Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api entities dora entity hierarchy retrieve

ciso_assistant_api_entities_dora_entity_hierarchy_retrieve
Read-onlyIdempotent

Retrieve the DORA entity hierarchy from CISO Assistant to view parent-child relationships and support entity structure analysis.

Instructions

API endpoint that allows entities to be viewed or edited.

Input Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

C2.2/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=true, idempotentHint=true and destructiveHint=false, yet the description claims the endpoint 'allows entities to be viewed or edited' — an edit claim that directly conflicts with the read-only annotation. Nothing is said about what the DORA entity hierarchy actually contains, its depth, or scoping.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

It is a single short sentence with no filler padding, which is structurally fine, but the sentence is boilerplate that conveys almost no information relative to its length. Brevity here comes from under-specification rather than disciplined editing.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-argument retrieval endpoint with no output schema, the description is the only source of information about what comes back, and it says nothing about the hierarchical structure, its members, or ordering. The annotations cover only the safety profile, leaving the agent unable to predict the response.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has zero properties, so there is no parameter semantics for the description to add; the baseline of 4 applies. The description neither adds nor detracts from a no-argument call.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description only says it is an 'API endpoint that allows entities to be viewed or edited', which essentially restates the resource in the tool name without naming DORA, entity hierarchy, or what the hierarchy view returns. An agent cannot distinguish this from the many other entity-related siblings (entities_retrieve, entities_object_retrieve, entities_graph_retrieve, entities_dora_entity_type_retrieve) based on the description alone.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use guidance whatsoever: it does not say when to call the DORA entity hierarchy endpoint versus entities_retrieve or entities_graph_retrieve, nor what inputs (0 params) are required. The phrase 'viewed or edited' actively muddies the picture by implying a write capability that does not exist.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools