Skip to main content
Glama
ComplianceCow

ComplianceCow MCP Server

verify_control_in_assessment

Verify control existence and leaf status in an assessment to determine rule attachment eligibility, and return control details and attachment status.

Instructions

Verify the existence of a specific control by alias within an assessment and confirm it is a leaf control.

CONTROL VERIFICATION AND VALIDATION:

  • Confirms the control with the specified alias exists in the given assessment.

  • Validates that the control is a leaf control (eligible for rule attachment).

  • Checks if a rule is already attached to the control.

  • Returns control details and attachment status.

LEAF CONTROL IDENTIFICATION:

  • A control is considered a leaf control if:

  • leafControl = true, OR

  • has no planControls array, OR

  • planControls array is empty.

  • Only leaf controls can have rules attached.

  • If the control is not a leaf control, an error will be returned.

Args: assessment_name: Name of the assessment. control_alias: Alias of the control to verify.

Returns: Dict containing control details, leaf status, and rule attachment info.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
assessment_nameYes
control_aliasYes

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description fully carries the burden. It details that the tool confirms existence, validates leaf status (with specific conditions), checks if a rule is attached, and returns details. It also discloses that non-leaf controls cause an error. This is transparent and goes beyond the basic function.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is organized into sections with bullet points, but it is somewhat verbose. The leaf control identification details could be condensed. The main purpose is front-loaded, but the extra details could be trimmed without losing clarity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity and the presence of an output schema, the description adequately explains what it does, what parameters are required, and what is returned (control details, leaf status, rule attachment info). It covers key behavioral aspects, though it could mention the error case for non-existent controls.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It provides one-line descriptions for both parameters ('Name of the assessment' and 'Alias of the control to verify'), which adds meaning but is minimal. No additional constraints, examples, or format details are given.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action 'Verify the existence of a specific control by alias within an assessment and confirm it is a leaf control.' It lists specific sub-steps (confirms existence, validates leaf status, checks rule attachment) and distinguishes this from sibling tools like 'fetch_leaf_controls_of_an_assessment' (lists all leaf controls) and 'attach_rule_to_control' (attaches rules).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage before attaching rules ('Only leaf controls can have rules attached') but does not explicitly state when to use this tool versus alternatives like fetch_controls or fetch_leaf_controls_of_an_assessment. No direct comparison or triage guidance is provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/ComplianceCow/cow-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server