Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api evidence revisions upload create

ciso_assistant_api_evidence_revisions_upload_create

Uploads a new revision file for an evidence item in CISO Assistant via API, enabling versioned compliance evidence updates.

Instructions

api_evidence_revisions_upload_create

Input Schema

NameRequiredDescriptionDefault
idYes
bodyNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

D1.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=false, openWorldHint=true, idempotentHint=false, so the agent knows this is a non-idempotent write with external reach. The description adds nothing beyond that: it does not say what the upload targets, what body content is expected, whether it replaces or appends attachments, or any permission or size constraints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Extremely short, but this is under-specification rather than conciseness; the single identifier token is not front-loaded information because there is nothing else to front-load.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

A mutation/upload endpoint with an opaque 'body' payload, no output schema, and no parameter documentation anywhere leaves the agent with no way to know what data to send or what the call does. Contextually inadequate in every dimension.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Both parameters (required 'id' and optional free-form 'body' object with additionalProperties) have 0% schema description coverage, and the description provides no compensating text. The 'body' parameter's shape is entirely undocumented anywhere, so an agent cannot construct a valid call from the definition.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description is only the identifier 'api_evidence_revisions_upload_create', which restates the tool name and title verbatim. A reader can guess from the token 'upload' that something is uploaded to an evidence revision, but there is no verb-object sentence, no statement of effect, and nothing distinguishing it from siblings such as api_evidences_upload_create or api_evidence_revisions_attachment_retrieve.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use guidance, no preconditions, no alternatives, and no indication of what distinguishes this upload endpoint from the many other evidence-related upload/create siblings. The agent receives zero routing information.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools