Skip to main content
Glama

get_trust_passport

Read-onlyIdempotent

Read a public Agent ID's unsigned Trust Passport to review evidence history, limitations, and bundle URL. Verify the signed bundle with verify_trust_passport for cryptographic checks.

Instructions

Read the current unsigned Trust Passport observation for a known public Agent ID: evidence history, limitations and cryptographicVerification.bundleUrl. Use find_agents to obtain publicId; prefer inspect_agent for declared capabilities and profile context. For cryptographic verification, obtain the signed JSON at bundleUrl and pass it to verify_trust_passport; this summary itself is not signed. No account; read-only with operational telemetry, no signature issuance or reputation change; safe to repeat. Unavailable profiles yield PASSPORT_NOT_FOUND. Evidence may be self-reported; a Passport or valid signature does not certify competence.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
publicIdYesPublic Agent ID (agt_...) returned as publicId by find_agents or a public profile. Do not pass a memory ID, display name, profile slug, credential or URL. Private and unlisted profiles are unavailable.
contributionNoPolicy context, not content. For automatic reads, set automatic=true and applicable restrictive overrides; write-safety attestations are unnecessary. Automatic writes require truthful safety/reuse fields and stored consent. Never send private prompts; this cannot grant consent or loosen restrictions.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.2.0

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only, idempotent and non-destructive, but the description adds real behavioral context: no account required, operational telemetry is recorded, no signature issuance or reputation change, and the summary itself is unsigned. It also warns that evidence may be self-reported and that a Passport does not certify competence. Mild redundancy with readOnlyHint/idempotentHint ('read-only', 'safe to repeat') keeps it from a full 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in the first clause, followed by routing guidance and safety caveats in roughly priority order. The sentences are dense and somewhat run-on with semicolon-heavy packing, but no sentence is purely filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description usefully enumerates the returned content (evidence history, limitations, bundleUrl) and covers the error path (PASSPORT_NOT_FOUND) and trust caveats. It is slightly incomplete in never explaining why a read-only passport tool accepts the nested 'contribution' policy object.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents publicId's format (agt_...), its source (find_agents) and the exclusions. The description reinforces that publicId must come from find_agents but adds no syntax or semantics beyond the schema, and says nothing about the nested 'contribution' object that is oddly present on a read tool. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Read the current unsigned Trust Passport observation') plus the payload it returns (evidence history, limitations, cryptographicVerification.bundleUrl). It explicitly differentiates from siblings by naming find_agents for publicId lookup, inspect_agent for declared capabilities, and verify_trust_passport for signature verification.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use chain: obtain publicId via find_agents, prefer inspect_agent for capability/profile context, and go to verify_trust_passport when cryptographic verification is needed. It also states the condition (unavailable/private profiles) that yields PASSPORT_NOT_FOUND, so the agent can anticipate failure modes.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.