Skip to main content
Glama
Sign In
agent-passport-system-mcp

agent-passport-system-mcp

by agent-passport-system
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript

Create Gateway (Deprecated)

create_gateway
Read-onlyIdempotent

Create a ProxyGateway enforcement boundary to enforce AI agent approvals, timeouts, and pending limits; deprecated in v3.0.0; use gateway.aeoess.com REST API.

Instructions

[deprecated in v3.0.0, use the gateway.aeoess.com REST API] Create a ProxyGateway enforcement boundary.

Tool call template

This tool declares no required parameters. Add optional parameters from the input schema as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {},
    "name": "create_gateway"
  }
}

Input Schema

NameRequiredDescriptionDefault
gatewayIdNoCustom gateway ID
approvalTTLSecondsNoTwo-phase approval timeout
maxPendingPerAgentNoMax pending approvals per agent

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed2 schema fields changedv4.0.0
    • changedInput schema / $schema
      Previous value: -"http://json-schema.org/draft-07/schema#"New value: +"https://json-schema.org/draft/2020-12/schema"
    • removedInput schema / additionalProperties
      Removed value: -false
  2. Addedv2.8.0

TDQS

B3.1/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=true and idempotentHint=true, but the name and description both claim a create/mutation operation. This is a direct contradiction of the structured safety metadata, leaving the agent unable to tell whether calling this mutates state or is a safe read.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single compact sentence with the deprecation warning placed first, which is the right front-loading for a tool an agent should probably avoid. Nothing is wasted, though the payload sentence is terse to the point of under-specification.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a deprecated creation tool with no output schema and a contradictory readOnlyHint, the description says nothing about what a ProxyGateway boundary is, whether calls are stateful, or how the approval-related parameters behave. The deprecation pointer is the only substantive context provided.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% with no required parameters, so gatewayId, approvalTTLSeconds, and maxPendingPerAgent are already documented in the schema. The description adds no syntax, defaults, or interaction notes beyond that, which matches the baseline for fully covered schemas.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb and resource ("Create a ProxyGateway enforcement boundary"), which is far more informative than the title alone, and the deprecation tag is front-loaded. It does not, however, distinguish this tool from its gateway siblings (gateway_process_tool_call, gateway_approve, gateway_stats) or explain what an "enforcement boundary" is.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit when-not-to-use instruction: deprecated in v3.0.0, callers should use the gateway.aeoess.com REST API instead. The alternative is external rather than an MCP sibling, and it never says whether the tool still works or for which legacy cases it remains appropriate, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools