Skip to main content
Glama

engagement_manage

Inspect, create, update, or revoke engagement scopes, target and port/protocol rules, and rate/timeout budgets to control authorized security testing within defined limits.

Instructions

Inspect, create, update, or revoke an engagement scope, port/protocol rules, rate/timeout budgets, and worker target. Risk labels do not restrict execution; max_risk_level is a legacy compatibility field.

Input Schema

NameRequiredDescriptionDefault
nameNo
actionNoinspect
valid_fromNo
valid_untilNo
allowed_portsNo
engagement_idNodefault
worker_targetNo
max_risk_levelNoLegacy compatibility field, retained in stored settings but not enforced. Risk labels never block execution.
allowed_targetsNo
autonomous_modeNo
max_concurrencyNo
excluded_targetsNo
allow_all_targetsNo
allowed_protocolsNo
max_artifact_bytesNo
max_rate_per_minuteNo
max_timeout_secondsNo
block_metadata_endpointsNo

Output Schema

NameRequiredDescriptionDefault
resultYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

C2.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden. It notes that risk labels do not restrict execution and that max_risk_level is legacy, but this largely repeats the schema's deprecated-field note and omits key behavior such as destructive effects of revoke, permission requirements, scope enforcement, and side effects on jobs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two compact sentences and front-loads the core operations before the risk-label caveat. It is appropriately sized in principle, though its brevity leaves substantial semantic gaps for such a complex tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 18 parameters, no annotations, and mutation/revocation capabilities, the description is far too sparse to be complete. It benefits from an existing output schema, but still fails to explain action values, most parameter meanings, and operational side effects an agent needs to invoke it safely.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 6% across 18 parameters, so the description must compensate. It only loosely maps categories like port/protocol rules and rate/timeout budgets; most parameters such as action values, allowed versus excluded targets, autonomous_mode, max_concurrency, and block_metadata_endpoints remain unexplained.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses specific verbs (inspect, create, update, revoke) and names the managed resource (engagement scope, rules, budgets, worker target). It is clear what domain the tool covers, though it does not explicitly differentiate itself from sibling tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It lists possible operations but gives no guidance on when to choose inspect versus create, update, or revoke, no prerequisites, and no conditions for using this tool over alternatives. The agent must infer action semantics from the parameter schema alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.