Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api risk matrices start editing create

ciso_assistant_api_risk_matrices_start_editing_create

Starts editing a risk matrix by copying its JSON definition into an editing draft for modification.

Instructions

Copy json_definition into editing_draft to begin editing.

Input Schema

NameRequiredDescriptionDefault
idYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations (readOnlyHint=false, destructiveHint=false, idempotentHint=false, openWorldHint=true) already convey a non-destructive, non-idempotent write, and the description adds the important detail that the write consists of copying json_definition into an editing_draft. It does not disclose what happens if a draft already exists (overwrite, error, or merge), whether the source matrix must be published, or what permissions/state are required, which are the real behavioral risks here.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single short, front-loaded sentence with no filler. It is appropriately terse for a one-parameter operation, though the terseness is partly under-specification rather than pure efficiency.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema and only default-level annotations, so the description must carry preconditions and outcomes. It explains the copy mechanism but omits what the input id refers to, what state the matrix must be in, what happens to an existing draft, and what the call returns — significant gaps for a mutation entry point in a multi-step draft workflow.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% for the single required parameter 'id', and the description never explains what that id identifies (presumably the risk matrix whose definition gets copied). It mentions json_definition and editing_draft, which are not parameters at all, so the description does not compensate for the undocumented input.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a concrete operation: copying json_definition into editing_draft to start an editing session, which is a specific mechanical action rather than a restatement of the name. It never names the resource (risk matrices), so the agent must rely on the tool name and title to know what object is being edited, but the verb+operation is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'To begin editing' implies this is the entry point of a draft-editing workflow, which is useful implied usage. However, there is no comparison against closely related siblings such as risk_matrices_create_draft_create, create_draft_from, discard_draft_create, or save_draft_partial_update, so the agent cannot infer when this is the correct first step versus building a draft from scratch.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools