Skip to main content
Glama
Knuckles-Team

CISO Assistant MCP Server

Api vulnerabilities batch action create

ciso_assistant_api_vulnerabilities_batch_action_create

Apply a batch action to multiple vulnerabilities at once, simplifying bulk updates and reducing repetitive manual changes.

Instructions

Perform a batch action on multiple objects.

Input Schema

NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv2.3.6

TDQS

C2.2/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already disclose that this is a non-read-only, non-idempotent, open-world operation, but the description adds nothing about what the batch action does, what payload shape it expects, or how it affects existing vulnerability records. With annotations covering the safety profile, the description still fails to add any meaningful behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The single sentence is short but suffers from under-specification rather than useful conciseness. It is front-loaded with a generic verb phrase that does not help an agent decide or act.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a batch action tool with no schema parameters, no output schema, and many sibling batch action tools, the description should explain the target model, accepted action types, and expected payload. It provides none of this, leaving the definition completely inadequate for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero declared parameters, so per the baseline rule it scores 4. There are no parameter semantics for the description to explain, and the empty schema is consistent with that.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description says 'Perform a batch action on multiple objects,' which merely restates the tool name and title without naming the resource domain (vulnerabilities) or the kind of action. An agent cannot distinguish this from the dozens of sibling *_batch_action_create tools or know that it targets vulnerabilities.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this batch action versus single-object create/update/destroy tools or the other batch action siblings. The description provides no prerequisites, alternatives, or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools