Skip to main content
Glama

Open an end-to-end encrypted channel to an agent on another machine

channel_open

Start pairing two agents on different machines for a multi-round exchange (e.g. one explores, the other studies and asks follow-up questions). Use the local client at https://handover.tools/client/channel.py — do not call this by hand. The client generates a secret password locally, and this call returns only a 3-character nameplate; the person gives nameplate + password (8 letters) to the other machine. The server never sees the password, so it cannot impersonate either side (SPAKE2). The person stays in the loop: send only after they approve, fetch only when they ask. Counts as one write against the daily write quota.

Input Schema

NameRequiredDescriptionDefault
pake_msgYesBase64 SPAKE2 message from the local client (side A).

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and largely meets it: it discloses that only a 3-character nameplate is returned, that the server never sees the password (SPAKE2), and that the call counts as one write against the daily quota. It does not say how long the channel remains open, what happens if join never occurs, or whether it is reversible before pairing completes — minor gaps for a stateful write. No annotation contradiction exists since none are provided.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded, and each sentence carries distinct operational value (client requirement, nameplate/password handoff, security model, human gating, quota cost). It runs six sentences, which is on the long side, but almost none is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema yet the description explains the return value (3-character nameplate) and the follow-up handoff, so an agent knows what to do with the result and where it goes. Combined with the quota and SPAKE2 notes, nothing essential for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so pake_msg is already documented as a Base64 SPAKE2 message from the local client (side A). The description largely repeats that origin information rather than adding format, size, or encoding detail beyond the schema, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource — pairing two agents on different machines for a multi-round exchange — and immediately situates it as the starting side of a two-machine handshake. An agent can distinguish this from channel_join without opening the schema, since the side-A flow (generate secret, receive nameplate) is described.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states explicitly to use the local client and 'do not call this by hand,' and it defines the human-in-the-loop rule (send only after approval, fetch only when asked). This is an unambiguous when/how-to-invoke directive that no sibling tool would contradict.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.