Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api resilience business impact analysis xlsx retrieve

ciso_assistant_api_resilience_business_impact_analysis_xlsx_retrieve
Read-onlyIdempotent

Retrieves a business impact analysis XLSX report for a resilience assessment by ID from CISO Assistant, supporting risk and recovery planning.

Instructions

api_resilience_business_impact_analysis_xlsx_retrieve

Input Schema

NameRequiredDescriptionDefault
idYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

D1.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is covered. The description contributes nothing additional — it does not say that a binary file is returned, whether the id refers to a BIA record, or what happens if the id is missing.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

It is short, but only because it is under-specified rather than economical. There is no front-loaded verb or scope statement to anchor the reader.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and no annotations about the response, the description must at minimum convey that this returns an XLSX file for a given BIA record. It conveys neither the return format nor the required input semantics, so an agent cannot invoke it confidently.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single required parameter 'id' has 0% schema description coverage, so the description carries the full burden of explaining it — yet it adds no meaning at all. An agent cannot tell whether this is the BIA id, an asset id, or a report id.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description is literally the tool's identifier repeated in snake_case, which only obliquely signals that it retrieves an XLSX export of a business impact analysis. It restates the name rather than stating what the tool does in prose, and gives no information an agent couldn't parse from the name alone.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this XLSX retrieval versus the sibling export_csv_retrieve, export_xlsx_retrieve, build_table_retrieve, or the plain retrieve variant. The agent is left to infer the distinction entirely from naming conventions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools