Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api requirement mapping sets partial update

ciso_assistant_api_requirement_mapping_sets_partial_update

Partially update a requirement mapping set in CISO Assistant by ID, modifying only specified fields through the GRC API.

Instructions

api_requirement_mapping_sets_partial_update

Input Schema

NameRequiredDescriptionDefault
idYes
bodyNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

D1.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds nothing beyond the annotations (readOnlyHint=false, idempotentHint=false, openWorldHint=true). It does not describe what fields can be patched, whether omitted fields are preserved, or whether the target must exist — all important for a partial-update mutation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

It is short, but only because it says nothing; this is under-specification, not conciseness. No front-loaded verb+resource statement exists to anchor the reader.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with 0% parameter documentation, no output schema, and dozens of near-identical siblings, the description supplies none of the context needed. An agent cannot confidently pick this over requirement_mapping_sets_update.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% for both parameters. The description does not clarify that 'id' identifies the mapping set to patch or that 'body' is an arbitrary object of fields to change — the two things the schema leaves entirely undefined.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description is the tool's slug restated verbatim ('api_requirement_mapping_sets_partial_update'), which is tautology rather than explanation. It does not say what a requirement mapping set is, what 'partial update' modifies, or how it differs from the many sibling update/partial_update tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this versus ciso_assistant_api_requirement_mapping_sets_update, requirement_mapping_sets_create, or the object_retrieve siblings. The agent must infer everything from the name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools