Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api privacy right requests create

ciso_assistant_api_privacy_right_requests_create

Create a privacy right request in CISO Assistant to log and manage data subject access or deletion inquiries via the API.

Instructions

API endpoint that allows right requests to be viewed or edited.

Input Schema

NameRequiredDescriptionDefault
bodyNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

D1.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=false, idempotentHint=false, openWorldHint=true, and destructiveHint=false, so the safety profile is covered. The description adds nothing beyond that and actively muddies the picture by framing the endpoint as 'viewed or edited', implying read capability that is not what this route does. No mention of required fields, permissions, or what happens on duplicate submission for a non-idempotent create.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

It is one short sentence, but brevity here reflects under-specification rather than economy. The single sentence is boilerplate that could be attached to any endpoint in this API and carries no tool-specific signal.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

A create operation with an opaque body parameter, no output schema, and only boilerplate annotations needs the description to carry nearly all the load, yet it discloses nothing about the resource, the payload, or the result. An agent cannot call this correctly from the definition alone.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is one free-form 'body' object parameter with 0% schema description coverage and no additionalProperties constraints, so the schema gives the agent essentially nothing to work with. The description does not name a single field (request type, status, owner, subject, dates) that the body must contain, leaving the agent to guess the payload shape.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description restates the title with generic Django REST Framework boilerplate: 'allows right requests to be viewed or edited.' It never says the tool creates a privacy right request, which is what the name and the '_create' suffix promise. An agent reading only the description would think this is a retrieve/update endpoint.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use guidance at all, and no mention of the obvious alternatives in the sibling list (privacy_right_requests_list, _retrieve, _update, _partial_update, _destroy). Nothing tells the agent when creating is preferable to updating or listing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools