Skip to main content
Glama
arults

ActSeal MCP

Issue ActSeal

issue_receipt

Issue Ed25519-signed ActSeal receipts for tool actions using SHA-256 input/output hashes, with optional idempotency keys for safe retries and no raw secrets exposed.

Instructions

Issue an Ed25519-signed ActSeal receipt for a tool action. Pass SHA-256 hex hashes of inputs/outputs — never raw secrets. Optional Idempotency-Key. Free tier only; x402 not live.

Input Schema

NameRequiredDescriptionDefault
actionYesShort action name, e.g. tools.web_search
policy_idNoOptional policy / run id label
inputs_hashYesSHA-256 of canonical inputs JSON
outputs_hashYesSHA-256 of canonical outputs JSON
idempotency_keyNoOptional Idempotency-Key (24h TTL on server)

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only say readOnlyHint=false and openWorldHint=true; the description adds that the receipt is Ed25519-signed, that billing is free-tier-only with x402 not yet live, and that an Idempotency-Key is supported. It stops short of describing auth requirements or what the signed receipt contains, but contributes meaningful context beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, front-loaded with the core action, then the key call constraint, then availability. No filler and nothing buried.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 5-param mutation tool with no output schema, the definition covers the critical do-not-do (raw secrets), idempotency, and availability. The remaining gap is that it never indicates what comes back from issuing — a receipt id/object — which would help an agent chain into verify_receipt.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is already 100%, so the baseline is 3; the description earns a bump by adding the safety-critical semantic that hashes must be of canonical inputs/outputs and never raw secrets, which is guidance the schema's pattern alone doesn't convey.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Issue an Ed25519-signed ActSeal receipt for a tool action.' The issue-vs-verify split against the sibling verify_receipt is obvious from the verb, but the description never names or contrasts the sibling explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Pass SHA-256 hex hashes of inputs/outputs — never raw secrets' gives a real usage constraint, and 'Free tier only; x402 not live' signals availability. However, it doesn't say when to reach for this versus verify_receipt, nor any prerequisite/auth conditions for calling it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools