Skip to main content
Glama

Server Details

Penetration Testing Cost: the site's own MCP server — enquiry (enquiry = a human handoff, not a...

If you are the author of this connector, you can claim ownership with GitHub, an HTTP challenge, or a DNS record. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP
URL

Available Tools

3 tools
enquiry_describeWhat you get: an ENQUIRY with a human (not a purchase, not a guaranteed quote)AInspect

Read first. States plainly what submit_enquiry does on Penetration Testing Cost: it starts an enquiry with human providers who quote directly. Nothing is bought, ordered or paid; no quote is guaranteed; it is free. Also returns who receives the details, the consent wording, and how the person confirms.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. It transparently characterizes the tool as informational ('States plainly', 'Also returns') and discloses the key behavior of the underlying enquiry flow: nothing is bought, no quote is guaranteed, and it's free. It could have explicitly stated that calling this tool itself has no side effects, but the descriptive framing makes that sufficiently clear.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with 'Read first.' Every sentence adds value: it states what the tool does, what submit_enquiry does not do, and what the tool returns. No filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter describe tool with no output schema, this description is complete. It tells the agent when to use it, what it returns, and what the underlying submit_enquiry flow involves. Nothing an agent needs to correctly select and invoke the tool is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so schema description coverage is vacuously 100%. No parameter explanation is needed, and the description correctly focuses on behavior and return contents rather than parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: it 'States plainly what submit_enquiry does' on Penetration Testing Cost. It clearly positions this tool as a meta-description and distinguishes it from siblings like submit_enquiry and enquiry_fields.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Read first' explicitly tells the agent to consult this tool before using submit_enquiry, which is strong usage guidance. It doesn't explicitly name when-not-to-use or alternatives, but the ordering instruction combined with the behavioral explanation is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

enquiry_fieldsThe questions the enquiry asksAInspect

Every field of the Penetration Testing Cost enquiry: key, label, type, whether required, help text and the allowed options where there are any. Pass answers to submit_enquiry keyed by field key.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It transparently describes what the tool returns, including common field metadata and conditional allowed options, and implies a read-only inspection operation. It does not explicitly state 'read-only,' but the content makes the non-mutating nature clear.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with the key facts: what the tool returns, the exact attributes, and how the output relates to another tool. Every sentence adds value and nothing feels redundant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter listing tool with no output schema and no annotations, this description is largely complete: it names the resource, the fields returned, and the downstream submission workflow. The only minor gap is the lack of an explicit distinction from enquiry_describe.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has no parameters, so there is nothing to document. The description adds useful semantic context by explaining that field keys are meant to be used as submission keys for submit_enquiry, which goes beyond the empty schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the tool's purpose: returning every field of the Penetration Testing Cost enquiry, along with key, label, type, required flag, help text, and allowed options. It is specific enough to distinguish from submit_enquiry, though it does not explicitly contrast with the sibling enquiry_describe.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear usage context by stating that answers should be passed to submit_enquiry keyed by field key. It implies this tool should be used to retrieve the field structure before submission, but it does not state explicit conditions for when to choose this over enquiry_describe.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

submit_enquirySubmit an ENQUIRY to human providers (two steps; not a purchase)AInspect

Submits an enquiry to Penetration Testing Cost — NOT a purchase, NOT a guaranteed quote. Step 1: call with the answers (keyed by field key from enquiry_fields) and consent=true; it validates and returns a summary, the consent line and a confirmation token — show the person the summary and the consent line. Step 2: only if the person agrees, call again with the same answers, consent=true and the confirmation token; the enquiry is then submitted, and the person receives an email with a link they must click before any provider sees it. Consent means the person has read and agreed to: "Happy for my details to go to relevant penetration testing providers, who'll contact me directly."

ParametersJSON Schema
NameRequiredDescriptionDefault
answersYesthe person's answers, keyed by field key
consentYestrue only when the person has agreed to: Happy for my details to go to relevant penetration testing providers, who'll contact me directly.
confirmationNothe confirmation token from step 1, after the person has approved the summary

TDQS

A5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

There are no annotations, so the description carries the full burden. It fully discloses the two-step stateful behavior, that the first call only validates and returns a token, that the second call actually submits, that an email link must be clicked before providers see it, and the exact consent statement required. This is unusually transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but every sentence earns its place. It front-loads the key distinction ('NOT a purchase, NOT a guaranteed quote') and uses clear Step 1/Step 2 structure. The consent text is included verbatim to avoid ambiguity. No filler is present.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description fully equips an agent to execute both steps correctly, including what to show the person, what to pass on the second call, and what will happen after submission. Although there is no output schema, the description names the summary, consent line, and confirmation token returned by step 1, so return values are sufficiently covered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Although schema coverage is 100%, the description adds critical meaning: answers must be keyed by field key from enquiry_fields, consent must be true only when the person agreed to the stated text, and confirmation must be the token from step 1 with the same answers. This connects the parameters to the required workflow beyond the raw schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb and resource: submits an enquiry to Penetration Testing Cost. It clearly distinguishes this from a purchase or guaranteed quote and differentiates it from sibling tools (enquiry_describe, enquiry_fields) which are not submission operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit step-by-step guidance is provided: when to call (step 1), what to pass, how to handle the returned summary and consent line, and when to call again (step 2, only after the person agrees, with the confirmation token). It also tells the agent to show the person the summary and consent line before proceeding.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 3 tool updates
    • First observedenquiry_describe
    • First observedenquiry_fields
    • First observedsubmit_enquiry

Frequently Asked Questions

Discussions

No comments yet. Be the first to start the discussion!

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    F
    maintenance
    A comprehensive security testing MCP server providing 51 tools for penetration testing, network forensics, memory analysis, and vulnerability assessment. It enables automated security audits and technical investigations across web applications, cloud environments, and network captures.
    51
    71
    23
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables authorized penetration testing through MCP, providing parallel reconnaissance, vulnerability scanning, attack path analysis, and self-contained HTML reporting with compliance tagging.
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A4.4/5.0
Disambiguation5/5

Each tool has a clearly distinct role: explaining the process, listing the form fields, and submitting the enquiry with confirmation handling. There is no overlap or ambiguity between them.

Naming Consistency4/5

Two tools follow an enquiry_ prefix pattern while the third uses submit_enquiry, which is a slight structural deviation. However, all names clearly reference the same domain and are readable and predictable enough.

Tool Count5/5

Three tools is a well-scoped set for a single-purpose enquiry submission workflow. Each tool earns its place and there is no bloat or redundancy.

Completeness5/5

The set fully covers the enquiry lifecycle: orientation, field discovery, validation, consent, and two-step confirmation submission. There are no obvious dead ends or missing operations for the stated purpose.

Resources