human (ESCALATION_REQUIRED), repeat it with the same key after approval to execute it.

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare destructiveHint=true and idempotentHint=false, and the description meaningfully extends that with the gating/escalation model, the retry-with-same-idempotency_key execution rule, and the assurance that the credential never reaches the agent. It stops short of describing what a successful response contains or how destructive operations behave against existing remote state.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences, front-loaded with the action and target, followed by the operational caveats. No filler; the escalation and idempotency details are load-bearing rather than padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description still covers the key outcome an agent needs (ESCALATION_REQUIRED parking and how to execute after approval). For a generic proxy over arbitrary paths, the behavioral picture is largely complete, though response shape and failure modes beyond escalation are unstated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 86%, so the schema already explains path, body, facts, intent, user_token, and idempotency_key. The description reinforces idempotency_key's retry role but adds no new meaning for the remaining parameters, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb set (create, change, pay) against a named resource (https://api.agentmail.to via Regent) and enumerates the HTTP methods involved. The '· write' title and method list make it distinguishable from the agentmail_read sibling, though the description never names that alternative explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives real usage context: calls are gated under a spend limit, unapproved payments are parked as ESCALATION_REQUIRED, and retries must reuse the same idempotency_key. However, it never says when to choose this tool over siblings like pay, stripe_demo, or agentmail_read, so routing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

agentmail_readAgentmail · readA
Read-onlyIdempotent
Inspect

Read from https://api.agentmail.to through Regent (GET, HEAD or OPTIONS only). Regent checks the policy and injects the credential; the key never reaches the agent. Nothing is changed and no money moves.

NameRequiredDescriptionDefault
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoGET
user_tokenNoThe human's OIDC id_token when acting for a person.

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, so safety is covered; the description adds genuinely new behavior: Regent evaluates the policy, injects the credential, and the key never reaches the agent. It still omits what happens on a policy denial or how the call is authenticated for the user_token path.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three front-loaded sentences with no filler: the target and method constraint come first, then credential handling, then the safety guarantee. 'Nothing is changed and no money moves' partly restates the readOnly annotation, a minor redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers the safety profile, credential flow, and method limits for a 5-parameter tool with a nested facts object and no output schema (so return values need not be explained). Gaps are minor: no guidance on required 'path' format beyond the schema, or on failure when the policy denies the call.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 80%, so the schema already documents path, facts, intent, and user_token; the description adds only indirect meaning ('policy' hints at facts, and intent's audit role is implied but not restated). Baseline 3 is appropriate since the schema carries the parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (read) and specific resource (https://api.agentmail.to), and pins the allowed methods to GET/HEAD/OPTIONS, which the _read naming pairs with the plain `agentmail` sibling as the write path. It does not explicitly name that sibling, so the differentiation is implicit rather than stated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Clear context for use: read-only access routed through Regent, method-limited to GET/HEAD/OPTIONS, with 'Nothing is changed and no money moves' confirming the scope. There is no explicit when-not rule or named alternative for cases needing a write, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

approval_statusCheck a parked paymentA
Read-onlyIdempotent
Inspect

After ESCALATION_REQUIRED: whether the person approved the parked payment. 'approved' → repeat the same tool call with the same idempotency_key to execute it; 'denied' → tell the person and stop; 'pending' → wait, do not repeat the purchase.

NameRequiredDescriptionDefault
refYesThe escalation ref from the refusal (esc_…).

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish readOnlyHint/idempotentHint/non-destructive, but the description adds the state machine that governs this tool and its consequences — most notably that a repeat call with the same idempotency_key executes the purchase, which is exactly the side-effect boundary an agent could otherwise get wrong.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, zero filler, and the precondition is front-loaded before the outcome-to-action mapping. The arrow structure makes the decision tree scannable at a glance.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With one parameter, no output schema, and full schema coverage, the description supplies exactly what is missing: the three possible return states and the required follow-up for each. Nothing an agent needs to call and act on this tool correctly is absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and there is only one parameter (ref), whose meaning ('escalation ref from the refusal, esc_…') is already documented in the schema. The description mentions 'the same idempotency_key' and 'the same id', which refer to the execution call rather than this tool's parameter, adding no real meaning beyond the schema. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific purpose: reporting whether a person approved a parked payment after an ESCALATION_REQUIRED. It clearly separates this status-check from the sibling execution tool (pay) by describing what to do once approval is granted. It does not name a sibling tool explicitly, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The trigger condition is explicit (after ESCALATION_REQUIRED), and each possible outcome carries an unambiguous next action: 'approved' → repeat the call with the same idempotency_key, 'denied' → tell the person and stop, 'pending' → wait and do not repeat. This is a complete when-to-use and what-to-do-next contract.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

budget_request_statusCheck a budget requestB
Read-onlyIdempotent
Inspect

Where a budget request stands: pending_approval, approved (with the mandate id), denied or expired.

NameRequiredDescriptionDefault
request_idYes

TDQS

B3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, non-destructive, and closed-world, so the safety profile is covered. The description adds real value by bounding the response to four states and noting that an approved result carries a mandate id, but it says nothing about lookup failures, unknown ids, or auth needs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded clause listing the possible outcomes, with no filler. Slightly terse for a fragment, but every word carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description usefully enumerates the returned states, but it omits the input's origin, error behavior for invalid or unknown request ids, and how this differs from approval_status. Adequate for a simple lookup, not fully self-contained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is one required parameter with 0% schema description coverage, and the description never mentions request_id or says where the caller obtains it (presumably from request_budget). The only id referenced (mandate id) is an output, not the input, so the description fails to compensate for the coverage gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names the resource (budget request), the operation implied (checking its standing), and enumerates the four possible states, so an agent knows exactly what comes back. It stops short of distinguishing itself from the similar-sounding sibling approval_status.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use guidance, no prerequisites, and no mention of alternatives such as approval_status or how this relates to request_budget. The agent must infer that this is a follow-up call after requesting a budget.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

counterparty_checkCounterparty Check · writeA
Destructive
Inspect

Create, change or pay at http://demo-counterparty-api:8000 through Regent (POST, PUT, PATCH or DELETE). Every call is a gated decision under the agent's spend limit; a payment the owner has not pre-approved is parked for them (ESCALATION_REQUIRED) and executes on a retry with the same idempotency_key after approval. The credential never reaches the agent.

NameRequiredDescriptionDefault
bodyNoJSON body (optional)
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoPOST
user_tokenNoThe human's OIDC id_token when acting for a person.
idempotency_keyNoYour own key for this call. If the call is parked for a human (ESCALATION_REQUIRED), repeat it with the same key after approval to execute it.

TDQS

A3.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations (readOnly/destructive/openWorld/idempotent) by disclosing the gating model: every call is a spend-limited decision, unapproved payments are parked with ESCALATION_REQUIRED, and they execute only on retry with the same idempotency_key. It also states the credential never reaches the agent, covering the auth surface that annotations omit.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three dense sentences, front-loaded with the verb/resource and target URL, then the behavioral contract. Every sentence carries information, though the middle sentence packs gating, escalation, and idempotency into one clause chain.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, so the description carries return-shape burden, and it does name the key terminal state (ESCALATION_REQUIRED) and the credential-handling behavior. It does not describe the general success/failure response shape or other error conditions, leaving a modest gap for a 7-parameter write tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 86%, so the schema already documents parameters like idempotency_key, intent, and user_token. The description restates the idempotency_key retry semantics rather than adding new meaning, and says nothing about path, body, facts, or method beyond the method list already in the schema. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States specific write verbs (create, change, pay) and the resource (the counterparty API reached through Regent) with the exact HTTP methods it proxies. It reads clearly as the write counterpart to counterparty_check_read, but it never names that sibling or explicitly draws the read/write boundary, so differentiation is inferred rather than stated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied: write operations go through this tool and are gated under the agent's spend limit, with payments escalating to the owner. There is no explicit when-to-use/when-not guidance, no mention of when to prefer counterparty_check_read, pay, or budget_request_status, and no prerequisites stated for the caller.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

counterparty_check_readCounterparty Check · readA
Read-onlyIdempotent
Inspect

Read from http://demo-counterparty-api:8000 through Regent (GET, HEAD or OPTIONS only). Regent checks the policy and injects the credential; the key never reaches the agent. Nothing is changed and no money moves.

NameRequiredDescriptionDefault
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoGET
user_tokenNoThe human's OIDC id_token when acting for a person.

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, and the description adds real value beyond them: Regent performs policy checks and injects the credential so 'the key never reaches the agent,' which is meaningful auth-flow context. It stops short of describing rate limits, error behavior, or policy-denial handling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, front-loaded with what the tool reads and the allowed methods, with zero filler. Every sentence carries distinct information (endpoint, credential handling, safety assurance).

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only wrapper with full annotation coverage and no output schema, this explains the endpoint, method restrictions, and credential model adequately. Slightly incomplete on what a response or a policy rejection looks like, but nothing critical for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 80%, so the schema largely documents path, facts, intent, method, and user_token. The description only reinforces the method enum restriction (GET, HEAD, OPTIONS) and adds nothing about fact shape or token usage, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Read from http://demo-counterparty-api:8000 through Regent'), constrained to GET/HEAD/OPTIONS. The closing line 'Nothing is changed and no money moves' implicitly contrasts it with its write sibling, though counterparty_check is never named outright.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The method constraint and read-only framing imply when this tool is appropriate, and the 'nothing changed' line hints the write variant exists. However, it never explicitly says when to call this versus counterparty_check, so selection still requires inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

gigticketsGigtickets · writeA
Destructive
Inspect

Create, change or pay at https://gigtickets.aqylorda.kz/api through Regent (POST, PUT, PATCH or DELETE). Every call is a gated decision under the agent's spend limit; a payment the owner has not pre-approved is parked for them (ESCALATION_REQUIRED) and executes on a retry with the same idempotency_key after approval. The credential never reaches the agent.

NameRequiredDescriptionDefault
bodyNoJSON body (optional)
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoPOST
user_tokenNoThe human's OIDC id_token when acting for a person.
idempotency_keyNoYour own key for this call. If the call is parked for a human (ESCALATION_REQUIRED), repeat it with the same key after approval to execute it.

TDQS

A3.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations (destructiveHint=true, idempotentHint=false) by disclosing the escalation workflow: parked calls execute on retry with the same idempotency_key, and the credential never reaches the agent. These are non-obvious behavioral traits an agent needs to plan around.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three dense sentences, front-loaded with the operation and base URL, then escalation behavior. No filler, though the URL and method enumeration make the opening slightly heavier than necessary.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutating proxy with no output schema and an escalation path, the description covers the key mechanics (gating, parking, retry, credential isolation). Minor gaps remain around what facts are policy-keyed on and error surfaces, but annotations and schema carry the safety profile.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 86%, so the schema already documents path, body, facts, intent, user_token and idempotency_key. The description reinforces idempotency_key retry semantics but adds little beyond what the schema fields already convey, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb set (create, change, pay) against a named resource (gigtickets.aqylorda.kz/api) and the mutation methods it accepts. It is clearly the write counterpart to the sibling gigtickets_read, though the description is deliberately generic about which sub-resources are touched.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explains the gating context (calls count against the spend limit, unapproved payments are parked as ESCALATION_REQUIRED), which implies when calls will succeed versus be deferred. It never explicitly routes the agent to gigtickets_read for non-mutating work or states what must not be done here.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

gigtickets_readGigtickets · readA
Read-onlyIdempotent
Inspect

Read from https://gigtickets.aqylorda.kz/api through Regent (GET, HEAD or OPTIONS only). Regent checks the policy and injects the credential; the key never reaches the agent. Nothing is changed and no money moves.

NameRequiredDescriptionDefault
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoGET
user_tokenNoThe human's OIDC id_token when acting for a person.

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnlyHint, idempotentHint, destructiveHint and openWorldHint, so the bar is lower, yet the description adds real context: Regent performs a policy check and injects the credential, and the key never reaches the agent. 'Nothing is changed and no money moves' reinforces the safety profile in terms the payment-oriented surrounding toolset cares about. It stops short of explaining policy-denial or error behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences, front-loaded with the action and the method constraint before the safety guarantees. Both sentences carry weight, though 'nothing is changed and no money moves' slightly overlaps the destructiveHint/readOnlyHint annotations.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a gateway/read tool with no output schema, the description covers the target, the method restriction and the credential-handling model, which is what an agent needs to call it safely. It could say more about how the 'path' is composed or what happens when policy denies a request.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 80% with 5 parameters, so the schema already documents path, facts, intent, method and user_token adequately. The description adds nothing about parameter usage, so the baseline 3 for high coverage is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (read) and resource (the gigtickets.aqylorda.kz API), plus the allowed HTTP methods, so an agent knows exactly what this does. The name 'gigtickets_read' versus the 'gigtickets' sibling implies a read/write split, but the description never names the write sibling or explicitly says how they differ.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The parenthetical '(GET, HEAD or OPTIONS only)' implicitly tells the agent this tool cannot perform writes, which is useful routing guidance. However, there is no explicit statement of when to prefer this over 'gigtickets' or the other read siblings, and no prerequisites beyond the implied read-only nature.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

lst-637408c1b10fLst 637408C1B10F · writeA
Destructive
Inspect

Create, change or pay at https://api.frankfurter.dev/v1/latest through Regent (POST, PUT, PATCH or DELETE). Every call is a gated decision under the agent's spend limit; a payment the owner has not pre-approved is parked for them (ESCALATION_REQUIRED) and executes on a retry with the same idempotency_key after approval. The credential never reaches the agent.

NameRequiredDescriptionDefault
bodyNoJSON body (optional)
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoPOST
user_tokenNoThe human's OIDC id_token when acting for a person.
idempotency_keyNoYour own key for this call. If the call is parked for a human (ESCALATION_REQUIRED), repeat it with the same key after approval to execute it.

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (readOnlyHint=false, destructiveHint=true), the description discloses the escalation flow: unapproved payments are parked with ESCALATION_REQUIRED and execute on retry with the same idempotency_key. It also states the credential never reaches the agent, which is real auth context. It stops short of saying what state a parked/mutated resource leaves behind, but the disclosure is well above the annotation baseline.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tightly packed sentences with zero filler, front-loading the operation and endpoint before the escalation semantics. Slightly dense in the second sentence but every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 7-parameter write tool with no output schema, the description covers the critical behavioral surfaces: spend gating, pre-approval parking, retry idempotency, and credential isolation. It omits what a successful response returns and which sibling to poll for approval status, so it is strong but not fully closed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 86%, so the schema already documents body, path, facts, intent, method, user_token, and idempotency_key. The description reinforces only the idempotency_key retry semantics, which the schema also states, adding no new per-parameter meaning. Baseline 3 is appropriate where the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states concrete verbs (create, change, pay) and the exact target endpoint (frankfurter.dev/v1/latest), with the HTTP methods enumerated. The opaque tool name and URL-as-resource mean an agent must read the description to know what is being written to, but the write/read split against lst-637408c1b10f_read is inferable from the '· write' title. Clear purpose, though not differentiated from money-flow siblings like pay.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied through the gated-decision/spend-limit framing, which tells the agent this is the write path for a spend-controlled API. However, it never says when to prefer this over sibling write tools such as pay, stripe_demo, or lst-a23997bcffc7, nor when to consult approval_status. The alternative-selection guidance is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

lst-637408c1b10f_readLst 637408C1B10F · readA
Read-onlyIdempotent
Inspect

Read from https://api.frankfurter.dev/v1/latest through Regent (GET, HEAD or OPTIONS only). Regent checks the policy and injects the credential; the key never reaches the agent. Nothing is changed and no money moves.

NameRequiredDescriptionDefault
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoGET
user_tokenNoThe human's OIDC id_token when acting for a person.

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish readOnlyHint, idempotentHint and destructiveHint=false, so the bar is lower. The description still adds genuine context beyond them: Regent checks policy and injects the credential so the key never reaches the agent, and the explicit 'nothing is changed / no money moves' reassurance for what is an FX-rate endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences, front-loaded with the concrete endpoint and method restriction, with no filler. The closing 'Nothing is changed and no money moves' slightly restates destructiveHint=false but reads as deliberate assurance rather than padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter proxy read tool with no output schema, the description covers the essential behavior (credential injection, safety, allowed methods) and the base URL needed to interpret the path parameter. Parameter semantics for facts/intent/user_token rest on the schema, which is acceptable at 80% coverage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 80%, so the schema already documents path, facts, intent, method and user_token. The description only indirectly explains path by stating the base URL; it adds no format or syntax detail beyond the structured fields, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb (Read) and resource (the frankfurter.dev /v1/latest endpoint) proxied through Regent, and constrains the allowed methods to GET/HEAD/OPTIONS. It is clear this is the read-only variant of the paired sibling, though it never explicitly names lst-637408c1b10f to draw the contrast.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The 'GET, HEAD or OPTIONS only' clause is an implicit usage constraint telling the agent what class of operation is permitted. However, there is no explicit when-to-use guidance, no prerequisites, and no routing to alternatives such as the non-_read sibling or the other lst-* tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

lst-a23997bcffc7Lst A23997Bcffc7 · writeB
Destructive
Inspect

Create, change or pay at https://test.koleso.kz/api through Regent (POST, PUT, PATCH or DELETE). Every call is a gated decision under the agent's spend limit; a payment the owner has not pre-approved is parked for them (ESCALATION_REQUIRED) and executes on a retry with the same idempotency_key after approval. The credential never reaches the agent.

NameRequiredDescriptionDefault
bodyNoJSON body (optional)
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoPOST
user_tokenNoThe human's OIDC id_token when acting for a person.
idempotency_keyNoYour own key for this call. If the call is parked for a human (ESCALATION_REQUIRED), repeat it with the same key after approval to execute it.

TDQS

B3.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds substantial behavior beyond the annotations: gating under the agent's spend limit, the ESCALATION_REQUIRED parking flow, the requirement to retry with the same idempotency_key after approval, and the security note that the credential never reaches the agent. It does not elaborate on what the destructiveHint=true actually destroys or what a successful response contains, so not a full 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two dense sentences, front-loaded with the operation and host, then the escalation constraint. Every clause carries information, though the embedded idempotency detail slightly duplicates the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers the important lifecycle (gate, escalate, retry) for a 7-parameter destructive write tool, but leaves the 'facts' policy-keying object, method-selection guidance, and return behavior unexplained, and there is no output schema to compensate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 86%, so the schema already carries most parameter meaning, including the idempotency_key retry note that the description largely repeats. The description adds no field-level syntax or format guidance beyond the schema, which is the expected baseline at high coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific set of verbs (create/change/pay) and the HTTP methods (POST, PUT, PATCH, DELETE) against a named base URL through Regent, so the write scope is clear even though the tool name is an opaque hash. It does not explicitly differentiate itself from the read sibling lst-a23997bcffc7_read or the other payment siblings, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains the escalation/approval mechanics but gives no when-to-use guidance and never names alternatives such as pay, stripe_demo, or lst-637408c1b10f, all of which appear to overlap in the payment space. An agent has to guess when this generic write proxy is preferred over the dedicated payment tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

lst-a23997bcffc7_readLst A23997Bcffc7 · readA
Read-onlyIdempotent
Inspect

Read from https://test.koleso.kz/api through Regent (GET, HEAD or OPTIONS only). Regent checks the policy and injects the credential; the key never reaches the agent. Nothing is changed and no money moves.

NameRequiredDescriptionDefault
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoGET
user_tokenNoThe human's OIDC id_token when acting for a person.

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint and destructiveHint=false, so the safety profile is covered. The description earns credit for adding genuinely new context: policy evaluation happens inside Regent, the credential is injected proxy-side and never exposed to the agent, and no side effects or fund movement occur.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, zero padding, with the target URL and allowed methods front-loaded ahead of the credential-handling and no-side-effect notes.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter proxy tool with no output schema, the description covers the transport, allowed methods, credential flow and side-effect profile adequately. It omits error/authorization-failure behavior and the meaning of the nested 'facts' object, but the schema carries most of that.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 80%, so parameters are largely self-documented and the baseline is 3. The description only restates the method allowance (already an enum in the schema) and adds nothing about 'facts', 'intent', or 'user_token' semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (read) and an explicit resource (the koleso.kz API via Regent), and constrains the operation to GET/HEAD/OPTIONS. An agent can tell it apart from the non-'_read' sibling lst-a23997bcffc7, though no sibling is named or contrasted directly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The read-only framing and method whitelist imply when the tool applies, but there is no explicit statement of when to reach for this versus lst-a23997bcffc7 or the other *_read siblings, nor any stated prerequisites for supplying facts/user_token.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

my_budgetWhat this agent may spendA
Read-onlyIdempotent
Inspect

This agent's own situation: sandbox or live, the organization's home currency, the budgets it holds per currency and what is left in each today / this month (a portion, not the ceiling), the sellers the owner capped by name, a pending budget request, the amount above which a person is asked, and whether the owner stored a card. Call it before shopping or when a purchase was refused, so you can explain and pick the right currency or seller. Nothing changes.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint/idempotentHint and the description reinforces this with 'Nothing changes.' Beyond that, it adds genuinely useful behavioral context not in the annotations: the remaining amount is 'a portion, not the ceiling' and the output may include a pending budget request and a stored-card flag. It stops short of describing format or freshness of the data.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

It is one dense enumerating sentence followed by two short directive/behavioral sentences, so the critical 'what you get' content is front-loaded. The enumeration is long but each clause maps to a distinct output field, so the length largely earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and no parameters, the description must carry the whole burden of communicating return values, and it does: it walks through mode, currency, per-currency remaining budgets, seller caps, pending requests, thresholds, and card storage. An agent knows exactly what it will learn and why to call it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, which per the rubric sets the baseline at 4. There is no parameter surface for the description to clarify further, so it cannot score higher on this dimension.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names the specific resource (this agent's own spending situation) and enumerates its scope in detail: sandbox/live mode, home currency, per-currency budgets and remaining amounts, seller caps, pending request, approval threshold, stored card. This is far more specific than a status tool that shares the budget/approval space, letting an agent distinguish it from siblings like budget_request_status and approval_status.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit trigger conditions — 'Call it before shopping or when a purchase was refused' — and states the goal (explain and pick the right currency or seller). It does not, however, explicitly rule out or name the sibling tools (budget_request_status, approval_status) that an agent might otherwise reach for.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

payPay from the agent's walletA
Destructive
Inspect

Pay from THIS agent's Custodian custody wallet (requires an active wallet + a spend mandate). Gated: identity · mandate limit · behavior policy · risk. Returns 'pending' (submitted, settles via webhook), 'denied', or 'escalated'.

NameRequiredDescriptionDefault
amountYesAmount, in the asset being sent.
intentNoOne-line reason, recorded in the audit.
symbolNoOn-chain asset (default ETH).
currencyNoMandate denomination; defaults to the asset symbol. Must match the mandate's currency (a crypto mandate is denominated in its asset, e.g. ETH).
mandate_idYesThe spend mandate to charge against.
to_addressYesRecipient on-chain address.
idempotency_keyNoResume handle for retries.

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and idempotentHint=false, so the safety profile is covered. The description adds real value beyond that: the four gates (identity, mandate limit, behavior policy, risk) and the outcome states ('pending' settled via webhook, 'denied', 'escalated'). It stops short of spelling out irreversibility or the retry semantics the idempotency_key param implies.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two dense, front-loaded sentences; the core action leads and the gating/return-state detail follows. The telegraphic gate list ('identity · mandate limit · behavior policy · risk') is compact and earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description appropriately names the three possible return states and the webhook settlement path, and all 7 params are documented. Complete enough for an agent to call and interpret results, with only minor gaps around retry/irreversibility.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all 7 parameters including currency/mandate matching and the idempotency_key resume handle. The description adds only the implicit 'spend mandate' requirement, not new syntax or format detail, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource with scope ('Pay from THIS agent's Custodian custody wallet'), which is clear and disambiguates whose wallet is charged. It doesn't distinguish itself from payment-adjacent siblings like request_budget or card_link, but no sibling performs this exact action.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Prerequisites are given (active wallet + spend mandate) and the gate conditions are listed, implying when the call can succeed. However there is no explicit guidance on when to choose pay versus alternatives such as request_budget or card_link, so usage is only implied.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

receiptFetch a payment receiptA
Read-onlyIdempotent
Inspect

The signed receipt of one of your completed payments (by decision id, dec_…): what was paid, to whom, under which terms version, and the public page where anyone can verify it without Regent. Show the person the verify link rather than the token.

NameRequiredDescriptionDefault
decision_idYes

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only, idempotent, non-destructive, closed-world behavior, so the bar is lowered. The description nonetheless adds real context beyond the annotations: the receipt is 'signed,' it is publicly verifiable without Regent, and the token should not be surfaced to the user — a useful sensitivity warning absent from the structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, both earning their place, with the core resource definition front-loaded and the handling directive trailing. The first sentence is dense with nested clauses but stays readable and avoids filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description responsibly describes the returned contents (payment details, recipient, terms version, verify URL). It omits only edge cases such as an unknown or non-completed decision id, which is a minor gap for a single-record read.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and there is one parameter, so the description must carry the load. It identifies the argument as a decision id with the 'dec_…' prefix and ties it to 'one of your completed payments,' giving format and provenance that the bare schema string does not.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb+resource ('the signed receipt of one of your completed payments') and enumerates what it returns (what was paid, to whom, terms version, verify page), so an agent can tell exactly what it retrieves. It does not explicitly differentiate itself from siblings such as approval_status or pay, but the resource is distinctive enough that confusion is unlikely.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives clear context implicitly (fetch for a completed payment by decision id) plus an explicit behavioral directive: 'Show the person the verify link rather than the token.' That tells the agent how to handle the result, though it names no alternative tools or when-not-to-use conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

request_budgetAsk the owner for a budgetAInspect

Ask this organization's owner for a spend budget (a mandate) for THIS agent: the currency, how much per purchase / per day / per month, optionally caps per seller and what the money is for. Nothing is granted here: a person sees the request under Approvals (and by e-mail) and signs it. Use it after a refusal that names a currency you have no budget in (MANDATE_NOT_FOUND with currency=…). Then retry the purchase later, or check budget_request_status.

NameRequiredDescriptionDefault
purposeNoOne line on what the money is for; the owner reads it.
currencyYesISO 4217 code of the budget, e.g. USD or KZT.
daily_limitNoMost per day (optional).
per_tx_limitNoMost for one purchase, e.g. "25".
entity_limitsNoOptional caps per seller: [{match, per_tx_limit, monthly_limit}]. `match` is the seller AS THE RAIL NAMES IT (case does not matter): for Agentcard the store id from a shop result (amazon, walmart, target), for your own tool its name, for a Stripe destination the account id; or * for every other seller. A name the rail never reports caps nothing.
monthly_limitNoMost per month (optional).
allowed_resourcesNoOptional: only these tools or shops (names / prefixes).

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only say it is a non-idempotent, non-destructive, closed-world write with no read-only hint. The description adds crucial behavior annotations miss: nothing is granted synchronously, a human owner must see the request in Approvals and e-mail and sign it, and the result arrives asynchronously. This is exactly the extra context an agent needs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three dense sentences, front-loaded with what the tool does, then what happens and when to use it. Slightly packed but no sentence is wasted; the human-approval caveat is well placed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutating request tool with no output schema and thin annotations, the description covers outcome (approval e-mail/Approvals queue), timing (async, retry later), and follow-up tooling. Nothing an agent needs to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the schema itself documents each field richly (currency ISO code, seller 'match' semantics, caps). The description summarizes the same fields but adds no syntax or format detail beyond the schema, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (ask) plus resource (spend budget/mandate) and scopes it to THIS agent, clearly separating it from siblings like my_budget (existing budgets) and budget_request_status (tracking). An agent can identify the tool's role without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit trigger conditions ('after a refusal that names a currency you have no budget in ... MANDATE_NOT_FOUND with currency=…') and names the follow-up path ('retry the purchase later, or check budget_request_status'), routing the agent to the correct sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

stripeStripe · writeA
Destructive
Inspect

Create, change or pay at https://api.stripe.com through Regent (POST, PUT, PATCH or DELETE). Every call is a gated decision under the agent's spend limit; a payment the owner has not pre-approved is parked for them (ESCALATION_REQUIRED) and executes on a retry with the same idempotency_key after approval. The credential never reaches the agent.

NameRequiredDescriptionDefault
bodyNoJSON body (optional)
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoPOST
user_tokenNoThe human's OIDC id_token when acting for a person.
idempotency_keyNoYour own key for this call. If the call is parked for a human (ESCALATION_REQUIRED), repeat it with the same key after approval to execute it.

TDQS

A3.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds substantial context beyond the annotations: spend-limit gating on every call, silent parking of unapproved payments for owner approval with a defined retry protocol, and the guarantee that the credential never reaches the agent. That is exactly the behavioral disclosure a destructive, non-idempotent mutation proxy needs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the verb/resource statement, followed by the escalation rule and the credential guarantee; nothing is padding. The middle sentence is dense but every clause carries operational weight.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 7-parameter open-ended proxy with no output schema, the description covers the key unknowns: gating, escalation/retry, and credential handling. It stops short of describing what a call returns or how ESCALATION_REQUIRED is surfaced to the agent, which would close the last gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 86%, so the schema already documents path, body, facts, intent, user_token, and idempotency_key; the baseline applies. The description's idempotency_key retry guidance largely repeats what the schema field already says, and it adds no meaning for `facts` or `intent`, which are the policy-relevant parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb set (create/change/pay) and resource (https://api.stripe.com) with the allowed HTTP methods, which cleanly separates it from the *_read siblings. It does not, however, distinguish itself from other write-path siblings such as pay or stripe_demo, leaving that routing to the agent.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The throttle/escalation flow is described (parked for owner, ESCALATION_REQUIRED, retry with same idempotency_key), which is real usage context. But the description never names an alternative tool or states when *not* to use this raw proxy (e.g. when `pay` or a purpose-built tool is preferable), so usage selection is only implied.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

stripe_demoStripe Demo · writeA
Destructive
Inspect

Create, change or pay at https://api.stripe.com through Regent (POST, PUT, PATCH or DELETE). Every call is a gated decision under the agent's spend limit; a payment the owner has not pre-approved is parked for them (ESCALATION_REQUIRED) and executes on a retry with the same idempotency_key after approval. The credential never reaches the agent.

NameRequiredDescriptionDefault
bodyNoJSON body (optional)
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoPOST
user_tokenNoThe human's OIDC id_token when acting for a person.
idempotency_keyNoYour own key for this call. If the call is parked for a human (ESCALATION_REQUIRED), repeat it with the same key after approval to execute it.

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare destructiveHint=true, readOnlyHint=false and idempotentHint=false, so the bar is lower, and the description still adds substantial non-obvious behavior: the call is policy-gated by spend limit, unapproved payments are parked and re-executed on retry with the same idempotency_key, and the credential never reaches the agent. It omits failure/timeout behavior and what an unparked-but-denied call returns, and the openWorldHint=false annotation sits oddly against an explicit external api.stripe.com call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with the action and target before the gating flow and credential note, with virtually no filler. Minor redundancy: the inline '(POST, PUT, PATCH or DELETE)' duplicates the method enum already in the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 7-parameter mutation tool with no output schema, the description supplies the critical control-flow facts an agent needs (gating, escalation, idempotent retry, credential isolation) while the schema covers most parameter detail. It would be stronger if it characterized the success/parked response shape or stated limits on path scope, but nothing essential to a correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 86%, so the schema already documents path, body, facts, intent, method, user_token and idempotency_key in detail. The description restates the method set (already an enum) and the idempotency retry rule (already in the idempotency_key description), adding no new parameter meaning; the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names concrete operations (create, change, pay) against a concrete target (https://api.stripe.com) and enumerates the HTTP verbs used, so the agent knows this is a generic write proxy to the Stripe API. It falls short of 5 because it never names or contrasts with the obvious sibling stripe_demo_read, leaving the agent to infer the split from the title suffix.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explains the operational flow (spend-limit gating, ESCALATION_REQUIRED parking, retry with the same idempotency_key after approval), which is genuinely useful context for calling it. However, it gives no tool-selection guidance against siblings such as stripe_demo_read, pay, or card_link, nor any preconditions for choosing this tool over them.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

stripe_demo_readStripe Demo · readA
Read-onlyIdempotent
Inspect

Read from https://api.stripe.com through Regent (GET, HEAD or OPTIONS only). Regent checks the policy and injects the credential; the key never reaches the agent. Nothing is changed and no money moves.

NameRequiredDescriptionDefault
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoGET
user_tokenNoThe human's OIDC id_token when acting for a person.

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description adds real value beyond them: the policy check, credential injection by Regent, the fact the key never reaches the agent, and the audit trail (reinforced by the intent param). It does not mention rate limits or error behavior, so it stops short of a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler, with the core purpose and method restriction front-loaded and the safety guarantee ('Nothing is changed and no money moves') closing it out. Every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only proxy tool with full annotation coverage and no output schema, the description supplies what an agent needs: the base URL, allowed methods, credential-handling model and audit behavior. The one gap is that it never distinguishes this tool from the other *_read siblings in the set.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 80% and the schema already documents path, facts, intent and user_token. The description only touches the method constraint (GET/HEAD/OPTIONS) and adds no format or semantics for the remaining parameters, so it sits at the baseline for well-covered schemas.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (read) against a specific resource (https://api.stripe.com) with an explicit method constraint (GET, HEAD or OPTIONS only), which cleanly separates it from the write-oriented 'stripe_demo' sibling. It never actually names the write sibling or any other tool, so the differentiation is inferable rather than explicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The method enumeration ('GET, HEAD or OPTIONS only') implies this is for non-mutating requests and that mutations belong elsewhere, but the description never says when to pick this over stripe_demo or the other *_read siblings. Usage is implied by the read-only constraint rather than stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

stripe_readStripe · readA
Read-onlyIdempotent
Inspect

Read from https://api.stripe.com through Regent (GET, HEAD or OPTIONS only). Regent checks the policy and injects the credential; the key never reaches the agent. Nothing is changed and no money moves.

NameRequiredDescriptionDefault
pathYesPath after the base URL
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoGET
user_tokenNoThe human's OIDC id_token when acting for a person.

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description adds genuinely new context: Regent enforces the policy and injects the credential so the API key never reaches the agent. It stops short of describing what happens when policy denies the call or how responses are shaped.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences with zero filler, and the core scoping constraint (read-only, GET/HEAD/OPTIONS) is front-loaded before the credential-handling note.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter policy-gated proxy with a nested `facts` object and no output schema, the description covers the safety model and credential handling well. It leaves out denial/failure behavior and what a response looks like, which would matter for an agent composing policy-keyed `facts`.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 80%, so the schema already carries the parameter semantics (path, facts, intent, user_token, method enum). The description only restates the method restriction, adding no new meaning beyond the enum; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (read) and a specific resource (https://api.stripe.com) plus the allowed method set, so an agent knows exactly what this tool does. It does not name the `stripe` sibling as the write counterpart, relying on the sentence 'Nothing is changed and no money moves' to draw that line implicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is strongly implied: use this for GET/HEAD/OPTIONS against Stripe, and anything that changes state or moves money belongs elsewhere. However, the alternative is never named (e.g. `stripe`), and no prerequisites about policy approval or denial handling are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_identityWhere the owner verifies their identityA
Read-onlyIdempotent
Inspect

The owner's own page on Regent where they verify their identity (document + face) and take the organization live, which real-money purchases and storing a card require. Give the person this fixed address; it asks for their passkey first. Never relay any other verification link. Also says whether they are verified already.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only, idempotent, closed-world behavior, so the bar is lower. The description still adds real context the annotations don't carry: the fixed-address nature, that the page prompts for a passkey before proceeding, and the anti-phishing constraint about forwarding only this link.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the core identity of the resource (the owner's verification page) and then adds the operational constraints. It is slightly dense and would read better as two or three shorter sentences, but every clause carries meaning.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-param, no-output-schema tool with rich annotations, the description covers what it returns (a fixed address plus verification status) and the safety rule for handling the link. Missing only minor detail such as whether the status check is a separate value in the response.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Zero parameters, so there is nothing for the description to disambiguate; baseline 4 applies. The description correctly implies the tool takes no input, which matches the empty schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific resource: the owner's verification page on Regent, plus a secondary behavior (reports whether the owner is already verified). It is clear what the caller gets, though the dual purpose (URL vs. status read) is packed into one long sentence rather than cleanly separated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit routing guidance: give this fixed address to the person when verification is needed, with the precondition that real-money purchases and card storage require it. It also states a hard exclusion ('Never relay any other verification link'), which is exactly the when-not guidance an agent needs.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

x402X402 · pay for a resourceA
Destructive
Inspect

Fetch a web resource that charges per request (HTTP 402, x402) through Regent. Hosts: any public host. Regent reads the price, asset and recipient from the resource's 402, decides under the owner's USDC budget, signs the payment from the connected wallet and checks the transfer on chain. Test networks only. The agent never holds a wallet or sets the price. Give path as /.

NameRequiredDescriptionDefault
bodyNoJSON body for a POST resource.
pathYesThe resource as <host>/<path>[?query], https assumed.
factsNoVerified facts the policy keys on (object).
intentNoOne-line reason for this call, recorded in the audit.
methodNoGET
idempotency_keyNoRetry handle: the same key resumes the same decision.

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With annotations already declaring destructive and open-world behavior, the description adds meaningful context: Regent reads price/asset/recipient from the 402, decides under the owner's USDC budget, signs from the connected wallet, and checks the transfer on chain. It does not cover failure modes or returned results, but it substantially exceeds what the annotations provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, front-loaded with purpose and key scope, each carrying useful information about the payment flow and test-network restriction. It is slightly dense but has no obvious filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive, open-world payment tool with no output schema, the description covers the payment flow, trust model, budget decision, and network restriction. It could mention response shape or budget-rejection behavior, but is largely sufficient for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 83%, so the schema already documents most parameters. The description reinforces the path format as <host>/<path> but adds little beyond the schema for facts, intent, idempotency_key, or method. This justifies the baseline score.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: fetching a web resource that charges per request via HTTP 402 through Regent. It also scopes hosts and network type. It does not explicitly contrast with the sibling 'pay' tool, so it stops short of full sibling differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives useful constraints: any public host, test networks only, and the agent never holds a wallet or sets the price. However, it never says when to choose x402 over the sibling pay tool or when not to use it; usage is implied from the resource-charging scenario.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 2 tool updates
    • Addedstripe
    • Addedstripe_read
  2. 1 tool update
    • Addedx402
  3. 20 tool updates
    • First observedagentmail
    • First observedagentmail_read
    • First observedapproval_status
    • First observedbudget_request_status
    • First observedcard_link
    • First observedcounterparty_check
    • First observedcounterparty_check_read
    • First observedgigtickets
    • First observedgigtickets_read
    • First observedlst-637408c1b10f
    • First observedlst-637408c1b10f_read
    • First observedlst-a23997bcffc7
    • First observedlst-a23997bcffc7_read
    • First observedmy_budget
    • First observedpay
    • First observedreceipt
    • First observedrequest_budget
    • First observedstripe_demo
    • First observedstripe_demo_read
    • First observedverify_identity

Publisher details

Operator
Regent Protocol
Vendor relationship
First-party
Trust center
Not available
Restrictions
Free sandbox with test payments, no identity check. Real-money payments require the owner to verify their identity once (document + face) and approve each budget with a passkey. Purchases with the owner's own card (Agentcard) are at US stores in USD for now.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    B
    maintenance
    Runtime budget authority for autonomous agents - a set of tools to check, reserve, spend, and release budget before and after every costly, risky operation. The agent asks "can I afford this?" before acting, and reports what it actually used afterward.
    9
    102 npm
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Enables AI agents to make payments with strict spending limits enforced by signed mandates, preventing unauthorized fund movement beyond predefined caps and allowlists.
    4
    12 npm
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources