execute_probe
Execute one read-only tool probe after verifying read-only status, schema validity, and argument provenance; returns observation or rejection reason.
Instructions
Validate and, if permitted, execute ONE tool call against the target. DEFAULT-DENY: a probe runs ONLY IF it is provably read-only — a read-verb tool name (list/get/read/search/...), a server readOnlyHint, or a query-executor whose sql/query argument is a read-only statement (SELECT/WITH/SHOW/DESCRIBE/EXPLAIN/PRAGMA). A write-verb tool name or the destructive backstop (server destructiveHint or destructive-verb name) rejects regardless of your declaration. Your classification is REQUIRED but ADVISORY — recorded as evidence, it never authorizes execution. Also enforces JSON-schema validation, anti-fabrication provenance (an argument that DECLARES an observed source must cite a value actually captured — otherwise rejected; providing provenance is optional but citing a non-existent observation is fabrication), and the probe budget. Returns a redacted observation or the rejection reason. The observation's identifiers list EVERY short leaf scalar as a candidate (name, value, json_pointer, from_tool) — your raw material to author entity names, identifiers, enums (from distinct values), and relationships. Every result includes a gaps report (unsampled_structures, unexecuted_tools, untraversed_identifiers, sampling_hints, depth_signal).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tool | Yes | A tool name from inspect_target's tool_cards. | |
| target | Yes | ||
| arguments | Yes | Arguments for the target tool call. | |
| objective | No | Optional note on what this probe is trying to learn. | |
| provenance | No | Origin of each argument. Provide it for any identifier you took from a prior response: use kind "observed" citing the exact probe and pointer the value came from — DiscoMCP verifies that citation exists and rejects a fabricated one. Use "user_defined" ONLY for a value the human user explicitly supplied. Omitting provenance no longer rejects a probe, but never invent an identifier and claim it was observed. | |
| classification | Yes | YOUR risk classification of this tool, judged from its name, description, input_schema and annotations. ADVISORY evidence only: recorded as agent-attributed evidence in the profile, it does NOT authorize execution. DiscoMCP runs a probe only when it is provably read-only (read-verb tool name, server readOnlyHint, or a query-executor with a read-only sql/query argument); write-verb names and the destructive backstop are rejected regardless of what you declare. |