Skip to main content
Glama
Mipiti
by Mipiti

add_evidence

Attach evidence items (doc, link, or artifact) to a control as contextual metadata, while implementation status remains determined solely by assertions.

Instructions

Attach an auxiliary evidence item (doc, link, or artifact reference) to a control. Mutating.

Evidence is contextual metadata only — it does NOT count toward a control's implementation status; only assertions prove controls. Use remove_evidence to detach an item.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlNoOptional file path or URL pointing at the artifact.
typeNoEvidence type — one of "code", "test", "config", "document", "link" (default "code").code
labelNoHuman-readable description of the evidence (required).
model_idYesID of the threat model.
control_idYesID of the control.
server_versionYes

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full burden. It does disclose that the operation is mutating and adds a meaningful semantic boundary: evidence does not affect control status. However, it omits other behavioral details a fully transparent unannotated mutation tool might include, such as idempotency, duplicate handling, or permission requirements.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded: the first sentence states the action and target, and the second adds essential semantic caveats. There is no filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a moderate-complexity mutation tool with an output schema and a well-covered input schema, the description provides the key contextual facts: what it attaches, that it is mutating, and that it does not affect control status. It could mention behavior like replacing vs. appending evidence, but overall it is sufficiently complete for an agent to use it appropriately.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 83%, so the baseline is 3. The description's mention of 'doc, link, or artifact reference' loosely maps to the `type` parameter, but the schema already documents each parameter's meaning and defaults, so the description adds little beyond that.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Attach an auxiliary evidence item (doc, link, or artifact reference) to a control.' It clearly scopes what the tool does and distinguishes itself from the sibling tool remove_evidence by framing attachment vs. detachment.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when this tool is appropriate and when it is not: evidence is contextual metadata only, does not count toward implementation status, and only assertions prove controls. It also directs users to remove_evidence for detaching an item, giving a clear alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Mipiti/mipiti-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server