Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api risk acceptances batch action create

ciso_assistant_api_risk_acceptances_batch_action_create

Apply a batch action to multiple risk acceptance records, enabling status updates or changes across several objects in one request.

Instructions

Perform a batch action on multiple objects.

Input Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

C2.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already state the safety profile (readOnlyHint=false, destructiveHint=false, idempotentHint=false, openWorldHint=true), so the description is not required to restate it, but it adds nothing new. Critically, it never explains what a "batch action" actually does to the objects, how they are selected, or whether effects are reversible — the core behavioral question for a bulk mutation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single short sentence with no padding, so nothing is wasteful, but the brevity comes from under-specification rather than economy. Front-loading is moot since there is only one generic clause.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a bulk-mutation tool with no output schema and a schema that declares no parameters at all, the description should at minimum clarify the target resource and the selection/action mechanism. None of that is present, leaving the agent unable to call this correctly with confidence.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With zero declared parameters, the baseline is 4, but the description's silence is costly here: it says nothing about how the 'multiple objects' are identified or where the action payload goes, which is exactly what an agent needs given the empty schema (properties: {}, additionalProperties: false). Scored down from baseline for that omission.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description restates the title's generic framing ("batch action ... on multiple objects") without ever naming the resource, risk acceptances, that it acts on. With ~200 sibling tools sharing the same "batch_action_create" suffix, the agent gets no differentiation from the description itself and must rely entirely on the tool name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this versus single-object create/destroy/update on risk acceptances, no mention of which batch operations are supported, and no prerequisites or exclusions. The agent must infer everything from the name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools