Skip to main content
Glama

obfuscate_pii_entities

Detect and mask sensitive data like SSNs, credit cards, and emails before AI model ingestion.

Instructions

Detects and masks Personally Identifiable Information (SSNs, credit cards, emails, phone numbers, API keys) prior to model ingestion. (0.01 USDC on Base L2)

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
payloadYesInput parameters or JSON string payload for the tool execution
paymentSignatureNoBase L2 USDC micropayment signature or transaction hash for x402 settlement

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.0.0

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It does reveal the core behavior (detection and masking), the PII types handled, and the associated cost ('0.01 USDC on Base L2'). However, it does not disclose what the output looks like, how original data is handled, or the mechanics of the payment requirement, leaving meaningful gaps.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single focused sentence plus a parenthetical cost note. It front-loads the core operation and PII types without redundant filler, and every part contributes useful information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema and the description does not explain the return value, which is a notable gap for a tool that transforms input data. It also leaves the payment flow ambiguous: the description mentions a 0.01 USDC charge, yet paymentSignature is optional in the schema and no guidance is given on how to supply it. These omissions make the tool incompletely specified for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds some meaning beyond the schema by specifying the PII categories the payload should be checked for and the payment cost, but it does not clarify the exact expected payload format or whether paymentSignature is mandatory despite the cost note.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the operation ('Detects and masks') and the resource ('Personally Identifiable Information'), listing concrete entity types such as SSNs, credit cards, emails, phone numbers, and API keys. It also gives context ('prior to model ingestion') that helps distinguish it from mere detection tools, though it does not explicitly name sibling alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'prior to model ingestion' provides a clear, actionable usage context: use this tool before sending data to a model. It does not explicitly state when not to use it or name alternative sibling tools, but the intended scenario is reasonably clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools