Skip to main content
Glama
Sign In
abac-validation-mcp-server

abac-validation-mcp-server

by shivamsehgal-afk
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript

validate_abac_changes

Validate ABAC code changes by checking Copilot Q&A answers against M365ABAC requirements and assessing cross-component impact.

Instructions

Validate ABAC code changes using Q&A analysis. Accepts Q&A format where Copilot has already analyzed git diff and answered 8 predefined ABAC questions. Validates the answers against M365ABAC requirements and performs cross-component impact analysis.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "codeChanges": "<codeChanges>",
      "filePath": "<filePath>"
    },
    "name": "validate_abac_changes"
  }
}

Input Schema

NameRequiredDescriptionDefault
filePathYesPath of the main file being changed (relative to repo root)
fileTypeNoType of file (e.g., 'typescript', 'csharp', 'python')
codeChangesYesQ&A analysis text from Copilot. Format: 'Q&A Analysis:\n1. [Category] Question?\nA: Answer...\n2. [Category] Question?\nA: Answer...' Contains Copilot's analysis of git diff against 8 ABAC questions.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.0.0

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full transparency burden. It conveys that the tool reads Q&A text and validates against M365ABAC requirements plus cross-component impact, but does not disclose side effects, whether it modifies state, what happens on validation failure, or how the output is structured. The dual-duty mention of cross-component impact analysis is vague about behavioral outcomes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences and reasonably efficient. However, the second sentence partially repeats the first ('validates the answers' restates 'Validate ABAC code changes'), and the cross-component impact sentence adds info already implied by a sibling tool name. It's adequate but slightly redundant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a validation tool with 100% schema coverage and no output schema, the description covers the input format (Q&A with 8 questions) and validation scope (M365ABAC requirements, cross-component impact). However, given three related sibling tools, the description should clarify how this validation tool fits into the overall workflow — it doesn't explain return value/outcome shape, which matters for a tool whose output likely guides next steps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the structured fields already document all three parameters. The description adds context about the codeChanges format ('Q&A Analysis:...' with category brackets) which complements the schema. However, it does not explain fileType's role in validation or how it maps to the filePath parameter beyond what the schema states.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb+resource ('Validate ABAC code changes') and explains the mechanism (Q&A analysis with 8 predefined questions), distinguishing it from siblings like generate_validation_questions and analyze_cross_component_impact. It's clear what the tool does, though 'performs cross-component impact analysis' slightly overlaps with the sibling analyze_cross_component_impact, creating mild ambiguity about boundaries.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains the input mechanism (Q&A format where Copilot has already analyzed the git diff against 8 ABAC questions) which implies a prerequisite state, but does not explicitly state when not to use this tool or name alternatives. Sibling tools like analyze_cross_component_impact and generate_validation_questions suggest related workflows, but no explicit guidance on choosing between them is given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools