Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api task nodes object retrieve

ciso_assistant_api_task_nodes_object_retrieve
Read-onlyIdempotent

Retrieves one task node object by ID from CISO Assistant's GRC API, enabling targeted lookup of task details for compliance and risk workflows.

Instructions

api_task_nodes_object_retrieve

Input Schema

NameRequiredDescriptionDefault
idYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

D1.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, and openWorldHint=true, so the safety profile is covered. The description adds nothing beyond that – no mention of what object is returned, whether missing IDs error, or any access scoping – so it contributes no behavioral context of its own.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single machine-generated token string is trivially short but is under-specification rather than conciseness. There is no front-loaded statement of purpose to earn its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema and no descriptive content means an agent knows neither what a 'task node' is in this system nor what the response contains. For a retrieve-by-id tool this is wholly inadequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is one required parameter, 'id', at 0% schema description coverage, so the description must carry the burden and does not. It gives no hint about whether the id is a task-node UUID, a ref_id, or a numeric PK, nor any format or error expectation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description is simply the operation ID 'api_task_nodes_object_retrieve' restated with no prose. An agent can partially parse 'task_nodes' plus 'object retrieve', but there is no verb-and-resource sentence and nothing that separates it from siblings like ciso_assistant_api_task_nodes_retrieve or task_nodes_list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use guidance, no exclusions, no named alternatives. With dozens of task_nodes siblings (retrieve, list, object_retrieve, status_retrieve, cascade_info_retrieve), the agent is given nothing to choose between them.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools