Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api frameworks mappings retrieve

ciso_assistant_api_frameworks_mappings_retrieve
Read-onlyIdempotent

Retrieve a framework mapping by ID to inspect or update its details in CISO Assistant.

Instructions

API endpoint that allows frameworks to be viewed or edited.

Input Schema

NameRequiredDescriptionDefault
idYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

D1.9/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=true, idempotentHint=true and destructiveHint=false, yet the description explicitly says the endpoint allows frameworks to be 'viewed or edited', implying a mutation path this tool does not offer. Beyond that it adds no behavioral context (required permissions, 404 behavior, scope of returned object), so it both contradicts and fails to supplement the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One short, front-loaded sentence with no padding, so it is not verbose. However, the sentence is generic DRF boilerplate that spends its few words on an irrelevant 'or edited' clause rather than the operation's actual scope.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-by-id tool with no output schema and an undocumented parameter, the description should at minimum state that it returns a single framework mapping object by id. Instead it describes a generic frameworks endpoint, leaving the agent unable to predict the response shape or confirm the call is correct.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single required 'id' string has 0% schema description coverage, so the description carries the full burden — but it says nothing about what the id identifies (a framework, a mapping set, a requirement node?) or its format. With documentation this thin, an agent could easily pass the wrong identifier.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description says only that the endpoint 'allows frameworks to be viewed or edited' — it never mentions 'mappings', which is the distinguishing part of the tool name, and gives no verb/resource pairing specific to a single-object read. Among siblings like frameworks_retrieve, frameworks_object_retrieve and frameworks_mapping_stats_retrieve, nothing here tells the agent which one this is.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to use this tool, when not to, or which sibling to prefer for framework-mapping data. The agent has to infer usage entirely from the tool name and the single required id.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools