Skip to main content
Glama
aeoess

agent-passport-system-mcp

by aeoess

verify_delegation

Check a delegation's signature and stated time window to confirm its integrity and internal consistency. Fails closed when expiration is unreadable.

Instructions

Check a delegation's signature and its stated window. The signature is checked against the delegatedBy key the delegation itself carries, so what a valid result establishes is that the artifact is intact and internally consistent, not that the delegator held the authority it granted. Revocation is not consulted here. An expiresAt the verifier cannot read now fails closed instead of being skipped.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
delegation_idYesDelegation ID to verify

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed2 schema fields changedv4.0.0
    • changedInput schema / $schema
      Previous value: -"http://json-schema.org/draft-07/schema#"New value: +"https://json-schema.org/draft/2020-12/schema"
    • removedInput schema / additionalProperties
      Removed value: -false
  2. Addedv2.8.0

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It explains that the signature is checked against the delegation's own delegatedBy key, that a valid result does not prove the delegator's authority, that revocation is not considered, and that unreadable expiresAt values fail closed. These are substantive and non-obvious behaviors.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, each earning its place. The core action is front-loaded, followed by crucial boundary conditions and a failure-mode clarification. No filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter verification tool with no output schema, the description covers the verification target, the meaning of a valid result, the exclusion of revocation, and a specific failure behavior. It is nearly complete, though it does not describe the return value or explicitly confirm the tool is read-only.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already documents the single parameter delegation_id with 100% coverage as 'Delegation ID to verify.' The description does not need to add parameter syntax details, so the baseline of 3 applies. It adds no additional parameter-specific meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Check a delegation's signature and its stated window.' It clearly distinguishes this from verifying the delegator's authority and from checking revocation, which sets it apart from sibling tools like verify_issuer, verify_endorsement, and revoke_delegation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives useful context about when the tool is appropriate: it establishes artifact integrity and internal consistency, not authority. It also explicitly says revocation is not consulted, providing a clear exclusion. It does not name alternative tools, but the guidance is still actionable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools