Skip to main content
Glama

Check Jurisdiction Transfer

check_jurisdiction_transfer
Read-onlyIdempotent

Determine whether a data transfer is permitted between source and target jurisdictions under EU_ONLY, GDPR_ADEQUATE_ONLY, or NO_CROSS_BORDER constraints.

Instructions

Check if a data transfer is permitted under jurisdiction constraints (EU_ONLY, GDPR_ADEQUATE_ONLY, NO_CROSS_BORDER).

Input Schema

NameRequiredDescriptionDefault
purposeYes
sourceJurisdictionYesISO 3166-1 alpha-2 code
targetJurisdictionYesISO 3166-1 alpha-2 code
transferConstraintsNo
processingRestrictionsNo

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed2 schema fields changedv4.0.0
    • changedInput schema / $schema
      Previous value: -"http://json-schema.org/draft-07/schema#"New value: +"https://json-schema.org/draft/2020-12/schema"
    • removedInput schema / additionalProperties
      Removed value: -false
  2. Addedv2.8.0

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description adds the jurisdiction-constraint vocabulary but says nothing about the outcome shape (permitted/denied), what the constraint strings mean, or whether a denial is blocking. Modest added value over annotations, hence a 3.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no padding. It is efficient, though the parenthetical token list would be more useful tied to the transferConstraints parameter.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-parameter compliance-check tool with no output schema and 40% schema coverage, the description omits the decision semantics an agent most needs: which constraints are honored, how the three required params interact, and what a permitted vs. denied result means. Adequate as a label, insufficient as an invocation guide.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is only 40%: sourceJurisdiction and targetJurisdiction carry ISO 3166-1 alpha-2 descriptions, but purpose, transferConstraints and processingRestrictions are bare. The description names three constraint tokens that do not even map to a documented enum on transferConstraints, so it neither documents the params nor compensates for the coverage gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource: checking whether a data transfer is permitted under jurisdiction constraints, and names the constraint vocabulary (EU_ONLY, GDPR_ADEQUATE_ONLY, NO_CROSS_BORDER). It does not, however, explicitly distinguish itself from the many sibling checks (check_purpose_permitted, check_combination_permitted, check_usage_permitted), so an agent must infer the split.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use, when-not-to-use, or alternative routing is given. The agent is not told whether this belongs in a pre-transfer gate, whether it should be paired with check_purpose_permitted or check_combination_permitted, or what to do when the check fails.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools