Skip to main content
Glama

recall_as

Retrieve memories owned by or granted to a specific agent, applying fail-closed access control so a missing grant authorizes nothing. Use this tool to read only what that agent can access.

Instructions

Recall AS a named agent: the same ranking as recall, hard-filtered to what that agent owns or has an active grant for. FAIL-CLOSED -- an agent with no grants sees only what it wrote itself, and a grant that cannot be evaluated authorises nothing.

This is a SEPARATE tool rather than an as_agent= argument on recall on purpose: an access-control scope that is an optional parameter is one a caller can forget, and forgetting it would read the whole store. Here the scoped read is the only thing this tool can do.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
kNo
fullNo
agentYes
queryYes
snippet_charsNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYes
Install Server

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does it well: it discloses fail-closed behavior, the no-grants case, and that an unevaluable grant authorizes nothing. It also clearly states that the tool only performs a scoped read, leaving return-shape details to the output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but tightly organized: definition, fail-closed semantics, design rationale, and capability boundary each get one or two sentences. It is front-loaded with the most decision-relevant information, and no sentence is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a security-sensitive scoped read, the permission model and its difference from recall are thoroughly explained, and an output schema exists to cover return values. The main gap is undocumented option semantics, but the provided defaults make safe default invocations possible and the connection to recall covers much of the missing parameter behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description only indirectly clarifies agent and query through context. k, full, and snippet_chars receive no behavioral explanation beyond their names and defaults, so the description does not compensate for the missing schema-level parameter documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening phrase 'Recall AS a named agent' identifies a specific verb and resource, and 'same ranking as recall, hard-filtered to what that agent owns or has an active grant for' draws a sharp contrast with the sibling recall tool. The second paragraph reinforces that this is an access-control-scoped read, making the tool's purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly explains why this is a separate tool rather than an as_agent= parameter on recall, warning that an optional scope can be forgotten and accidentally read the whole store. This gives a clear reason to use recall_as for agent-scoped reads, though it does not explicitly phrase an exclusion like 'use recall for unfiltered reads.'

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/DanceNitra/inspeximus'

If you have feedback or need assistance with the MCP directory API, please join our Discord server