Skip to main content
Glama
Nevery-qiao

qianji-agent

by Nevery-qiao

qianji_execute

DestructiveIdempotent

Execute authorized Qianji bookkeeping commands with stable request IDs to prevent duplicate writes and native readback to confirm every successful operation.

Instructions

执行已获用户授权的记账指令;稳定请求编号防重复,成功必须通过原生回读核验。

Input Schema

NameRequiredDescriptionDefault
commandYes
request_idYes

Output Schema

NameRequiredDescriptionDefault
codeNo
stateYes
totalNo
actionNo
deletedNo
recordsNo
recoveryNo
trackingNo
image_keyNo
object_idNo
book_countNo
compatibleNo
operationsNo
request_idNo
limitationsNo
next_offsetNo
writes_sentNo
capabilitiesNo
continuationNo
account_reviewNo
backup_createdNo
dispatch_stateNo原财务发送留证状态;不是成功/无效果证明,不允许据此重发
safe_to_resendNo
complete_sourceNo
runtime_versionNo
download_variantNonative_huge为官方账单图片域名的!huge显示版本;服务可能重新编码
related_bill_idsNo
requires_versionNo
balances_verifiedNo
expected_balancesNo
verification_codeNo有限的核验失败类别;旧请求缺失发送证据不会自动解除未知屏障
dispatch_error_codeNo
file_content_verifiedNo
image_pixels_verifiedNo严格HTTPS下载原生无损显示版本,与本地原图按方向归一化后逐像素相同;不等于原文件字节相同
storage_hash_verifiedNo
native_fields_verifiedNo
task_execution_observedNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.2.0

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With annotations already declaring destructiveHint=true, idempotentHint=true, and readOnlyHint=false, the description still adds valuable behavioral context: user authorization is required, idempotency is achieved through a stable request ID, and post-success native read-back verification is mandatory. It does not detail what side effects occur or how failures are surfaced.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence separated by semicolons. Every clause carries operational meaning: authorization, idempotency, and verification. There is no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex destructive execution tool with a 50+ action command schema, the description covers key workflow constraints (authorization, idempotency, read-back verification) and the output schema handles return values. However, it omits sibling routing guidance such as using preview before execution or operation_status afterward, which matters for safe invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is reported as 0%, so the description must compensate, but it only explains request_id semantics ('稳定请求编号防重复'). The command parameter and its large action enum are not described at all, leaving the agent to rely entirely on the nested schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: '执行...记账指令' (execute bookkeeping commands). It is clearly a mutation/execution tool rather than a query or preview, but it never names or distinguishes itself from siblings like qianji_preview or qianji_query.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives clear usage context: commands must already be user-authorized, a stable request_id prevents duplicates, and success must be verified via native read-back. It does not state when not to use this tool or explicitly route agents to qianji_preview/qianji_operation_status before or after execution.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.