Skip to main content
Glama

sootool.verify_receipt

Read-onlyIdempotent

Verifies a calculation receipt by re-executing the tool with the given arguments, comparing input, result, version, and policy hashes, and validating signatures when provided.

Instructions

계산 영수증(_meta.integrity)을 재실행으로 검증한다. tool 과 arguments 로 같은 계산을 다시 실행해 입력 해시, 결과 해시, 도구 버전, 정책 해시를 대조하고, 서명이 있으면 public_key_b64 로 서명을 검증한다. valid 와 mismatches 를 반환한다. core.batch, core.pipeline 처럼 실행마다 결과가 달라지는 도구는 대상이 아니다.

Input Schema

NameRequiredDescriptionDefault
toolYes
receiptYes
argumentsYes
public_key_b64No
require_signatureNo

Output Schema

NameRequiredDescriptionDefault
_metaNo서버가 붙이는 영수증(integrity), 엔진, 힌트
traceYes계산 근거(tool, formula, inputs, steps, output)
validYes
warningsYes
mismatchesYes
recomputedYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.3.0

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnly/idempotent/closed-world, and the description stays consistent while adding real substance: the mechanism is re-execution (not a stored-value lookup), which hashes are cross-checked, and that signature verification is optional. It does not state what happens when require_signature=true and no signature exists, nor whether the re-executed call is cost-free.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, zero filler, front-loaded with the action and then the compared fields and the exclusion. Dense but readable; nothing repeats the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers the mechanism, the compared fields, the conditional signature path, and the tool class to avoid; an output schema exists so return values needn't be spelled out. The remaining hole is the unexplored require_signature flag and failure behavior when verification cannot be performed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must carry parameter meaning, and it does explain four of five: tool+arguments drive the re-execution, receipt is the integrity payload, public_key_b64 enables signature checks. However require_signature is never mentioned, and the expected format of `tool` (a dotted tool id like finance.fv) and the shape of the receipt object are left implicit.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific verb (re-execute and verify) plus the exact resource (_meta.integrity receipt) and lists precisely what is compared: input hash, result hash, tool version, policy hash. It also explicitly disclaims a neighboring class of tools (core.batch, core.pipeline), so an agent can distinguish it without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a clear when-to-use trigger (a tool emitted _meta.integrity and you want it re-validated) and an explicit when-not (non-deterministic tools such as core.batch/core.pipeline). It also conditions signature checking on the presence of a signature. No alternative verification sibling exists to point at, so 4 rather than 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools