Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api folders import create

ciso_assistant_api_folders_import_create

Upload a file and start the CISO Assistant folder import process to bring external compliance or risk data into your GRC platform.

Instructions

Handle file upload and initiate import process.

Input Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

C2.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already disclose that this is a non-read-only, non-idempotent, open-world, non-destructive operation, so the description only needs to add context. It adds that the action involves a file upload and initiates an import process, but does not explain file format expectations, whether the import is asynchronous, what happens on partial failure, or what existing data may be affected. The description is consistent with the annotations but remains shallow.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single short sentence with no filler, and the core action is front-loaded. It is not verbose, though its brevity comes at the cost of specificity rather than being a structural flaw.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For an import/create tool, the definition is missing important context: what is imported, what file format is expected, whether the call is synchronous or asynchronous, and what the result indicates. There is no output schema to compensate, and the empty input schema makes the file-upload claim especially underspecified. The annotations cover safety hints but not enough behavioral detail.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema declares zero parameters, which normally gives a baseline of 4 because there is nothing to document. However, the description implies a file upload even though the schema exposes no file or import-related parameter, creating ambiguity about how the input is supplied. This mismatch prevents the description from fully clarifying parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states that the tool handles a file upload and initiates an import process, which is a recognizable purpose. However, it never says what is being imported (folders) or how this differs from related tools such as folders_import_dummy_create or folders_create. The verb 'handle' is vague and leaves the exact operation unclear.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus the sibling folders_import_dummy_create or other folder creation/import endpoints. It also omits prerequisites such as authentication or file preparation. The agent is left to infer usage entirely from the name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools