Skip to main content
Glama
Mipiti
by Mipiti

Decide Proposal

decide_proposal

Accept or reject a threat model proposal when delegated, closing it and applying the change. If not permitted, escalates the decision for human review, so you can continue other work.

Instructions

Accept or reject a proposal. Call this only when the workspace's delegation policy names this decision for this agent at the proposal's tier (the delegation block of get_control_work_order says what you may decide). Mutating: closes the proposal and applies an accepted change.

This is a judgment. The call is refused with HTTP 403 and an escalation_id unless the delegation policy permits it; the refusal parks the decision for a person as a decision_request. Do not retry a refusal: report the escalation_id, poll list_proposals for the outcome, and continue other work.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
noteNoOptional note recorded with the decision.
decisionYes``accept`` or ``reject``.
model_idYesID of the threat model.
proposal_idYesID of the proposal to decide.
server_versionYes

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv0.75.0

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full behavioral burden and does so thoroughly. It discloses mutation side effects, authorization requirements, HTTP 403 refusal behavior, creation of a decision_request, and the escalation_id. It even warns that this is a judgment call, which is useful context for the agent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with the core action, followed by policy, mutation, and failure handling. Every sentence adds information, and there is no filler or repetition of schema details.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The definition covers purpose, permission precondition, side effects, error behavior, escalation semantics, and follow-up actions. Since an output schema exists, not detailing the return value is acceptable. The agent has enough context to invoke this tool correctly and handle refusals gracefully.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 80%, so the schema already documents most parameters. The description adds high-level meaning to decision and proposal_id through context like "Accept or reject a proposal," but it does not add details beyond the schema for note, model_id, or server_version. The baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: "Accept or reject a proposal." It further clarifies the effect with "Mutating: closes the proposal and applies an accepted change," which clearly distinguishes this mutation tool from read-only proposal and work-order siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives an explicit precondition: "Call this only when the workspace's delegation policy names this decision for this agent at the proposal's tier." It also tells the agent exactly what to do on refusal: report the escalation_id, poll list_proposals, and continue other work, including "Do not retry a refusal."

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools