Skip to main content
Glama
MarkAC007

mcp-server-scf

by MarkAC007

scf_get_posture_snapshot

Read-only

Retrieve an organization's monthly security posture snapshot by period (YYYY-MM) for compliance review; returns 404 if that month has no snapshot.

Instructions

Get one month's posture snapshot by period (YYYY-MM). 404 if that month has none.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
org_idYesOrganization UUID — obtain from scf_list_organizations
periodYesMonth of the snapshot, YYYY-MM (e.g. 2026-09)

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv3.7.2

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the safety profile is covered. The description adds useful error behavior by stating '404 if that month has none,' but it does not describe the snapshot response shape or any permission requirements beyond the read-only annotation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two short sentences with zero waste. It front-loads the core action and appends the important 404 behavior compactly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only tool with two fully documented parameters, the description is nearly complete: it explains what is fetched, the period format, and the missing-month behavior. The main gap is that no output schema exists and the description does not describe what the returned snapshot contains.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and both parameters already include descriptions, including where to obtain org_id and the YYYY-MM format for period. The description restates the period format but adds no parameter semantics beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Get one month's posture snapshot by period (YYYY-MM).' This is clear enough to know it retrieves a single monthly posture snapshot, but it does not explicitly differentiate itself from sibling tools like scf_list_posture_snapshots or scf_take_posture_snapshot.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no explicit when-to-use guidance or alternatives. It implies retrieving one month's snapshot by period, but leaves the agent to infer when to use this instead of scf_list_posture_snapshots or scf_take_posture_snapshot.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools