Skip to main content
Glama

Diogenes Microservice Gateway (diogenes-micro-gateway)

Indexed on TensorBlock MCP Index Glama MCP Server

Diogenes Microservice Gateway (https://diogenesgateway.com) is an account-less, multi-protocol AI & Web3 edge gateway delivering:

  1. Account-Less Access to the Complete Google Gemini Suite (45 Models) & AI Agents: Instant pay-per-request access to Antigravity Agent, Deep Research Pro, Nano Banana Pro (Gemini 3 Pro Image), Nano Banana, Gemini 4 Argon, and Gemini 3.1 Pro with zero API keys, zero accounts, and zero monthly subscriptions.

  2. 121 Live Edge Microservices at Ultra-Low Micro-Prices (Starting at 10 Sats / 1 GRLC / $0.01 SOL & Base Floor): Pre-execution SQL/code/MCP security guardrails, smart contract vulnerability audits, Solana/EVM token risk oracles, HTTP 402 invoice fraud verification, and cross-chain bridge routing settled flexibly across 6 Flexible Payment Rails — Bitcoin Lightning (L402), Solana Native (x402), Base EVM ETH (MPP), Garlicoin Native L1 (<1ms 0-Conf), BSC WGRLC (BEP-20 MPP), and Garlicoin Prepaid Session Credit (grlc_sec_... Bearer token via /api/v1/grlc/prepay) — plus Streamable HTTP MCP (/mcp).

  3. 14 Dedicated EVE: Frontier Sui Move Microservices: Sui Move Smart Assembly coder & auditor, Smart Gate route & toll planner, Lagrange Network Node gigajoule (GJ) optimizer, SSU Automated Market Maker, Killmail threat intelligence, Smart Turret target matrix, Vault zkLogin character verifier, Constellation territory & fuel radar, and Sui Programmable Transaction Block (PTB) simulator.


6 Flexible Payment Rails & Sub-Cent Micro-Pricing

All 121 microservices and Gemini models operate with zero accounts, zero API keys, and zero subscriptions. Pay only for what you compute via 6 flexible settlement rails:

  1. Bitcoin Lightning (L402 / LSAT): Sub-second satoshi settlement using standard HTTP 402 challenge-response (Authorization: L402 <macaroon>:<preimage>). Starting at 10 sats per call.

  2. Solana Native SOL / SPL (x402): Micro-lamport transactions settled via Solana with ed25519 signature proof (X-Payment-Signature: <tx_signature>).

  3. Base EVM ETH / USDC (MPP): Machine Payments Protocol on Coinbase's Base L2 with sub-cent gas overhead (Authorization: MPP <voucher> or X-Payment-TxHash: 0x...).

  4. Garlicoin Native L1 (<1ms 0-Conf Verification): Ultra-fast peer-to-peer cryptocurrency micro-payments settled directly on Garlicoin's native proof-of-work blockchain via asynchronous confirmation (X-GRLC-Txid: <txid>).

  5. BSC Wrapped Garlicoin (WGRLC BEP-20 MPP): Binance Smart Chain BEP-20 token micro-settlements (X-WGRLC-TxHash: 0x...).

  6. Garlicoin Prepaid Session API Keys (grlc_sec_...): High-throughput session credentials with <0.1ms edge latency. Prepay GRLC once via POST /api/v1/grlc/prepay, receive a cryptographic session bearer token (Authorization: Bearer grlc_sec_...), and call any microservice at maximum speed with rate-limit exemption and automatic balance deduction.


Related MCP server: agentpay

1-Click Modular MCP Packages

Instead of loading all 121 gateway endpoints into your LLM's context window at once, connect Cursor, Claude Desktop, Zed, or Windsurf to a purpose-built domain package (12–15 verb_noun tools each, 100% schema description coverage, outputSchema, and zero tool shadowing):

Domain Package

Scoped 1-Click MCP Endpoint

Dedicated Spoke Repository

Tools

1. EVE: Frontier Sui Move Suite

https://diogenesgateway.com/mcp/eve-frontier

stand-out-of-my-sun/diogenes-eve-frontier-mcp

14 Tools — Assembly state inspector, Tribe standings auditor, Move coder, Gate ACL compiler, PTB simulator, zkLogin, route planner, Lagrange GJ & siege sims, fuel radar, SSU pricer & arbitrage, killmail & turret matrix

2. Agent Guardrails & Sandbox

https://diogenesgateway.com/mcp/agent-guardrails

stand-out-of-my-sun/diogenes-agent-guardrails-mcp

12 Tools — Command gate, SQL AST validator, Python sandbox, MCP manifest & rug-pull auditors, sampling firewall, output scrubber, PII redactor, loop breaker, A2A card verifier, egress SSRF guard, factuality auditor

3. Web3, DeFi & 402 Security

https://diogenesgateway.com/mcp/web3-security

stand-out-of-my-sun/diogenes-web3-security-mcp

15 Tools — EVM/Move contract auditor, Solana Anchor CPI scanner, SPL risk & liquidity, whale tracker, Jito fee estimator, EIP-712 & EVM calldata decoders, MEV evaluator, address poisoning, 402 verifier, UTXO planner, bridge comparator

4. Gemini Suite & AI Agents

https://diogenesgateway.com/mcp/gemini-suite

stand-out-of-my-sun/diogenes-gemini-suite-mcp

15 Tools — All 45 Google Gemini models (Gemini 4 Argon, 3.1 Pro, 3.8 Flash), Antigravity Agent, Deep Research Pro, Computer Use, Grounded Search & Maps, Nano Banana Pro, Veo 3, Lyria 3, TTS & Live Audio

5. Context, Code & Solvers

https://diogenesgateway.com/mcp/context-code-solver

stand-out-of-my-sun/diogenes-context-code-solver-mcp

15 Tools — AST context pruner, BPE token budget planner, BM25+RRF+MMR reranker, fuzzy diff patcher, AST symbol & complexity analyzer, Tarjan cycle detector, stacktrace isolator, polyglot type compiler, OpenAPI breaking-change detector, boundary test generator, math/IRR, CPM scheduler, A/B judge, Monte Carlo VaR, memory differ

6. Dev, Data & Workflow Utilities

https://diogenesgateway.com/mcp/dev-utilities

stand-out-of-my-sun/diogenes-dev-utilities-mcp

14 Tools — Malformed JSON healer, JSON Schema type enforcer, entity extractor, dataset cleaner, O(n) ReDoS regex synthesizer, XML prompt compiler, Python synthesizer, RFC summarizer, web brief, compaction verifier, MCP router, escrow arbiter, MPP session & x402 embeddings

7. Web Extraction, Readability & Markdown Engine

https://diogenesgateway.com/mcp/web-scraping-engine

stand-out-of-my-sun/diogenes-web-scraping-engine-mcp

12 Tools — Clean LLM markdown compiler, readable article extractor, OpenGraph & JSON-LD parser, HTML table to JSON/Markdown, CSS selector isolator, paywall bypass auditor, XML sitemap crawler, hyperlink extractor, XSS sanitizer, contact/lead parser, SEO diagnostics, RSS/Atom compiler

8. Neural Search, Grounded Research & Deep Intelligence

https://diogenesgateway.com/mcp/neural-search-engine

stand-out-of-my-sun/diogenes-neural-search-engine-mcp

12 Tools — Neural search synthesizer, deep research dossier compiler, query expander, curated domain registry filter, breaking news velocity tracker, factual consensus claim verifier, scholarly citation compiler, topic subgraph clusterer, sentiment oracle, expert source ranker, timeline synthesizer, competitive landscape matrix

9. Database Intelligence, SQL Engine & Schema Guard

https://diogenesgateway.com/mcp/database-intelligence

stand-out-of-my-sun/diogenes-database-intelligence-mcp

12 Tools — NL to SQL synthesizer, AST SQL injection & tautology auditor, EXPLAIN query optimizer, breaking migration differ, polyglot SQL transpiler, composite B-tree index advisor, 3NF/BCNF normalizer, SQL telemetry PII scrubber, mock seed fixture generator, pool headroom calculator, isolation hazard auditor, ORM model compiler

10. Full Master Gateway

https://diogenesgateway.com/mcp

stand-out-of-my-sun/diogenes-micro-gateway

All 121 Tools (130 Total Capabilities)


Model Context Protocol (MCP) & Public Directory Profiles

Diogenes Gateway exposes 121 production tools natively via Streamable HTTP (https://diogenesgateway.com/mcp) for Cursor, Claude Desktop, Windsurf, VS Code, and AI agents:

TensorBlock & MCP Index Profile Metadata

Field

Value

Category

Security

Transport

streamable-http

Endpoint

https://diogenesgateway.com/mcp

Health Check

https://diogenesgateway.com/api/v1/health

Auth

none (No auth required for free tier, MCP discovery, or ?demo=true previews; optional L402, x402, or MPP request headers for paid production calls)

Install Confidence

high (Zero-install remote Streamable HTTP endpoint + root package.json, smithery.yaml, server.json, glama.json, and mcp.json)

License

MIT

Verification

verified (@stand-out-of-my-sun verified via https://diogenesgateway.com/.well-known/tensorblock.json & https://diogenesgateway.com/.well-known/glama.json)

Maintainer

@stand-out-of-my-sun

Docs

https://diogenesgateway.com/llms.txt

Support

https://github.com/stand-out-of-my-sun/diogenes-micro-gateway/issues

1-Click Cursor / Claude Desktop Configuration (mcp.json)

{
  "mcpServers": {
    "diogenes-gateway": {
      "transport": "streamable-http",
      "url": "https://diogenesgateway.com/mcp"
    }
  }
}

Available Tools

121 tools
analyze_ast_symbol_graphPolyglot AST Symbol Extractor, Call Graph & Complexity AnalyzerA
Read-onlyIdempotent
Inspect

Static lexer and AST parser only (zero execution or evaluation): extracts imports, exports, classes, interfaces, and functions with line numbers, intra-file call edges, McCabe cyclomatic complexity, and Halstead volume across TypeScript, Python, Rust, Go, and Move. Use when mapping internal functions, call graphs, and complexity hotspots of a source file before refactoring; for analyzing cross-file import DAGs and circular dependencies, use audit_module_dependency_cycles instead. Read-only call (32 KB, 60 RPM): accepts 'source_text' (with enum defaults), uses '?demo=true' or L402 (20 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
codeYesSource code file content to parse for symbols and complexity metrics.
languageNoProgramming language grammar used for symbol extraction; defaults to 'typescript' when omitted.
source_textNoAlias for code: source code file content to parse.

Output Schema

NameRequiredDescription
functionsYesExtracted functions with line number, cyclomatic_complexity, and outgoing calls.
lines_of_codeYesTotal line count of the analyzed source code.
halstead_metricsYesHalstead vocabulary_size, program_length, volume, and estimated_bugs.
high_complexity_hotspotsYesFunctions with McCabe cyclomatic complexity >= 8 flagged for refactoring.

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only/idempotent/closed-world, and the description adds behavior beyond them: zero execution or evaluation guarantee, a 32 KB payload limit, 60 RPM rate limit, auth options (?demo=true or L402 20 sats), and HTTP 400 on invalid input. These are operationally actionable traits not present in the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core purpose and extraction capabilities, then usage routing, then operational constraints. It is dense but each clause carries information; the pricing/auth details are compressed rather than verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and annotations covering the safety profile, the description needn't explain return values and doesn't. It covers languages, limits, auth, and error behavior; the only residual gap is the minor 'code' vs 'source_text' alias ambiguity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so all three parameters and the enum defaults are already documented, making the baseline 3. The description adds the 32 KB size constraint but its mention of 'source_text' as the accepted input is slightly ambiguous since 'code' is the required parameter and the alias relationship is only clarified in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Static lexer and AST parser') and enumerates exactly what it extracts (imports, exports, classes, interfaces, functions, call edges, McCabe complexity, Halstead volume) plus the supported languages. It explicitly distinguishes itself from the sibling audit_module_dependency_cycles by scoping to intra-file analysis.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use ('mapping internal functions, call graphs, and complexity hotspots of a source file before refactoring') and an explicit alternative with its condition ('for analyzing cross-file import DAGs and circular dependencies, use audit_module_dependency_cycles instead'). Little is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

analyze_eve_killmail_threatsEVE Frontier On-Chain Killmail Threat & Gatecamp Ambush AnalyzerA
Read-onlyIdempotent
Inspect

Analyzes on-chain EVE Frontier killmail.move events in a solar system to quantify gatecamp ambush probability and identify dominant hostile hull doctrines. Use when assessing solar system PvP danger before jumping a hauler or fleet into a system; for computing real-time weapon target-lock priorities during active grid combat, use prioritize_eve_turret_targets instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'system_id' ('time_window' defaults to '1h'), supports '?demo=true' or L402 (30 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
system_idYesSolar system identifier to analyze for recent killmail activity (e.g. 'System-Frontier-01').
time_windowNoHistorical lookback window for killmail aggregation; defaults to '24h' when omitted.

Output Schema

NameRequiredDescription
system_idYesAnalyzed solar system identifier.
threat_levelYesTactical hazard classification ('MINIMAL', 'MODERATE', or 'CRITICAL_HAZARD').
killmails_24hYesTotal verified ship destructions recorded in the window.
ambush_probabilityYesEstimated probability (0.0 to 1.0) of an active stargate camp.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the read-only annotations, it discloses stateless edge-call behavior, a 32 KB maximum, a 60 RPM rate limit, demo/L402 access with a 30 sats cost, and HTTP 400 on invalid input. These are operationally meaningful constraints not present in the structured annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the purpose and usage guidance, then adds access and constraint details. It is dense but efficient overall, though the incorrect time_window default reduces the value of one packed detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description does not need to explain return values, and it covers usage, access, rate limits, and error behavior well. However, the contradictory time_window default means the definition is not fully internally consistent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents both parameters. The description adds a default for time_window, but it says the default is '1h' while the schema says '24h', creating a harmful contradiction rather than useful clarification.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

It states a specific verb and resource: analyzing on-chain EVE Frontier killmail.move events to quantify gatecamp ambush probability and identify hostile hull doctrines. This is clearly distinguishable from sibling tools such as prioritize_eve_turret_targets.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says when to use it: assessing solar-system PvP danger before jumping a hauler or fleet. It also names an alternative tool and the condition selecting that alternative: real-time weapon target-lock priorities during active grid combat.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

analyze_media_sentimentMulti-Source Media Sentiment & Bull/Bear Polarity OracleA
Read-onlyIdempotent
Inspect

Evaluates brand, market, or topic sentiment across news headlines, discussions, and articles with bull/bear polarity scores. Use when assessing market sentiment, social brand perception, or controversy exposure on specific entities; for compiling competitive market comparisons, use compile_competitive_landscape instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'text_or_headlines' ('sentiment_domain' defaults to 'general_news'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
entity_filterNoOptional specific brand, company, or coin name to isolate sentiment around.
sentiment_domainNoLexicon domain weighting: general news, financial markets, or developer ecosystem.
text_or_headlinesYesCollection of headlines, commentary strings, or editorial paragraphs to evaluate.

Output Schema

NameRequiredDescription
sentiment_tierYesCategorical sentiment classification (VERY_BULLISH, MODERATELY_POSITIVE, NEUTRAL, NEGATIVE, PANIC).
aggregate_scoreYesContinuous sentiment polarity score between -1.0 (bearish/negative) and +1.0 (bullish/positive).
bull_bear_ratioYesRatio of positive signal markers to negative signal markers.
emotional_signalsYesSub-metrics for optimism, fear/uncertainty, and enthusiasm.

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly/idempotent/non-destructive, but the description goes further with concrete operational facts: stateless edge call, 32 KB payload cap, 60 RPM limit, demo mode, L402 payment of 15 sats, and HTTP 400 on invalid input. This is real behavioral value beyond the annotations, though it doesn't describe response content or partial-failure behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The purpose and alternative routing are front-loaded, and the operational details are compressed into one sentence with no filler. It is dense and slightly technical, but each clause (limits, payment, error code) carries usable information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value detail is unnecessary; the description covers inputs, defaults, size/rate limits, payment requirements, and error signaling. For a stateless read-only call this is sufficient for an agent to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds extra meaning: it names text_or_headlines as the accepted input and supplies the default for sentiment_domain ('general_news'), which is not stated in the schema. It does not clarify entity_filter behavior, so it stops short of a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (evaluates) applied to a concrete resource (sentiment across news headlines, discussions, articles) with an explicit output shape (bull/bear polarity scores). It also names the sibling it is not, so an agent can distinguish it from compile_competitive_landscape without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly gives use cases (market sentiment, social brand perception, controversy exposure on specific entities) and names the alternative tool plus the condition that selects it (competitive market comparisons). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

analyze_news_recencyReal-Time News Recency, Trending Story Clusters & Velocity TrackerA
Read-onlyIdempotent
Inspect

Tracks breaking news feeds, clusters trending story cycles, and calculates story publication velocity over recent timeframes. Use when analyzing breaking market catalysts, emerging controversies, or ongoing product announcements; for evaluating sentiment polarity across media, use analyze_media_sentiment instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'topic' ('recency_window' defaults to 'past_24_hours'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
topicYesSubject, ticker symbol, brand, or public event to scan for breaking news developments.
recency_windowNoNews timestamp search window: past hour, past 24 hours, past 7 days, or past 30 days.
sentiment_clusterNoWhether to calculate sentiment direction across news story clusters.

Output Schema

NameRequiredDescription
topicYesMonitored news topic or subject entity.
top_headlinesYesList of most prominent headline items with timestamps and publishers.
story_clustersYesDeduplicated clusters of related news coverage with source attribution.
temporal_velocityYesRate of new article publication (e.g., accelerating, steady, tapering).

TDQS

A4.1/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description contradicts the openWorldHint=false annotation: it describes tracking breaking news feeds and external market catalysts, which inherently involve open-world external entities. Despite otherwise rich behavioral details (rate limit, payment, error codes), the direct contradiction with structured annotations forces a score of 1 per the rubric.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with purpose, then usage guidance, then technical constraints. Every sentence adds value: the first defines the tool, the second routes the agent, and the third provides operational details (size limit, rate limit, payment, error behavior) without waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema, complete parameter documentation, and annotations, the description fills all remaining gaps: it covers purpose, usage, alternatives, rate limits, authentication, size constraints, and error behavior. An agent can invoke the tool confidently based on this definition.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds useful semantics: it states the default for recency_window ('past_24_hours') and mentions '?demo=true' and L402 payment options not present in the schema. It does not elaborate on sentiment_cluster beyond the schema, keeping it from a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: tracks breaking news feeds, clusters trending story cycles, and calculates publication velocity. It explicitly names the sibling analyze_media_sentiment and distinguishes its own purpose from sentiment polarity evaluation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit when-to-use conditions (breaking market catalysts, emerging controversies, product announcements) and names the alternative tool for sentiment analysis. This is exactly the routing guidance an agent needs.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

analyze_omni_multimodal_inputGemini Omni Unified Text, Audio & Video Multimodal AnalyzerA
Read-onlyIdempotent
Inspect

Analyzes combined multimodal prompts spanning text, image descriptors, audio transcripts, and video temporal events using Gemini Omni Flash. Use when correlating information across multiple media modalities in a single reasoning pass; for running pure text-only reasoning or coding prompts, use generate_gemini_completion instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'input' ('modality_focus' defaults to 'cross_modal_synthesis'), supports '?demo=true' or L402 (100 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
inputYesMultimodal prompt or media scene description to analyze.
modality_focusNoPrimary analytical lens applied to the multimodal input; defaults to 'cross_modal_synthesis' when omitted.

Output Schema

NameRequiredDescription
modelYesExecuted multimodal model ('gemini-omni-flash').
outputYesUnified multimodal analysis and extracted timeline.
successYesTrue when multimodal processing succeeded.
modalities_processedYesModalities integrated during inference.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (readOnly, non-destructive, idempotent), the description discloses statelessness, a 32 KB payload ceiling, a 60 RPM rate limit, the '?demo=true' and L402 (100 sats) access paths, and the HTTP 400 failure mode. Those are exactly the operational facts an agent needs and none are in the structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose and the sibling routing rule, then the operational constraints. It is dense and slightly runs-on in the final parenthetical clause, but every sentence carries information that is not duplicated elsewhere.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with an output schema, the return values need no explanation. Combined with the auth/payment path, rate and size limits, and error behavior, nothing material is missing for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the enum is documented in-schema, so the baseline is 3. The description only restates the 'modality_focus' default and the nature of 'input' without adding format or syntax guidance beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (analyzes) plus the exact resource (combined multimodal prompts spanning text, image descriptors, audio transcripts, and video temporal events) and names the underlying model. It also distinguishes itself from the sibling generate_gemini_completion, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use ('correlating information across multiple media modalities in a single reasoning pass') and an explicit when-not with the named alternative ('for running pure text-only reasoning or coding prompts, use generate_gemini_completion instead'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

analyze_query_planSQL Query Plan EXPLAIN Optimizer & Bottleneck DiagnosticsA
Read-onlyIdempotent
Inspect

Analyzes SQL EXPLAIN execution plans to detect sequential table scans, high-cost cartesian joins, and buffer memory bottlenecks. Use when diagnosing slow queries, optimizing database performance, or evaluating query cost; for getting index recommendations, use recommend_database_indexes instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'explain_plan_or_query' ('optimization_target' defaults to 'eliminate_seq_scans'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
database_engineNoDatabase engine name (e.g., 'postgres', 'mysql', 'sqlite').
optimization_targetNoOptimization goal: eliminate sequential scans, reduce memory buffers, or minimize join costs.
explain_plan_or_queryYesRaw text or JSON output of EXPLAIN / EXPLAIN ANALYZE or the candidate SQL query.

Output Schema

NameRequiredDescription
bottlenecks_detectedYesIdentified query execution bottlenecks (e.g., Seq Scan on large table, Nested Loop join).
recommended_rewritesYesSpecific SQL query rewrites and predicate adjustments to improve performance.
estimated_cost_reduction_pctYesEstimated potential query cost reduction percentage with recommended optimizations.

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), but the description adds real operational context: stateless edge call, 32 KB payload cap, 60 RPM rate limit, L402 payment of 15 sats, demo mode, and HTTP 400 on invalid input. The only gap is that payment/demo mechanics are described as query-string behavior not reflected anywhere in the input schema, which could confuse an agent about how to supply them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose before the alternative and the operational constraints. The second sentence is a dense run-on cramming size limit, rate limit, parameter default, payment scheme, and error code together, which costs some scannability but no sentence is wasteful.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need not be explained. The description covers purpose, routing to the sibling, parameter default, resource limits, auth/payment, and error behavior — everything an agent needs to call it correctly. Only the demo/payment mechanism lacks a corresponding schema field.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3; however the description adds a fact the schema omits — that 'optimization_target' defaults to 'eliminate_seq_scans' — which is genuinely useful for deciding whether to pass the argument. It adds no meaning for 'explain_plan_or_query' or 'database_engine' beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb + resource: 'Analyzes SQL EXPLAIN execution plans to detect sequential table scans, high-cost cartesian joins, and buffer memory bottlenecks.' This names the exact artifacts it detects, so an agent can distinguish it from siblings like audit_sql_injection_ast or validate_sql_query_ast without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit triggering conditions ('diagnosing slow queries, optimizing database performance, or evaluating query cost') and names the alternative with the condition that selects it ('for getting index recommendations, use recommend_database_indexes instead'). Nothing about routing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

apply_fuzzy_code_patchSelf-Healing Fuzzy Unified Diff & Search/Replace Code PatcherA
Read-onlyIdempotent
Inspect

Applies unified diffs (@@ ... @@) or SEARCH/REPLACE blocks to source code using sliding-window token similarity to resolve drifted line numbers, align indentation, and verify bracket balance. Use when healing and applying a code edit or diff that failed exact line matching due to line-number drift or whitespace differences; for inspecting function signatures, call trees, and cyclomatic complexity without modifying code, use analyze_ast_symbol_graph instead. Read-only call (32 KB, 60 RPM): accepts 'original_code' (with enum defaults), uses '?demo=true' or L402 (20 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
patchYesUnified diff hunk or <<<<<<< SEARCH ... ======= ... >>>>>>> REPLACE block to apply.
fuzz_strategyNoLine-matching tolerance and indentation behavior; defaults to 'whitespace_normalized_auto_indent' when omitted.
original_codeYesComplete original source file content before patching.

Output Schema

NameRequiredDescription
hunks_totalYesTotal patch hunks parsed from the input patch.
patched_codeYesResulting source code after applying all matched hunks.
hunks_appliedYesNumber of hunks successfully anchored and applied.
syntax_balance_verifiedYesTrue when post-patch {}, (), and [] delimiters remain balanced.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish read-only, non-destructive, idempotent behavior, and the description adds operational context beyond that: 32 KB size, 60 RPM, demo/L402 payment handling, and HTTP 400 on invalid input. It also discloses the matching mechanism and bracket-balance verification, which helps the agent anticipate behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loads the purpose before usage guidance and operational constraints. The final sentence is dense and packs several details into semicolons, and the phrase 'with enum defaults' is slightly compressed, but there is little waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given rich annotations, a fully described schema, and an output schema, the description supplies the remaining context an agent needs: what the tool does, when to select it, the alternative, operational limits, and error behavior. Nothing important for correct invocation appears to be missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all three parameters are already documented in the schema. The description mentions 'original_code' and enum defaults, but this adds little beyond the schema and is slightly vague about which parameter actually has the enum default.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: applying unified diffs or SEARCH/REPLACE blocks to source code. It also explains the core mechanism and explicitly contrasts itself with analyze_ast_symbol_graph for non-modifying code inspection, so the tool is distinguishable from siblings without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives a clear trigger for when to use the tool: healing and applying code edits or diffs that failed exact line matching because of line-number drift or whitespace differences. It also names the alternative tool for signature, call-tree, and complexity inspection, making the decision boundary explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

arbitrate_agent_deliverable_escrowMulti-Agent Task Deliverable & Contract Fulfillment Escrow ArbiterA
Read-onlyIdempotent
Inspect

Evaluates a worker agent's submitted task deliverable against agreed contract acceptance criteria to issue a deterministic escrow settlement verdict ('RELEASE_FUNDS_TO_WORKER_AGENT', 'REQUEST_REVISION', or 'REFUND_CLIENT'). Use when settling multi-agent bounties or verifying subcontractor deliverables before releasing MPP/L402 escrow funds; for checking syntactic JSON Schema property types without evaluating semantic contract terms, use enforce_json_schema_types instead. Read-only call (32 KB, 60 RPM): accepts 'deliverable' (with enum defaults), uses '?demo=true' or MPP (30 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
termsNoContract acceptance criteria that the deliverable must satisfy; defaults to 'Complete verified JSON deliverable' when omitted.
deliverableYesJSON string or text deliverable submitted by the worker agent.
arbitration_standardNoStrictness of contract verification; defaults to 'strict_all_criteria' when omitted.

Output Schema

NameRequiredDescription
escrow_actionYesSettlement command ('RELEASE_FUNDS_TO_WORKER_AGENT', 'REQUEST_REVISION', or 'REFUND_CLIENT').
quality_scoreYesDeliverable quality score from 0 to 100.
arbitration_notesYesDetailed justification citing satisfied or missing contract clauses.
contract_satisfiedYesTrue when the deliverable fulfills all stated contract terms.

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only, idempotent, non-destructive, closed-world behavior, so the safety profile is largely covered and the description's "Read-only call" restates it. It does add real value beyond annotations: a 32 KB payload ceiling, 60 RPM rate limit, auth options (?demo=true or MPP at 30 sats), and a 400 response on invalid input. Those operational limits are useful, but the return shape and how partial criteria satisfaction is reported are left unstated. With annotations carrying the behavioral baseline, this is solid added context rather than a full disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the verdict-producing action and the three outcomes, then routing guidance, then operational constraints, so the most decision-relevant content comes first. It is one dense block with every clause carrying information (limits, pricing, error code), though the run-on cramming of transport/auth/limits reduces scannability slightly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only arbitration tool with a full schema, an enum-bearing standard, and an output schema, the description covers purpose, routing, budget limits, rate limit, auth method, and error behavior. Since an output schema exists, it need not explain the returned verdict structure, so no decision-relevant gap remains.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so all three parameters and the arbitration_standard enum are already documented in the schema, which sets the baseline at 3. The description's parenthetical "accepts 'deliverable' (with enum defaults)" is slightly muddled since deliverable is a plain string and the enum belongs to arbitration_standard, adding no real semantics. The terms default and standard default are already in the schema, so the description neither compensates nor detracts materially.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (evaluates), resource (worker agent's submitted deliverable), comparison basis (contract acceptance criteria), and the exact outcome (deterministic escrow verdict) with all three verdict values spelled out. It also explicitly contrasts with the nearest sibling, enforce_json_schema_types, so the agent can distinguish the two without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives both sides of the routing decision: use when settling multi-agent bounties or verifying subcontractor deliverables before releasing MPP/L402 escrow funds, and use enforce_json_schema_types instead when only syntactic JSON Schema property types matter. It even notes the exclusion is about not evaluating semantic contract terms, which is the exact boundary an agent needs.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

audit_eve_tribe_standingsEVE Frontier Tribe Diplomatic Standings & Access Matrix AuditorA
Read-onlyIdempotent
Inspect

Audits EVE Frontier Tribe diplomatic standings, friendly/hostile reputation scores, and pilot override entries across solar systems. Use when checking diplomatic relations or detecting conflicting friendly-fire rules across tribe registries; for compiling those standings into executable Sui Move Smart Gate ACL bytecode, use compile_eve_gate_acl instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'tribe_id' ('standing_filter' defaults to 'all'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
tribe_idYesPrimary Tribe identifier or registry object ID to audit (e.g. 'tribe-corinth-01').
standing_filterNoFilter returned diplomatic relationships by tier; defaults to 'all' when omitted.

Output Schema

NameRequiredDescription
tribe_idYesAudited Tribe registry identifier.
allied_tribes_countYesCount of tribes holding positive diplomatic standing.
hostile_tribes_countYesCount of tribes flagged as hostile targets.
acl_conflicts_detectedYesTrue if a pilot override contradicts their parent tribe standing.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish read-only, idempotent, non-destructive behavior, and the description adds operational details beyond that: stateless edge call, 32 KB limit, 60 RPM, demo/L402 access, and HTTP 400 on invalid input. These are exactly the behavioral constraints an agent needs before invoking the tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with purpose, then usage, then operational constraints. Each sentence contributes necessary information, and there is no redundant restatement of the tool name or title.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With only two fully documented parameters, an output schema, and annotations covering safety profile, the description is complete enough for correct invocation. It covers use cases, alternatives, rate/size limits, payment/demo access, and error behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents tribe_id and the standing_filter enum. The description only repeats the default value for standing_filter and adds no further parameter semantics beyond the structured schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: auditing EVE Frontier Tribe diplomatic standings, reputation scores, and pilot override entries. It clearly distinguishes this read/audit tool from the sibling that compiles standings into Sui Move ACL bytecode.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly states when to use the tool: checking diplomatic relations or detecting conflicting friendly-fire rules. It also names the alternative compile_eve_gate_acl for the adjacent compilation task, which gives the agent a clear routing decision.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

audit_mcp_server_manifestExternal MCP Server Manifest & Tool-Poisoning Security AuditorA
Read-onlyIdempotent
Inspect

Scans an external MCP server's initial tools/list manifest to detect tool-name shadowing (read_file, bash) and hidden prompt-injection directives in descriptions. Use when vetting a newly discovered third-party MCP server before mounting it into an agent session; for comparing a previously pinned MCP baseline against a live mid-session tools/list response, use detect_mcp_schema_rugpull instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'manifest_json' ('audit_profile' defaults to 'strict'), supports '?demo=true' or L402 (25 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
audit_profileNoSensitivity level for flagging system-tool name shadowing; defaults to 'strict' when omitted.
manifest_jsonYesJSON string or object containing the external MCP server's tools array to audit.

Output Schema

NameRequiredDescription
manifest_safeYesTrue if zero shadowed tools or description injections are found.
security_gradeYesOverall manifest safety grade ('A+', 'C', or 'F').
shadowed_toolsYesTool names attempting to shadow host privileges (e.g. 'bash', 'read_file').
suspicious_toolsYesTools containing covert prompt-injection or exfiltration instructions.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond readOnly/idempotent/non-destructive annotations it discloses statelessness, a 32 KB payload cap, 60 RPM rate limit, payment options (demo=true or L402 at 25 sats), and the HTTP 400 failure mode for invalid input. These are operational traits the annotations cannot express and materially affect how an agent calls it.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads purpose, then routing, then operational constraints — a sensible order with no filler sentences. The final clause is dense (size, rate, auth, error all in one line), which slightly hurts scannability but every element earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 2-param read-only audit tool with an output schema, the description covers purpose, alternative routing, payload limits, auth/payment, and error behavior — everything needed to invoke it correctly. Nothing material is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the audit_profile enum is fully documented, so the schema carries most weight. The description still adds value by noting manifest_json accepts a JSON string or object form and that audit_profile 'defaults to strict', reinforcing default behavior beyond the enum list.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Scans) and resource (external MCP server's initial tools/list manifest), and names the exact threat classes detected (tool-name shadowing, hidden prompt-injection directives). It explicitly distinguishes itself from the closest sibling detect_mcp_schema_rugpull, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use condition (vetting a newly discovered third-party MCP server before mounting) and an explicit when-to-use-the-other condition (comparing a pinned baseline against a live mid-session tools/list → detect_mcp_schema_rugpull). Alternatives and exclusions are both named.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

audit_module_dependency_cyclesTarjan SCC Circular Import Detector & Topological Blast-Radius SolverA
Read-onlyIdempotent
Inspect

Runs Tarjan's Strongly Connected Components (SCC) algorithm on a module import map to detect circular dependencies, compute parallel topological build waves, and trace downstream change blast radius. Use when auditing multi-file import graphs for circular cycles or determining which downstream files must be re-tested after an edit; for extracting function-level symbols and cyclomatic complexity inside a single source file, use analyze_ast_symbol_graph instead. Read-only call (32 KB, 60 RPM): accepts 'modules_json' (with enum defaults), uses '?demo=true' or L402 (20 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
modules_jsonYesJSON string or object mapping each module name to its array of imported module names (e.g. '{"a":["b"],"b":[]}').
analysis_scopeNoGraph analysis output mode; defaults to 'cycles_waves_and_blast_radius' when omitted.

Output Schema

NameRequiredDescription
total_modulesYesTotal number of graph vertices analyzed.
circular_scc_groupsYesStrongly connected component cycles discovered via Tarjan's algorithm.
topological_build_wavesYesDependency-ordered parallel build/test execution waves.
transitive_blast_radiusYesAll upstream callers transitively impacted by the modified modules.
circular_dependencies_detectedYesTrue if one or more circular dependency cycles exist.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

While annotations cover read-only status, the description provides critical operational context beyond structured data, including rate limits (60 RPM), payload size (32 KB), error handling (HTTP 400), and the underlying algorithmic approach.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The tool definition is extremely dense, but every piece of information serves a purpose: describing the function, the use case, the alternative, and the operational constraints.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description provides a complete picture of the tool's scope, mechanism, and limits, making it highly reliable for an agent to invoke it correctly without needing external documentation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 100% schema coverage, the baseline is high. The description adds semantic value by specifying that the input is a mapping of module names to import arrays (an 'import map'), providing structure context that complements the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description provides a highly specific technical explanation, naming the algorithms (Tarjan's SCC) and the resource it operates on (module import maps) to detect specific, complex issues like circular dependencies and blast radius.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It clearly delineates the correct use case (auditing multi-file import graphs) and explicitly directs the agent away from the correct alternative sibling tool ('analyze_ast_symbol_graph') for single-file analysis.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

audit_outbound_egress_urlOutbound Agent URL SSRF, Metadata & Secret Exfiltration FirewallA
Read-onlyIdempotent
Inspect

Static validation firewall for outbound network destination URIs against cloud metadata IP addresses (169.254.169.254), RFC 1918 private IP blocks, and query-string secret exfiltration before agent dispatch. Use when validating a user-supplied or tool-supplied URI destination before network dispatch; for auditing local shell commands or general prompts, use verify_agent_command_safety instead. Read-only edge call (32 KB, 60 RPM): accepts 'destination_uri' ('egress_policy' defaults to 'block_private_and_metadata'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
egress_policyNoNetwork egress policy; defaults to 'block_private_and_metadata' when omitted.
destination_uriYesOutbound HTTP/HTTPS destination URI to inspect before fetching (e.g. 'https://api.example.com/v1/webhook').

Output Schema

NameRequiredDescription
verdictYesFirewall decision ('ALLOW_EGRESS_REQUEST' or 'BLOCK_SSRF_OR_EXFIL').
egress_allowedYesTrue if the URL targets a safe public endpoint with no exfiltration tokens.
ssrf_risk_detectedYesTrue if loopback, RFC1918 private IP, or cloud metadata IP is targeted.
exfiltration_query_paramsYesQuery parameters suspected of carrying leaked secrets or base64 payloads.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only/idempotent/non-destructive, and the description adds operationally important traits those annotations cannot express: a 32 KB input ceiling, 60 RPM rate limit, HTTP 400 on invalid input, and a payment/demo access mode (L402, 15 sats). This is exactly the added context the dimension rewards.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core purpose in the first clause, then usage, then operational constraints — a sensible information order. It is dense and slightly crammed with parentheticals, but nearly every clause carries actionable detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need no explanation, and the description still covers invocation preconditions, limits, error signaling, and payment handling. Nothing an agent needs to call this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and it documents both parameters and the enum, so the baseline is 3. The description adds value by restating the egress_policy default and, more usefully, disclosing a '?demo=true' / L402 access mechanism that appears nowhere in the input schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('static validation firewall') and a precise resource ('outbound network destination URIs') plus the exact threat classes blocked (169.254.169.254, RFC 1918, query-string secrets). It explicitly names the sibling it is not (verify_agent_command_safety), so an agent can distinguish it without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit trigger ('Use when validating a user-supplied or tool-supplied URI destination before network dispatch') and an explicit exclusion routing to verify_agent_command_safety for local shell commands or general prompts. Both when-to-use and the alternative are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

audit_response_factualityDraft Agent Response Groundedness & Hallucination AuditorA
Read-onlyIdempotent
Inspect

Cross-references factual claims, numbers, and citations in a draft agent response against retrieved source passages to flag unsupported hallucinations before delivery. Use when verifying that a generated answer is 100% grounded in source evidence before returning it to the user; for scrubbing inbound tool outputs for prompt-injection and invisible Unicode, use sanitize_tool_output_stream instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'claim' ('context' defaults to 'standard'), supports '?demo=true' or L402 (25 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
claimYesDraft agent response or factual statement to verify for hallucinations.
contextYesAuthoritative source text or retrieved RAG passages that the claim must be grounded in.
strictnessNoEntailment threshold required for numbers and dates; defaults to 'exact_entailment' when omitted.

Output Schema

NameRequiredDescription
verdictYesAudit outcome ('PASS', 'SUSPICIOUS', or 'FAIL').
verified_claimsYesAssertions directly entailed by the provided source context.
unverified_claimsYesHallucinated or unsupported assertions flagged for removal.
groundedness_scoreYesFactual support ratio from 0.0 (fabricated) to 1.0 (fully entailed).

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already establish the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds real operational context: a 32 KB payload cap, 60 RPM, a stateless edge call, L402 payment of 25 sats or '?demo=true', and an HTTP 400 on invalid input. The one flaw is the claim that "'context' defaults to 'standard'", which is misleading, because the schema marks context as required and no such default exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The tool's purpose is front-loaded in the first sentence, followed by usage, the sibling exclusion, and constraints. The final sentence crams four unrelated facts (size cap, rate limit, payment, error code) into one clause, but there's no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that an output schema exists, the description needn't explain return values, and it covers the operational envelope (limits, auth/payment, failure mode) that an agent needs before calling. The gaps are the undocumented strictness parameter behavior and the inaccurate 'context' default, both of which an agent would rely on.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so each of the three parameters is already documented in the schema, and the baseline of 3 applies. The description restates parameter purpose loosely and introduces a default for 'context' that contradicts the required list, but it never touches the 'strictness' enum (exact_entailment / semantic_paraphrase / citations_only), which is where added semantics would have mattered most.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb and resource: cross-references factual claims, numbers, and citations in a draft response against retrieved source passages and flags hallucinations. That is far more concrete than the name alone. It only differentiates itself from one sibling (sanitize_tool_output_stream) and says nothing about the near-identical sibling verify_factual_claims, so an agent can't fully separate the two from this text.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states an explicit trigger ('before returning it to the user' / 'before delivery') and names an alternative with the condition that selects it: use sanitize_tool_output_stream for prompt-injection and invisible Unicode scrubbing. However, the closest alternative, verify_factual_claims, is never mentioned, leaving the most likely routing ambiguity unresolved.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

audit_smart_contract_codeEVM & Move Smart Contract Honeypot, Tax & Reentrancy AuditorA
Read-onlyIdempotent
Inspect

Statically audits Solidity, Vyper, or Move smart contract source code for honeypot transfer taxes, hidden mint backdoors, proxy upgrade traps, and reentrancy. Use when auditing smart contract source code or bytecode before deploying or interacting with a protocol; for scanning Solana Anchor/Rust programs specifically for Cross-Program Invocation (CPI) signer/account vulnerabilities, use scan_solana_cpi_reentrancy instead. Read-only edge call (32 KB, 60 RPM): accepts 'code_or_address' ('chain' defaults to 'evm_solidity'), uses '?demo=true' or L402 (45 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
chainNoTarget blockchain VM architecture; defaults to 'evm_solidity' when omitted.
code_or_addressYesSmart contract source code snippet, ABI, or contract address to audit.

Output Schema

NameRequiredDescription
risk_levelYesSeverity classification ('LOW', 'MEDIUM', 'HIGH', or 'CRITICAL').
is_honeypotYesTrue if transfer restrictions or excessive sell taxes (>10%) are present.
security_scoreYesComposite contract safety score from 0 (critical exploit) to 100 (verified safe).
vulnerabilitiesYesSpecific vulnerability findings and line-level remediation advice.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds operational traits an agent could not infer: 32 KB input ceiling, 60 RPM limit, demo-mode flag versus L402 payment of 45 sats, and HTTP 400 on invalid input. That is exactly the kind of context annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One dense paragraph, front-loaded with purpose and the sibling routing rule. The pricing/rate-limit clause is crammed into the same sentence and slightly blurs the scan, but no sentence is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter read tool with an output schema, rich annotations, and 100% schema coverage, nothing needed for correct invocation is missing: scope, exclusions, cost model, rate limit, and failure mode are all present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3; the description modestly adds value by restating the 'chain' default and the accepted forms of 'code_or_address' (source, ABI, or address), which clarifies that an address is valid input. It does not enumerate the enum values beyond the schema, so it stays a step short of full marks.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb ('Statically audits') plus concrete resource ('Solidity, Vyper, or Move smart contract source code') and an enumerated threat list (honeypot transfer taxes, hidden mint backdoors, proxy upgrade traps, reentrancy). It also explicitly carves itself out from the sibling scan_solana_cpi_reentrancy, so an agent can disambiguate without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

States the trigger ('before deploying or interacting with a protocol') and names the exact alternative with the condition that selects it ('for scanning Solana Anchor/Rust programs... use scan_solana_cpi_reentrancy instead'). Both when-to-use and when-to-use-something-else are explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

audit_sql_injection_astDeterministic SQL AST Injection & Tautology Vulnerability AuditorA
Read-onlyIdempotent
Inspect

Statically parses SQL queries via AST lexical analysis to detect second-order injection, tautology conditions, and stacked queries. Use when auditing dynamic query parameters or untrusted user input before database execution; for sanitizing query strings for telemetry logging, use sanitize_sql_telemetry instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'raw_sql' ('audit_sensitivity' defaults to 'strict_zero_dynamic_taint'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
raw_sqlYesRaw SQL query string to parse and audit for injection vulnerabilities.
allow_commentsNoWhether SQL inline comments are allowed or treated as injection vectors.
audit_sensitivityNoAudit sensitivity mode: strict zero dynamic taint, second order injection check, or standard syntax audit.

Output Schema

NameRequiredDescription
is_safeYesTrue if the SQL query passed AST security audit with zero injection indicators.
risk_scoreYesContinuous vulnerability score between 0.0 (safe) and 1.0 (critical exploit).
ast_fingerprintYesNormalized structural AST hash of the parsed statement tree.
vulnerabilitiesYesList of flagged injection mechanisms (e.g., tautology_always_true, stacked_statement, comment_truncation).

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly/idempotent/non-destructive/closed-world, yet the description still adds material facts an agent cannot get elsewhere: stateless edge call, 32 KB input cap, 60 RPM rate limit, HTTP 400 on invalid input, and that either 'demo=true' or an L402 payment of 10 sats is required. That is exactly the beyond-annotation context this dimension rewards.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose, then routing, then operational constraints in a single dense paragraph with no filler sentences. It is packed tightly enough that the payment/rate-limit clause reads as a run-on, but nothing is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no prose; annotations carry the safety profile; the description supplies the remaining operational facts (size limit, rate limit, auth/payment gate, failure mode). Nothing an agent needs before calling is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description does add one genuinely new fact – that 'audit_sensitivity' defaults to 'strict_zero_dynamic_taint' – but leaves 'allow_comments' entirely unmentioned, so the gain over the schema is marginal.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Uses a specific verb and mechanism ('statically parses SQL queries via AST lexical analysis') and names the exact vulnerability classes detected: second-order injection, tautology conditions, stacked queries. An agent can distinguish this from summarize_sql or sanitize siblings without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states the trigger condition ('auditing dynamic query parameters or untrusted user input before database execution') and names an alternative for the adjacent-but-different job ('for sanitizing query strings for telemetry logging, use sanitize_sql_telemetry instead'). It does not address the closest sibling, validate_sql_query_ast, so the routing guidance is good but not exhaustive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

audit_transaction_isolationTransaction Concurrency Anomaly & Isolation Level Hazard AuditorA
Read-onlyIdempotent
Inspect

Audits database transaction workflows for concurrency anomalies, dirty reads, non-repeatable reads, and deadlock risks. Use when reviewing financial transfer procedures, inventory decrement operations, or multi-step checkout workflows; for calculating connection pool headroom, use calculate_pool_headroom instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'transaction_steps' ('target_isolation_level' defaults to 'read_committed'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
transaction_stepsYesSequential SQL commands or description of business operations within the transaction.
strict_deadlock_checkNoWhether to perform exhaustive cross-table lock acquisition ordering analysis.
target_isolation_levelNoCandidate SQL isolation level: read committed, repeatable read, or serializable.

Output Schema

NameRequiredDescription
deadlock_riskYesDeadlock risk severity rating (NEGLIGIBLE, MODERATE, HIGH_REVERSED_LOCK_ORDER).
recommended_isolationYesOptimal transaction isolation level to ensure ACID safety for the workload.
vulnerable_to_dirty_readsYesTrue if transactions could read uncommitted intermediate state from other sessions.
vulnerable_to_phantom_readsYesTrue if concurrent inserts could introduce phantom rows between sequential reads.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations, which only declare readOnly/idempotent/non-destructive/closed-world. The description adds statelessness, a 32 KB payload cap, a 60 RPM rate limit, demo-mode and L402 (15 sats) payment paths, the default isolation level, and a 400-on-invalid-input failure mode — all operationally decisive for an agent orchestrating the call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the purpose before the alternative and the operational constraints. The middle sentence is heavily parenthetical (nested quotes around parameter names plus payment/rate-limit clauses), which slightly hurts scannability but every clause carries real information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, all three parameters are documented, annotations cover the safety profile, and the description supplies limits, auth/payment mode, defaults, and error behavior. Nothing an agent needs to invoke this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description earns an extra point by disclosing that target_isolation_level defaults to 'read_committed', a default the schema does not state. The remaining parameters, notably strict_deadlock_check, are left entirely to the schema, so it stops short of full compensation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (audits) and resource (database transaction workflows) with enumerated failure modes: concurrency anomalies, dirty reads, non-repeatable reads, deadlock risks. It also explicitly names the sibling it is not (calculate_pool_headroom), so an agent can discriminate without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete triggering contexts (financial transfer procedures, inventory decrement operations, multi-step checkout workflows) and routes the connection-pool-headroom case to calculate_pool_headroom. Clear positive guidance and one explicit exclusion, though no general statement of when this tool is inappropriate (e.g., non-transactional SQL review, which might belong to validate_sql_query_ast or analyze_query_plan).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

calculate_pool_headroomDatabase Connection Pool Sizing & Concurrency Headroom CalculatorA
Read-onlyIdempotent
Inspect

Calculates optimal connection pool sizing, idle timeouts, and client headroom based on server RAM and concurrency profile. Use when sizing PgBouncer, HikariCP, or Prisma connection pools to avoid server out-of-memory crashes; for checking transaction isolation hazards, use audit_transaction_isolation instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'server_ram_mb' and 'max_concurrent_clients' ('workload_profile' defaults to 'high_concurrency_oltp'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
server_ram_mbYesTotal available RAM in megabytes dedicated to the database server instance.
workload_profileNoWorkload operational characteristics: high-concurrency OLTP, heavy analytical OLAP, or serverless edge burst.
max_concurrent_clientsYesPeak anticipated concurrent client connections or serverless worker threads.

Output Schema

NameRequiredDescription
memory_headroom_mbYesEstimated unallocated memory buffer in megabytes remaining for query sorting.
recommended_min_idleYesRecommended standby idle connection count for warm latency response.
connection_timeout_msYesRecommended pool connection acquisition timeout in milliseconds.
recommended_max_connectionsYesCalculated optimal max pool size to avoid database thrashing and memory exhaustion.

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive), yet the description adds real operational context: stateless edge call, 32 KB payload cap, 60 RPM limit, `?demo=true` or L402 payment at 10 sats, and HTTP 400 on invalid input. These are traits an agent cannot get from the annotations and that affect how it should call and retry the tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose and alternative routing before the operational constraints. Every clause carries information (cost, rate limit, error behavior); nothing is redundant with the title or restates structured fields.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Since an output schema exists, return values need no explanation, and the description covers the remaining agent needs: inputs, default behavior, rate/size caps, payment option, and error response. Nothing required to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline would be 3, but the description adds meaning beyond the schema by naming the default value for workload_profile ('high_concurrency_oltp'), which the schema does not state. It also frames server_ram_mb and max_concurrent_clients as the two accepted inputs, reinforcing their roles.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ("Calculates") applied to concrete outputs: pool sizing, idle timeouts, and client headroom, derived from server RAM and concurrency profile. It also names the sibling audit_transaction_isolation as the tool for a different concern, so an agent can separate the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use condition (sizing PgBouncer, HikariCP, or Prisma pools to avoid OOM crashes) and an explicit exclusion routing the agent to audit_transaction_isolation for isolation hazards. Nothing about when to pick this tool is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

calculate_spot_swap_rateCross-Asset Spot Exchange Rate & Satoshi Conversion CalculatorA
Read-onlyIdempotent
Inspect

Calculates instantaneous spot exchange rates and equivalent USD, BTC, and satoshi values across BTC, ETH, SOL, SUI, and USDC. Use when converting a token amount into USD or satoshis for invoice pricing or accounting; for quoting executable non-KYC cross-chain bridge routes with bridge fees and settlement times, use compare_crosschain_bridge_routes instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'currency' ('amount' defaults to 'standard'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
amountNoQuantity of the source asset to convert; defaults to 100 when omitted.
currencyYesSource asset ticker symbol to convert from.

Output Schema

NameRequiredDescription
source_amountYesInput asset quantity.
equivalent_satsYesEquivalent value denominated in Bitcoin satoshis.
source_currencyYesInput asset symbol converted.
total_usd_valueYesEquivalent spot value in US Dollars (USD).

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations (which already establish readOnly/idempotent/non-destructive) by disclosing statelessness, a 32 KB payload cap, a 60 RPM rate limit, the '?demo=true' and L402 (20 sats) access paths, and the HTTP 400 failure mode. These are operational traits an agent cannot infer from structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences, front-loaded with purpose before usage and then operational constraints; nothing is repeated from the annotations. Slight density cost from bundling rate limit, payment scheme, and error code into one sentence, but each clause carries distinct information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a stateless two-parameter read with an output schema (so return shape need not be described), the description covers access modes, limits, and failure behavior adequately. The only real gap is the muddled statement about the amount default, which leaves a caller unsure of the exact fallback value.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline would be 3, but the description's parenthetical 'amount' defaults to 'standard'' conflicts with the schema, which documents 'defaults to 100 when omitted'. That is confusing rather than additive, and 'standard' is not a value in the numeric amount domain; the only real gain is naming the 'currency' argument.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Calculates') and resource ('instantaneous spot exchange rates and equivalent USD, BTC, and satoshi values'), and enumerates the supported assets. It also explicitly names the sibling it is not (compare_crosschain_bridge_routes), so an agent can disambiguate without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a concrete when-to-use trigger ('converting a token amount into USD or satoshis for invoice pricing or accounting') and an explicit alternative with its own condition ('for quoting executable non-KYC cross-chain bridge routes... use compare_crosschain_bridge_routes instead'). Both the positive and negative selection cases are covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

clean_tabular_datasetTabular Dataset & Text Deduplication, Whitespace & Normalization EngineA
Read-onlyIdempotent
Inspect

Deduplicates repetitive lines or records, normalizes Unicode whitespace, strips HTML/control noise, and canonicalizes tabular text or JSON arrays. Use when cleaning noisy scraped lists, CSV rows, or duplicate log lines before indexing or analysis; for extracting typed JSON fields from free-form prose paragraphs, use extract_structured_json_entities instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'data' ('normalization_mode' defaults to 'exact_match'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
dataYesRaw newline-delimited text, CSV rows, or JSON array string to deduplicate and normalize.
normalization_modeNoDeduplication key sensitivity; defaults to 'case_insensitive_trim' when omitted.

Output Schema

NameRequiredDescription
cleaned_dataYesDeduplicated, whitespace-normalized records.
cleaned_countYesUnique non-empty record count after cleanup.
original_countYesLine or record count prior to deduplication.
duplicates_removedYesNumber of duplicate records eliminated.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnly/idempotent/non-destructive annotations, the description discloses that the call is stateless, capped at 32 KB and 60 RPM, supports a '?demo=true' free path or L402 payment of 15 sats, and returns HTTP 400 on invalid input. Rate limits, auth/billing paths and error behavior are exactly the operational context annotations do not carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the operation list before usage routing and then operational constraints — the ordering matches how an agent decides. The final sentence is dense with limits, auth and error codes, but each clause is load-bearing rather than filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described, and the description supplies everything else material for a stateless 2-parameter tool: size cap, throughput cap, payment path and failure mode. The only completeness defect is the default-value conflict, which undercuts an otherwise thorough definition.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so a 3 would be the baseline, but the description asserts 'normalization_mode' defaults to 'exact_match' while the schema explicitly states it defaults to 'case_insensitive_trim'. For an agent choosing whether to pass the parameter, that conflicting statement is actively misleading and worse than silence.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence names four specific operations (dedupe, Unicode whitespace normalization, HTML/control stripping, tabular/JSON canonicalization) against concrete inputs (lines, records, CSV rows, JSON arrays). It is unambiguously distinguishable from nearby siblings like extract_clean_markdown or heal_malformed_json.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives explicit trigger conditions ('noisy scraped lists, CSV rows, or duplicate log lines before indexing or analysis') and names the alternative plus the condition that selects it ('for extracting typed JSON fields from free-form prose paragraphs, use extract_structured_json_entities').

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

cluster_topic_subgraphsSemantic Topic Clustering & Subgraph Taxonomy SynthesizerA
Read-onlyIdempotent
Inspect

Discovers latent thematic clusters, subtopic branches, and conceptual relationships across document corpora. Use when structuring broad search results into distinct thematic silos or generating table of contents taxonomies; for tracking chronological milestones, use summarize_temporal_timeline instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'documents_or_queries' ('clustering_method' defaults to 'tf_idf_semantic_graph'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
max_clustersNoMaximum number of thematic cluster groups to partition data into.
clustering_methodNoThematic clustering algorithm: TF-IDF semantic graph, centroid k-means, or hierarchical taxonomy.
documents_or_queriesYesNewline-separated list or JSON array of text snippets, queries, or article abstracts.

Output Schema

NameRequiredDescription
clustersYesList of identified topic clusters with representative labels and member documents.
total_nodesYesTotal number of items successfully clustered into the taxonomy.
modularity_scoreYesClustering partition modularity metric indicating distinctness of clusters.

TDQS

A4.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false and openWorldHint=false. The description adds real operational context beyond that: statelessness, 32 KB payload cap, 60 RPM rate limit, demo/L402 payment of 15 sats, and a 400 on invalid input. That said, it never describes what the response shape or error payloads look like beyond the status code, so it sits at a solid but not maximal level.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the purpose before the exclusion and the operational parenthetical. Slightly dense with pricing/rate-limit details packed into one clause, but no sentence is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need no explanation. The description covers cost model, rate limit, size cap, default algorithm, error status, and the alternative tool — everything an agent needs to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description still adds value by disclosing that clustering_method defaults to 'tf_idf_semantic_graph' and that the input is subject to a 32 KB limit, neither of which is in the schema. These are small but genuine clarifications beyond the structured data.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource: 'Discovers latent thematic clusters, subtopic branches, and conceptual relationships across document corpora.' It also names the sibling it is not for (summarize_temporal_timeline), so an agent can separate clustering from chronology without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit use cases ('structuring broad search results into distinct thematic silos or generating table of contents taxonomies') and an explicit exclusion routing to summarize_temporal_timeline for chronological milestones. Nothing is left to inference about when to pick this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compare_crosschain_bridge_routesNon-KYC Cross-Chain Bridge Route & Settlement Fee ComparatorA
Read-onlyIdempotent
Inspect

Compares non-custodial, non-KYC cross-chain swap routes (THORChain native L1 swaps, Maya Protocol, Blockstream Liquid) by basis-point fee, net output sats, and settlement time. Use when routing cross-chain treasury settlements (e.g. Solana USDC or Base ETH into native Bitcoin); for calculating mid-market spot exchange rates without bridge routing fees, use calculate_spot_swap_rate instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'from_asset' ('to_asset' defaults to 'BTC_NATIVE'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
amountNoInput asset amount to quote; defaults to 100.0 when omitted.
to_assetNoDestination chain asset identifier; defaults to 'BTC_NATIVE' when omitted.
from_assetYesOrigin chain asset identifier to bridge from.

Output Schema

NameRequiredDescription
fee_bpsYesTotal protocol and slip fee in basis points.
best_routeYesOptimal non-KYC bridge protocol selected (e.g. 'THORCHAIN_NATIVE_SWAP').
kyc_requiredYesAlways false; only non-custodial permissionless routes are returned.
estimated_output_satsYesNet settled output denominated in Bitcoin satoshis.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, non-destructive, and closed-world behavior, and the description adds substantial context beyond that: stateless edge call, 32 KB max, 60 RPM limit, demo mode or L402 payment (20 sats), and HTTP 400 on invalid input. It also clarifies that from_asset is the required input and to_asset defaults to BTC_NATIVE.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two dense sentences with no wasted words. The comparison scope and differentiator are front-loaded ahead of operational details, so the agent gets the key routing decision first.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given an output schema, 100% parameter coverage, and rich annotations, the description fills the remaining gaps: target use case, alternative tool, access/payment model, rate limits, and error behavior. Nothing an agent needs to select or invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3 even with no parameter detail in the description. The description does mention from_asset and to_asset defaults, but that information duplicates what the schema already documents; it does not add new semantics such as amount formatting or enum constraints.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Compares') plus the exact resource (non-KYC cross-chain swap routes across THORChain, Maya, and Liquid) and the metrics compared (bp fee, net output sats, settlement time). It also explicitly distinguishes itself from the sibling calculate_spot_swap_rate, so an agent can tell them apart without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use case ('routing cross-chain treasury settlements, e.g. Solana USDC or Base ETH into native Bitcoin') and names the alternative tool with the condition that selects it ('for calculating mid-market spot exchange rates without bridge routing fees, use calculate_spot_swap_rate instead'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compile_competitive_landscapeCompetitor Intelligence, Feature Matrix & Moat AnalyzerA
Read-onlyIdempotent
Inspect

Compiles multi-competitor comparison matrices, pricing tiers, feature coverage, and strategic moat evaluations. Use when analyzing market landscapes, evaluating pricing parity, or conducting diligence on competing product offerings; for compiling narrative research briefs, use compile_research_dossier instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'target_entity_or_market' ('analysis_framework' defaults to 'feature_and_pricing_matrix'), supports '?demo=true' or L402 (25 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
max_competitorsNoMaximum number of market competitors to profile and contrast.
analysis_frameworkNoBenchmarking framework: feature and pricing matrix, SWOT competitive moat, or market share quadrant.
target_entity_or_marketYesIndustry sector, product category, or target company to benchmark against competitors.

Output Schema

NameRequiredDescription
market_sectorYesStandardized market sector or product category analyzed.
competitor_matrixYesStructured matrix comparing market players, target customers, and offerings.
pricing_comparisonYesBenchmarked pricing models, free tiers, and entry price points across players.
strategic_advantagesYesIdentified competitive moats, network effects, and differentiation factors.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description adds substantial context they don't carry: stateless edge call, 32 KB payload cap, 60 RPM rate limit, demo mode or L402 payment of 25 sats, and an HTTP 400 failure mode on invalid input. That is exactly the operational detail an agent needs before invoking.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and routing come first, with operational constraints trailing — good front-loading and no filler sentences. The final sentence is a dense run-on packing rate limits, payment, and error codes together, which slightly hurts scanability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need no explanation, and annotations cover the safety profile. Combined with the stated rate limits, size cap, payment path, and default framework, an agent has everything needed to call this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3; the description earns extra by disclosing the default value of 'analysis_framework' ('feature_and_pricing_matrix'), which the enum schema does not state. It also names the required parameter, though max_competitors is left entirely to the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (compiles) plus the concrete artifacts produced: comparison matrices, pricing tiers, feature coverage, and moat evaluations. It explicitly contrasts itself with compile_research_dossier, so an agent can distinguish the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives three concrete triggering scenarios (market landscape analysis, pricing parity, competitive diligence) and names the alternative tool for the adjacent task (narrative research briefs). Both the when-to-use and when-not-to-use sides are covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compile_eve_gate_aclEVE Frontier Smart Gate Tribe ACL & Dynamic Toll Bytecode CompilerA
Read-onlyIdempotent
Inspect

Compiles EVE Frontier Tribe access control lists, diplomatic standings, and surge-pricing toll rules into Sui Move Smart Gate AccessPolicy constraints. Use when configuring on-chain jump permissions and LUX/SUI toll schedules for a player-owned Smart Gate; for calculating optimal multi-system jump routes across existing stargates, use plan_eve_gate_route instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'gate_assembly_id' ('toll_mode' defaults to 'standing_tiered'), supports '?demo=true' or L402 (30 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
toll_modeNoPricing curve applied to non-allied jumpers; defaults to 'standing_tiered' when omitted.
gate_assembly_idYesTarget Smart Gate assembly identifier (e.g. 'gate-lagrange-04').

Output Schema

NameRequiredDescription
base_toll_mistYesCalculated base jump toll denominated in MIST/LUX units.
gate_assembly_idYesTarget Smart Gate object identifier.
hostile_block_enforcedYesTrue when hostile tribes are rejected at the Move witness gate.
access_policy_move_structYesCompiled Sui Move AccessPolicy struct definition and entry verifier.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, and the description goes well beyond them: stateless edge call, 32 KB payload cap, 60 RPM rate limit, demo mode vs L402 (30 sats) payment, and HTTP 400 on invalid input. These are exactly the operational traits an agent needs to avoid failed or throttled calls.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose, then usage, then operational constraints — a sensible ordering with no filler sentences. The final clause packs several constraints (size, rate, auth, error code) into one long sentence, which is dense but each element is load-bearing.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need not be described, and the description still covers everything else an agent needs: statelessness, size limit, rate limit, authentication options, and error behavior. For a two-parameter compiler call this is complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, with the enum and defaults already documented, so the schema carries the semantic load. The description only restates the 'toll_mode' default ('standing_tiered') and that 'gate_assembly_id' is accepted, adding no new meaning such as identifier format or how toll_mode interacts with standings. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Compiles') plus three concrete resources (Tribe ACLs, diplomatic standings, surge-pricing toll rules) and names the exact output artifact (Sui Move Smart Gate AccessPolicy constraints). It explicitly distinguishes itself from the nearest sibling, plan_eve_gate_route, so an agent can select between them without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use clause ('configuring on-chain jump permissions and LUX/SUI toll schedules for a player-owned Smart Gate') and an explicit when-not/alternative clause routing route-planning queries to plan_eve_gate_route. Both the positive and negative selection conditions are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compile_mpp_research_dossierBase MPP Session-Metered Multi-Source Research Dossier CompilerA
Read-onlyIdempotent
Inspect

Compiles a structured JSON research dossier ('key_findings', 'synthesis_quality_score', 'sources_cited') settled via Base EVM Machine Payments Protocol (MPP). Use when generating a strict-JSON cited intelligence brief paid via Base USDC MPP session headers; for running long-form narrative research reports via L402 Lightning, use conduct_deep_research_investigation instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'research_topic' ('output_density' defaults to 'concise_5_points'), supports '?demo=true' or MPP (300 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
queryYesResearch topic or technical question to investigate and structure into JSON.
output_densityNoGranularity of the key_findings array; defaults to 'executive_10_points' when omitted.
research_topicNoAlias for query: research topic or technical question to investigate.

Output Schema

NameRequiredDescription
queryYesInvestigated research query.
key_findingsYesHigh-density factual bullet strings synthesized from live sources.
sources_citedYesVerified grounding source references.
synthesis_quality_scoreYesSelf-audit completeness score from 90 to 100.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly/idempotent/openWorld/non-destructive, yet the description adds genuinely new operational facts: stateless edge call, 32 KB response cap, 60 RPM limit, 300 sats MPP pricing, '?demo=true' bypass, and HTTP 400 on invalid input. That is exactly the beyond-annotation context the dimension rewards.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tightly packed sentences that front-load purpose, then routing, then operational limits. Nothing is truly wasted, but the run-on density (pricing, rate limit, size cap, error code in one breath) makes it slightly harder to scan than necessary.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values needn't be explained, and the description still covers cost, limits, error behavior and the alternative tool. The one material gap is the mismatched parameter naming and default value, which leaves an agent unsure whether to send 'query' or 'research_topic' and what default applies.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline would be 3, but the description introduces conflicting facts: it says 'output_density' defaults to 'concise_5_points' while the schema says 'executive_10_points', and it presents 'research_topic' as an accepted input while the schema's required field is 'query'. Those mismatches actively mislead rather than add meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

A specific verb ("Compiles") plus a well-defined resource ("structured JSON research dossier") with the returned fields named inline ('key_findings', 'synthesis_quality_score', 'sources_cited'). It also names the sibling it is not (conduct_deep_research_investigation for L402 narrative reports), so an agent can separate the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use ("generating a strict-JSON cited intelligence brief paid via Base USDC MPP session headers") paired with an explicit alternative and the condition selecting it (L402 long-form narrative → conduct_deep_research_investigation). Payment mode and demo-mode fallback are also stated, leaving little to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compile_polyglot_type_schemasPolyglot JSON -> TypeScript, Zod, Pydantic v2 & JSON Schema CompilerA
Read-onlyIdempotent
Inspect

Inspects a sample JSON payload (inferring UUID, ISO-8601 datetime, email, integer vs float, and array item types) and compiles strict TypeScript interfaces, Zod schemas, Python Pydantic v2 models, and JSON Schema Draft 2020-12. Use when generating static type definitions and runtime validators in TypeScript and Python from a sample JSON response; for extracting existing function/class symbols and complexity metrics from source code, use analyze_ast_symbol_graph instead. Read-only call (32 KB, 60 RPM): accepts 'sample_json' (with enum defaults), uses '?demo=true' or L402 (20 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
root_nameNoIdentifier used for the generated root interface/class; defaults to 'GeneratedPayload' when omitted.
strictnessNoSchema additionalProperties and format constraint mode; defaults to 'strict_formats' when omitted.
sample_jsonYesJSON string or object representing the sample payload to infer types from.

Output Schema

NameRequiredDescription
root_nameYesSanitized root type/class identifier.
zod_schemaYesCompiled TypeScript Zod runtime validator schema.
python_pydantic_v2YesCompiled Python Pydantic v2 BaseModel class.
typescript_interfaceYesCompiled TypeScript export interface definition.
json_schema_draft_2020_12YesComplete JSON Schema Draft 2020-12 specification.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive/closed-world, yet the description adds substantial operational context beyond them: 32 KB payload cap, 60 RPM throttle, '?demo=true' or L402 payment at 20 sats, and HTTP 400 on invalid input. These are exactly the constraints an agent needs before calling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and output artifacts are front-loaded, then usage, then operational constraints — a sensible ordering with little waste. The second sentence is long and stacks several distinct concerns (size, rate limit, demo/payment, error code), which slightly hurts scannability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described. Combined with stated inference behavior, the sibling exclusion, size/rate limits, payment path, and error behavior, nothing an agent needs to call this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so root_name and strictness defaults/modes are already documented, and the baseline is 3. The description's claim that sample_json comes 'with enum defaults' is slightly muddled since the enum lives on strictness, and it adds no syntax or format detail about the sample payload itself — so it neither helps much nor compensates for anything.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (inspects a sample JSON payload) and a concrete multi-artifact output (TypeScript interfaces, Zod schemas, Pydantic v2 models, JSON Schema Draft 2020-12). It even enumerates the inference heuristics (UUID, ISO-8601, email, int vs float, array item types), so an agent knows exactly what it produces.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly names the use case ('generating static type definitions and runtime validators in TypeScript and Python from a sample JSON response') and routes the agent away with a named alternative: 'for extracting existing function/class symbols and complexity metrics from source code, use analyze_ast_symbol_graph instead.' Both the when and the when-not are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compile_research_dossierDeep Research Dossier & Citation Intelligence BriefA
Read-onlyIdempotent
Inspect

Compiles multi-source factual research briefs with verified citations, confidence intervals, and key analytical takeaways. Use when synthesizing comprehensive intelligence briefings on complex technical, scientific, or market developments; for rapid query search snippets, use synthesize_neural_search instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'research_topic' ('depth_level' defaults to 'executive_brief'), supports '?demo=true' or L402 (35 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
depth_levelNoResearch dossier rigor: executive brief, deep investigation, or technical whitepaper.
research_topicYesComplex subject, market sector, emerging technology, or policy topic to research.
target_citationsNoTarget number of primary citations to identify and verify.

Output Schema

NameRequiredDescription
titleYesTitle of the compiled research dossier.
citationsYesVerified source citations backing the analytical findings.
key_findingsYesStructured list of core factual insights with supporting context.
confidence_indexYesEpistemic confidence index between 0.0 and 1.0 based on source consensus.
executive_summaryYesHigh-level analytical summary of primary findings and consensus.

TDQS

A4.1/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds substantial context beyond the annotations: stateless execution, 32 KB payload cap, 60 RPM rate limit, the ?demo=true escape hatch, L402 payment of 35 sats, and the HTTP 400 failure mode for invalid input. These are exactly the operational constraints (cost, throttling, failure) that annotations alone cannot convey; note the mild tension with openWorldHint=false for a tool that compiles multi-source external research.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose, then routing, then operational constraints — no filler. The final sentence is over-packed, bundling size cap, rate limit, parameter defaults, payment, and error behavior into one line, but every clause carries real information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need no explanation, and annotations plus the description together cover safety, cost, limits, and failure modes. What is missing is disambiguation from the several sibling tools that perform comparable deep-research compilation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents all three parameters, and the description adds only the research_topic name and the depth_level default ('executive_brief'). target_citations is never referenced in the description, and no extra format or sizing guidance is offered beyond what the schema states.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('compiles multi-source factual research briefs') and enumerates the artifacts produced: verified citations, confidence intervals, analytical takeaways. It differentiates itself from one sibling (synthesize_neural_search) but does not distinguish itself from the near-identical conduct_deep_research_investigation or compile_mpp_research_dossier, which an agent could easily confuse it with.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use it ('synthesizing comprehensive intelligence briefings on complex technical, scientific, or market developments') and names an alternative with its selecting condition ('for rapid query search snippets, use synthesize_neural_search instead'). The gap is that it gives no exclusion against the most confusable siblings, which do nearly the same deep-research job.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compile_rss_feedWeb Content to RSS 2.0 & Atom Feed CompilerA
Read-onlyIdempotent
Inspect

Transforms JSON item collections or article card arrays into standardized RSS 2.0, Atom 1.0, or JSON Feed 1.1 syndication feeds. Use when syndicating blog articles, product announcements, or changelog cards to RSS readers and AI agents; for compiling structured sitemap listings, use crawl_sitemap_urls instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'items_json' and 'channel_title' ('feed_standard' defaults to 'rss_2_0'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
items_jsonYesJSON string representing an array of article or feed items with title, link, and pubDate.
channel_titleYesHeadline title for the syndication feed channel.
feed_standardNoTarget syndication feed specification: RSS 2.0, Atom 1.0, or JSON Feed 1.1.

Output Schema

NameRequiredDescription
feed_xmlYesFormatted XML or JSON string ready for publication to feed subscribers.
item_countYesNumber of feed entries compiled into the syndicated document.
content_typeYesStandard MIME content type for the generated feed document.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly/idempotent/destructive/openWorld, yet the description still adds non-obvious operational traits: 32 KB payload cap, 60 RPM throttle, L402 payment option (15 sats), demo bypass, and an HTTP 400 failure on invalid input. These are exactly the constraints an agent must know before calling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in the first sentence and every subsequent clause carries information, but the final sentence is telegraphic ('Stateless read-only edge call (max 32 KB, 60 RPM)', 'L402 (15 sats)') and packs several unrelated facts into one dense run-on.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema covers return values and annotations cover safety, and the description fills the remaining gaps: supported standards, size and rate limits, payment/demo access, and error behavior. Nothing an agent needs to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description earns an extra point by disclosing that 'feed_standard' defaults to 'rss_2_0', a default not stated in the schema. The remaining parameter mentions (items_json contents) merely restate the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific verb (transforms) and both input and output resources (JSON item collections / article card arrays → RSS 2.0, Atom 1.0, JSON Feed 1.1). It also names the sibling it is not (crawl_sitemap_urls) so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Use when syndicating blog articles, product announcements, or changelog cards to RSS readers and AI agents' gives concrete positive triggers, and the sitemap clause explicitly excludes the nearest alternative. Both when-to-use and when-not-to-use are present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compile_xml_agent_promptProduction XML-Structured System Prompt & Guardrail CompilerA
Read-onlyIdempotent
Inspect

Compiles a raw task description into a structured XML system prompt (, , , , , <output_format>) engineered to prevent instruction drift. Use when authoring or upgrading a system prompt for an autonomous agent or sub-agent workflow; for mapping a task objective to a concrete sequence of MCP tool calls, use route_mcp_workflow_plan instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'task' ('prompt_style' defaults to 'anthropic_xml_tags'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
taskYesRaw task instructions, persona goal, and operational constraints to compile.
prompt_styleNoStructural formatting template; defaults to 'anthropic_xml_tags' when omitted.

Output Schema

NameRequiredDescription
compiled_promptYesComplete production-grade XML-structured system prompt.
estimated_tokensYesEstimated BPE token length of the compiled prompt.
key_enhancementsYesSpecific guardrails and output contract rules injected.
optimization_scoreYesPrompt clarity and constraint-completeness score from 0 to 100.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint/idempotentHint/destructiveHint=false, and the description adds real operational context the annotations don't carry: statelessness, a 32 KB payload cap, a 60 RPM rate limit, and a 400 response on invalid input. It loses a point because the '?demo=true or L402 (20 sats)' detail describes an HTTP transport affordance that has no corresponding schema parameter, leaving the agent unsure how to actually trigger it via this tool call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core verb+resource is front-loaded, followed by usage routing and then operational constraints — a sensible order with no filler sentences. It is dense to the point of being crammed into three semicolon-chained clauses, which slightly hurts scanability but nothing is redundant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value detail is rightly omitted, and the safety/idempotency profile is covered by annotations. What's missing is a hint about output determinism or whether compilation quality depends on upstream model behavior — minor for a compile-and-return tool but the one gap an author would still want covered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and both parameters are already documented in the schema, including the anthropic_xml_tags default. The description restates the 'task' content and the prompt_style default but adds no syntax, size, or content-shaping guidance beyond what the schema provides, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (compiles) and resource (raw task description into an XML system prompt) and enumerates the exact output sections produced (<role>, <context>, <objective>, <constraints>, <workflow>, <output_format>). It also explicitly distinguishes itself from the nearest sibling, route_mcp_workflow_plan, so an agent can differentiate without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit trigger ('Use when authoring or upgrading a system prompt for an autonomous agent or sub-agent workflow') plus an explicit exclusion with the alternative named ('for mapping a task objective to a concrete sequence of MCP tool calls, use route_mcp_workflow_plan instead'). This is the when/when-not/alternative pattern verbatim.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compose_lyria_music_trackGoogle Lyria 3 Instrumental Music & Audio Stem ComposerA
Read-onlyIdempotent
Inspect

Composes studio-grade instrumental music tracks, ambient loops, and multi-instrument arrangements from genre, tempo, and mood prompts using Google Lyria 3. Use when generating musical scores, soundtrack stems, or rhythmic audio loops; for converting written text into spoken human voice narration (TTS), use synthesize_gemini_speech_audio instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'prompt' ('genre_preset' defaults to 'cinematic_synth'), supports '?demo=true' or L402 (150 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
promptYesMusical style, instrumentation, BPM tempo, and harmonic mood description.
genre_presetNoPrimary acoustic or electronic genre; defaults to 'cinematic_synth' when omitted.

Output Schema

NameRequiredDescription
modelYesMusic generation model executed ('lyria-3-clip').
noticeYesComposition completion notice.
outputYesGenerated audio track payload and arrangement metadata.
successYesTrue when Lyria 3 audio synthesis succeeded.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond standard hints, the description provides critical operational behavior not found in schema or annotations, such as the stateless nature, specific size/rate limits (max 32 KB, 60 RPM), and defined error behavior (returns HTTP 400 if invalid).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense and front-loaded, packing both functional and operational data into one paragraph. While highly effective, the sheer volume of technical jargon (KB, RPM, Lyria 3) prevents a perfect 5, though the information is logically ordered.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity of the tool (music generation, specific edge constraints, and failure modes), the description is exhaustively complete, leaving no critical question unanswered for an agent attempting to use it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With schema coverage at 100%, the description meets the baseline for supplemental documentation. It successfully reinforces the default value for the `genre_preset` parameter but does not add semantic value that wasn't already structured.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description is highly specific, naming the output (musical tracks, ambient loops), the mechanism (Google Lyria 3), and the inputs it transforms (genre, tempo, mood prompts). It clearly defines what the tool's specific domain is.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The tool provides explicit 'when to use' scenarios (musical scores, audio loops) and a direct 'when not to use' instruction by pointing to `synthesize_gemini_speech_audio` as the alternative for TTS tasks.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

conduct_deep_research_investigationGemini Deep Research Pro Multi-Hop Investigative AnalystA
Read-onlyIdempotent
Inspect

Runs an iterative, multi-hop investigative research session via Gemini Deep Research Pro, cross-examining primary sources to produce a cited technical report. Use when investigating complex scientific, architectural, or market questions requiring deep multi-hop synthesis; for running a fast single-turn Google Search grounded fact lookup, use search_gemini_grounded_web instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'input' ('depth_tier' defaults to 'quick_synthesis'), supports '?demo=true' or L402 (300 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
inputYesInvestigative research question, scope, and specific aspects to analyze.
depth_tierNoResearch breadth and citation density; defaults to 'exhaustive_report' when omitted.

Output Schema

NameRequiredDescription
agentYesDeep Research engine identifier ('deep-research-preview-04-2026').
outputYesComprehensive multi-section investigative report with inline citations.
successYesTrue when the research synthesis completed.
sources_countYesNumber of independent sources cross-referenced.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations by disclosing statelessness, a 32 KB payload cap, 60 RPM throttling, '?demo=true' access, an L402 payment requirement (300 sats), and the HTTP 400 failure mode. Annotations already cover readOnly/openWorld/idempotent, so this coverage is strong; the one blemish is that the stated 'depth_tier' default conflicts with the schema, which sows doubt about the stated mechanics.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Core purpose and the sibling alternative are front-loaded, and each clause carries distinct information. The final sentence is dense — API mechanics, payment, and error semantics compressed into one line — but it is not padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given an output schema exists, return values needn't be described; the description instead covers operational constraints (size, rate limit, payment, error code) that the structured fields do not. Aside from the default-value discrepancy, an agent has everything needed to call this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline would be 3, but the description actively contradicts the schema: it says depth_tier 'defaults to quick_synthesis' while the schema says 'defaults to exhaustive_report when omitted.' For a caller choosing omission vs. explicit tier, this is a costly error rather than harmless redundancy, and no additional meaning is added for the 'input' parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — an iterative multi-hop investigative research session via Gemini Deep Research Pro producing a cited technical report — and names the sibling (search_gemini_grounded_web) it is not. An agent can distinguish this from the other 13 siblings without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly scopes use to 'complex scientific, architectural, or market questions requiring deep multi-hop synthesis' and states the exclusion plus the alternative: fast single-turn fact lookup goes to search_gemini_grounded_web. When-to-use, when-not-to-use, and the fallback are all present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

crawl_sitemap_urlsXML Sitemap & Index Crawler Tree DecompilerA
Read-onlyIdempotent
Inspect

Parses XML sitemaps and sitemap index files into structured URL trees with change frequency and last-modified filters. Use when discovering domain architectures, mapping crawl frontiers, or indexing blog/product catalogues; for extracting on-page hyperlinks from raw HTML, use extract_page_hyperlinks instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'sitemap_xml' ('filter_criteria' defaults to 'all_entries'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
max_resultsNoMaximum number of URLs to extract and return in the catalog.
sitemap_xmlYesXML string of the sitemap or sitemapindex file to inspect and parse.
filter_criteriaNoURL retention filter: all entries, recently modified lastmod only, or HTML pages only.

Output Schema

NameRequiredDescription
sub_sitemapsYesNested child sitemap URLs detected if document is a sitemapindex file.
sitemap_entriesYesList of structured URL entries containing loc, lastmod, and priority.
total_urls_foundYesTotal valid loc URLs parsed from the XML sitemap document.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnly/idempotent/non-destructive annotations, it discloses payload cap (32 KB), rate limit (60 RPM), statelessness, demo-mode and L402 payment requirement (15 sats), and the 400 error on invalid input — none of which the annotations carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose before routing guidance, and the operational facts are packed into a compact clause. Dense but essentially waste-free; only the parenthetical enumeration of limits feels slightly crammed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With a 100%-covered schema, an output schema handling return values, and annotations covering the safety profile, the description still supplies limits, auth options, and failure mode. Nothing needed to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description adds a real detail the schema lacks — that filter_criteria defaults to 'all_entries' — and names sitemap_xml as the accepted input. It does not, however, explain max_results semantics beyond the schema's own text.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Parses XML sitemaps and sitemap index files into structured URL trees') plus the filter dimension, and explicitly distinguishes itself from extract_page_hyperlinks. An agent can route between the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete when-to-use scenarios (discovering domain architectures, mapping crawl frontiers, indexing blog/product catalogues) and names the alternative for the adjacent case, plus the condition that selects it ('raw HTML').

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

decode_eip712_permit_signatureEIP-712 Typed Data & Uniswap Permit2 Phishing Signature DecoderA
Read-onlyIdempotent
Inspect

Decodes EIP-712 and Uniswap Permit2 off-chain typed-data payloads to verify spender identity, detect unlimited (uint256.max) token approvals, and flag expired deadlines. Use when inspecting an off-chain eth_signTypedData_v4 or Permit2 payload before signing; for decoding raw on-chain hex transaction calldata (0x...) for eth_sendTransaction, use simulate_evm_transaction_calldata instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'typed_data_json' ('chain_id' defaults to '1'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
chain_idNoEVM chain ID used to verify canonical router spender addresses; defaults to '8453' (Base) when omitted.
typed_data_jsonYesJSON string or object containing the EIP-712 / Permit2 message (spender, amount, deadline).

Output Schema

NameRequiredDescription
signing_verdictYesSafety recommendation ('SAFE_BOUNDED_PERMIT' or 'CRITICAL_UNLIMITED_APPROVAL_UNVERIFIED_SPENDER').
spender_addressYesNormalized lowercase EVM address of the permit spender.
spender_identityYesIdentified protocol router label or 'Unknown Third-Party Spender'.
unlimited_approval_detectedYesTrue if the approval value equals uint256.max / uint160.max.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (readOnly/idempotent/non-destructive), it discloses operational traits the agent cannot see elsewhere: stateless edge call, 32 KB payload cap, 60 RPM throttle, L402 payment option, demo mode, and HTTP 400 on invalid input. The only defect is that one of these operational details is wrong (see parameter note), so it stops just short of full trust.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose, verification targets, and the sibling alternative are front-loaded before the operational constraints. Dense but essentially waste-free; the final clause (demo/L402/400) is slightly crammed into one sentence, which is the only reason it is not a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists, so return values need no explanation, and the description fully covers scope, safety profile, alternatives, and limits. It is near-complete for a 2-parameter read tool, with the chain_id default conflict the one gap that matters to correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline would be 3, but the description actively contradicts the schema: it says 'chain_id' defaults to '1' while the schema says it defaults to '8453' (Base). Since chain_id governs which canonical router spender addresses are used for verification, this error can cause a wrong-chain approval to be judged safe. It also references a '?demo=true' query flag that appears in neither parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Decodes') plus the exact resource ('EIP-712 and Uniswap Permit2 off-chain typed-data payloads') and the outputs of interest (spender identity, uint256.max approvals, expired deadlines). It also contrasts itself with the sibling simulate_evm_transaction_calldata, so an agent can separate the off-chain signing case from raw calldata without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use ('inspecting an off-chain eth_signTypedData_v4 or Permit2 payload before signing') and an explicit when-not with the named alternative and its condition ('raw on-chain hex transaction calldata (0x...) for eth_sendTransaction, use simulate_evm_transaction_calldata instead'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

detect_address_poisoning_scamCounterparty Address Poisoning & Vanity Prefix/Suffix Spoof DetectorA
Read-onlyIdempotent
Inspect

Compares a target recipient wallet address against recent transaction history to detect vanity prefix/suffix lookalike spoofing and zero-value dusting attacks. Use when verifying a recipient EVM or Solana wallet address before sending funds; for decoding hex smart contract calldata payloads, use simulate_evm_transaction_calldata instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'target_address' ('address_standard' defaults to 'auto_detect'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
target_addressYesCandidate recipient EVM (0x...) or Solana Base58 wallet address to verify.
address_standardNoAddress encoding format; defaults to 'auto_detect' when omitted.

Output Schema

NameRequiredDescription
verdictYesTransfer safety decision ('SAFE_VERIFIED' or 'DANGER_POISONING_ATTACK').
target_addressYesAudited recipient address.
poisoning_detectedYesTrue if a prefix/suffix collision with a different middle body is found.
prefix_suffix_collision_scoreYesSimilarity score (0.0 to 1.0) against known counterparty addresses.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive/closed-world, and the description goes well beyond them: max 32 KB payload, 60 RPM rate limit, stateless edge call, L402 pricing (20 sats), '?demo=true' bypass, and HTTP 400 on invalid input. These operational traits are exactly what an agent needs before calling an edge endpoint; the only gap is that index/latency behavior is left to the output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences ordered purpose → when/alternative → operational limits, with zero filler. The final sentence is dense (size, rate, payment, error code all crammed into one clause chain) and could be split for scanability, which keeps it from a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 2-parameter stateless lookup with an output schema and full annotation coverage, the description supplies everything else an agent needs: what it detects, when to call it, the alternative, resource limits, payment model, and failure behavior. Nothing material is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented with enum values and defaults. The description restates that 'address_standard' defaults to 'auto_detect' and surfaces an out-of-schema '?demo=true' flag, but adds no format or validation syntax beyond the schema. Baseline 3 is correct when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence states a specific verb and resource (compares a recipient wallet address against recent transaction history) and names the two exact threat classes it detects: vanity prefix/suffix lookalike spoofing and zero-value dusting. It also names the sibling tool it is not (simulate_evm_transaction_calldata), so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit trigger: 'Use when verifying a recipient EVM or Solana wallet address before sending funds.' It provides an exclusion plus a concrete alternative ('for decoding hex smart contract calldata payloads, use simulate_evm_transaction_calldata instead'), leaving nothing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

detect_agent_action_loopAutonomous Agent Action-Trace Loop & Token-Burn Circuit BreakerA
Read-onlyIdempotent
Inspect

Analyzes an agent's recent tool-call trace to detect identical retry spins, A/B state oscillation, and runaway token burn. Use when monitoring autonomous agent execution loops to decide whether to continue or trip a token-burn breaker; for inspecting a single command payload for security threats before execution, use verify_agent_command_safety instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'action_trace_json' ('sensitivity' defaults to 'strict_2_repeats'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
sensitivityNoCycle detection threshold; defaults to 'standard_3_repeats' when omitted.
action_trace_jsonYesJSON-serialized array of recent agent actions (e.g. '[{"tool":"search","status":"err"}]').

Output Schema

NameRequiredDescription
loop_patternYesDetected cycle topology ('NONE', 'IDENTICAL_RETRY_SPIN', or 'ABAB_STATE_OSCILLATION').
loop_detectedYesTrue if a repetitive retry spin or A/B oscillation cycle is active.
circuit_breaker_actionYesRecommended control action ('CONTINUE_EXECUTION' or 'HALT_AND_ESCALATE_OR_SWITCH_TOOL').
estimated_tokens_savedYesProjected token burn prevented by tripping the circuit breaker.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnly/idempotent/non-destructive annotations, it discloses statelessness, a 32 KB payload cap, 60 RPM rate limit, demo and L402 (15 sats) access paths, and an HTTP 400 failure mode for invalid input — operationally useful facts an agent cannot infer from structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the purpose and sibling routing before operational details, with no filler. The final sentence is dense with comma-spliced constraints (size, rate, auth, error code), which is efficient but slightly overpacked.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and annotations carrying the safety profile, the description still covers the limit, auth, and error behaviors an agent needs before calling. Everything required to invoke it correctly is present, apart from the default-value defect noted above.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline would be 3, but the description actively misleads: it says 'sensitivity' defaults to 'strict_2_repeats' while the schema says it defaults to 'standard_3_repeats' when omitted. That direct conflict on the one behavioral knob can cause an agent to assume a stricter threshold than the server actually applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource (analyzes an agent's recent tool-call trace) plus the three concrete failure patterns it detects: identical retry spins, A/B state oscillation, and runaway token burn. It also names the sibling verify_agent_command_safety and the scope that separates them, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use it ('monitoring autonomous agent execution loops to decide whether to continue or trip a token-burn breaker') and names the alternative for the adjacent case ('for inspecting a single command payload for security threats before execution, use verify_agent_command_safety instead'). Both the include and exclude conditions are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

detect_breaking_migrationsDatabase Schema Migration Differ & Breaking Change LinterA
Read-onlyIdempotent
Inspect

Compares source and target DDL schemas to identify breaking changes, destructive column drops, and lock-inducing mutations. Use when verifying CI/CD migration scripts before production deployment to prevent downtime; for verifying relational normal form, use validate_schema_normalization instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'current_schema' and 'target_schema' ('risk_tolerance' defaults to 'zero_downtime_strict'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
target_schemaYesProposed new database DDL schema representing target migration state.
current_schemaYesCurrent production database DDL schema representing live tables and columns.
risk_toleranceNoDeployment safety policy: zero downtime strict, allow transient locks, or permissive dev.

Output Schema

NameRequiredDescription
risk_levelYesCategorical migration risk assessment (LOW, MEDIUM, HIGH_LOCK_RISK, CRITICAL_DATA_LOSS).
breaking_operationsYesList of destructive changes (e.g., column dropped, non-null without default, type narrowing).
breaking_changes_detectedYesTrue if breaking changes or destructive table mutations were identified.
migration_steps_safe_orderYesRecommended zero-downtime phased rollout steps (expand, migrate, contract).

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive/closed-world, but the description adds genuinely non-redundant operational traits: statelessness, a 32 KB payload cap, 60 RPM rate limiting, the 'zero_downtime_strict' default, a demo bypass or L402 payment of 15 sats, and HTTP 400 on invalid input. These are failure modes and cost constraints an agent cannot infer from the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, purpose front-loaded, then routing advice, then operational constraints. The second sentence is a dense run-on stacking size limit, rate limit, params, payment, and error code, which makes it slightly harder to scan than it could be, but nothing is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present the description need not explain return values, and it already covers inputs, defaults, alternative tool, limits, and error behavior. Nothing an agent needs to invoke this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description earns above that by disclosing the default value of 'risk_tolerance' ('zero_downtime_strict'), which the schema does not state, and by naming both required inputs. The enum values themselves are still only explained by the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a precise verb and resource pair ('Compares source and target DDL schemas to identify breaking changes, destructive column drops, and lock-inducing mutations'), and explicitly names the sibling it is not (validate_schema_normalization for normal-form checks). An agent can distinguish this from detect_openapi_breaking_changes and recommend_database_indexes on the description alone.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit trigger ('Use when verifying CI/CD migration scripts before production deployment to prevent downtime') and an explicit exclusion with the correct alternative (validate_schema_normalization for relational normal form). Both when-to-use and when-not-to-use are covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

detect_mcp_schema_rugpullMid-Session MCP tools/list Rug-Pull & Schema Mutation DetectorA
Read-onlyIdempotent
Inspect

Computes structural diffs between a pinned baseline MCP tools/list snapshot and a live server response to catch mid-session description or schema tampering. Use when verifying that a connected MCP server has not mutated its tool definitions mid-session; for performing a first-time static security audit on a single MCP manifest, use audit_mcp_server_manifest instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'baseline_tools_json' ('current_tools_json' defaults to 'standard'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
diff_modeNoComparison strictness across descriptions and inputSchema; defaults to 'full_structural' when omitted.
current_tools_jsonNoJSON-serialized live tools/list array to compare against the baseline; defaults to '[]' when omitted.
baseline_tools_jsonYesJSON-serialized baseline tools/list array captured when the MCP server was first trusted.

Output Schema

NameRequiredDescription
verdictYesConnection verdict ('SCHEMA_INTEGRITY_VERIFIED' or 'REVOKE_MCP_SERVER_IMMEDIATELY').
mutated_toolsYesDetailed list of modified tools and their exact mutation type.
timestamp_utcYesISO-8601 UTC timestamp of the diff audit.
rugpull_detectedYesTrue if any tool was surreptitiously added or had its description/schema altered.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description provides critical behavioral traits beyond the annotations, including resource limitations (32 KB, 60 RPM), operational mode (Stateless read-only edge call), and specific failure modes (HTTP 400 if invalid). This level of detail is essential for an agent operating in a system integrity context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The definition is dense and highly technical, which is appropriate for its subject matter. While long, every phrase serves a functional purpose, successfully front-loading the primary goal and scoping constraints within the initial sentences.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given its high complexity and focus on security, the description is nearly exhaustive. It covers input requirements, operational limits, error handling, use cases, and explicit differentiation from related tools, leaving no critical operational gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Although the schema coverage is 100%, the description adds significant semantic context. It clarifies the functional role of the inputs (baseline is the trusted past, live is the current measurement) and details advanced invocation parameters like the use of 'demo=true' and specific payment units (L402).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The purpose is highly specific: it computes structural differences between a pinned baseline and a live response. It clearly states the outcome—catching mid-session description or schema tampering—which is distinct from general auditing functions like `audit_mcp_server_manifest`.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The usage guidelines are explicitly defined by the operational context. It identifies the primary use case (mid-session verification) and provides a direct alternative sibling tool for a related but different use case (first-time static security audit).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

detect_openapi_breaking_changesOpenAPI 3.1, JSON Schema & MCP Contract Breaking-Change DetectorA
Read-onlyIdempotent
Inspect

Compares baseline and candidate OpenAPI 3.1 specs, JSON Schemas, or MCP tool manifests to detect breaking changes (removed fields, new required inputs, narrowed enums, type mutations). Use when auditing API, JSON Schema, or MCP contract revisions for backward compatibility before deployment; for compiling new TypeScript, Zod, and Pydantic schemas from a single sample JSON payload, use compile_polyglot_type_schemas instead. Read-only edge call (32 KB, 60 RPM): accepts 'baseline_schema_json' (with enum defaults), uses '?demo=true' or L402 (25 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
contract_formatNoContract specification format; defaults to 'auto_detect' when omitted.
baseline_schema_jsonYesJSON string of the baseline OpenAPI 3.1 spec, JSON Schema, or MCP tools array.
candidate_schema_jsonYesJSON string of the proposed candidate schema or contract revision to compare.

Output Schema

NameRequiredDescription
breaking_changesYesDetailed list of breaking removals, type changes, or new required parameters.
non_breaking_additionsYesBackward-compatible optional fields or endpoints added.
recommended_semver_bumpYesRecommended Semantic Version bump ('MAJOR_BREAKING', 'MINOR_ADDITIVE', or 'PATCH_COMPATIBLE').
breaking_changes_detectedYesTrue if any backward-incompatible contract change is found.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, closed-world, non-destructive, so the safety profile is covered. The description goes well beyond that with operational details an agent cannot get from structured fields: a 32 KB payload cap, 60 RPM rate limit, L402 payment (25 sats) as an access mode, a '?demo=true' bypass, and HTTP 400 on invalid input — exactly the kind of pre-call context that prevents failed invocations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the alternative-tool routing come first, followed by the operational constraints, which is the right ordering. It is dense and slightly telegraphic near the end (the '32 KB, 60 RPM ... L402 (25 sats); HTTP 400' clause is crammed), but no sentence is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no explanation. The description covers supported input formats, auto-detection, access constraints, failure mode, and pre-deployment use context — everything an agent needs to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% with an explicit enum default for contract_format, so the schema does the heavy lifting and the baseline is 3. The description restates 'baseline_schema_json (with enum defaults)' without adding syntax or format guidance, and only the non-schema '?demo=true' query flag is new information.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource set: compares baseline and candidate OpenAPI 3.1 specs, JSON Schemas, or MCP tool manifests to detect breaking changes, with the change classes enumerated (removed fields, new required inputs, narrowed enums, type mutations). The scope is narrow enough that an agent can separate it from generic diffing or schema-compilation siblings without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use framing ('auditing API, JSON Schema, or MCP contract revisions for backward compatibility before deployment') and names one alternative, compile_polyglot_type_schemas, with the condition that selects it. However, the two closest siblings in the roster — detect_mcp_schema_rugpull and detect_breaking_migrations — are never mentioned, leaving real ambiguity for MCP-manifest and migration-adjacent revisions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

detect_paywall_and_bypassDOM Paywall, Modal Gate & Blurred Content Recovery AuditorA
Read-onlyIdempotent
Inspect

Audits web page DOM hierarchies to detect soft paywalls, blur overlays, modal gates, and recovers concealed body text. Use when diagnosing paywall obstructions, diagnosing subscriber gating scripts, or auditing content access barriers; for assessing general SEO hygiene, use evaluate_seo_diagnostics instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'html_content' ('detection_profile' defaults to 'heuristic_dom_overlay'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
html_contentYesTarget web page HTML markup suspected of containing soft paywalls or paywall modals.
target_domainNoOptional publishing domain name to look up publisher gating patterns.
detection_profileNoPaywall detection heuristic: heuristic DOM overlay, hidden text recovery, or strict access barrier audit.

Output Schema

NameRequiredDescription
paywall_typeYesClassification of paywall barrier (e.g., soft_modal_overlay, blurred_content, hard_truncation).
confidence_scoreYesConfidence metric between 0.0 and 1.0 regarding paywall detection.
paywall_detectedYesTrue if paywall scripts, blur filters, or gate overlays were identified.
recovered_contentYesRecovered readable prose extracted from under DOM overlay or script tags.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnly/idempotent/non-destructive/openWorld=false; the description goes well beyond them by disclosing statelessness, the 32 KB payload cap, the 60 RPM rate limit, the demo mode and L402 pricing (15 sats), and the HTTP 400 failure mode for invalid input. Those are operational constraints an agent cannot infer from any structured field.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the sibling alternative are front-loaded, then operational facts are packed into a single dense sentence. Nothing is redundant, but the rate-limit/payment/error clause is compressed into a run-on that costs some scanability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return shape need not be explained, and the description still covers the inputs, the default profile, the size and rate ceilings, the payment path, and the failure status. For a read-only three-parameter auditor, an agent has everything needed to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds a default the schema omits ('detection_profile' defaults to 'heuristic_dom_overlay') and reiterates the html_content input and demo flag. It does not explain target_domain's publisher-pattern lookup, leaving one property to the schema alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — audit DOM hierarchies for soft paywalls, blur overlays, modal gates, plus concealed body text recovery. The title's phrasing is echoed but the description adds concrete detection targets (blur overlays, modal gates) rather than restating the name, and it distinguishes the tool from evaluate_seo_diagnostics by naming that sibling explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives both when-to-use (diagnosing paywall obstructions, subscriber gating scripts, content access barriers) and when-not-to-use with the exact alternative: 'for assessing general SEO hygiene, use evaluate_seo_diagnostics instead.' That is an explicit routing rule an agent can act on without reading either schema.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

diff_agent_memory_checkpointAgent State Graph Differ, Belief Conflict Resolver & SHA-256 HasherA
Read-onlyIdempotent
Inspect

Computes structural diffs between two agent state snapshots ('added_keys', 'mutated_keys', 'removed_keys'), flags boolean belief contradictions, generates an RFC 7396 JSON Merge Patch delta, and computes a canonical checkpoint hash. Use when checkpointing agent state or transmitting minimal RFC 7396 state deltas across multi-agent handoffs; for counting BPE tokens and auditing Lost-in-the-Middle prompt attention, use plan_context_token_budget instead. Read-only call (32 KB, 60 RPM): accepts 'previous_state_json' (with enum defaults), uses '?demo=true' or L402 (10 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
conflict_strategyNoResolution policy when keys conflict; defaults to 'prefer_current' when omitted.
current_state_jsonYesJSON string or object representing the updated agent state snapshot.
previous_state_jsonYesJSON string or object representing the prior agent state snapshot.

Output Schema

NameRequiredDescription
added_keysYesState keys newly introduced in current_state.
mutated_keysYesModified keys with before/after values and belief_contradiction flag.
checkpoint_digestYesDeterministic cryptographic hash of the canonicalized merged state.
rfc7396_json_merge_patch_deltaYesMinimal RFC 7396 JSON Merge Patch payload transforming previous into current.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds substantial context beyond the already-informative annotations (readOnly/idempotent/non-destructive): 32 KB payload cap, 60 RPM rate limit, demo-mode access, L402 payment cost (10 sats), and HTTP 400 behavior on invalid input. These operational constraints are not derivable from schema or annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Core purpose is front-loaded in the first sentence, usage/routing in the second, and operational limits in the third. Dense but well-organized; the parenthetical field list and metered detail are tight, though the sentence runs long.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists so return values need no explanation, and annotations cover the safety profile. The description nonetheless supplies rate limit, size cap, auth options, and failure mode — everything an agent needs to call this correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description references 'previous_state_json' but attaches '(with enum defaults)', when the enum actually lives on conflict_strategy — a minor imprecision rather than added value. The schema already documents both state params and the conflict_strategy enum.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource set: computes structural diffs between two state snapshots, flags belief contradictions, generates an RFC 7396 patch, and computes a checkpoint hash. Names concrete output fields ('added_keys', 'mutated_keys', 'removed_keys') that let an agent distinguish it from siblings without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use ('checkpointing agent state or transmitting minimal RFC 7396 state deltas across multi-agent handoffs') plus a named alternative for the adjacent token-budget use case: 'use plan_context_token_budget instead'. Both the positive and negative routing conditions are present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

enforce_json_schema_typesStrict JSON Schema Validator, Type Coercer & Field PrunerA
Read-onlyIdempotent
Inspect

Validates a raw LLM output object against a target JSON Schema, automatically coercing mismatched scalar types (e.g. string '42' to integer 42), injecting schema defaults, and pruning undeclared hallucinated fields. Use when enforcing schema compliance and type safety on structured LLM outputs before passing them to typed APIs; for healing unparseable raw JSON text with broken quotes or trailing commas, use heal_malformed_json instead. Read-only edge call (32 KB, 60 RPM): accepts 'raw_output' (with enum defaults), uses '?demo=true' or L402 (15 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
raw_outputYesJSON string or object produced by an LLM to validate and coerce.
coercion_policyNoPolicy for handling extra undeclared properties; defaults to 'prune_undeclared_and_coerce' when omitted.

Output Schema

NameRequiredDescription
validYesTrue when the resulting enforced_object satisfies the schema.
enforced_objectYesClean, schema-compliant JSON object.
coercions_appliedYesList of type conversions and default injections performed.
unrecognized_fields_prunedYesHallucinated property keys removed during enforcement.

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, and the description goes well beyond them: 32 KB payload cap, 60 RPM rate limit, auth via ?demo=true or L402 (15 sats), and HTTP 400 on invalid input. These are operational constraints an agent cannot get from the structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core verb and the three transformations, then routing, then operational limits — a sensible order. It is dense in a single block, and the operational/auth tail could be set off more cleanly, but no sentence is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers purpose, alternative routing, limits, auth, and error signal, and an output schema exists so return values need no explanation. Slight gap: it does not characterize how the three coercion policies differ behaviorally, though the enum descriptions in the schema partially cover that.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and both parameters carry their own descriptions including the enum and its default, so the schema does the heavy lifting. The description's parenthetical 'raw_output (with enum defaults)' is imprecise since the enum belongs to coercion_policy, adding little and slightly muddling which field is enum-controlled.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource (validate/coerce/prune a raw LLM output object against a JSON Schema) with the three sub-behaviors named explicitly. It clearly distinguishes itself from the sibling heal_malformed_json by scope: schema/type enforcement versus repairing unparseable JSON text.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit 'Use when enforcing schema compliance and type safety on structured LLM outputs before passing them to typed APIs', plus an explicit alternative for the adjacent case: 'for healing unparseable raw JSON text... use heal_malformed_json instead.' Both selection condition and exclusion are present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

estimate_bitcoin_mempool_feesBitcoin Mainnet Mempool Feerate Estimator (sat/vB)A
Read-onlyIdempotent
Inspect

Fetches real-time Bitcoin mainnet mempool feerate recommendations in satoshis per virtual byte (sat/vB) across fastest, half-hour, hour, and economy confirmation tiers. Use when checking current Bitcoin L1 network congestion before broadcasting an on-chain BTC transaction; for calculating exact SegWit/Taproot UTXO batch consolidation vByte weights and dust thresholds, use plan_bitcoin_utxo_consolidation instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'confirmation_target', supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
confirmation_targetNoTarget confirmation speed tier; defaults to 'half_hour' when omitted.

Output Schema

NameRequiredDescription
hourFeeYesRecommended feerate in sat/vB for ~60-minute confirmation.
economyFeeYesLow-priority feerate in sat/vB for non-urgent batch sweeps.
fastestFeeYesRecommended feerate in sat/vB for next-block (~10 min) inclusion.
halfHourFeeYesRecommended feerate in sat/vB for ~30-minute confirmation.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the readOnly/idempotent/openWorld annotations: declares statelessness, a 32 KB payload cap, 60 RPM rate limit, demo-mode bypass, L402 payment of 10 sats, and HTTP 400 on invalid input. These are operational facts an agent cannot infer from the annotations or schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with purpose, then routing guidance, then operational constraints. Dense but every clause is functional; the parenthetical '(max 32 KB, 60 RPM)' is compressed rather than verbose, though the sentence is somewhat overloaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists so return shape needn't be described, and annotations cover the safety profile. Description fills the remaining gaps an agent needs: auth mechanics (L402/demo), rate/payload limits, error behavior, and sibling routing. Nothing material is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the sole parameter already documents the enum and the 'half_hour' default, so the schema carries the load. The description reinforces meaning by naming the tiers (fastest, half-hour, hour, economy) in the context of confirmation speed, adding slight framing value over the raw enum values.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific verb (Fetches) and resource (Bitcoin mainnet mempool feerate recommendations) with the exact unit (sat/vB) and the four confirmation tiers enumerated. An agent can distinguish it immediately from estimate_solana_priority_fees and plan_bitcoin_utxo_consolidation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states the use case ('before broadcasting an on-chain BTC transaction') and names the alternative with the condition that selects it ('for calculating exact SegWit/Taproot UTXO batch consolidation vByte weights and dust thresholds, use plan_bitcoin_utxo_consolidation instead'). Both when-to-use and when-not-to-use are covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

estimate_solana_priority_feesSolana Compute-Unit Priority Fee & Jito MEV Tip EstimatorA
Read-onlyIdempotent
Inspect

Calculates optimal Solana compute-unit (CU) microlamport priority fees and Jito bundle tip lamports to achieve target block-inclusion probability. Use when setting SetComputeUnitPrice and Jito tips before broadcasting a Solana transaction; for querying Bitcoin L1 sat/vB mempool fee rates, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'priority_level' ('tx_type' defaults to 'simple_transfer'), supports '?demo=true' or x402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
tx_typeNoTransaction category used to estimate compute unit limit; defaults to 'dex_swap' when omitted.
priority_levelYesTarget inclusion urgency tier on Solana mainnet-beta.

Output Schema

NameRequiredDescription
estimated_landing_probabilityYesProjected next-block inclusion probability (0.0 to 1.0).
recommended_jito_tip_lamportsYesRecommended Jito block-engine tip in lamports for MEV-protected landing.
recommended_compute_unit_limitYesSuggested ComputeBudget compute unit ceiling.
recommended_micro_lamports_per_cuYesRecommended priority fee in microlamports per compute unit.

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, openWorldHint and non-destructive, so the safety profile is covered. The description still adds real operational context beyond that: statelessness, a 32 KB payload cap, 60 RPM rate limit, demo mode or x402 payment of 10 sats, and an HTTP 400 on invalid input. However, it never says what 'optimal' means or which chain/endpoint is actually called, so it is good rather than exemplary.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in the first sentence, usage and exclusion in the second, operational constraints last — a logical order with no filler. The final clause is a run-on cramming statelessness, size cap, rate limit, payment modes and error code into one sentence, which costs some readability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need not be described, and the description covers rate limits, size limits, payment/auth paths and failure behavior for a read-only edge call. The one substantive gap is the tx_type default mismatch and the unspecified definition of 'optimal' estimation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with both enums documented, so the baseline would be 3. But the description asserts 'tx_type' defaults to 'simple_transfer', while the schema explicitly says it defaults to 'dex_swap' when omitted — the description actively introduces conflicting parameter semantics rather than merely restating them.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Calculates ... compute-unit microlamport priority fees and Jito bundle tip lamports') plus the objective (target block-inclusion probability). It also explicitly distinguishes itself from the nearest sibling, estimate_bitcoin_mempool_fees, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use condition ('when setting SetComputeUnitPrice and Jito tips before broadcasting a Solana transaction') and an explicit when-not with the named alternative ('for querying Bitcoin L1 sat/vB mempool fee rates, use estimate_bitcoin_mempool_fees'). Nothing about selection is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

evaluate_ab_statistical_significanceWelch's t-Test, Two-Proportion z-Test & Bayesian A/B Eval JudgeA
Read-onlyIdempotent
Inspect

Computes Welch's two-sample t-test or two-proportion z-test, returning two-tailed p-values, Cohen's d effect size, relative lift %, and Bayesian P(Treatment > Control). Use when determining whether a prompt change, model benchmark, or A/B experiment produced a statistically significant improvement; for evaluating single algebraic formulas or NPV/IRR cashflows, use evaluate_deterministic_math instead. Read-only edge call (32 KB, 60 RPM): accepts 'control_json' ('treatment_json' defaults to 'standard'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
control_jsonYesJSON string or object for the baseline control arm (e.g. '{"conversions":142,"total":1000}' or '{"samples":[12,15,14]}').
treatment_jsonYesJSON string or object for the candidate treatment arm (e.g. '{"conversions":186,"total":1000}').
significance_levelNoType-I error alpha threshold for statistical significance; defaults to 'alpha_0_05' when omitted.

Output Schema

NameRequiredDescription
p_valueYesTwo-tailed frequentist p-value.
verdictYesExperiment decision ('SIGNIFICANT_TREATMENT_WIN', 'SIGNIFICANT_CONTROL_WIN', or 'INCONCLUSIVE_UNDERPOWERED').
test_typeYesStatistical test applied ('welch_two_sample_t_test' or 'two_proportion_z_test_and_bayesian').
relative_lift_pctYesPercentage lift of treatment over control.
bayesian_prob_treatment_superiorYesPosterior probability P(Treatment > Control) from 0.0 to 1.0.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, non-destructive, and closed-world, so safety is covered. The description still adds real operational context: a 32 KB edge call, 60 RPM rate limit, '?demo=true' or L402 payment at 15 sats, and HTTP 400 on invalid input. Return format is left to the output schema, which exists, so the remaining gap is minor.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Dense but front-loaded: the operation and outputs come first, then the usage routing, then the operational constraints. Every clause carries information, though the parenthetical parameter/query string snippets are cramped and contribute to the misleading parameter claims.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and rich annotations, the description covers purpose, alternatives, rate limits, payment, and error behavior. The only shortfall is that the treatment_json/demo clauses introduce ambiguity an agent cannot resolve from the schema, which is required-but-required contradiction territory.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents all three parameters and their enum. Worse, the description introduces misleading parameter claims: 'treatment_json defaults to standard' contradicts the schema, where treatment_json is required with no default, and '?demo=true' is a query parameter that does not appear in the input schema at all.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (computes) and specific statistical resources (Welch's two-sample t-test, two-proportion z-test), and enumerates the concrete outputs (two-tailed p-values, Cohen's d, relative lift, Bayesian P(Treatment > Control)). This is far beyond a restatement of the name and lets an agent know exactly what comes back.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly names the trigger scenarios (prompt change, model benchmark, A/B experiment improvement) and explicitly routes the wrong case to a named alternative: 'for evaluating single algebraic formulas or NPV/IRR cashflows, use evaluate_deterministic_math instead'. That is a textbook when/when-not/alternative statement.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

evaluate_deterministic_mathShunting-Yard Algebraic Math, Financial IRR/NPV & Descriptive Stats SolverA
Read-onlyIdempotent
Inspect

Strict Shunting-Yard AST arithmetic parser with zero eval() or dynamic code execution: evaluates algebraic formulas and computes exact financial NPV, Newton-Raphson IRR, Kelly criterion, and dataset stats. Use when computing exact arithmetic formulas, cashflow NPV/IRR, or descriptive statistics without LLM floating-point guesswork; for running two-sample A/B hypothesis tests, use evaluate_ab_statistical_significance instead. Read-only edge call (32 KB, 60 RPM): accepts 'math_formula' ('precision_digits' defaults to '2_decimals'), uses '?demo=true' or L402 (10 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
expressionYesAlgebraic or scientific formula to evaluate (e.g. '(125000 * (1 + 0.0725/12)^60) - 98450.50').
math_formulaNoAlias for expression: algebraic formula to evaluate.
precision_digitsNoDecimal rounding precision for returned numbers; defaults to '8_decimals' when omitted.

Output Schema

NameRequiredDescription
expressionYesEvaluated mathematical expression.
exact_resultYesDeterministic floating-point result of the expression.
dataset_statisticsYesOptional count, mean, median, std_dev, min, and max when a dataset array is supplied.
financial_analysisYesOptional NPV, Newton-Raphson IRR, and Kelly fraction when financial parameters are supplied.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile, but the description adds substantive context beyond them: no eval() or dynamic execution, 32 KB payload ceiling, 60 RPM rate limit, demo mode and L402 payment of 10 sats, and HTTP 400 on invalid input. What it omits is return-shape detail, which the output schema supplies anyway.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Capability and routing information is front-loaded and the sentences carry real content (scope, cost, limits, errors). It is dense to the point of being cramped – the rate limit, auth, and error facts are compressed into a single trailing parenthetical rather than structured separately.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With rich annotations and an output schema, the description still supplies rate limits, payload cap, auth modes, and failure behavior – enough for an agent to call it correctly. The only incompleteness is the conflicting precision default, which leaves the parameter behavior ambiguous between two sources.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description does add value by noting the 'math_formula' alias and the demo/L402 access paths, but it also states that 'precision_digits' defaults to '2_decimals' while the schema says '8_decimals' – a direct conflict that could lead an agent to miscalibrate rounding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource family (Shunting-Yard AST arithmetic evaluation) and enumerates the concrete capabilities: algebraic formulas, NPV, Newton-Raphson IRR, Kelly criterion, and descriptive stats. It explicitly separates itself from the sibling evaluate_ab_statistical_significance, so an agent can pick between them without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The 'Use when…' clause gives the positive trigger conditions and names the alternative tool for the adjacency case (two-sample A/B tests). That is an explicit when/when-not/alternative triple.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

evaluate_dex_mev_riskPre-Swap DEX MEV Sandwich & Frontrunning Risk EvaluatorA
Read-onlyIdempotent
Inspect

Evaluates decentralized exchange (DEX) swap parameters against pool depth and mempool visibility to quantify MEV sandwich risk and compute optimal slippage tolerance in basis points. Use when configuring slippage tolerance and private-RPC routing before executing an on-chain DEX token swap; for comparing cross-chain bridge settlement routes across different L1 blockchains, use compare_crosschain_bridge_routes instead. Read-only edge call (32 KB, 60 RPM): accepts 'pair' ('execution_venue' defaults to 'uniswap_v3_public'), uses '?demo=true' or L402 (25 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
pairYesTrading pair symbol or pool identifier (e.g. 'ETH/USDC' or 'SOL/USDC').
execution_venueNoTarget DEX protocol or RPC relay; defaults to 'uniswap_v3_public' when omitted.

Output Schema

NameRequiredDescription
sandwich_riskYesAssessed MEV extraction risk tier ('LOW', 'MEDIUM', or 'HIGH').
recommended_rpcYesSuggested MEV-protected broadcast endpoint.
optimal_slippage_bpsYesRecommended maximum slippage tolerance in basis points (1 bps = 0.01%).
frontrunning_detectedYesTrue if public mempool broadcast exposes the swap to predatory bots.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond annotations, the description adds operational context including response size (32 KB), rate limit (60 RPM), demo vs L402 payment access, and HTTP 400 on invalid input. These details help an agent plan calls without guessing about access, rate limits, or error behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with purpose and usage guidance, then packs operational details tightly without wasting sentences. Every clause contributes either selection guidance or invocation context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema exists, the description need not explain return values. It covers purpose, when to use it, the main alternative, access/payment mechanics, rate limits, defaults, and error handling, making it complete for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both parameters and the execution_venue enum. The description only repeats that it accepts 'pair' and that execution_venue defaults to 'uniswap_v3_public', adding little semantic value beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb, resource, and scope: it evaluates DEX swap parameters against pool depth and mempool visibility to quantify MEV sandwich risk and compute optimal slippage tolerance. It also explicitly distinguishes itself from compare_crosschain_bridge_routes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states exactly when to use the tool: configuring slippage tolerance and private-RPC routing before executing an on-chain DEX swap. It also names the alternative tool and condition for cross-chain bridge route comparison.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

evaluate_seo_diagnosticsWeb SEO Diagnostics & Heading Hierarchy AuditorA
Read-onlyIdempotent
Inspect

Audits HTML heading structures, title lengths, meta descriptions, image alt tags, and OpenGraph compliance into a health score. Use when auditing landing pages, verifying SEO compliance before publishing, or evaluating crawl friendliness; for extracting article bodies, use scrape_readable_article instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'html_content' ('audit_level' defaults to 'comprehensive_audit'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
audit_levelNoDiagnostic audit scope: comprehensive audit, meta tags only, or heading hierarchy only.
html_contentYesWeb page HTML string to evaluate against search engine optimization standards.
target_keywordNoPrimary search keyword to check for in titles, headings, and meta tags.

Output Schema

NameRequiredDescription
seo_scoreYesAggregate SEO compliance score on a 0 to 100 benchmark scale.
recommendationsYesActionable recommendations for resolving detected search optimization issues.
heading_structureYesSummary counts of H1 through H6 headings and hierarchy validity.
missing_attributesYesList of missing SEO elements such as missing alt text or missing meta tags.

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description adds substantial non-obvious behavior: statelessness, a 32 KB payload cap, 60 RPM throughput, a demo bypass, an L402 payment of 10 sats, and HTTP 400 on invalid input. The only shortfall is that it doesn't say what happens at the rate limit (429 vs queue) or whether the sats charge applies per call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose, then usage, then operational constraints in a tight single paragraph. The third sentence packs several unrelated facts (size cap, rate limit, demo, L402, error code) into one clause chain, which is dense but every element is relevant to calling the tool correctly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description needn't explain return values, and it covers the remaining gaps an agent needs: auth/payment path, size and rate limits, failure mode, and the default audit scope. Complete for a single-required-parameter read tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description earns above that by disclosing 'audit_level' defaults to 'comprehensive_audit' and implicitly scoping 'html_content' to a raw HTML string. It never mentions 'target_keyword', leaving that parameter entirely to the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Audits') plus the exact resources checked (heading structures, title lengths, meta descriptions, alt tags, OpenGraph) and the output artifact (health score). It also names the sibling it is not (scrape_readable_article), so an agent can discriminate without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly enumerates three triggering scenarios (auditing landing pages, pre-publish SEO compliance, crawl friendliness) and names the alternative tool with the condition that selects it ('for extracting article bodies, use scrape_readable_article instead'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

evaluate_solana_token_riskSolana SPL Token Mint/Freeze Authority & Rug-Pull Risk EvaluatorA
Read-onlyIdempotent
Inspect

Evaluates a Solana SPL token's rug-pull probability by checking active mint authority, freeze authority, mutable metadata, and top-holder concentration. Use when making a pre-trade security decision on whether a Solana SPL token is safe to buy; for retrieving SPL token symbol, decimals, and DEX liquidity pool metadata via x402, use inspect_solana_token_liquidity instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'token_address' ('risk_profile' defaults to 'strict_decentralized'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
risk_profileNoTolerance policy for centralized freeze authorities; defaults to 'strict_decentralized' when omitted.
token_addressYesBase58-encoded Solana SPL token mint address (32–44 characters).

Output Schema

NameRequiredDescription
risk_scoreYesRug-pull risk score from 0.0 (renounced/safe) to 1.0 (critical danger).
valid_base58YesTrue when the provided address is a valid Base58 Solana public key.
should_transactYesTrue when the token passes authority and concentration safety checks.
freeze_authority_presentYesTrue if an active authority can freeze holder token accounts.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, non-destructive behavior, and closed-world scope. The description adds valuable operational context beyond annotations: statelessness, a 32 KB limit, 60 RPM rate limit, demo/L402 payment options, and HTTP 400 on invalid input, with no contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose and the sibling differentiation before operational details. Despite being information-dense, each clause contributes useful selection or invocation context, and there is no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a stateless two-parameter evaluator with an output schema, the description covers purpose, sibling routing, input expectations, rate/size limits, payment modes, and error behavior. An agent has enough information to select and invoke it correctly without needing return-value documentation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters and the risk_profile enum are already well documented. The description reiterates the default risk_profile and token_address input but adds only marginal meaning beyond the schema's own parameter descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: evaluating a Solana SPL token's rug-pull probability via mint authority, freeze authority, mutable metadata, and holder concentration. It explicitly distinguishes this security assessment from inspect_solana_token_liquidity, which handles symbol, decimals, and DEX liquidity metadata.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives a clear when-to-use condition: pre-trade security decisions on whether a Solana SPL token is safe to buy. It also names the alternative tool and the exact condition for using that sibling instead, leaving little room for misselection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

execute_antigravity_agentGoogle Antigravity Multi-Step Autonomous Coding & Workflow AgentA
Read-onlyIdempotent
Inspect

Dispatches a complex engineering or operational task to Google's Antigravity autonomous agent for multi-step planning, tool orchestration, and verified execution. Use when solving multi-stage software engineering or workflow tasks that require autonomous planning; for compiling exhaustive multi-source literature and market research dossiers, use conduct_deep_research_investigation instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'input' ('execution_mode' defaults to 'autonomous_verified'), supports '?demo=true' or L402 (150 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
inputYesHigh-level task objective and constraints for the Antigravity autonomous agent.
execution_modeNoAutonomy policy for subtask execution; defaults to 'autonomous_verified' when omitted.

Output Schema

NameRequiredDescription
agentYesAutonomous agent identifier ('antigravity-preview-latest').
outputYesSynthesized final deliverable and action trace summary.
successYesTrue when the agent completed all planned steps.
environmentYesExecution environment ('remote').

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (which already declare readOnly/idempotent/openWorld/non-destructive), it discloses that the call is stateless, capped at 32 KB, rate-limited to 60 RPM, has a 150 s timeout, and supports demo/L402 payment modes. It also states the failure behavior (HTTP 400 on invalid input), which is exactly the kind of operational context the description should carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with purpose then routing then operational constraints; almost every clause carries information. It is dense to the point of being slightly packed (payment, size, rate, timeout, error code in one sentence), but nothing is clearly wasteful.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need not be described; the description covers the missing pieces an agent needs — auth/payment path, size and rate limits, timeout, and error behavior. Nothing required to invoke it correctly is absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented. The description only restates the 'input' role and the execution_mode default, adding no new syntax or format guidance beyond the schema — the baseline of 3 for schema-complete tools applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Dispatches') and resource ('Google's Antigravity autonomous agent') with the scope of what the agent does (multi-step planning, tool orchestration, verified execution). It explicitly names the sibling it is not (conduct_deep_research_investigation), so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a positive trigger ('multi-stage software engineering or workflow tasks that require autonomous planning') and a negative rule with the alternative tool named for research dossiers. The routing decision is fully specified rather than inferred.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

execute_python_sandboxAST-Audited Ephemeral Python Code Execution SandboxA
Read-onlyIdempotent
Inspect

Audits Python source code for forbidden syscalls (os, subprocess, socket, open, eval) inside an AST-governed WebAssembly sandbox with no host filesystem access. Use when executing LLM-generated Python snippets safely; for checking shell commands without executing code, use verify_agent_command_safety instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'python_script' ('timeout_profile' defaults to 'fast_1s'), supports '?demo=true' or MPP (250 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
python_scriptYesPython 3 source script to audit and execute strictly inside an isolated AST-governed, non-privileged WebAssembly sandbox with no host filesystem access.
timeout_profileNoExecution resource ceiling; defaults to 'standard_5s' when omitted.

Output Schema

NameRequiredDescription
exit_codeYesProcess exit status (0 on clean execution, 1 on security block).
syntax_validYesTrue if the Python source parses without syntax errors.
simulated_stdoutYesCaptured standard output from the isolated execution.
ast_security_auditYesStatic syscall audit summary including flagged_calls and safety_verdict.

TDQS

A4.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds genuinely useful operational context beyond the annotations: 32 KB payload cap, 60 RPM rate limit, stateless edge call, no host filesystem, HTTP 400 on invalid input, demo/MPP payment path. However it never explains what the AST audit actually rejects at runtime (blocklist behavior, false-positive handling) or whether execution results include partial output on timeout. The readOnly/idempotent claims are consistent with the annotations but are simply restated, so the surplus value is mostly limits rather than semantics.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action and the sibling differentiation, with no filler sentences. The final sentence crams limits, defaults, payment modes, and error codes into one long clause, which costs some scannability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter tool with an output schema, the description covers what an agent needs to call it correctly: isolation guarantees, size/rate limits, default profile, payment/demo affordance, and failure signaling. Return-value explanation is correctly omitted since the output schema carries it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description says timeout_profile 'defaults to fast_1s', while the schema description says it 'defaults to standard_5s when omitted'. That is a direct conflict on the most consequential parameter, and an agent trusting the prose would mis-size execution ceilings. Otherwise the prose just restates python_script and the enum, both of which the 100% coverage schema already documents.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource (audit + execute Python source) plus the execution mechanism (AST-governed WebAssembly sandbox, no host filesystem). It explicitly contrasts itself with the sibling verify_agent_command_safety, so an agent can route between them without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a positive trigger (executing LLM-generated Python snippets safely) and a named alternative with the discriminating condition (checking shell commands without executing). The routing decision is fully determined by the description.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

expand_search_queriesHigh-Entropy Boolean & Semantic Search Query ExpanderA
Read-onlyIdempotent
Inspect

Generates targeted Boolean queries, semantic synonym variations, and sub-question expansions from an ambiguous prompt. Use when overcoming query vocabulary mismatches and expanding search recall across academic, code, or patent databases; for scoping queries to domain categories, use filter_domain_intelligence instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'base_query' ('expansion_strategy' defaults to 'boolean_operators'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
base_queryYesInitial search prompt or ambiguous question requiring semantic query expansion.
target_countNoTarget count of query variations to synthesize.
expansion_strategyNoQuery expansion method: Boolean operators, semantic synonyms, or cross-domain questions.

Output Schema

NameRequiredDescription
original_queryYesOriginal user input query before expansion.
expanded_queriesYesArray of synthesized search strings optimized for search engine indexing.
intent_classificationYesIdentified query intent (e.g., informational, transactional, technical_navigational).

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations with operational constraints: stateless edge call, 32 KB cap, 60 RPM rate limit, '?demo=true' or L402 payment (10 sats), and HTTP 400 on invalid input. The 32 KB/RPM/L402 details in particular are critical for an agent to avoid failures and are not derivable from annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core purpose and the sibling routing in the first two sentences; the remaining technical limits are packed densely but each clause is a distinct, useful fact. The second sentence is a long run-on that could be split, but no sentence is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need not be explained, and the description still covers limits, auth, error behavior, and the key parameter default. An agent has everything needed to call this correctly and interpret success/failure.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3; the description adds value by disclosing the 'expansion_strategy' default of 'boolean_operators', which is not in the schema. It does not elaborate on 'target_count', so it doesn't fully elevate above the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and output type — 'Generates targeted Boolean queries, semantic synonym variations, and sub-question expansions' — from an 'ambiguous prompt'. It also explicitly contrasts itself with the sibling filter_domain_intelligence, so an agent can distinguish the two without inspecting schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Names the triggering condition ('overcoming query vocabulary mismatches and expanding search recall across academic, code, or patent databases') and explicitly routes the alternative case ('for scoping queries to domain categories, use filter_domain_intelligence instead'). Both when-to-use and when-not are covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

extract_clean_markdownWeb HTML to Clean LLM-Optimized Markdown EngineA
Read-onlyIdempotent
Inspect

Converts raw HTML pages into clean, boilerplate-free, LLM-optimized Markdown with preserved hyperlinks and headings. Use when ingesting raw web documents or blog posts into agent context windows; for isolating tabular data into structured datasets, use parse_html_tables instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'html_content' ('conversion_mode' defaults to 'clean_semantic_article'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
html_contentYesRaw HTML string of the web page or document to convert to clean Markdown.
preserve_linksNoWhether to retain anchor hyperlinks and image markdown references in output.
conversion_modeNoMarkdown extraction strategy: clean semantic article, preserve tables/code, or minimal text.

Output Schema

NameRequiredDescription
titleYesDocument title extracted from H1 or title tag.
markdownYesClean, sanitized LLM-ready markdown document.
word_countYesNet word count of extracted readable prose.
links_extracted_countYesTotal hyperlinks preserved in document.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only/idempotent/non-destructive, but the description adds material context the annotations cannot: statelessness, a 32 KB input ceiling, 60 RPM throttling, access via '?demo=true' or L402 payment of 10 sats, and an HTTP 400 failure mode for invalid input. Those are exactly the operational constraints an agent needs before calling a rate-limited, paywalled edge endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with purpose then routing, with zero filler. The final sentence is a dense run-on of parentheticals (size cap, rate limit, payment, defaults, error code) that would scan better as a short list, which keeps it from a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-shape explanation is unnecessary, and the annotations cover the safety profile. The description fills the remaining gaps an agent would care about: input limits, throttling, auth/payment paths, and failure behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3; the description goes slightly beyond by disclosing the default value of 'conversion_mode' ('clean_semantic_article'), which the schema does not declare. It does not otherwise explain the tradeoffs among the three enum modes, so it stops short of a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Converts raw HTML pages into clean, boilerplate-free, LLM-optimized Markdown') and names the exact output characteristics ('preserved hyperlinks and headings'). It also explicitly distinguishes itself from the sibling parse_html_tables, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use condition ('Use when ingesting raw web documents or blog posts into agent context windows') and an explicit alternative with its own condition ('for isolating tabular data into structured datasets, use parse_html_tables instead'). The when-to-use and the sibling exclusion are both present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

extract_contact_infoLead Contact, Email, Phone & Social Handle ExtractorA
Read-onlyIdempotent
Inspect

Extracts email addresses, telephone numbers, physical addresses, and social network handles from web text and DOM footers. Use when researching sales leads, aggregating business contact directories, or extracting customer service info; for parsing structured tabular data, use parse_html_tables instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'content' ('extraction_focus' defaults to 'all_contacts'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
contentYesRaw text or HTML page content to scan for contact channels and lead info.
country_hintNoTwo-letter ISO country code for telephone numbering format hints.
extraction_focusNoContact filter focus: all contact info, emails and phones only, or social handles only.

Output Schema

NameRequiredDescription
emailsYesDeduplicated valid email addresses extracted from page content.
phone_numbersYesStandardized telephone numbers discovered in international or national format.
social_profilesYesIdentified social profiles (Twitter/X, GitHub, LinkedIn, Discord, Telegram).
physical_addressesYesPostal addresses or physical headquarters locations identified.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds non-obvious operational facts: statelessness, a 32 KB payload cap, 60 RPM throttling, demo mode or L402 payment at 10 sats, and HTTP 400 on invalid input. These are runtime constraints an agent could not infer from the schema or annotations, which is exactly what this dimension rewards.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in the first sentence, followed by usage then runtime constraints, with no filler. The final sentence packs size, rate, auth, default, and error details into one dense parenthetical, which is efficient but slightly hard to parse in a single read.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no explanation, and the description covers the remaining gaps an agent needs: statelessness, input size, throughput, payment/auth path, and failure code. Nothing material for a correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds the non-defaulted value that extraction_focus defaults to 'all_contacts' – information the schema itself does not state. country_hint is left entirely to the schema, keeping it below a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a concrete verb plus four specific resource types (emails, phones, physical addresses, social handles) and the source scope (web text and DOM footers). It explicitly contrasts with parse_html_tables, so the agent can separate it from the closest sibling without reading either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives three positive use cases (sales lead research, business contact directories, customer service info) and an explicit exclusion routing structured tabular input to parse_html_tables. The when/when-not pair is fully resolved.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

extract_scholarly_citationsScholarly Citation Compiler (BibTeX, APA, IEEE, MLA) & DOI ResolverA
Read-onlyIdempotent
Inspect

Formats academic paper metadata and DOI identifiers into standard scholarly citation formats (BibTeX, APA, IEEE, MLA). Use when generating bibliographies for research papers, validating journal references, or resolving DOI identifiers; for structuring research timelines, use summarize_temporal_timeline instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'source_content_or_doi' ('citation_style' defaults to 'bibtex_format'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
citation_styleNoBibliographic citation standard: BibTeX format, APA 7th edition, IEEE standard, or MLA 9th edition.
include_abstractNoWhether to include publication abstract in structured metadata.
source_content_or_doiYesDOI string, arXiv ID, or raw paper title with author list to format into citation.

Output Schema

NameRequiredDescription
metadataYesParsed bibliographic fields including title, authors, year, journal, and doi.
citation_styleYesCitation specification name applied to the formatted reference.
formatted_citationYesFormatted bibliographic reference string adhering to the chosen citation standard.

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only, idempotent, non-destructive and closed-world status, yet the description still adds real operational context: statelessness, a 32 KB payload cap, 60 RPM rate limit, demo mode vs L402 payment (10 sats), and an HTTP 400 failure mode. This is meaningful disclosure beyond the structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core purpose and formats before the operational parenthetical. Dense but nearly every clause carries information; the format list is duplicated from the title and the DOI-resolution behavior could be folded more tightly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need no explanation; the description instead covers the things an agent cannot infer — input size limit, rate limit, auth/payment paths, and error behavior. Nothing material for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3, but the description adds value the schema does not: the default value of 'citation_style' ('bibtex_format') and the 32 KB ceiling that constrains 'source_content_or_doi'. The 'include_abstract' parameter is left entirely to the schema, keeping this below a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Formats academic paper metadata and DOI identifiers into standard scholarly citation formats,' and enumerates the concrete output formats. It also names a sibling tool (summarize_temporal_timeline) to contrast against, so an agent can distinguish it without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit triggering contexts — generating bibliographies, validating journal references, resolving DOIs — and an explicit redirect to summarize_temporal_timeline for timeline work. The named alternative is somewhat tangential to citation formatting, but the when-to-use guidance itself is unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

extract_structured_json_entitiesUnstructured Text to Typed JSON Entity & Record ExtractorA
Read-onlyIdempotent
Inspect

Extracts structured JSON records, named entities, dates, and financial figures from unstructured prose, emails, or HTML/Markdown dumps. Use when converting unstructured natural-language text into a structured JSON array of entities; for validating and coercing an existing JSON payload against a formal JSON Schema, use enforce_json_schema_types instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'text' ('extraction_target' defaults to 'general_entities_and_metrics'), supports '?demo=true' or L402 (25 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
textYesUnstructured document, email body, or webpage text to extract structured entities from.
extraction_targetNoPrimary entity domain to extract; defaults to 'general_entities_and_metrics' when omitted.

Output Schema

NameRequiredDescription
modelYesExtraction model executed ('gemini-3.8-flash').
successYesTrue when entity extraction succeeded.
records_countYesNumber of distinct entity records extracted.
extracted_dataYesStructured JSON object or array containing the extracted entities.

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, openWorldHint=false and destructiveHint=false, so the safety profile is largely covered. The description adds genuinely useful operational context beyond that: statelessness, a 32 KB payload cap, a 60 RPM rate limit, ?demo=true or L402 (25 sats) authorization, and an HTTP 400 on invalid input. However, it does not describe what the returned array's element shape or ordering is, leaving a real gap for a tool whose whole output is a JSON structure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose, then routing, then operational constraints, with no filler. The second sentence becomes a long comma- and colon-chained run-on mixing limits, auth, and error behavior, which slightly hurts scannability but costs no meaningful length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description need not explain return values, and it covers the remaining agent-critical facts: input size ceiling, rate limit, auth options, default extraction target, and failure mode. Nothing needed to invoke it successfully is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both 'text' and 'extraction_target' are already documented, including the enum's four domains. The description only restates the default ('extraction_target' defaults to 'general_entities_and_metrics'), which duplicates the schema, and adds no extraction heuristics per domain. Baseline 3 is appropriate when the schema carries the parameter burden.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Extracts') and a specific set of resources ('structured JSON records, named entities, dates, and financial figures') from a clearly scoped input ('unstructured prose, emails, or HTML/Markdown dumps'). It also explicitly differentiates itself from the nearest sibling, enforce_json_schema_types, so an agent can choose between them without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use condition ('Use when converting unstructured natural-language text into a structured JSON array of entities') and names the alternative tool plus the condition that selects it ('for validating and coercing an existing JSON payload against a formal JSON Schema, use enforce_json_schema_types instead'). The routing decision is fully specified with no inference required.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

extract_structured_metadataOpenGraph, Twitter Cards & JSON-LD Microdata ExtractorA
Read-onlyIdempotent
Inspect

Extracts OpenGraph tags, Twitter Card metadata, canonical URLs, and Schema.org JSON-LD microdata scripts from HTML. Use when indexing social share cards, author identity, breadcrumbs, and rich snippet schemas for AI search agents; for scanning page hyperlinks and outbound references, use extract_page_hyperlinks instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'html_content' ('metadata_targets' defaults to 'all_protocols'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
html_contentYesSource HTML string containing head tags, OpenGraph meta properties, or JSON-LD scripts.
include_faviconsNoWhether to extract favicon links and Apple Touch icon references.
metadata_targetsNoTarget metadata protocol filter: all protocols, OpenGraph and Twitter, or Schema.org JSON-LD.

Output Schema

NameRequiredDescription
open_graphYesStructured OpenGraph properties including og:title, og:image, and og:description.
twitter_cardYesTwitter Card metadata including twitter:card, twitter:creator, and twitter:image.
canonical_urlYesCanonical canonical link target or empty string if unspecified.
json_ld_schemasYesParsed Schema.org JSON-LD structured data objects.

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only/idempotent/non-destructive, but the description adds genuinely new operational context: stateless edge call, 32 KB payload cap, 60 RPM rate limit, and auth via '?demo=true' or L402 (10 sats). HTTP 400 error behavior is also disclosed. It stops short of describing the return payload shape, but with an output schema present that is acceptable.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three front-loaded sentences, no filler, with purpose first and the routing alternative immediately after. The final sentence is dense with limits, defaults, and pricing, but every clause carries information an agent needs.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only extraction tool with an output schema, the description supplies everything else that matters: size limit, rate limit, auth/payment path, invalid-input behavior, and parameter default. No operational gap remains for an agent to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds value the schema does not: it states that 'metadata_targets' defaults to 'all_protocols', which is not encoded as a default in the schema. It does not explain include_favicons, but that parameter is fully documented in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and enumerates the exact resources extracted (OpenGraph, Twitter Cards, canonical URLs, JSON-LD), and explicitly names the sibling extract_page_hyperlinks as the different tool. An agent can distinguish this from extract_structured_json_entities or extract_page_hyperlinks without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit when-to-use triggers (social share cards, author identity, breadcrumbs, rich snippets) plus an explicit when-not with the alternative tool named ('for scanning page hyperlinks ... use extract_page_hyperlinks instead'). Routing is unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

filter_domain_intelligenceCurated Domain Registry Scope & Source Authority FilterA
Read-onlyIdempotent
Inspect

Scopes search execution and filters results strictly across verified high-reputation domain registries and regulatory bodies. Use when restricting search discovery to verified academic papers, SEC filings, official documentation, or legal statutes; for checking specific factual claims, use verify_factual_claims instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'query' ('domain_tier' defaults to 'academic_and_research'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
queryYesTopic or query to execute across specialized domain registries.
domain_tierNoCurated domain authority tier: academic and research, regulatory and legal, tech docs, or financial.
time_horizonNoOptional recency filter window (e.g., '1y', '5y', 'all_time').

Output Schema

NameRequiredDescription
ranked_sourcesYesCurated list of authoritative domain sources and matching resource URLs.
domain_categoryYesDomain tier authority classification applied.
whitelist_appliedYesList of domain regex patterns and whitelisted hosts enforced.

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, non-destructive and closed-world, so the safety profile is covered; the description still adds real operational context beyond them — stateless, 32 KB max, 60 RPM, L402 at 10 sats or ?demo=true, and HTTP 400 on invalid input. It stops short of describing result ordering or failure modes beyond the 400, keeping it at 4 rather than 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two dense sentences, front-loaded with purpose then usage then operational constraints, with no filler. The second sentence is a long run-on packing default, payment, size and rate limits together, which costs some scannability but every clause carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need no explanation, and the annotations already carry the safety hints. The description supplies the remaining decision-critical facts — default tier, cost/payment path, rate and payload limits, and the invalid-input error — so an agent can call this correctly without further probing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description earns an extra point by disclosing the 'domain_tier' default ('academic_and_research'), which the schema does not state. It does not explain the 'time_horizon' syntax beyond the schema's own example, so it is not a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — scoping search execution and filtering results to verified high-reputation domain registries and regulatory bodies — and identifies the concrete content classes (academic papers, SEC filings, official docs, statutes). An agent can distinguish this curated-authority search from the plain web search and fact-check siblings without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use clause ('restricting search discovery to verified academic papers, SEC filings...') and routes the agent away with a named alternative: 'for checking specific factual claims, use verify_factual_claims instead.' The selection condition is stated, not implied.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

find_eve_ssu_arbitrageEVE Frontier Multi-System SSU Commodity Arbitrage Route FinderA
Read-onlyIdempotent
Inspect

Scans Smart Storage Unit (SSU) bid/ask spreads across star systems against ship cargo capacity and stargate fuel costs to rank net-profitable arbitrage loops. Use when planning multi-system trade runs to maximize net LUX profit per gigajoule of fuel burned; for calculating internal bid/ask market-maker quotes for your own SSU, use quote_eve_ssu_market instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'origin_system' ('hull_cargo_class' defaults to 'light_courier'), supports '?demo=true' or L402 (30 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
origin_systemYesStarting solar system for the trade vessel (e.g. 'System-Alpha').
hull_cargo_classNoTrade vessel hull class determining cargo volume and fuel mass; defaults to 'medium_hauler' when omitted.

Output Schema

NameRequiredDescription
best_commodityYesHighest-margin commodity identified across reachable SSUs.
buy_ssu_systemYesSolar system where the commodity should be purchased.
sell_ssu_systemYesSolar system where the commodity should be sold.
net_profit_lux_after_tollsYesNet LUX profit after deducting gate tolls and fuel replacement cost.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description adds operational context those hints cannot: stateless edge call, 32 KB payload cap, 60 RPM limit, demo flag or L402 payment of 30 sats, and HTTP 400 on invalid input. That is exactly the kind of auth, throttling and failure-mode detail an agent needs before invoking a paid endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Dense but front-loaded: purpose and routing to the alternative come first, operational constraints are packed into a final clause. The auth/rate-limit sentence is compressed almost to shorthand, which borders on cryptic, but no sentence is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so ranking/loop return details need not be explained; the description instead covers what the schema cannot — cost model, limits, payment, error behavior. The only real completeness defect is the incorrect default for hull_cargo_class, which contradicts the parameter definition.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the description restates the origin_system and hull_cargo_class roles, so it adds little beyond the schema. Worse, it says hull_cargo_class 'defaults to light_courier' while the schema says the default is 'medium_hauler' — a direct conflict that could make an agent mis-model cargo volume and fuel cost.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: scanning SSU bid/ask spreads across star systems against cargo capacity and fuel costs to rank net-profitable arbitrage loops. It explicitly names the sibling it is not (quote_eve_ssu_market) and the condition that separates them, so an agent can choose without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use case ('planning multi-system trade runs to maximize net LUX profit per gigajoule of fuel burned') and an explicit exclusion routing to quote_eve_ssu_market for internal market-maker quotes. When-to-use and when-not-to-use are both present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_boundary_test_vectorsJSON Schema & Function Signature Boundary-Value Test Vector GeneratorA
Read-onlyIdempotent
Inspect

Synthesizes deterministic unit-test vectors from a JSON Schema or function signature covering valid equivalence partitions, numeric/length boundaries, and adversarial Unicode/null inputs. Use when generating exhaustive edge-case unit test payloads and fuzz vectors for an API endpoint or function; for healing and applying unified diffs or search/replace edits to source code, use apply_fuzzy_code_patch instead. Read-only edge call (32 KB, 60 RPM): accepts 'schema_or_signature_json' (with enum defaults), uses '?demo=true' or L402 (20 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
vector_suite_profileNoTest generation coverage profile; defaults to 'equivalence_boundary_and_fuzz' when omitted.
schema_or_signature_jsonYesJSON Schema object or function parameter specification to generate test vectors for.

Output Schema

NameRequiredDescription
boundary_edge_vectorsYesEdge payloads testing zero, negative, MAX_SAFE_INTEGER, and empty/max length boundaries.
total_vectors_generatedYesTotal number of deterministic test vectors produced.
valid_partition_vectorsYesValid happy-path payloads covering required and optional equivalence classes.
adversarial_fuzz_vectorsYesNegative test vectors testing missing required fields, wrong types, and Unicode/injection strings.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations (readOnly/idempotent/non-destructive) by disclosing a 32 KB response cap, 60 RPM rate limit, the auth model ('?demo=true' or L402 at 20 sats), and the failure mode ('HTTP 400 if invalid'). Those are exactly the operational facts an agent needs before calling a paid edge endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in the first sentence and every subsequent clause carries operational value (alternative routing, limits, auth, error code). The final sentence is telegraphic and semicolon-chained, which slightly hurts scannability but wastes no words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need no prose; the description still covers invocation preconditions, cost/auth, throughput cap, and the error case. Nothing an agent needs in order to call this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both 'schema_or_signature_json' and 'vector_suite_profile' (with its enum values and default) are already documented in the schema. The description only echoes the input name and alludes to 'enum defaults', adding negligible meaning beyond the structured field; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('synthesizes deterministic unit-test vectors from a JSON Schema or function signature') and enumerates the coverage classes: equivalence partitions, numeric/length boundaries, adversarial Unicode/null inputs. An agent can distinguish this from neighbors like enforce_json_schema_types or apply_fuzzy_code_patch without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use it ('generating exhaustive edge-case unit test payloads and fuzz vectors for an API endpoint or function') and names a sibling to route away to for source-editing work ('use apply_fuzzy_code_patch instead'). The exclusion targets a different task domain rather than a true competing alternative, so it's clear context but not a full when/when-not decision matrix.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_eve_assembly_moveEVE Frontier Sui Move Smart Assembly Contract Generator & AuditorA
Read-onlyIdempotent
Inspect

Generates and statically audits Sui Move smart contract modules for EVE Frontier Smart Assemblies using Witness, Capability, and HotPotato patterns. Use when authoring custom Sui Move extensions for Smart Gates, Smart Turrets, or Smart Storage Units; for simulating pre-signed Programmable Transaction Block command arrays before wallet execution, use simulate_eve_sui_ptb instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'contract_type' ('assembly_id' defaults to 'standard'), supports '?demo=true' or L402 (45 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
assembly_idNoOptional Smart Assembly identifier to bind into module constants; defaults to 'frontier-assembly-01' when omitted.
contract_typeYesTarget EVE Frontier Smart Assembly archetype to synthesize and audit.

Output Schema

NameRequiredDescription
module_nameYesFully qualified Sui Move module identifier (e.g. 'frontier::smart_gate').
sui_move_codeYesComplete, syntactically valid Sui Move smart contract source code.
move_patterns_usedYesVerified Sui Move safety patterns enforced in the module.
security_audit_passedYesTrue when Witness drop and Capability access checks pass static verification.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds substantial non-structured behavior: statelessness, a 32 KB payload cap, a 60 RPM rate limit, an L402 payment path (45 sats) versus '?demo=true', and an HTTP 400 failure mode for invalid input. Those are operational details an agent cannot recover from the schema or annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose, then usage/alternative, then operational constraints — a sensible ordering. The final sentence is densely packed with semicolon-separated clauses (size cap, rate limit, demo flag, L402 price, error code) that read as one run-on, but no sentence is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value detail is legitimately omitted, and the description covers payment, limits, and failure behavior. What is left slightly unclear is whether the static audit findings are part of that output or a separate concern, and the conflicting default noted above leaves one open question at call time.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline would be 3, but the description actively adds contradictory information: it says 'assembly_id' defaults to 'standard' while the schema documents the default as 'frontier-assembly-01'. It also never mentions the 'fuel_distributor' enum value that the tool accepts. Conflicting parameter guidance is worse than none.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific compound verb+resource: 'Generates and statically audits Sui Move smart contract modules for EVE Frontier Smart Assemblies', and names the design patterns (Witness, Capability, HotPotato) that define the output shape. It also distinguishes itself from the sibling simulate_eve_sui_ptb by resource scope, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use ('Use when authoring custom Sui Move extensions for Smart Gates, Smart Turrets, or Smart Storage Units') plus an explicit alternative and its selecting condition ('for simulating pre-signed ... PTB command arrays before wallet execution, use simulate_eve_sui_ptb instead'). This is the rare case where sibling routing is spelled out rather than inferred.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_gemini_completionAccount-Less Google Gemini 4 Argon & 3.1 Pro Universal Text GeneratorA
Read-onlyIdempotent
Inspect

Generates text completions and structured reasoning across all 45 Google Gemini foundation models (Gemini 4 Argon, 3.1 Pro, 3.8 Flash) with zero Google account or API key required. Use when running single-turn reasoning, coding, or analytical prompts on a specific Gemini model; for delegating multi-step complex tasks that require remote tool execution, use execute_antigravity_agent instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'prompt' ('model' defaults to 'gemini-4-argon'), supports '?demo=true' or L402 (50 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
modelNoTarget Gemini foundation model identifier; defaults to 'gemini-4-argon' when omitted.
promptYesPrimary user instruction or reasoning prompt to send to the selected Gemini model.

Output Schema

NameRequiredDescription
modelYesGemini model identifier that executed the completion.
outputYesGenerated model response text.
successYesTrue when inference completed without upstream errors.
grounding_metadataYesOptional citation metadata if search grounding was enabled.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description adds context annotations cannot: stateless edge call, 32 KB payload ceiling, 60 RPM throttle, demo-mode or L402 payment (50 sats), and an HTTP 400 on invalid input. These are operational traits an agent needs before calling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two dense sentences, front-loaded with the core action and the alternative, then limits/auth/response codes. Every clause carries information, though the parenthetical model list and marketing tone ('zero Google account') add a little padding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need not be explained, and the description covers limits, rate, auth/payment, defaults, and error behavior. The residual gap is the demo/L402 flags, which are mentioned but are not schema parameters, leaving it unclear how an agent is meant to pass them.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% so baseline is 3, but the description adds real meaning: the 'model' default is 'gemini-4-argon' and the prompt has a 32 KB cap. The added value is undercut by saying 'all 45 models' while the enum exposes only four, which could confuse an agent reasoning about valid model values.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb + resource ("generates text completions and structured reasoning") with the exact model family named, and it explicitly distinguishes itself from execute_antigravity_agent. An agent can tell what this does and what it does not do without opening the schema, though the '45 models' claim versus the 4-value enum is a small inconsistency.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

States the use case (single-turn reasoning, coding, analytical prompts on a specific Gemini model) and names the alternative with the selecting condition: multi-step tasks needing remote tool execution go to execute_antigravity_agent. That is explicit when/when-not routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_gemini_embeddingsGemini Embedding 2 High-Dimensional (3,072-D) Vector GeneratorA
Read-onlyIdempotent
Inspect

Generates normalized 3,072-dimensional or 768-dimensional semantic vector embeddings via Google Gemini Embedding 2 for RAG indexing and cosine-similarity search. Use when embedding text passages or queries via L402 Lightning with configurable Matryoshka dimensions; for running live Google Search grounded factual queries, use search_gemini_grounded_web instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'text' ('model' defaults to 'gemini-embedding-2'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
textYesInput text passage, code snippet, or search query to embed into a float vector.
modelNoGemini embedding model version; defaults to 'gemini-embedding-2' when omitted.

Output Schema

NameRequiredDescription
modelYesEmbedding model executed.
successYesTrue when vector generation succeeded.
embeddingYesNormalized floating-point embedding vector.
dimensionsYesVector dimensionality returned (e.g. 3072 or 768).

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well past the annotations by disclosing statelessness, the 32 KB input cap, 60 RPM rate limit, L402 Lightning payment (10 sats) and a demo mode, plus a 400 error on invalid input. One weak spot: the description advertises 'configurable Matryoshka dimensions' but the schema exposes no dimension parameter, leaving ambiguity about how 3,072 vs 768 is actually selected.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the core purpose and the sibling exclusion before the operational details. Some sentences are heavily clause-stacked (payment, limits, error code in one breath), which slightly hurts scanability but not comprehension.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter, read-only embedding call with an output schema and full annotation coverage, everything an agent needs to call it correctly is present: input limit, auth/payment path, rate limit, model default, and failure mode. Return-value details are correctly left to the output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3; the description still adds value by restating the default model and framing 'text' as passage, code snippet, or query. It adds little beyond the schema for 'model' (the enum and default are already documented), so it lands just above baseline rather than at 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (generates), resource (normalized semantic vector embeddings), producer (Gemini Embedding 2), and dimensionality (3,072-D / 768-D), plus the downstream use (RAG indexing, cosine search). It also explicitly names the sibling it is not (search_gemini_grounded_web), so an agent can separate it from the other Gemini tools without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use when embedding text passages or queries' and gives an exclusion rule with the named alternative for grounded factual queries. The when/when-not pair is unambiguous and immediately actionable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_nano_banana_imageNano Banana Pro (Gemini Image) Visual Asset & Diagram GeneratorA
Read-onlyIdempotent
Inspect

Generates photorealistic illustrations, UI mockups, and technical diagrams from text prompts using the Nano Banana Pro (Gemini 2.5 Flash Image) model family. Use when creating static visual assets, icons, or architecture diagrams from text descriptions; for synthesizing animated multi-second video clips with motion, use generate_veo_cinematic_video instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'prompt' ('aspect_ratio' defaults to '1:1'), supports '?demo=true' or L402 (75 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
promptYesDetailed visual scene, composition, lighting, and typography description to render.
aspect_ratioNoOutput image aspect ratio; defaults to '16:9' when omitted.

Output Schema

NameRequiredDescription
modelYesImage generation model executed ('gemini-2.5-flash-image').
noticeYesExecution confirmation notice.
outputYesGenerated image payload or asset descriptor.
successYesTrue when visual asset synthesis succeeded.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations by disclosing statelessness, a 32 KB payload cap, 60 RPM rate limiting, the ?demo=true switch and L402 payment of 75 sats, and that invalid input returns HTTP 400. These are operational facts an agent cannot get from readOnlyHint/idempotentHint, and they are consistent with the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads purpose and the sibling exclusion in the first two sentences, which is ideal. The final sentence crams rate limits, payload cap, demo mode, payment, and error behavior into a single dense parenthetical, which is efficient but reads as a run-on rather than a cleanly separated operational note.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter generation tool with an output schema present, the description covers everything an agent needs: cost/payment, rate limits, input cap, and failure mode. The only gap is the incorrect aspect_ratio default, which leaves the agent with conflicting guidance on that parameter.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline would be 3, but the description contradicts the schema by claiming aspect_ratio 'defaults to 1:1' while the schema says it 'defaults to 16:9 when omitted.' That conflicting default is actively misleading for the one optional parameter and is worse than saying nothing.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (generates) plus concrete outputs (photorealistic illustrations, UI mockups, technical diagrams) from text prompts, and names the model family. It explicitly distinguishes itself from generate_veo_cinematic_video, so an agent can route between static-image and video generation without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use clause ('creating static visual assets, icons, or architecture diagrams from text descriptions') and an explicit when-not-to-use clause that names the alternative sibling for animated clips. Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_orm_modelsSQL DDL to Type-Safe ORM Entity Compiler (Prisma, Drizzle, Zod)A
Read-onlyIdempotent
Inspect

Compiles SQL DDL schemas into type-safe ORM entities and TypeScript validation schemas (Prisma, Drizzle, SQLAlchemy, Zod). Use when scaffolding application models, generating TypeScript data layers, or synchronizing schemas; for translating raw SQL across dialects, use transpile_sql_dialect instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'schema_ddl' ('orm_target' defaults to 'drizzle_orm_typescript'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
orm_targetNoTarget ORM framework standard: Prisma schema, Drizzle ORM TypeScript, SQLAlchemy Python 2.0, or Zod types.
schema_ddlYesDatabase schema DDL statements defining tables, primary keys, and relationships.
include_relationsNoWhether to generate explicit foreign key relation decorators and navigation properties.

Output Schema

NameRequiredDescription
compiled_codeYesGenerated type-safe model code matching the specified ORM or validation schema framework.
orm_frameworkYesName of the target ORM framework output produced.
models_generatedYesList of model entity names successfully parsed and compiled from the schema.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description adds materially new operational facts: statelessness, a 32 KB payload ceiling, 60 RPM rate limit, the '?demo=true' bypass or L402 payment of 15 sats, and HTTP 400 on invalid input. These are exactly the runtime constraints annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded, then usage, then operational constraints — a sensible order. The second sentence is dense with parenthetical detail, which borders on crowded but every clause carries real decision-relevant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value explanation is unnecessary; the description instead covers the things that matter for a hosted compiler call — size limit, rate limit, auth/payment path, and failure mode. An agent has everything needed to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3; the description earns a bump by disclosing the default for orm_target ('drizzle_orm_typescript'), which is absent from the schema. It does not, however, explain include_relations semantics beyond what the schema already says.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with a specific verb and resource — 'Compiles SQL DDL schemas into type-safe ORM entities' — and enumerates the target outputs (Prisma, Drizzle, SQLAlchemy, Zod). It also names the sibling it is not (transpile_sql_dialect), so an agent can distinguish it without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives explicit trigger contexts ('scaffolding application models, generating TypeScript data layers, or synchronizing schemas') and an explicit exclusion routing to transpile_sql_dialect for raw SQL dialect translation. Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_veo_cinematic_videoGoogle Veo 3 High-Definition Cinematic Video GeneratorA
Read-onlyIdempotent
Inspect

Synthesizes high-definition cinematic video sequences with temporally coherent camera motion and physics using Google Veo 3. Use when generating moving video clips, product B-roll, or animated scene renders from text prompts; for rendering static single-frame images or diagrams at lower cost, use generate_nano_banana_image instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'prompt' ('motion_style' defaults to 'static_tripod'), supports '?demo=true' or L402 (650 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
promptYesCinematic scene description including subject motion, camera trajectory, and lighting.
motion_styleNoCamera movement preset; defaults to 'smooth_tracking_shot' when omitted.

Output Schema

NameRequiredDescription
modelYesVideo synthesis model executed ('veo-3-generate').
noticeYesExecution status summary.
outputYesGenerated video stream descriptor and frame metadata.
successYesTrue when Veo 3 synthesis completed.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, and the description adds genuinely new operational context: stateless edge call, 32 KB payload cap, 60 RPM rate limit, auth via '?demo=true' or L402 payment of 650 sats, and a 400 error on invalid input. That is exactly the kind of cost/limit/auth information an agent cannot get from the structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core capability is front-loaded, followed by the sibling routing and then operational constraints. It is dense but nearly every clause carries new information; only the payoff/auth details are crammed into a single parenthetical that is harder to parse than it needs to be.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need not be explained, and the description covers auth, limits, and failure behavior. What remains unstated is whether generation is synchronous or returns a job handle, and typical latency/cost per call beyond the L402 price — useful given video generation is long-running.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the parameters are already documented, and the description reinforces 'prompt' as a scene description. However, it claims 'motion_style' defaults to 'static_tripod', directly contradicting the schema's stated default of 'smooth_tracking_shot' — this actively misleads an agent picking an omitted-value behavior.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Synthesizes high-definition cinematic video sequences') with qualifying traits (temporally coherent camera motion and physics) plus the underlying model. It explicitly distinguishes itself from the sibling image generator, so an agent can choose between them without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete use cases (moving clips, product B-roll, animated scene renders from text prompts) and names the alternative for the adjacent case ('for rendering static single-frame images or diagrams at lower cost, use generate_nano_banana_image instead'). The selection condition is explicit rather than inferred.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_x402_vector_embeddingsSolana x402 USDC-Settled Semantic Vector Embedding GeneratorA
Read-onlyIdempotent
Inspect

Generates normalized high-dimensional semantic vector embeddings settled via Solana SPL USDC ('x402' protocol headers) for decentralized RAG pipelines. Use when computing text embeddings paid via Solana USDC x402 signatures rather than Bitcoin Lightning; for extracting discrete JSON entities from unstructured text, use extract_structured_json_entities instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'text' ('encoding_format' defaults to 'float_array'), supports '?demo=true' or x402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
textYesInput text string or document chunk to convert into a normalized embedding vector.
encoding_formatNoVector serialization format; defaults to 'float_array' when omitted.

Output Schema

NameRequiredDescription
modelYesEmbedding model executed ('gemini-embedding-2').
embeddingYesNormalized floating-point vector array.
dimensionsYesNumber of float dimensions in the returned vector.
normalizedYesAlways true; vectors are L2-normalized to unit length.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond annotations (readOnly/idempotent/non-destructive/closed-world), the description discloses statelessness, a 32 KB payload cap, a 60 RPM rate limit, demo mode, a 10 sats x402 cost, and HTTP 400 on invalid input. These are operational constraints an agent cannot get from the annotation block.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core verb and settlement mechanism, then routes to the alternative, then lists limits. Dense but every clause carries information; slightly crammed parenthetical packing keeps it just under a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 2-param read-only embedding tool with an output schema (so return values need not be explained), the description covers payment model, limits, error behavior, and default serialization. Nothing required to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% so the baseline is 3, but the description adds value: it restates the 'encoding_format' default ('float_array') and introduces a '?demo=true' query switch not present in the schema. It does not describe vector dimensionality or text size expectations beyond the 32 KB cap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Generates normalized high-dimensional semantic vector embeddings') with its settlement mechanism (Solana SPL USDC x402), and explicitly distinguishes itself from the sibling extract_structured_json_entities. An agent can tell exactly what this does and what it is not.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit selection guidance: 'Use when computing text embeddings paid via Solana USDC x402 signatures rather than Bitcoin Lightning', plus an explicit alternative for the adjacent task ('for extracting discrete JSON entities ... use extract_structured_json_entities instead'). Both inclusion and exclusion conditions are named.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

heal_malformed_jsonDeterministic Malformed JSON Syntax & Truncation HealerA
Read-onlyIdempotent
Inspect

Deterministic JSON syntax repair: normalizes quotes, unclosed brackets, and boolean literals into compliant RFC 8259 JSON structure without data deletion. Use when fixing syntax-broken JSON strings that fail JSON.parse(); for coercing field types and verifying properties on already-parseable JSON objects against a target JSON Schema, use enforce_json_schema_types instead. Read-only edge call (32 KB, 60 RPM): accepts 'malformed_json' (with enum defaults), uses '?demo=true' or L402 (15 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
repair_modeNoBracket-closing and literal-normalization strategy; defaults to 'heuristic_fast' when omitted.
malformed_jsonYesRaw broken, truncated, or markdown-wrapped JSON string to repair.

Output Schema

NameRequiredDescription
statusYesRepair outcome ('repaired' or 'valid_as_is').
fixes_appliedYesList of lexical repairs performed.
parsed_objectYesDeserialized JSON object produced from the repaired string.
repaired_jsonYesValid RFC 8259 JSON string after syntax healing.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly/idempotent/non-destructive, but the description adds genuinely new operational context: a 32 KB payload cap, 60 RPM rate limit, access via '?demo=true' or L402 payment (15 sats), and HTTP 400 on invalid input. It also credits the non-destructive guarantee ('without data deletion'). Minor gaps only: no guidance on what happens when repair is ambiguous or partially successful.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core capability, then sibling routing, then operational constraints, in a logical order with no filler sentences. It is fairly dense in a single paragraph, and the pricing/rate-limit detail is packed tightly, but every sentence carries usable information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output shape is covered by an existing output schema, and the description supplies the size limit, auth/payment path, rate limit, and failure code an agent needs before calling. The only shortfall is that repair_mode behavior differences (heuristic_fast vs strict_rfc8259 vs close_truncated_stream) are not characterized beyond what the enum itself says.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so both parameters are already documented in the schema, including the repair_mode enum and its default. The description only alludes to them in passing ('accepts malformed_json (with enum defaults)'), adding no real semantic depth beyond the schema — baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb (repair/heal) plus resource (malformed JSON) with explicit scope: quote normalization, bracket closing, literal normalization to RFC 8259. It also names the boundary against the closest sibling, enforce_json_schema_types, so an agent can distinguish the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a concrete trigger condition ('syntax-broken JSON strings that fail JSON.parse()') and an explicit exclusion routing to enforce_json_schema_types for already-parseable objects needing type coercion or schema validation. Both the when and the when-not are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

infer_mpp_streaming_sessionBase EVM Machine Payments Protocol (MPP) Streaming Session PlannerA
Read-onlyIdempotent
Inspect

Initializes a Base USDC Machine Payments Protocol (MPP) metered inference session, allocating a streaming token quota and returning a step-by-step execution plan. Use when running session-metered agent planning settled via Base EVM MPP 'Payment-Challenge' headers; for mapping a task goal to L402 MCP tool calls without opening an MPP streaming session, use route_mcp_workflow_plan instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'task' ('token_quota_tier' defaults to 'compact_1024'), supports '?demo=true' or MPP (100 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
taskYesAgent workflow task to execute within the metered MPP session.
token_quota_tierNoAllocated streaming token ceiling for the session; defaults to 'standard_4096' when omitted.

Output Schema

NameRequiredDescription
planYesOrdered execution steps generated for the task.
session_idYesUnique MPP streaming session identifier.
session_statusYesSession lifecycle state ('ACTIVE_STREAMING').
streaming_tokens_allocatedYesToken budget reserved for the session.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations only declare the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description adds operational behavior beyond that: 32 KB max payload, 60 RPM rate limit, statelessness, the two settlement paths ('?demo=true' vs MPP for 100 sats), and failure behavior (HTTP 400 on invalid input). These are exactly the execution traits an agent needs before calling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three tight sentences that lead with purpose, then routing, then operational limits, and nothing is buried. The '?demo=true' query-string notation is slightly out of place in a tool whose schema is a JSON object, which is a minor structure wobble.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so the return shape need not be spelled out, and the description still gives a useful summary ('step-by-step execution plan'). Payment, limits, and error modes are all covered; only the wrong default value keeps this from being fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline would be 3, but the description actively contradicts the schema: it says token_quota_tier 'defaults to compact_1024' while the schema documents a default of 'standard_4096'. An agent trusting the prose would allocate the wrong quota tier. The description adds no other parameter meaning beyond restating the field names.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb and resource: it 'Initializes a Base USDC Machine Payments Protocol (MPP) metered inference session, allocating a streaming token quota and returning a step-by-step execution plan.' It also distinguishes itself from the nearest sibling by naming route_mcp_workflow_plan as the tool for the case where no MPP session is opened.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states the condition that selects this tool ('Use when running session-metered agent planning settled via Base EVM MPP Payment-Challenge headers') and states the condition that selects the alternative ('for mapping a task goal to L402 MCP tool calls without opening an MPP streaming session, use route_mcp_workflow_plan instead'). Both the when and the when-not are explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

inspect_eve_assembly_stateEVE Frontier Smart Assembly On-Chain State & Capability InspectorA
Read-onlyIdempotent
Inspect

Inspects live EVE Frontier Smart Assembly on-chain object metadata, owner capability ID, online power status, and attached Sui Move package digest. Use when verifying whether a Smart Turret, Smart Gate, or Smart Storage Unit is online and checking its bound Move module before interacting; for generating or auditing custom Sui Move assembly source code, use generate_eve_assembly_move instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'assembly_id' ('assembly_class' defaults to 'smart_gate'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
assembly_idYesHexadecimal Sui object ID or Frontier Smart Assembly identifier (e.g. '0x8f4a...c201' or 'assembly-alpha-01').
assembly_classNoSmart Assembly hardware class used to validate expected capability fields; defaults to 'smart_gate' when omitted.

Output Schema

NameRequiredDescription
assembly_idYesCanonical Smart Assembly object identifier inspected.
owner_cap_idYesBound Sui Move OwnerCap object ID controlling administrative permissions.
online_statusYesOperational state ('ONLINE_POWERED', 'LOW_CAPACITOR', or 'OFFLINE_UNANCHORED').
attached_package_digestYesSHA-256 bytecode digest of the custom Move extension attached to this assembly.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, and the description still adds materially new behavior: stateless edge call, 32 KB payload cap, 60 RPM rate limit, demo=true or L402 payment of 20 sats, and an HTTP 400 failure mode. These are operational facts an agent cannot get from the structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The order is well front-loaded: purpose, then when-to-use and alternative, then transport constraints. The final sentence is a dense run-on that bundles limits, auth options, and error behavior together, which costs a little readability but wastes no content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With only two well-documented parameters, full annotation coverage, and an output schema handling return values, the remaining burden is transport and cost behavior, which the description covers (rate limit, size cap, L402/demo auth, 400 on invalid). Nothing an agent needs to call this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and both parameters already document format and the enum of assembly classes. The description only restates the 'smart_gate' default that the schema already specifies, adding no new syntax or validation semantics; baseline 3 applies when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb ('Inspects') and enumerates exactly what state is read: on-chain object metadata, owner capability ID, online power status, and bound Sui Move package digest. It also explicitly distinguishes itself from generate_eve_assembly_move, so an agent can tell the two apart without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states the use case positively ('verifying whether a Smart Turret, Smart Gate, or Smart Storage Unit is online and checking its bound Move module before interacting') and names the alternative with its condition ('for generating or auditing custom Sui Move assembly source code, use generate_eve_assembly_move instead'). Both when-to-use and when-not-to-use are explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

inspect_solana_token_liquiditySolana SPL Token Metadata, Decimals & Authority Registry LookupA
Read-onlyIdempotent
Inspect

Retrieves canonical Solana SPL token metadata including name, ticker symbol, decimal precision, and current mint/freeze authority addresses. Use when resolving SPL token decimals, ticker symbols, and registry metadata for portfolio or swap formatting; for computing a composite security risk score and binary should_transact verdict, use evaluate_solana_token_risk instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'mint' ('network' defaults to 'mainnet-beta'), supports '?demo=true' or x402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
mintYesBase58-encoded Solana SPL token mint address (e.g. 'EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v').
networkNoSolana cluster to query; defaults to 'mainnet-beta' when omitted.

Output Schema

NameRequiredDescription
mintYesQueried Base58 SPL token mint address.
symbolYesCanonical token ticker symbol (e.g. 'USDC', 'SOL', 'JUP').
decimalsYesToken decimal precision used for raw lamport/atomic unit conversion.
authorities_renouncedYesTrue when both mint_authority and freeze_authority are null.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, yet the description still adds real behavioral facts: stateless edge call, 32 KB response cap, 60 RPM rate limit, default network, '?demo=true' or x402 payment of 20 sats, and an HTTP 400 failure mode for invalid input. That is well beyond annotation coverage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the payload first and the exclusion routing second, and virtually every clause carries operational information. It is somewhat dense with parentheticals crammed into a single long sentence, which slightly hurts scannability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-parameter read tool with an output schema, everything an agent needs to call it correctly is present: scope, alternative, auth/payment path, rate and size limits, and error behavior. Return-value details are correctly delegated to the output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and both parameters (base58 mint, network enum with default) are already fully documented in the schema. The description only restates that 'mint' is accepted and that 'network' defaults to mainnet-beta, adding no new semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific verb and resource set ('Retrieves canonical Solana SPL token metadata including name, ticker symbol, decimal precision, and mint/freeze authority addresses') and explicitly contrasts with the sibling evaluate_solana_token_risk. An agent can distinguish the two without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use ('resolving SPL token decimals, ticker symbols, and registry metadata for portfolio or swap formatting') and a named alternative with its own condition ('for computing a composite security risk score and binary should_transact verdict, use evaluate_solana_token_risk instead').

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

isolate_css_selectorsDeterministic Edge DOM CSS Selector Scraper & IsolatorA
Read-onlyIdempotent
Inspect

Evaluates CSS selector queries against HTML DOM trees to extract targeted inner text, outer HTML, or element attributes. Use when targeting specific elements like pricing badges, product titles, review cards, or navigation breadcrumbs; for parsing unstructured contact information, use extract_contact_info instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'html_content' and 'selector_query' ('extraction_mode' defaults to 'inner_text'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
html_contentYesHTML source markup to query against using CSS selector matching rules.
selector_queryYesCSS selector query expression (e.g., '.pricing-card', '#main h2', 'article p').
extraction_modeNoDOM extraction representation: text content, outer HTML snippet, or attribute key-value map.

Output Schema

NameRequiredDescription
elementsYesExtracted textual or markup contents of matched DOM elements.
matched_countYesNumber of DOM nodes matching the provided CSS selector query.
selector_usedYesNormalized CSS selector executed during edge DOM traversal.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, and the description adds genuinely new operational context: statelessness, the 32 KB input ceiling, 60 RPM rate limit, the ?demo=true bypass or L402 pricing at 10 sats, and the HTTP 400 failure mode. That is exactly the kind of behavioral detail structured fields do not carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences that front-load the purpose then pack constraints into a compact clause list. The second sentence is dense and semi-colon heavy, but nearly every fragment (limits, auth, error) carries decision-relevant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need no explanation; the description still covers input limits, rate limits, payment/auth paths, and error behavior, which is everything an agent needs to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds the non-obvious fact that extraction_mode defaults to inner_text, which the schema does not state. Required inputs are also named, giving more than the schema alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with a specific verb+resource ('Evaluates CSS selector queries against HTML DOM trees') and enumerates the three output representations. It distinguishes itself from the closest sibling by naming extract_contact_info as the tool for unstructured contact parsing.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete positive triggers ('pricing badges, product titles, review cards, navigation breadcrumbs') and one explicit exclusion routing to extract_contact_info. It does not mention adjacent siblings like parse_html_tables or extract_page_hyperlinks, but the core when-to-use guidance is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

isolate_stacktrace_root_causeStack-Trace Root-Cause Frame Isolator & Drain Log DeduplicatorA
Read-onlyIdempotent
Inspect

Parses noisy CI/terminal logs and multi-language stack traces (Node/TS, Python, Rust, Go), strips node_modules/stdlib frames to isolate the innermost failing user-code frame, and clusters repetitive logs into Drain templates. Use when triage-debugging test failures, crash dumps, or repetitive server error logs; for compressing general source code files or prose transcripts, use prune_context_skeleton instead. Read-only edge call (32 KB, 60 RPM): accepts 'raw_log' ('runtime_hint' defaults to 'auto_detect'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
raw_logYesRaw terminal output, CI failure log, or exception traceback to analyze.
runtime_hintNoRuntime stack format hint; defaults to 'auto_detect' when omitted.

Output Schema

NameRequiredDescription
error_headlineYesExtracted primary exception class and error message.
root_cause_frameYesInnermost user-code stack frame (function_name, file, line, column).
root_cause_fingerprintYesDeterministic hash of the error class and root user frame.
deduplicated_log_templatesYesDrain-clustered log patterns with occurrence counts.
stripped_library_frames_countYesNumber of node_modules, stdlib, or internal frames filtered out.

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, and the description adds genuinely useful operational context: 32 KB payload cap, 60 RPM rate limit, demo-mode or L402 payment of 15 sats, and HTTP 400 on invalid input. However, it is silent on the shape of the hybrid return (two distinct outputs from one call) and on truncation behavior when a log exceeds the 32 KB ceiling, which is the main behavioral risk for this tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action, then usage, then operational constraints — no filler sentences. It is dense to the point of being run-on in the final clause, packing call syntax, payment, and error code into one sentence, but every element carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 2-parameter, fully-documented tool with an output schema, the description covers everything an agent needs before calling: purpose, alternative tool, limits, payment path, and failure mode. Return-value detail is correctly left to the output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the enum is documented in-schema, so the description's mention of 'raw_log' and the 'runtime_hint' auto_detect default largely restates structured data. Baseline 3 is appropriate; it does not explain what happens on a mismatched runtime_hint versus auto_detect detection failure.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verbs and resource: parses CI/terminal logs and multi-language stack traces, strips node_modules/stdlib frames to isolate the innermost failing user-code frame, and clusters repetitive logs into Drain templates. The supported runtimes (Node/TS, Python, Rust, Go) and the dual output (isolated frame + dedup templates) make it unambiguous, and it names the sibling it is not (prune_context_skeleton).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit positive triggers ('triage-debugging test failures, crash dumps, or repetitive server error logs') and an explicit exclusion routing the agent to prune_context_skeleton for general source files or prose transcripts. Nothing about tool selection is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

monitor_eve_constellation_fuelEVE Frontier Constellation Sovereignty & Multi-Node Fuel RadarA
Read-onlyIdempotent
Inspect

Monitors constellation-wide Lagrange Network Node fuel reserves, identifies the weakest sovereignty node, and calculates logistics convoy resupply urgency. Use when auditing multi-system sovereignty fuel health across an entire tribe constellation; for optimizing gigajoule load on a single individual Lagrange Network Node, use optimize_eve_node_power instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'constellation_id' ('alert_threshold_hours' defaults to '24h'), supports '?demo=true' or L402 (30 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
constellation_idYesConstellation or solar system cluster identifier (e.g. 'Frontier-Delta-09').
alert_threshold_hoursNoMinimum remaining fuel horizon before triggering convoy dispatch; defaults to '36h' when omitted.

Output Schema

NameRequiredDescription
weakest_node_idYesIdentifier of the Network Node closest to fuel exhaustion.
constellation_idYesMonitored constellation identifier.
logistics_urgencyYesConvoy dispatch recommendation ('STABLE' or 'DISPATCH_CONVOY_IMMEDIATELY').
sovereignty_health_indexYesNormalized sovereignty stability score from 0.0 to 1.0.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description goes well beyond them: stateless edge call, 32 KB response ceiling, 60 RPM rate limit, demo mode, L402 payment of 30 sats, and HTTP 400 on invalid input. Those are exactly the operational constraints an agent needs before calling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with what the tool does, then the alternative, then operational constraints. Dense but each clause carries information; the parenthetical list of operational facts is slightly compressed but not wasteful.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists and annotations cover the safety profile, and the description supplies rate limits, auth options, and error behavior. The only material gap is the inconsistent default for alert_threshold_hours, which leaves the agent unsure which value applies.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description states alert_threshold_hours 'defaults to 24h' while the schema description says it defaults to '36h' when omitted. That direct conflict actively misleads on parameter behavior rather than adding meaning, so it drops below baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (monitors) plus the exact resource (constellation-wide Lagrange Network Node fuel reserves) and two derived outputs: weakest node and convoy resupply urgency. It explicitly contrasts itself with optimize_eve_node_power, so an agent can distinguish multi-node from single-node scope without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Names the selecting condition ('auditing multi-system sovereignty fuel health across an entire tribe constellation') and routes the alternative case to optimize_eve_node_power by name. No inference required.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

operate_computer_use_agentGemini Computer Use GUI & Browser Action PlannerA
Read-onlyIdempotent
Inspect

Plans and executes OS-level desktop, browser DOM, and GUI coordinate actions (click, type, scroll, wait) using the Gemini Computer Use agent. Use when automating interactive web UIs or desktop workflows that lack a direct REST API; for running code-first API and terminal automation tasks, use execute_antigravity_agent instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'input' ('viewport_preset' defaults to 'desktop_1080p'), supports '?demo=true' or L402 (200 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
inputYesUI automation goal and target webpage or application context.
viewport_presetNoTarget screen resolution for coordinate grounding; defaults to 'desktop_1080p' when omitted.

Output Schema

NameRequiredDescription
agentYesComputer Use model identifier ('computer-use-preview-2026').
outputYesExecuted UI action sequence and extracted screen state.
successYesTrue when the UI workflow reached the target state.
steps_executedYesNumber of GUI interaction steps performed.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds substantial context beyond the annotations: stateless edge call, 32 KB payload cap, 60 RPM rate limit, '?demo=true' trial path, L402 payment of 200 sats, and HTTP 400 on invalid input. It also explicitly reconciles the 'executes actions' framing with readOnlyHint=true by labeling itself a stateless read-only edge call, though it does not clarify whether side effects persist on the target UI.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and sibling routing are front-loaded in the first two sentences, with operational constraints compressed into a final clause. Dense but nearly every clause carries information; the long parenthetical action list and the auth/payment clause make the last sentence feel packed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and rich annotations, the description only needed to add scope, routing, and operational limits — all of which it does. The remaining gap is what a caller should expect from the returned plan/action sequence and whether GUI actions are simulated versus applied.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented, and the enum for viewport_preset is self-explanatory. The description adds the default preset value (already in the schema) and mentions the demo/L402 query flag, which is not an input property, so marginal value over structured fields.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence names a specific verb (plans and executes) and enumerates the concrete resources/actions (OS-level desktop, browser DOM, GUI coordinates: click, type, scroll, wait) plus the underlying engine. It is immediately distinguishable from execute_antigravity_agent and other siblings without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit routing guidance: 'Use when automating interactive web UIs or desktop workflows that lack a direct REST API' and 'for running code-first API and terminal automation tasks, use execute_antigravity_agent instead.' Both the selection condition and the exclusion/alternative are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

optimize_eve_node_powerEVE Frontier Lagrange Network Node Gigajoule & Fuel Burn OptimizerA
Read-onlyIdempotent
Inspect

Calculates Lagrange Network Node hourly gigajoule (GJ) fuel burn rates, capacity headroom, and offline vulnerability windows for connected Smart Assemblies. Use when balancing steady-state power allocations on a single Lagrange Network Node; for stress-testing node capacitor depletion under active hostile fleet bombardment, use simulate_eve_capacitor_siege instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'node_id' ('operating_profile' defaults to 'balanced'), supports '?demo=true' or L402 (25 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
node_idYesLagrange Network Node identifier (e.g. 'node-frontier-01').
operating_profileNoPower allocation profile across connected assemblies; defaults to 'balanced' when omitted.

Output Schema

NameRequiredDescription
node_idYesEvaluated Lagrange Network Node identifier.
burn_rate_gj_per_hrYesHourly gigajoule (GJ) energy consumption across attached assemblies.
hours_until_fuel_depletionYesRemaining operational hours before fuel reserves reach zero.
offline_threat_window_hoursYesSafety classification ('SAFE' or 'CRITICAL_OFFLINE_IMMINENT').

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint=false, and openWorldHint=false, and the description adds meaningful operational context beyond them. It discloses stateless edge-call behavior, request-size and rate limits, demo/L402 payment access, and invalid-input HTTP 400 behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three tight sentences with no wasted language. Purpose, alternative-tool routing, and operational constraints are front-loaded in that order.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the rich annotations, full schema coverage, and presence of an output schema, the description provides everything needed to select and invoke the tool. It covers scope, alternative, limits, payment/demo access, and error behavior without needing to explain return values.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both parameters. The description repeats the node_id input and operating_profile default but adds little semantic detail beyond what the schema and enum already provide, making 3 the appropriate baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: it calculates Lagrange Network Node hourly GJ fuel burn rates, capacity headroom, and offline vulnerability windows. It also explicitly distinguishes the tool from simulate_eve_capacitor_siege, so an agent can identify its role without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit when-to-use condition: balancing steady-state power allocations on a single Lagrange Network Node. It also names the alternative tool and the condition for choosing it: stress-testing capacitor depletion under hostile fleet bombardment should use simulate_eve_capacitor_siege instead.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

parse_html_tablesHTML Table to Structured JSON & Markdown ParserA
Read-onlyIdempotent
Inspect

Detects and parses HTML table elements into structured JSON record arrays and GitHub-Flavored Markdown tabular grids. Use when converting financial statements, product comparison grids, or sports statistics into structured data tables; for extracting raw clean markdown prose, use extract_clean_markdown instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'html_content' ('output_format' defaults to 'markdown_and_json'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
min_rowsNoMinimum rows required for a table to be parsed and retained.
html_contentYesRaw HTML string containing one or more table, thead, tbody, or tr elements.
output_formatNoTabular export formatting standard: markdown and JSON, JSON records only, or CSV string.

Output Schema

NameRequiredDescription
tables_foundYesCount of valid HTML tables detected and transformed.
markdown_tablesYesList of GitHub-Flavored Markdown formatted table strings.
structured_recordsYesParsed array of row objects keyed by header column titles.

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly/idempotent/non-destructive/closed-world, and the description layers genuinely new operational context on top: stateless edge call, 32 KB payload cap, 60 RPM rate limit, L402 payment of 10 sats, ?demo=true, and HTTP 400 on invalid input. It stops short of describing how tables that fail min_rows are reported, but the constraint disclosure is well above the annotation baseline.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two dense sentences, front-loaded with the core action before use cases and operational limits. The second sentence stacks several facts (size, rate, formats, payment, error code) and reads a bit like a spec dump, but nothing is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a stateless parser with a full schema and an output schema, everything an agent needs is present: input format expectations, output representations, size and rate ceilings, auth options, and failure behavior. Return-value details are correctly delegated to the output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description still adds value by documenting the output_format default ('markdown_and_json'), which the schema does not state, and by naming html_content explicitly. min_rows is left to the schema, which is acceptable given full coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('detects and parses HTML table elements') plus the two output representations (JSON record arrays and GFM markdown grids). It names a sibling it is not, extract_clean_markdown, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete positive cases (financial statements, product comparison grids, sports statistics) and an explicit negative case with the alternative tool named ('for extracting raw clean markdown prose, use extract_clean_markdown instead'). The when/when-not pair is fully specified.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_bitcoin_utxo_consolidationBitcoin SegWit/Taproot UTXO Dust Consolidation & Fee-Window PlannerA
Read-onlyIdempotent
Inspect

Analyzes a set of Bitcoin UTXO balances in satoshis to compute exact vByte transaction weight, identify uneconomical dust inputs, and recommend whether to consolidate now or hold. Use when optimizing on-chain Bitcoin treasury UTXO sets to minimize long-term miner fee drag; for fetching current live Bitcoin mempool sat/vB feerates alone, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'utxos_sats_json' ('script_type' defaults to 'p2wpkh_segwit'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
script_typeNoBitcoin input script type determining vByte weight per input; defaults to 'p2wpkh_segwit' when omitted.
utxos_sats_jsonYesJSON array or comma-separated list of UTXO values in satoshis (e.g. '[1200, 45000, 85000]').

Output Schema

NameRequiredDescription
utxo_countYesNumber of UTXO inputs analyzed.
recommended_actionYesExecution timing advice ('CONSOLIDATE_NOW' or 'HOLD_UNTIL_SUB_15_SAT_VB').
high_fee_dust_utxosYesCount of UTXOs whose input weight costs more than 3% of their value.
estimated_consolidation_vbytesYesTotal virtual byte (vB) size of the consolidation transaction.

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, non-destructive, closed-world behavior, so the safety bar is met structurally. The description adds genuinely useful context the annotations do not encode: stateless execution, a 32 KB payload cap, 60 RPM throttling, demo/L402 payment options, and an HTTP 400 on invalid input. However it omits what the recommendation output contains and how weight is derived, so it is solid but not exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded in the first sentence, followed by the when-to-use/alternative routing and then operational constraints. Dense but nearly every clause carries information; the packing of rate limit, auth, and error behavior into one parenthetical sentence is slightly crowded but not wasteful.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With only two simple parameters, full schema coverage, and an output schema, the description need not explain return values. It covers the remaining agent-critical unknowns: statelessness, payload cap, rate limit, payment/auth path, and failure behavior on invalid input.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%: both utxos_sats_json (JSON array or comma-separated satoshi values) and script_type (enum with default) are fully documented in the schema. The description restates the script_type default rather than adding new meaning such as accepted value ranges or size limits per UTXO. Baseline 3 applies when the schema carries the load.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (analyzes) and resource (Bitcoin UTXO satoshi values) plus the three concrete outputs: vByte weight, dust identification, and a consolidate/hold recommendation. It explicitly distinguishes itself from the sibling estimate_bitcoin_mempool_fees, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use condition ('optimizing on-chain Bitcoin treasury UTXO sets to minimize long-term miner fee drag') and names the alternative plus the exact condition that selects it ('for fetching current live Bitcoin mempool sat/vB feerates alone, use estimate_bitcoin_mempool_fees instead'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_context_token_budgetBPE Token Budget, Attention Trough & Multi-Model Cost PlannerA
Read-onlyIdempotent
Inspect

Counts subword BPE tokens across prompt segments, detects high-priority instructions trapped in the 35%\u201372% Lost-in-the-Middle attention trough, and calculates USD/satoshi costs across frontier LLMs. Use when auditing prompt token budgets, reordering prompt sections for primacy/recency attention, or comparing model API costs; for actively compressing and stripping low-salience lines from a single large file, use prune_context_skeleton instead. Read-only edge call (32 KB, 60 RPM): accepts 'segments_json' (with enum defaults), uses '?demo=true' or L402 (10 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
segments_jsonYesJSON string or array of prompt segments '[{"name":"sys","text":"...","priority":10}]' to analyze.
max_context_tokensNoTarget model context window limit in tokens; defaults to 128000 when omitted.
target_model_familyNoPrimary model family for token-Window calibration; defaults to 'gemini_3_1' when omitted.

Output Schema

NameRequiredDescription
within_budgetYesTrue when total_input_tokens_est fits inside available_input_budget.
total_input_tokens_estYesTotal BPE tokens summed across all prompt segments.
lost_in_the_middle_warningsYesWarnings for high-priority segments positioned in the 35%–72% attention trough.
multi_model_cost_comparisonYesEstimated USD and satoshi inference cost across 5 frontier models.
optimal_primacy_recency_orderYesRecommended segment ordering placing critical instructions at prompt boundaries.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the readOnlyHint/idempotentHint annotations by disclosing operational constraints: a 32 KB payload ceiling, 60 RPM rate limit, authentication via '?demo=true' or L402 payment of 10 sats, and HTTP 400 on invalid input. These are exactly the traits an agent needs before invoking an edge endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core capability, then usage, then the sibling exclusion, then operations — a good information order with near-zero waste. The parenthetical '(with enum defaults)' is confusing filler that costs a little clarity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described; parameters are fully schema-covered; and the description supplies the routing, auth, and failure-mode context that the structured fields do not. Nothing an agent needs to call this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents segments_json, max_context_tokens, and target_model_family. The description's 'segments_json (with enum defaults)' is slightly muddled — the enum actually belongs to target_model_family — and adds no new syntax or format guidance, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States concrete verbs and resources: counts BPE tokens across prompt segments, detects instructions in the 35%–72% attention trough, and computes USD/satoshi model costs. This is specific enough that an agent can distinguish it from compression-oriented siblings without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly names three triggering scenarios (auditing token budgets, reordering for primacy/recency, comparing API costs) and names the alternative for the adjacent case: prune_context_skeleton for actively compressing/stripping a single large file. When-to-use, when-not, and the sibling route are all present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_eve_gate_routeEVE Frontier Multi-Hop Smart Gate Fuel & Toll Route PlannerA
Read-onlyIdempotent
Inspect

Calculates optimal stargate jump routes between EVE Frontier solar systems minimizing gigajoule fuel consumption, LUX gate tolls, or jump count. Use when plotting a ship transit path across public and tribe-restricted Smart Gates; for identifying multi-system commodity arbitrage trade loops across Smart Storage Units, use find_eve_ssu_arbitrage instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'origin_system' ('destination_system' defaults to 'standard'), supports '?demo=true' or L402 (25 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
optimize_forNoRouting objective function weighting fuel burn vs tolls; defaults to 'lowest_fuel' when omitted.
origin_systemYesStarting solar system identifier (e.g. 'System-Alpha').
destination_systemYesTarget destination solar system identifier (e.g. 'System-Omega').

Output Schema

NameRequiredDescription
waypointsYesOrdered list of solar systems and Lagrange Smart Gates traversed.
optimal_hopsYesTotal number of stargate jumps along the selected path.
total_gate_tolls_luxYesCumulative Smart Gate transit tolls required in LUX.
estimated_fuel_burn_gjYesTotal ship fuel consumption in gigajoules (GJ) across the route.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only, idempotent, non-destructive behavior, and the description adds substantial context beyond them: stateless edge call, 32 KB max, 60 RPM, demo/L402 payment option, and HTTP 400 on invalid input. No annotation contradiction is present.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with purpose and usage before operational details, and most sentences carry useful information. It is dense, and the parenthetical destination_system default adds avoidable confusion.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a stateless routing tool with an output schema and full annotation coverage, the description supplies the key operational constraints an agent needs: auth/payment options, rate limit, payload limit, and invalid-input behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents the parameters. However, the description says destination_system defaults to 'standard', while the schema marks destination_system as required and gives no default, which is misleading parameter guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: calculating optimal stargate jump routes between EVE Frontier solar systems. It also names the optimization goals (fuel, tolls, jump count) and explicitly distinguishes itself from the sibling arbitrage tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use case: plotting ship transit across public and tribe-restricted Smart Gates. It also names the alternative tool, find_eve_ssu_arbitrage, and the condition that selects it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

plan_robotics_spatial_trajectoryGemini Robotics ER 2 Embodied Spatial & Kinematics Trajectory PlannerA
Read-onlyIdempotent
Inspect

Computes 3D spatial affordances, obstacle-avoidance waypoints, and manipulator grasp sequences using Gemini Robotics ER 2 embodied reasoning. Use when planning physical robot arm kinematics, mobile navigation waypoints, or spatial scene task orders; for interacting with 2D desktop or browser GUI screens, use operate_computer_use_agent instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'prompt' ('coordinate_frame' defaults to 'cartesian_xyz_meters'), supports '?demo=true' or L402 (150 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
promptYesSpatial environment description, obstacle coordinates, and physical manipulation goal.
coordinate_frameNoReference coordinate convention; defaults to 'cartesian_xyz_meters' when omitted.

Output Schema

NameRequiredDescription
modelYesEmbodied reasoning model ('gemini-robotics-er-2-preview').
outputYesSynthesized trajectory plan, collision checks, and grasp sequence.
successYesTrue when a collision-free trajectory was generated.
coordinate_frameYesCoordinate convention used in the output.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly/idempotent/non-destructive, but the description goes well beyond them: statelessness, a 32 KB payload ceiling, a 60 RPM rate limit, demo-access via '?demo=true' or L402 payment of 150 sats, and an HTTP 400 failure mode for invalid input. These are operational facts an agent cannot obtain from the annotations and that directly affect retry and batching behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the sibling exclusion are front-loaded, which is the right ordering. The final sentence is information-dense to the point of being a run-on, packing payload cap, rate limit, payment, and error semantics together, but nearly every clause carries operational value an agent needs.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so the description is not obliged to explain return values. Combined with the annotations covering the safety profile and the description covering limits, access modes, and error behavior, an agent has everything required to invoke this correctly and handle failures.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so both parameters are already fully documented, including the coordinate_frame enum and its default. The description only restates the default value ('coordinate_frame' defaults to 'cartesian_xyz_meters') without adding syntax, format, or content guidance for the prompt body beyond what the schema says. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Computes') with three concrete output artifacts (3D spatial affordances, obstacle-avoidance waypoints, manipulator grasp sequences) and names the reasoning engine. It also draws a hard boundary against operate_computer_use_agent, so an agent can distinguish it from siblings without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly enumerates the use cases ('physical robot arm kinematics, mobile navigation waypoints, or spatial scene task orders') and names the correct alternative for the adjacent-but-different case ('2D desktop or browser GUI screens, use operate_computer_use_agent instead'). Both when-to-use and when-not-to-use are given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

prioritize_eve_turret_targetsEVE Frontier Smart Turret Angular Tracking & Target Priority CalculatorA
Read-onlyIdempotent
Inspect

Evaluates radar contacts by range, transversal velocity, and Tribe standing to output deterministic Smart Turret target-lock priorities and fire authorizations. Use when ranking active grid radar contacts for automated Smart Turret engagement; for reviewing historical solar system killmails and ambush probabilities before transit, use analyze_eve_killmail_threats instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'turret_id' ('engagement_doctrine' defaults to 'highest_threat'), supports '?demo=true' or L402 (25 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
turret_idYesSmart Turret assembly identifier (e.g. 'turret-alpha-01').
engagement_doctrineNoTarget selection doctrine weighting range vs angular tracking; defaults to 'highest_threat' when omitted.

Output Schema

NameRequiredDescription
turret_idYesSmart Turret identifier.
fire_verdictYesEngagement command ('ENGAGE_IMMEDIATELY' or 'HOLD_FIRE').
primary_target_lockYesContact ID of the highest-priority hostile vessel to engage.
sui_move_witness_verdictYesOn-chain witness authorization status ('AUTHORIZED_HOSTILE').

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, and the description adds genuinely new operational facts: stateless, 32 KB payload cap, 60 RPM, demo mode or L402 payment (25 sats), and HTTP 400 on invalid input. It does not spell out how ties or missing radar data are handled, so it falls just short of fully disclosing behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with purpose then alternative then operational constraints; no filler. The final sentence is dense, packing auth, limits, and error behavior together, which slightly hurts scanability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists, so return values need no explanation; the description still covers invocation prerequisites (demo/L402 auth), rate and size limits, and failure mode. Nothing an agent needs to call this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so both parameters are already documented, including the enum values and the 'highest_threat' default. The description only restates the doctrine default and the turret_id requirement, adding no syntax or weighting semantics beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Evaluates radar contacts by range, transversal velocity, and Tribe standing') plus the concrete output ('deterministic Smart Turret target-lock priorities and fire authorizations'). It explicitly names the sibling it is not (analyze_eve_killmail_threats), so an agent can route without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives both sides of the decision: 'Use when ranking active grid radar contacts for automated Smart Turret engagement' and 'for reviewing historical solar system killmails ... use analyze_eve_killmail_threats instead.' The alternative tool and the condition selecting it are explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

process_live_audio_dialogueGemini 3.8 Live Native Audio-to-Audio Conversational ProcessorA
Read-onlyIdempotent
Inspect

Processes real-time conversational dialog turns with native acoustic emotion, interruption handling, and paralinguistic cue comprehension via Gemini 3.8 Live. Use when handling interactive voice-agent dialog turns that require tone and turn-taking awareness; for performing one-way text-to-speech readout of a static text string, use synthesize_gemini_speech_audio instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'input' ('response_tone' defaults to 'direct_peer'), supports '?demo=true' or L402 (75 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
inputYesConversational audio transcript or dialog turn payload to process.
response_toneNoTarget paralinguistic delivery style; defaults to 'direct_peer' when omitted.

Output Schema

NameRequiredDescription
modelYesLive dialog model executed ('gemini-3.8-live').
outputYesConversational response turn and paralinguistic cues.
successYesTrue when live dialog turn processing succeeded.
turn_completeYesTrue when the response turn is finalized.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only/idempotent/non-destructive, but the description goes well beyond them: size cap (32 KB), rate limit (60 RPM), statelessness, demo mode, L402 payment of 75 sats, and HTTP 400 on invalid input. That is exactly the operational context an agent needs before calling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core purpose and the sibling routing are front-loaded in the first two sentences. The final sentence is a dense run-on packing budget, rate limit, defaults, demo/L402 and error behavior, which is efficient but slightly overloaded for one clause chain.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, and the description still covers scope, selection criteria, limits, auth/payment, and error behavior. Nothing material for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters and the enum are already documented. The description restates 'input' and the response_tone default without adding format or syntax guidance beyond the schema, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Processes real-time conversational dialog turns') plus the differentiating capabilities (acoustic emotion, interruption handling, paralinguistic cues). It explicitly names the sibling synthesize_gemini_speech_audio and the boundary between them, so an agent can route correctly without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use ('interactive voice-agent dialog turns that require tone and turn-taking awareness') and a when-not-to-use with the alternative and its condition ('one-way text-to-speech readout of a static text string → synthesize_gemini_speech_audio'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

prune_context_skeletonAST-Aware Context Window & Source Code Skeleton PrunerA
Read-onlyIdempotent
Inspect

Compresses large source files, logs, or transcripts by 50\u201380% to fit an LLM context budget while preserving 100% of function/class/type signatures, imports, error frames, and query-matched lines. Use when shrinking oversized source files or logs before feeding them into an LLM prompt; for counting BPE tokens across prompt segments and calculating multi-model inference costs without altering text, use plan_context_token_budget instead. Read-only edge call (32 KB, 60 RPM): accepts 'content' (with enum defaults), uses '?demo=true' or L402 (10 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
contentYesRaw source code, document, or multi-turn transcript to compress.
focus_queryNoOptional symbol or keyword query whose matching lines receive maximum retention priority.
pruning_modeNoSalience weighting preset; defaults to 'ast_signatures_first' when omitted.
target_ratioNoTarget token retention ratio between 0.15 and 0.85; defaults to 0.45 when omitted.

Output Schema

NameRequiredDescription
tokens_savedYesNet BPE tokens eliminated.
preserved_symbolsYesFunction, class, interface, and struct identifiers retained.
compressed_contentYesPruned text with elision markers where low-salience lines were removed.
original_tokens_estYesEstimated BPE token count of the unpruned input.
compressed_tokens_estYesEstimated BPE token count after structural pruning.

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the readOnly/idempotent annotations by disclosing the operational envelope: 32 KB payload cap, 60 RPM throttle, demo=true or L402 auth at 10 sats, and HTTP 400 on invalid input. Those are exactly the constraints an agent must know before calling a remote edge endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the value proposition and the preservation guarantee, then routing, then transport limits – good ordering with no filler. The final telegraphic clause ("accepts 'content' (with enum defaults)") is compressed to the point of ambiguity and slightly undercuts an otherwise tight description.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With annotations, a full input schema, and an output schema, the description covers the remaining gaps: reduction range, what is preserved, alternative tool, rate/payload limits, and error behavior. Only the garbled parameter clause leaves a small hole, and the output schema removes any need to explain return values.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and every parameter including the enum and the 0.15–0.85 ratio range is already documented there, so the baseline is 3. The only added param note ("accepts 'content' (with enum defaults)") is vague and actually conflates the string `content` param with the `pruning_mode` enum, adding no usable meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (compresses) plus the exact resources (source files, logs, transcripts) and the concrete outcome (50–80% reduction while preserving signatures, imports, error frames, and query-matched lines). It also names the sibling it is not (plan_context_token_budget), so an agent can distinguish the two without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use ("shrinking oversized source files or logs before feeding them into an LLM prompt") and explicit when-not-to-use with the named alternative ("for counting BPE tokens... use plan_context_token_budget instead"). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

quote_eve_ssu_marketEVE Frontier Smart Storage Unit (SSU) Bonding-Curve Market PricerA
Read-onlyIdempotent
Inspect

Computes dynamic bonding-curve bid/ask quotes in LUX and per-transaction anti-drain caps for a player-owned Smart Storage Unit (SSU). Use when setting automated market-maker buy/sell prices for a single SSU vending inventory; for scanning multiple SSUs across star systems to find profitable trade routes, use find_eve_ssu_arbitrage instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'resource_type' ('pricing_regime' defaults to 'inventory_balanced'), supports '?demo=true' or L402 (25 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
resource_typeYesEVE Frontier commodity or ore name to price (e.g. 'Crude Fuel Ore', 'Carbonaceous Alloy').
pricing_regimeNoBonding-curve slope aggressiveness; defaults to 'inventory_balanced' when omitted.

Output Schema

NameRequiredDescription
resource_typeYesPriced EVE Frontier commodity name.
anti_drain_cap_per_txYesMaximum units allowed per single transaction to prevent inventory sweeps.
recommended_buy_price_luxYesBid price in LUX to offer pilots selling into the SSU.
recommended_sell_price_luxYesAsk price in LUX charged to pilots buying from the SSU.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only/idempotent/non-destructive, and the description adds substantial context beyond them: stateless edge call, 32 KB cap, 60 RPM limit, ?demo=true vs L402 (25 sats) auth model, and HTTP 400 on invalid input. This is rich operational disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single dense sentence that front-loads the core computation then tacks on routing, limits, auth, and error behavior. Every clause earns its place, though the density is high.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists so return values needn't be explained; the description still covers auth, rate/size limits, defaults, error behavior, and sibling routing. Nothing an agent needs to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and both params are documented in the schema, so baseline is 3. The description restates pricing_regime's default and mentions resource_type, adding little beyond the schema's own enum/default documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource: computes bonding-curve bid/ask quotes in LUX with anti-drain caps for an SSU. It clearly distinguishes itself from find_eve_ssu_arbitrage by naming it as the multi-SSU alternative.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use ('setting automated market-maker buy/sell prices for a single SSU vending inventory') and when-not-to ('for scanning multiple SSUs... use find_eve_ssu_arbitrage instead'). The condition selecting the sibling is unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

rank_expert_sourcesDomain Expert Authority Ranking & Primary Source DiscoveryA
Read-onlyIdempotent
Inspect

Identifies and ranks top domain authorities, leading researchers, and primary documentation repositories for technical topics. Use when finding primary source experts to cite or discovering foundational documentation for specialized fields; for ranking general search query snippets, use synthesize_neural_search instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'subject_area' ('authority_metric' defaults to 'pagerank_and_domain_authority'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
max_expertsNoMaximum number of top domain authorities to return in the ranking.
subject_areaYesAcademic field, open source framework, protocol, or technical discipline to explore.
authority_metricNoReputation evaluation standard: PageRank and domain authority, citation h-index, or code repo stars.

Output Schema

NameRequiredDescription
subjectYesAnalyzed discipline or technical topic.
top_authoritiesYesList of top-ranked domain experts, core maintainers, or key institutions.
recommended_primary_sourcesYesCurated list of authoritative repositories, RFCs, and documentation hubs.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, yet the description adds operational context the annotations cannot convey: stateless edge call, 32 KB cap, 60 RPM limit, demo mode, L402 payment of 10 sats, and an HTTP 400 on invalid input. That is unusually rich disclosure of cost, throttling, and failure behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the sibling routing come first, which is the right front-loading. The final sentence compresses six distinct facts (stateless, size, rate, default, auth, error code) into one dense clause, which is efficient but borders on cramming and could be easier to scan as discrete points.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described. Between the purpose, the alternative routing, the payment/rate/error behavior, and full schema coverage, an agent has everything needed to decide and invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description contributes the default for 'authority_metric' ('pagerank_and_domain_authority') that the schema does not state. It also frames 'subject_area' as an academic field, open source framework, protocol, or discipline, which slightly sharpens the schema's wording rather than merely repeating it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Identifies and ranks top domain authorities, leading researchers, and primary documentation repositories') scoped to technical topics. It also names the sibling it is not (synthesize_neural_search) for the adjacent use case, so an agent can discriminate between the two without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use cases ('finding primary source experts to cite or discovering foundational documentation for specialized fields') plus an explicit when-not and named alternative ('for ranking general search query snippets, use synthesize_neural_search instead'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recommend_database_indexesDatabase Index Advisor & Composite B-Tree OptimizerA
Read-onlyIdempotent
Inspect

Recommends optimal single-column and composite B-Tree/BRIN indexes based on slow query WHERE, JOIN, and ORDER BY clauses. Use when optimizing database response times and eliminating full-table scans; for inspecting full execution plans, use analyze_query_plan instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'slow_queries_or_workload' ('index_type_preference' defaults to 'btree_and_composite'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
max_new_indexesNoMaximum number of index creation statements to recommend.
index_type_preferenceNoTarget indexing strategy: B-tree and composite, BRIN and GIN sparse, or covering indexes with INCLUDE.
slow_queries_or_workloadYesCollection of slow SQL queries or workload log statements to analyze for index gaps.

Output Schema

NameRequiredDescription
recommended_indexesYesList of recommended CREATE INDEX DDL statements with target columns.
storage_overhead_estYesEstimated index disk storage footprint overhead impact.
expected_speedup_factorYesEstimated average query execution speedup multiple (e.g. 14.5x).

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive/closed-world, but the description adds substantial context beyond them: stateless edge call, 32 KB payload cap, 60 RPM rate limit, demo mode, L402 payment of 15 sats, and HTTP 400 on invalid input. That is exactly the operational detail annotations cannot convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose and routing before the operational clauses, and every sentence carries information. It borders on dense with the payment/limit parenthetical, but nothing is redundant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described. The description supplies rate limits, size cap, payment/auth model, and error behavior, leaving nothing an agent needs in order to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so each parameter is already documented. The description names 'slow_queries_or_workload' and states the default for 'index_type_preference', adding marginal value, but does not add syntax or format detail beyond what the schema provides. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Recommends) plus resource (single-column and composite B-Tree/BRIN indexes) and even the input basis (WHERE, JOIN, ORDER BY clauses). The final clause routes the agent to the sibling analyze_query_plan, so it is distinguishable from related tools without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use it ('optimizing database response times and eliminating full-table scans') and names the alternative for a different need ('for inspecting full execution plans, use analyze_query_plan instead'). Both the use case and the exclusion are spelled out.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

redact_sensitive_piiZero-PII & Secret Credential Redaction EngineA
Read-onlyIdempotent
Inspect

Redacts emails, phone numbers, SSNs, credit cards, API keys, and crypto private keys from text before logging or external transmission. Use when stripping personal data or secret credentials from prompts, logs, or outbound messages; for neutralizing indirect prompt injections and invisible Unicode in inbound tool responses, use sanitize_tool_output_stream instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'text' ('redaction_style' defaults to 'typed_token'), supports '?demo=true' or L402 (25 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
textYesInput text containing potential PII or secret keys to redact.
redaction_styleNoPlaceholder format used for redacted spans; defaults to 'typed_token' when omitted.

Output Schema

NameRequiredDescription
scrubbed_textYesSanitized text with all sensitive entities replaced by redaction tokens.
redactions_countYesTotal number of sensitive entities redacted.
zero_pii_certifiedYesTrue when post-scan verification confirms zero residual PII patterns.
categories_redactedYesTypes of sensitive data detected (e.g. 'EMAIL', 'SSN', 'PRIVATE_KEY').

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only, idempotent, non-destructive, closed-world behavior, but the description adds substantial operational context beyond that: stateless edge call, max 32 KB payload, 60 RPM rate limit, payment options (?demo=true or L402 at 25 sats), and HTTP 400 on invalid input.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, zero waste, and front-loaded with the core purpose and sibling distinction before operational limits. Every clause carries useful information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need not be explained. The description covers size limits, rate limits, auth/payment paths, default behavior, and error handling, which is complete for an agent to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and both parameters are already documented there, including the redaction_style enum and its default. The description mostly restates the default and text input, adding no syntax or format details beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States the specific verb 'redacts' and enumerates the exact resource classes (emails, phone numbers, SSNs, credit cards, API keys, crypto private keys), and explicitly distinguishes itself from the sibling sanitize_tool_output_stream by naming the different use case.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use it ('stripping personal data or secret credentials from prompts, logs, or outbound messages') and names the alternative tool plus the condition that selects it (neutralizing indirect prompt injections and invisible Unicode in inbound tool responses).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

rerank_hybrid_rag_chunksOkapi BM25 + Reciprocal Rank Fusion (RRF) + MMR Chunk RerankerA
Read-onlyIdempotent
Inspect

Reranks and deduplicates candidate RAG or retrieval passages against a search prompt using Okapi BM25 (k1=1.5, b=0.75), Reciprocal Rank Fusion (RRF), and Maximal Marginal Relevance (MMR) Jaccard diversity filtering. Use when selecting the top-K highest-signal, non-redundant passages from vector search or grep results; for compressing a single contiguous source file while keeping its original line order, use prune_context_skeleton instead. Read-only edge call (32 KB, 60 RPM): accepts 'search_prompt' ('documents_json' defaults to 'standard'), uses '?demo=true' or L402 (15 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
queryYesTechnical search query or question used to score candidate chunks.
top_kNoMaximum number of deduplicated chunks to return; defaults to 5 when omitted.
ranking_modeNoFusion weighting between lexical BM25 and diversity penalty; defaults to 'bm25_rrf_mmr' when omitted.
documents_jsonYesJSON string or array of candidate chunks '[{"id":"c1","text":"..."}]' to rerank.

Output Schema

NameRequiredDescription
queryYesEvaluated search query.
ranked_chunksYesOrdered top-K chunks with bm25_score, rrf_score, and mmr_score.
returned_countYesNumber of deduplicated top-K chunks returned.
total_candidatesYesNumber of input candidate chunks scored.

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly/idempotent/non-destructive, and the description still adds real operational context: 32 KB payload limit, 60 RPM throttling, L402 payment at 15 sats, a ?demo=true escape hatch, and HTTP 400 on invalid input. The '32 KB' figure is ambiguous (request size vs. response cap), which keeps this short of a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the sibling exclusion are properly front-loaded, but the single run-on sentence crams in tuning constants (k1=1.5, b=0.75) that give an agent little decision value, and the trailing clause compounds the parameter-name confusion rather than resolving it.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value explanation is rightly omitted, and the description covers cost, auth, error behavior, and the alternative tool for a moderately complex 4-param reranker. The one substantive gap is that its parameter naming does not match the actual schema, which is exactly the information an agent needs to invoke it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline would be 3, but the description actively misleads: it names a parameter 'search_prompt' that does not exist (the schema has 'query') and claims 'documents_json' 'defaults to standard' when the schema marks it required and typed as a JSON string/array. The real optional parameters ('top_k', 'ranking_mode') are never discussed, so the description subtracts rather than adds.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb+resource: 'reranks and deduplicates candidate RAG or retrieval passages' with the exact algorithm stack (BM25, RRF, MMR Jaccard) named. It also explicitly distinguishes itself from the closest sibling, prune_context_skeleton, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Use when selecting the top-K highest-signal, non-redundant passages from vector search or grep results' gives the triggering condition, and 'for compressing a single contiguous source file while keeping its original line order, use prune_context_skeleton instead' gives the exclusion plus the alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

route_mcp_workflow_planAutonomous Goal-to-MCP Tool Sequence Router & Cost PlannerA
Read-onlyIdempotent
Inspect

Maps a natural-language agent goal to an ordered sequence of Diogenes MCP tool calls with exact endpoint paths, JSON-RPC 2.0 payloads, and cumulative satoshi cost estimates. Use when an autonomous agent needs to plan which MCP tools to chain together to solve a multi-step objective within a satoshi budget; for compiling a static XML system prompt rather than an executable MCP tool call sequence, use compile_xml_agent_prompt instead. Read-only edge call (32 KB, 60 RPM): accepts 'objective' ('budget_preference' defaults to 'lowest_sats_deterministic'), uses '?demo=true' or L402 (20 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
objectiveYesNatural-language description of the workflow goal to route across MCP tools.
budget_preferenceNoCost vs depth routing trade-off; defaults to 'lowest_sats_deterministic' when omitted.

Output Schema

NameRequiredDescription
objectiveYesEvaluated workflow objective.
estimated_total_satsYesCumulative satoshi cost of the planned tool sequence.
recommended_sequenceYesOrdered tool execution steps with tool name, endpoint, and cost_sats.
deterministic_confidenceYesRouter confidence score from 0.80 to 1.0.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint and destructiveHint=false, and the description goes well beyond them: response size (32 KB), rate limit (60 RPM), pricing mechanics ('?demo=true' or L402 at 20 sats), and the failure mode (HTTP 400 if invalid). For a payable edge call these are exactly the facts an agent needs before invoking.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose before routing guidance, then operational facts, with no filler sentences. It is dense—several parentheticals are packed into a single clause near the end—which costs some scannability, but every clause carries distinct information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained; the description instead covers the things the schema cannot: payment/auth mode, rate limit, payload size, error behavior and the budget default. Nothing an agent needs to call this correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and both parameters, including the enum values, are already documented. The description only restates the 'objective' input and the 'lowest_sats_deterministic' default that the schema's own description carries, so it adds little semantic value here. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb-and-resource pair: maps a natural-language goal to an ordered sequence of MCP tool calls, naming the exact artifacts produced (endpoint paths, JSON-RPC 2.0 payloads, cumulative satoshi cost). It also distinguishes itself from the nearest sibling, compile_xml_agent_prompt, in the same sentence, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit trigger ('Use when an autonomous agent needs to plan which MCP tools to chain together to solve a multi-step objective within a satoshi budget') and an explicit exclusion with a named alternative ('for compiling a static XML system prompt ... use compile_xml_agent_prompt instead'). The when/when-not/alternative triple is complete.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

sanitize_html_contentEdge HTML Sanitizer, Script Stripper & XSS NeutralizerA
Read-onlyIdempotent
Inspect

Sanitizes raw HTML by removing malicious script tags, iframes, inline event handlers, and data URIs into safe markup. Use when preparing untrusted third-party web content for rendering in agent dashboards or email clients; for converting clean HTML into markdown, use extract_clean_markdown instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'html_content' ('sanitization_strictness' defaults to 'strip_scripts_and_iframes'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
html_contentYesUntrusted or potentially hazardous HTML string requiring sanitization.
preserve_imagesNoWhether to retain safe img elements with http/https sources.
sanitization_strictnessNoSanitizer filter policy: strip scripts and iframes, allowlist safe formatting, or plaintext strip all.

Output Schema

NameRequiredDescription
sanitized_htmlYesSafe, purified HTML output free of active scripting threats.
elements_removedYesList of dangerous tags and attributes removed during processing.
xss_vectors_neutralizedYesCount of potential script execution vectors disarmed.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already carry readOnly/idempotent/non-destructive, but the description adds operational facts annotations cannot: 32 KB payload cap, 60 RPM rate limit, stateless edge execution, default strictness, demo/L402 payment at 10 sats, and HTTP 400 on invalid input. Size limits, rate limits, and payment requirements are exactly the pre-call knowledge an agent needs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences with the purpose front-loaded ahead of routing and operational detail — correct ordering. The final sentence is dense, packing size, rate, defaults, demo mode, L402 pricing, and error behavior into one clause-heavy run, which slightly hurts scanability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value documentation is not required, and annotations cover the safety profile. Remaining agent-critical gaps — payload cap, rate limit, default policy, cost, and failure mode — are all addressed, so nothing needed to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline is 3; the description goes slightly beyond by declaring the default value for 'sanitization_strictness' ('strip_scripts_and_iframes'), which the schema does not state. It does not add semantics for 'preserve_images', leaving that entirely to the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Opens with a specific verb+resource ('Sanitizes raw HTML') and enumerates exactly what is removed (script tags, iframes, inline event handlers, data URIs), so the agent knows the transformation precisely. It also names the sibling it is not (extract_clean_markdown), separating the two without requiring schema inspection.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

States the triggering condition explicitly ('preparing untrusted third-party web content for rendering in agent dashboards or email clients') and names the alternative with the condition that selects it ('for converting clean HTML into markdown, use extract_clean_markdown instead'). Both the when and the when-not are present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

sanitize_sql_telemetrySQL Query Telemetry PII Scrubber & Parameterization MaskerA
Read-onlyIdempotent
Inspect

Masks PII, financial values, and credential literals from raw SQL query logs and slow-query dumps before telemetry storage. Use when scrubbing production database query logs before shipping to APM tools, Datadog, or external log collectors; for auditing SQL injection vulnerabilities, use audit_sql_injection_ast instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'query_logs' ('masking_policy' defaults to 'mask_pii_and_literals'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
hash_saltNoOptional salt string for deterministic pseudonymization of user IDs.
query_logsYesRaw SQL query text or multi-line database query log strings requiring sanitization.
masking_policyNoScrubbing rigor policy: mask PII and literals, anonymize all constants, or strict AST parameterization.

Output Schema

NameRequiredDescription
sanitized_logsYesClean query logs with sensitive constants replaced by parameter placeholders.
parameterized_templatesYesNormalized abstract query patterns suitable for APM metrics grouping.
redacted_literals_countYesTotal number of strings, numbers, and PII literals scrubbed from logs.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, and the description still adds substantial context beyond them: stateless edge call, 32 KB payload cap, 60 RPM rate limit, the default masking policy, demo/L402 (10 sats) access, and a 400 error on invalid input. These are operational facts an agent cannot get from structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose and alternative before operational constraints. Dense but every clause carries information; the only cost is that the constraint clause is packed into one long sentence that is harder to scan than a short bullet list would be.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema covering return values and annotations covering the safety profile, the description fills the remaining gaps an agent needs: input limits, rate limit, default policy, payment path, and error behavior. Nothing required to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema carries the parameter burden and 3 is the baseline. The description adds the meaningful default for masking_policy (mask_pii_and_literals) which the schema omits, but never mentions hash_salt or the policy trade-offs, so it doesn't go beyond the schema in a substantive way.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb plus resource: masks PII, financial values, and credential literals from raw SQL query logs and slow-query dumps before telemetry storage. It also names the sibling it is not (audit_sql_injection_ast), so an agent can route correctly without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit trigger context: 'Use when scrubbing production database query logs before shipping to APM tools, Datadog, or external log collectors.' It names an alternative and the condition selecting it ('for auditing SQL injection vulnerabilities, use audit_sql_injection_ast instead'), leaving nothing to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

sanitize_tool_output_streamIndirect Prompt-Injection, Invisible Unicode & Beacon Output ScrubberA
Read-onlyIdempotent
Inspect

Sanitizes untrusted external tool or web-scrape outputs by stripping invisible Unicode Tag characters (U+E0000), neutralizing Markdown tracking image beacons, and defusing indirect prompt overrides. Use when cleaning raw third-party tool outputs or scraped web text before inserting it into the LLM context window; for redacting personal identifiable information (emails, SSNs, keys) from outbound text, use redact_sensitive_pii instead. Read-only edge call (32 KB, 60 RPM): accepts 'raw_tool_output' (with enum defaults), uses '?demo=true' or L402 (15 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
wrap_tagNoXML isolation wrapper applied around the sanitized text; defaults to 'tool_data' when omitted.
raw_tool_outputYesUntrusted text returned by an external tool, webhook, or web scraper.

Output Schema

NameRequiredDescription
sanitized_outputYesCleaned text with invisible Unicode, tracking beacons, and overrides neutralized.
threats_neutralizedYesList of smuggling or injection vectors stripped from the input.
injection_risk_scoreYesThreat score from 0.0 to 0.99 prior to sanitization.
safe_for_context_ingestionYesTrue once the sanitized payload is safe to feed to the LLM.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive), and the description goes well beyond them by disclosing the 32 KB payload ceiling, 60 RPM rate limit, auth paths (?demo=true or L402 at 15 sats), and the HTTP 400 failure mode for invalid input. That is exactly the operational context an agent needs before calling a metered edge endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose, threats, usage, alternative, and operational limits are all front-loaded and each clause carries information. It is a dense semicolon-chained paragraph, however, and the trailing auth/error clause could be tightened without losing anything.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no explanation, and the description still covers the input contract, size and rate limits, payment path, and error behavior. Nothing material for correct invocation is missing given the annotations and schema richness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so both parameters are already documented in structured form, which sets the baseline at 3. The description only references 'raw_tool_output' and never explains wrap_tag or what the isolation wrappers mean for prompt safety, and the phrase "(with enum defaults)" attaches the enum to the wrong parameter, adding a small amount of confusion rather than meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ("Sanitizes") and enumerates the exact threats removed: Unicode Tag characters U+E0000, Markdown tracking-image beacons, and indirect prompt overrides. It explicitly routes the PII case to the sibling redact_sensitive_pii, so an agent can separate this from the other ~90 tools without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states the trigger condition precisely ("cleaning raw third-party tool outputs or scraped web text before inserting it into the LLM context window") and names the alternative for the adjacent use case ("for redacting personal identifiable information ... use redact_sensitive_pii instead"). Both when-to-use and when-to-use-something-else are explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

scan_solana_cpi_reentrancySolana Anchor & Rust Cross-Program Invocation (CPI) Vulnerability ScannerA
Read-onlyIdempotent
Inspect

Scans Solana Anchor and native Rust program instructions for unverified Cross-Program Invocation (CPI) program IDs, missing signer checks, and PDA bump seed canonicalization bugs. Use when auditing Solana Rust/Anchor source code or instruction account structs for CPI privilege escalation; for checking live SPL token mint/freeze authorities and rug-pull risk by mint address, use evaluate_solana_token_risk instead. Read-only edge call (32 KB, 60 RPM): accepts 'rust_source_or_idl' ('framework' defaults to 'anchor'), uses '?demo=true' or L402 (30 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
frameworkNoSolana program framework used; defaults to 'anchor' when omitted.
rust_source_or_idlYesSolana Rust/Anchor source code or IDL JSON string to scan for CPI vulnerabilities.

Output Schema

NameRequiredDescription
audit_verdictYesOverall Solana program verdict ('SAFE_ANCHOR_PROGRAM' or 'CRITICAL_CPI_VULNERABILITY').
pda_bump_safeYesTrue when canonical bump seeds are enforced on all PDA derivations.
missing_signer_checksYesAccounts mutated without enforcing Signer<'info> or has_one constraints.
arbitrary_cpi_detectedYesTrue if invoke/invoke_signed is called without validating the target program account.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only/idempotent/non-destructive/closed-world, and the description adds genuinely new operational context: a 32 KB input ceiling, 60 RPM rate limit, demo-mode and L402 pricing (30 sats), and an HTTP 400 failure mode for invalid input. The only gap is that it doesn't explain what the scan report contains, though an output schema exists to carry that.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the capability and the exclusion, then a dense operational footer. Every clause carries information, though the trailing parenthetical packing limits, pricing, and error codes into one run-on is slightly compressed compared with the clean opening.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only two-parameter scanner with a full output schema and complete annotations, the description supplies what structured fields cannot: failure modes, rate/size limits, and payment/auth options. Only the consequence of exceeding the 32 KB limit and the shape of the report are left unstated, and the latter is covered by the output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already fully documented, including the framework enum and its 'anchor' default — which the description merely restates. It confirms the required input is a source-or-IDL string but adds no syntax, size, or format guidance beyond the schema. Baseline 3 applies when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Scans Solana Anchor and native Rust program instructions') and enumerates the exact bug classes targeted: unverified CPI program IDs, missing signer checks, PDA bump seed canonicalization. It also explicitly distinguishes itself from evaluate_solana_token_risk, so an agent can route between the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a clear when-to-use ('auditing Solana Rust/Anchor source code or instruction account structs for CPI privilege escalation') and names the alternative with its own trigger condition ('checking live SPL token mint/freeze authorities and rug-pull risk by mint address, use evaluate_solana_token_risk instead'). Both directions of the routing decision are covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

schedule_critical_path_tasksCritical Path Method (CPM) DAG & Resource Constraint SchedulerA
Read-onlyIdempotent
Inspect

Solves a task dependency DAG via the Critical Path Method (CPM) to compute ES/EF/LS/LF, Total Float/Slack, optimal makespan, and the Critical Path. Use when scheduling dependent engineering milestones or workflow steps to find the minimum project duration and zero-slack bottleneck path; for detecting circular code imports and file blast radius without task durations, use audit_module_dependency_cycles instead. Read-only edge call (32 KB, 60 RPM): accepts 'tasks_json' ('time_unit' defaults to 'minutes'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
time_unitNoDuration unit label attached to the schedule; defaults to 'hours' when omitted.
tasks_jsonYesJSON string or array of tasks '[{"id":"t1","duration":3,"dependencies":[]}]' to schedule.

Output Schema

NameRequiredDescription
total_tasksYesNumber of DAG tasks scheduled.
critical_pathYesOrdered task IDs with zero slack that determine the overall project duration.
task_scheduleYesPer-task earliest_start, earliest_finish, latest_start, latest_finish, and total_float_slack.
optimal_makespan_durationYesMinimum total duration required to complete all tasks.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations (which only cover read-only/idempotent/non-destructive) by disclosing a 32 KB payload cap, 60 RPM rate limit, demo-mode access, L402 payment cost (20 sats), and HTTP 400 on invalid input. That is exactly the operational context an agent needs before calling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and scope are front-loaded, then the alternative routing, then operational constraints. The final sentence is a dense run-on packing size, rate limit, auth, and error code together, but every clause carries information; nothing is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return structure need not be explained, and the description covers auth, limits, and error behavior for a 2-parameter tool. The only shortfall is the incorrect default-unit claim, which leaves the caller with conflicting information about the one enum parameter.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description asserts "'time_unit' defaults to 'minutes'", but the input schema states the default is 'hours'. With 100% schema coverage the baseline would be 3, but a stated default that contradicts the schema is actively misleading and could produce wrong-unit schedules. The tasks_json shape is only echoed from the schema, adding no new guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource combination ('Solves a task dependency DAG via the Critical Path Method') and enumerates concrete outputs (ES/EF/LS/LF, float, makespan, critical path). An agent can distinguish this scheduling tool from the many audit/analyze siblings without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly names the use case ('scheduling dependent engineering milestones or workflow steps') and the goal (minimum project duration, zero-slack bottleneck). It also names the alternative sibling, audit_module_dependency_cycles, and the condition that selects it ('detecting circular code imports and file blast radius without task durations').

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

scrape_readable_articleReadability Article Body & Byline ExtractorA
Read-onlyIdempotent
Inspect

Extracts primary article body, author bylines, publication timestamps, and estimated reading duration from web pages. Use when stripping navigation bars, advertisement containers, and cookie banners to isolate core editorial content; for converting full HTML to markdown, use extract_clean_markdown instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'html_content' ('readability_profile' defaults to 'article_body_strict'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
html_contentYesTarget web page HTML containing the article, editorial post, or blog content.
include_bylineNoWhether to parse author names, affiliations, and editorial publication dates.
readability_profileNoContent isolation heuristic: strict article body, technical documentation, or forum thread.

Output Schema

NameRequiredDescription
titleYesExtracted main article headline.
bylineYesAuthor credit or publishing editorial team.
excerptYesShort leading synopsis or meta description.
content_textYesSanitized primary article narrative text.
reading_time_minutesYesEstimated reading duration in minutes based on 220 WPM.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description adds genuinely new operational context: statelessness, a 32 KB payload cap, 60 RPM rate limit, demo-mode or L402 payment at 10 sats, and HTTP 400 on invalid input. Those are exactly the facts an agent needs before calling an edge endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the sibling alternative are front-loaded, and every clause carries information. The final sentence is densely parenthetical (limits, auth, defaults, error code all crammed together), which slightly hurts scannability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need no explanation; the description instead covers the constraints that matter — size cap, rate limit, auth/payment paths, failure mode, and the sibling escape hatch. Nothing needed for a correct call is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description earns above that by disclosing the default value of 'readability_profile' ('article_body_strict'), which the schema does not state. It does not explain include_byline's default, so it stops short of 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening sentence gives a specific verb (extracts) and names the exact resources returned: article body, bylines, timestamps, reading duration. It also distinguishes itself from the sibling extract_clean_markdown, so an agent can route correctly without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states the use case ('stripping navigation bars, advertisement containers, and cookie banners to isolate core editorial content') and names the explicit alternative with its selection condition ('for converting full HTML to markdown, use extract_clean_markdown instead'). Both when-to-use and when-not-to-use are present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_gemini_grounded_mapsGoogle Maps Grounded Geospatial & Place Intelligence EngineA
Read-onlyIdempotent
Inspect

Executes geospatial and point-of-interest queries grounded in live Google Maps data, returning verified addresses, coordinates, operating hours, and spatial context. Use when resolving physical locations, venues, transit distances, or regional infrastructure data; for searching general web articles, documentation, and news, use search_gemini_grounded_web instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'prompt' ('distance_units' defaults to 'metric_km'), supports '?demo=true' or L402 (75 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
promptYesGeospatial query, place name, or regional routing question.
distance_unitsNoPreferred unit system for distances; defaults to 'metric_km' when omitted.

Output Schema

NameRequiredDescription
modelYesGemini model used for geospatial synthesis.
outputYesGeospatially grounded response with place details.
placesYesStructured Google Maps place identifiers and coordinates.
groundingYesGrounding source ('google_maps').

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, yet the description adds material facts beyond them: stateless edge call, 32 KB payload cap, 60 RPM rate limit, L402 payment of 75 sats, demo-mode escape hatch, and HTTP 400 on invalid input. The only shortfall is that the 400/invalid condition is left unspecified as to what 'invalid' means, but operational constraints are otherwise well disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The capability and the sibling disambiguation are front-loaded, which is the right ordering. The final sentence is a run-on that crams rate limits, payment, demo mode, and error behavior into one clause, but every fact still earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described; the description instead covers cost, rate limits, statelessness, and failure behavior — exactly the gaps the schema and annotations leave. Nothing an agent needs before calling it is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and both parameters carry enum/default documentation, so the schema already does the heavy lifting. The description restates the 'distance_units' default and names the 'prompt' parameter but adds no format, syntax, or example guidance beyond that, which is the expected baseline-3 level.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Executes geospatial and point-of-interest queries') and enumerates the resource outputs (addresses, coordinates, hours, spatial context). It explicitly distinguishes itself from the sibling workflow tool search_gemini_grounded_web, so an agent can route without inspecting either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives positive triggers (resolving physical locations, venues, transit distances, regional infrastructure) and names the exact alternative with its condition ('for searching general web articles, documentation, and news, use search_gemini_grounded_web instead'). This is explicit when/when-not routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_gemini_grounded_webGoogle Search Grounded Real-Time Fact & Citation EngineA
Read-onlyIdempotent
Inspect

Answers factual queries with live Google Search grounding, returning verified up-to-date answers accompanied by source URLs and grounding metadata. Use when verifying live web facts, documentation updates, or current events in a single low-latency call; for querying geographic places, coordinates, directions, and local business data via Google Maps grounding, use search_gemini_grounded_maps instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'prompt' ('recency_bias' defaults to 'past_24h'), supports '?demo=true' or L402 (75 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
promptYesFactual question or search query to ground against live Google Search results.
recency_biasNoTemporal preference for search snippets; defaults to 'any_time' when omitted.

Output Schema

NameRequiredDescription
modelYesGemini model used for grounded synthesis.
outputYesGrounded factual answer text.
citationsYesStructured Google Search grounding chunks and source URLs.
groundingYesGrounding source ('google_search').

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only cover safety/idempotency, and the description goes well beyond them: statelessness, 32 KB payload cap, 60 RPM throttle, L402 pricing (75 sats) with a ?demo=true bypass, and HTTP 400 on invalid input. It loses a point because it asserts recency_bias 'defaults to past_24h', which conflicts with the schema and could mislead; the low-latency claim is also unquantified.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose, then usage, then constraints - a sensible ordering with no filler sentences. The final sentence is an overloaded run-on packing limits, auth, defaults, and error codes into one clause chain, which slightly hurts scanability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a two-param tool with a full output schema, this covers the operational essentials an agent needs: cost model, rate/payload ceilings, auth options, and failure mode. The only meaningful gap is the incorrect default it reports for the optional enum parameter.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline would be 3 and the schema already documents both parameters. The description's only added parameter claim is that recency_bias defaults to 'past_24h', which directly contradicts the schema's 'any_time' - misleading guidance is worse than silence.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Answers factual queries with live Google Search grounding') plus the concrete payload (sourced answers + grounding metadata). The final clause explicitly names the sibling it replaces for geo queries, so an agent can discriminate without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Use when verifying live web facts, documentation updates, or current events' gives positive selection criteria, and 'for querying geographic places, coordinates, directions, and local business data... use search_gemini_grounded_maps instead' names the alternative and the condition that routes to it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

simulate_eve_capacitor_siegeEVE Frontier Lagrange Node Siege Capacitor Depletion SimulatorA
Read-onlyIdempotent
Inspect

Simulates Lagrange Network Node gigajoule (GJ) capacitor drain under sustained hostile fleet siege and computes optimal assembly load-shedding order. Use when preparing base defense power-shedding schedules against an incoming hostile fleet; for calculating routine peacetime fuel burn and reserve headroom, use optimize_eve_node_power instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'node_id' ('siege_intensity' defaults to 'skirmish_frigate_squad'), supports '?demo=true' or L402 (30 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
node_idYesTarget Lagrange Network Node identifier under siege simulation.
siege_intensityNoHostile fleet DPS and electronic-warfare drain tier; defaults to 'heavy_cruiser_wing' when omitted.

Output Schema

NameRequiredDescription
node_idYesSimulated Lagrange Network Node identifier.
defense_verdictYesSiege readiness assessment ('HOLDS_UNTIL_REINFORCEMENT' or 'SHED_SSU_LOAD_IMMEDIATELY').
load_shedding_sequenceYesOrdered list of non-essential assemblies to power down first.
capacitor_survival_minutesYesMinutes before capacitor reserves drop below turret firing threshold.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), and the description goes well beyond them: statelessness, a 32 KB payload ceiling, a 60 RPM rate limit, a ?demo=true preview path, an L402 payment of 30 sats, and an HTTP 400 failure mode for invalid input. These are exactly the operational facts an agent needs before calling a metered edge endpoint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose, then alternatives, then operational constraints; no filler sentences. The third sentence is dense to the point of being a comma-spliced list of transport details, but every clause carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described, and the description covers payment, rate limits, demo mode, and error signaling. The one completeness defect is the default-value error, which leaves the agent less certain about the schema than if the description had said nothing at all.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline would be 3, but the description actively conflicts with the schema: it says siege_intensity 'defaults to skirmish_frigate_squad' while the schema property description states the default is 'heavy_cruiser_wing'. An agent that trusts the prose will omit the parameter expecting the wrong tier and get a materially wrong simulation. The node_id mention merely restates the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (simulates/computes), a specific resource (Lagrange Network Node GJ capacitor drain), and the derived output (optimal assembly load-shedding order). It also explicitly distinguishes itself from the nearest sibling, optimize_eve_node_power, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives both sides of the routing decision: use this when preparing base defense power-shedding schedules against an incoming hostile fleet, and use optimize_eve_node_power for routine peacetime fuel burn and reserve headroom. The trigger condition (hostile siege) and the exclusion (peacetime) are both explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

simulate_eve_sui_ptbEVE Frontier Sui Move PTB Coin-Drain & HotPotato Safety SimulatorA
Read-onlyIdempotent
Inspect

Simulates Sui Programmable Transaction Block (PTB) command sequences to detect unauthorized coin splits, object transfers, and unconsumed HotPotato receipts. Use when auditing an untrusted EVE Frontier transaction bundle before signing with a pilot wallet; for verifying pilot zkLogin JWT proofs and character ownership capabilities, use verify_eve_zklogin_character instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'ptb_commands_json' ('strictness_mode' defaults to 'strict_zero_drain'), supports '?demo=true' or L402 (35 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
strictness_modeNoSimulation policy controlling whether multi-transfer PTBs are blocked; defaults to 'strict_zero_drain' when omitted.
ptb_commands_jsonYesJSON-serialized array of PTB commands or comma-separated Move calls (e.g. '[{"kind":"SplitCoins"},{"kind":"MoveCall"}]').

Output Schema

NameRequiredDescription
signing_verdictYesFinal safety recommendation ('SAFE_EVE_FRONTIER_PTB' or 'BLOCK_SUSPICIOUS_PTB_DRAIN').
ptb_command_countYesNumber of PTB commands statically simulated.
hot_potato_receipts_balancedYesTrue if every Move HotPotato struct created in the PTB is consumed before exit.
hidden_coin_transfer_detectedYesTrue if unauthorized SplitCoins or TransferObjects drains are detected.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, non-destructive, closed-world, but the description adds operational behavior the annotations don't: stateless edge call, 32 KB limit, 60 RPM, demo mode or L402 payment (35 sats), and HTTP 400 on invalid input. This is exactly the kind of extra behavioral context annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The sentence is dense but front-loads purpose before caveats, and every clause carries useful signal (use case, alternative, limits, auth). It is slightly packed with operational details in one paragraph, keeping it just below a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so the description needn't explain return values. Given the two-parameter schema and rich annotations, the definition supplies everything an agent needs to call it correctly: scope, alternative, limits, auth, and failure behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already documented. The description restates the default for strictness_mode but adds no syntax or format details beyond the schema's own explanation of ptb_commands_json. Baseline 3 applies when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Simulates') and resource ('Sui Programmable Transaction Block (PTB) command sequences') plus the concrete detections (coin splits, object transfers, unconsumed HotPotato receipts). It explicitly distinguishes itself from verify_eve_zklogin_character, so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use case ('auditing an untrusted EVE Frontier transaction bundle before signing with a pilot wallet') and names the alternative tool and its purpose ('for verifying pilot zkLogin JWT proofs and character ownership capabilities, use verify_eve_zklogin_character instead'). Both when-to-use and when-not are covered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

simulate_evm_transaction_calldataPre-Sign EVM Hex Calldata Selector Decoder & Drain SimulatorA
Read-onlyIdempotent
Inspect

Decodes raw EVM hexadecimal transaction calldata (0x...) by 4-byte function selector to expose hidden ERC-20 approve/transferFrom calls, setApprovalForAll drains, and multicall bundles. Use when auditing raw hex transaction data (to, value, data) before broadcasting an on-chain EVM transaction; for inspecting off-chain EIP-712 JSON typed-data signatures, use decode_eip712_permit_signature instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'calldata_hex' ('network' defaults to 'base_mainnet'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
networkNoTarget EVM network for simulation context; defaults to 'base_mainnet' when omitted.
calldata_hexYesHexadecimal EVM transaction data string starting with '0x' (e.g. '0x095ea7b3000000000000000000000000...').

Output Schema

NameRequiredDescription
selector_hexYesExtracted 4-byte function selector (e.g. '0x095ea7b3').
decoded_methodYesHuman-readable ABI function signature matched to the selector.
simulation_verdictYesPre-sign safety recommendation ('SAFE_CALLDATA' or 'HIGH_RISK_APPROVAL_DETECTED').
approval_or_drain_riskYesTrue if the call grants token/NFT allowances or transfers assets to an untrusted target.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/destructive/idempotent/openWorld, so the safety profile is covered; the description adds genuinely non-obvious context: statelessness, a 32 KB input cap, 60 RPM rate limit, query-param demo mode or L402 payment (20 sats), and HTTP 400 on invalid input. It does not describe what the decoded output contains, but that is largely covered by the output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single dense passage that front-loads the decoding purpose and risk surface before the usage routing, then the operational constraints. No sentence is filler; even the rate limit and payment note are operationally relevant to calling it correctly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description need not explain return values, and annotations cover safety. It still supplies limits, error behavior, auth/payment options and network default — everything an agent needs to invoke it successfully.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so both parameters are already documented, and the description mostly restates them ('calldata_hex', network default 'base_mainnet'). The only added meaning is the undocumented '?demo=true' query-parameter/payment path, which is marginal. Baseline 3 is correct when the schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — decoding raw EVM hex calldata by 4-byte selector — and names the attack patterns it surfaces (approve/transferFrom, setApprovalForAll, multicall). It also explicitly distinguishes itself from the sibling decode_eip712_permit_signature, so an agent can route between the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit situation for use ('auditing raw hex transaction data (to, value, data) before broadcasting') and an explicit alternative with the condition that selects it ('for inspecting off-chain EIP-712 JSON typed-data signatures, use decode_eip712_permit_signature instead'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

simulate_monte_carlo_riskSeeded Mulberry32 Monte Carlo Percentile, VaR & Tail-Risk SimulatorA
Read-onlyIdempotent
Inspect

Runs a reproducible seeded Mulberry32 Monte Carlo simulation over uncertain cost, latency, or duration variables to compute P10/P50/P90/P95 percentiles, Value-at-Risk (VaR), and CVaR. Use when modeling stochastic uncertainty, tail risk (VaR/CVaR), and probability of meeting a budget or SLA target; for evaluating deterministic single-point algebraic formulas or exact NPV/IRR cashflows, use evaluate_deterministic_math instead. Read-only edge call (32 KB, 60 RPM): accepts 'variables_json' (with enum defaults), uses '?demo=true' or L402 (20 sats); HTTP 400 if invalid.

NameRequiredDescriptionDefault
variables_jsonYesJSON array of stochastic variables (e.g. name, min, mode, max) to simulate.
distribution_modelNoProbability distribution family applied to each variable; defaults to 'triangular_pert' when omitted.

Output Schema

NameRequiredDescription
percentilesYesComputed p10, p50_median, p90, p95, and p99 outcome distribution percentiles.
trials_executedYesNumber of seeded Monte Carlo trials executed.
value_at_risk_95Yes95% Value-at-Risk (VaR_95) threshold.
conditional_tail_expectation_95Yes95% Conditional Tail Expectation (CVaR_95 / Expected Shortfall) across the worst 5% of trials.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, but the description goes well beyond them: deterministic seeding for reproducibility, a 32 KB payload cap, 60 RPM rate limit, '?demo=true' or L402 payment at 20 sats, and HTTP 400 on invalid input. These are non-obvious operational constraints an agent must know before calling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose, then selection guidance, then operational constraints in a compact second sentence. The final clause is densely packed (limits, payment, error code in one line) but every element earns its place; no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need no explanation, and the description still covers inputs, defaults, size/rate limits, access modes, and failure behavior. An agent has everything needed to decide and invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and both parameters carry descriptive text plus an enum for distribution_model, so the baseline is 3. The description adds only marginal value ("accepts 'variables_json' (with enum defaults)") without specifying the JSON element shape or how distribution_model interacts with per-variable definitions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ("Runs a reproducible seeded Mulberry32 Monte Carlo simulation over uncertain cost, latency, or duration variables") and enumerates the exact outputs (P10/P50/P90/P95, VaR, CVaR). It is clearly separable from the closest sibling, evaluate_deterministic_math, which it explicitly names.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use condition ("Use when modeling stochastic uncertainty, tail risk (VaR/CVaR), and probability of meeting a budget or SLA target") and an explicit exclusion with the correct alternative ("for evaluating deterministic single-point algebraic formulas or exact NPV/IRR cashflows, use evaluate_deterministic_math instead"). Nothing about tool selection is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

summarize_technical_documentHigh-Density Technical Document & RFC Executive SummarizerA
Read-onlyIdempotent
Inspect

Condenses long technical specifications, RFCs, research papers, or meeting transcripts into high-density executive bullet points preserving exact figures and decisions. Use when producing a human-readable executive summary of a single provided document; for researching a topic across the live web with Google Search citations, use synthesize_web_intelligence_brief instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'text' ('summary_format' defaults to 'executive_bullets'), supports '?demo=true' or L402 (50 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
textYesFull document text, RFC, or transcript to summarize.
summary_formatNoOutput presentation structure; defaults to 'executive_bullets' when omitted.

Output Schema

NameRequiredDescription
modelYesSummarization model executed ('gemini-3.8-flash').
successYesTrue when summarization completed.
summaryYesHigh-density technical summary text.
compression_achievedYesTrue when output length is <25% of input length.

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), yet the description still adds substantive operational context: stateless execution, a 32 KB input ceiling, 60 RPM throttling, authentication paths ('?demo=true' or L402 at 50 sats), and a 400 on invalid input. These are call-planning facts an agent cannot derive from the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose and the sibling exclusion before operational details, and no sentence is filler. It is dense to the point of being clause-heavy in the second sentence (limits, auth, payment, error code all in one run-on), which slightly hurts scannability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description needn't explain return values, and it does cover limits, auth, and error behavior. The one unresolved gap is what happens to input exceeding 32 KB — truncation versus a 400 — which matters for a long-document summarizer and forces the agent to guess.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the enum values are already documented, so the schema carries the parameter burden. The description merely restates that 'text' is the input and that 'summary_format' defaults to 'executive_bullets', adding no format semantics (e.g., when decision_log_table is preferable to one_paragraph_abstract). Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Condenses') plus the exact resource classes it handles (technical specifications, RFCs, research papers, meeting transcripts) and the output artifact (high-density executive bullet points preserving figures and decisions). It also explicitly names the sibling it is not (synthesize_web_intelligence_brief), so an agent can route between the two without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use condition ('producing a human-readable executive summary of a single provided document') and an explicit alternative with its distinguishing condition ('for researching a topic across the live web with Google Search citations, use synthesize_web_intelligence_brief instead'). The single-document vs live-web axis is exactly the decision boundary an agent needs.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

summarize_temporal_timelineChronological Event Timeline Compiler & Milestone SynthesizerA
Read-onlyIdempotent
Inspect

Synthesizes chronological milestone timelines from search results, news archives, and historical documents. Use when reconstructing historical events, tracking company histories, or mapping regulatory progression; for tracking real-time breaking news in the past 24 hours, use analyze_news_recency instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'event_corpus' ('timeline_resolution' defaults to 'chronological_milestones'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
event_corpusYesUnstructured text corpus containing dated events, news reports, or historical accounts.
ascending_orderNoWhether to sort timeline from oldest to newest (true) or reverse chronological (false).
timeline_resolutionNoTemporal event grouping: chronological milestones, daily chronicle, or weekly epochs.

Output Schema

NameRequiredDescription
date_rangeYesStart date and end date spanning the compiled chronological timeline.
turning_pointsYesKey pivot points or inflection events identified in the historical narrative.
timeline_eventsYesOrdered sequence of date-stamped milestone entries with descriptions.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive/openWorld=false, but the description goes further: stateless edge call, 32 KB payload cap, 60 RPM rate limit, '?demo=true' or L402 payment (15 sats), and HTTP 400 on invalid input. These operational constraints are exactly the kind of context annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, with purpose front-loaded and the sibling reroute placed before the operational parenthetical. The constraints sentence is dense and run-on (size, rate limit, auth, error code all crammed into one clause), which slightly hurts scannability, but no sentence is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need not be described, annotations cover the safety profile, and the description supplies the non-obvious operational envelope (size, rate, payment, error). An agent has everything needed to call this correctly and to know when to route elsewhere.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and each parameter is documented in-schema, so the baseline is 3. The description adds only the default value for 'timeline_resolution' and the name of the required input; it says nothing about 'ascending_order' behavior or the practical difference between the three resolution modes.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Synthesizes chronological milestone timelines') plus the input sources (search results, news archives, historical documents). It also names the sibling it is not (analyze_news_recency), so an agent can distinguish the two without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete usage cases (reconstructing historical events, company histories, regulatory progression) and an explicit exclusion with the alternative for the 24-hour breaking-news case. Nothing about tool selection is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

synthesize_gemini_speech_audioGemini Neural Text-to-Speech (TTS) Expressive Voice SynthesizerA
Read-onlyIdempotent
Inspect

Converts written text into natural, prosody-controlled spoken voice audio using Gemini 3.8 Flash Neural Text-to-Speech. Use when rendering voiceover narration or spoken agent replies from a deterministic text script; for conducting bidirectional conversational audio dialog comprehension, use process_live_audio_dialogue instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'text' ('voice_persona' defaults to 'neutral_broadcast'), supports '?demo=true' or L402 (50 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
textYesExact written script or paragraph to synthesize into spoken voice audio.
voice_personaNoExpressive vocal timbre preset; defaults to 'neutral_broadcast' when omitted.

Output Schema

NameRequiredDescription
modelYesNeural TTS model executed ('gemini-3.8-flash-tts').
noticeYesAudio synthesis status message.
outputYesSynthesized speech audio descriptor and phoneme duration summary.
successYesTrue when TTS synthesis completed.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive/non-open-world, and the description adds substantial context beyond them: statelessness, a 32 KB input cap, a 60 RPM rate limit, the ?demo=true or L402 (50 sats) access path, and HTTP 400 on invalid input. It does not contradict the annotations, since synthesis is a deterministic, side-effect-free read-like call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, purpose front-loaded, with the exclusion clause placed after the primary use case. The parenthetical stack in the second sentence (size, rate, payment, error code) is dense but each clause carries operational information, so little is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained; what remains — access/payment path, size and rate limits, error behavior, default persona, and the sibling alternative — is all covered. An agent has everything needed to invoke this correctly on the first try.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description still adds a real constraint not stated in the schema by tying the 32 KB cap to the 'text' payload and noting the default persona. It does not explain the semantic differences between the four enum personas, which keeps it below a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Converts written text into natural, prosody-controlled spoken voice audio') plus the underlying engine, which pins down the capability precisely. It also explicitly names the sibling it is not (process_live_audio_dialogue) and the use case that separates them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit when-to-use ('rendering voiceover narration or spoken agent replies from a deterministic text script') and routes the alternative case ('bidirectional conversational audio dialog') to process_live_audio_dialogue. No inference is required to choose between the two.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

synthesize_python_automation_codeSelf-Contained Python Script, CLI & Parser Code SynthesizerA
Read-onlyIdempotent
Inspect

Synthesizes PEP 8 compliant, self-contained Python 3 scripts, data parsers, and CLI utilities complete with type hints, docstrings, and inline assertion tests. Use when generating a standalone Python automation script or parser from a functional specification; for summarizing existing documentation or codebases into executive bullet points, use summarize_technical_document instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'prompt' ('dependency_policy' defaults to 'stdlib_only'), supports '?demo=true' or L402 (75 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
promptYesFunctional specification, input/output formats, and edge cases for the Python script.
dependency_policyNoAllowed library dependencies in generated code; defaults to 'stdlib_only' when omitted.

Output Schema

NameRequiredDescription
modelYesCode synthesis model executed ('gemini-4-argon').
outputYesComplete Python 3 source code with inline verification assertions.
successYesTrue when code synthesis succeeded.
stdlib_onlyYesTrue if the generated script requires zero third-party pip packages.

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations (which already declare readOnly/idempotent/non-destructive), the description discloses statelessness, a 32 KB payload cap, a 60 RPM rate limit, demo-mode and L402 payment (75 sats) requirements, and HTTP 400 behavior on invalid input. This is exactly the operational context annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core purpose and the sibling routing are front-loaded, which is good. The third sentence crams transport, limits, payment, and error behavior into one dense clause, which is efficient but slightly overloaded; still, no sentence is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value explanation is unnecessary, and the annotations plus description together cover safety, limits, auth, and errors. Minor gaps remain: it does not clarify how the three dependency_policy modes differ, which matters for a tool whose whole output hinges on that choice.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so both parameters are already fully documented in the schema, establishing the baseline of 3. The description only echoes the 'dependency_policy' default of 'stdlib_only,' adding no new semantics such as what each enum value implies for generated code.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Synthesizes PEP 8 compliant, self-contained Python 3 scripts, data parsers, and CLI utilities,' and enumerates the output artifacts (type hints, docstrings, inline assertion tests). It is clearly distinguishable from siblings like summarize_technical_document and apply_fuzzy_code_patch.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states the trigger condition explicitly ('Use when generating a standalone Python automation script or parser from a functional specification') and names the alternative for the competing case ('for summarizing existing documentation or codebases ... use summarize_technical_document instead'). This gives both when-to-use and when-not-to-use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

synthesize_safe_regexLinear-Time O(n) ReDoS-Safe Regular Expression Synthesizer & TesterA
Read-onlyIdempotent
Inspect

Synthesizes linear-time O(n) regular expressions free of catastrophic backtracking (ReDoS) and validates them against positive and negative test strings. Use when generating and verifying a regular expression pattern for input validation or lexical parsing; for repairing broken JSON syntax directly without writing custom regexes, use heal_malformed_json instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'description' ('flavor' defaults to 'ecmascript_js'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
flavorNoTarget regular expression engine syntax; defaults to 'ecmascript_js' when omitted.
descriptionYesNatural-language specification of the text pattern to match (e.g. 'RFC 5322 email addresses excluding plus-aliases').

Output Schema

NameRequiredDescription
patternYesSynthesized regular expression pattern string (without slash delimiters).
redos_safeYesTrue when static star-height analysis confirms zero exponential backtracking.
test_resultsYesPass/fail verification results across positive and negative test cases.
time_complexityYesWorst-case matching complexity ('O(n)').

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, so the safety profile is covered. The description goes beyond them with operational detail: stateless, 32 KB max payload, 60 RPM, demo=true or L402 payment of 15 sats, and HTTP 400 on invalid input — exactly the auth/limit/error context annotations cannot express. Slightly dense but substantive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the sibling alternative are front-loaded in the first two clauses. The trailing operational sentence packs rate limits, payment, and error codes into one parenthetical chain, which is efficient but slightly overloaded for a single sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no explanation; the description instead covers the limits, payment/auth path, and failure mode an agent needs before calling. For a two-parameter tool this is complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and both properties carry descriptions and an enum, so the schema does the heavy lifting. The description only restates that 'description' is accepted and that 'flavor' defaults to 'ecmascript_js', which the schema already says — baseline 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Synthesizes linear-time O(n) regular expressions') plus a second action ('validates them against positive and negative test strings'). The property claimed (ReDoS-free, O(n)) is the discriminating trait versus siblings, and it names heal_malformed_json as the alternative.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit use case is given ('generating and verifying a regular expression pattern for input validation or lexical parsing') along with an exclusion and the tool to use instead ('for repairing broken JSON syntax directly... use heal_malformed_json'). Nothing is left to inference about when to pick this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

synthesize_seed_fixturesDeterministic Relational Seed Data & SQL Mock Fixture GeneratorA
Read-onlyIdempotent
Inspect

Generates deterministic relational test seed fixtures respecting foreign key constraints, unique indexes, and data bounds. Use when provisioning mock database datasets for automated testing, staging environments, or sandbox demos; for compiling ORM models from schemas, use generate_orm_models instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'schema_ddl' ('fixture_volume' defaults to 'minimal_smoke_test_5'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
schema_ddlYesTarget database schema DDL defining tables, column types, and foreign key relations.
fixture_volumeNoMock dataset volume profile: minimal smoke test (5), standard dataset (50), or stress dataset (500).
deterministic_seedNoInteger seed for reproducible pseudo-random data generation.

Output Schema

NameRequiredDescription
sql_insertsYesExecutable SQL INSERT statements populated with realistic mock records.
foreign_keys_satisfiedYesTrue if all foreign key dependencies and unique constraints were verified valid.
records_generated_per_tableYesCount of generated records partitioned by target table name.

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly/idempotent/non-destructive), and the description adds genuinely non-structured behavior: 32 KB payload ceiling, 60 RPM rate limit, L402 payment of 15 sats with a ?demo=true bypass, and HTTP 400 on invalid input. This is well beyond annotation coverage; it stops short of 5 only because error/limit context is compressed into one dense clause rather than explained.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core purpose before the usage/alternative clause. The final sentence packs limits, rate, payment, and errors into one semicolon-chained line — efficient but slightly dense; still, every clause carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need not be described. The description still covers auth/payment, size and rate limits, failure mode, parameter defaults, and the sibling boundary — everything an agent needs to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3, but the description adds a fact the schema omits: that 'fixture_volume' defaults to 'minimal_smoke_test_5'. That default-value disclosure is real added meaning; 'deterministic_seed' is left entirely to the schema, which is acceptable given full coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Specific verb+resource: 'Generates deterministic relational test seed fixtures' with the key constraint ('respecting foreign key constraints, unique indexes, and data bounds') stated immediately. The title and description also make the boundary with generate_orm_models explicit, so an agent can distinguish the two without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use list ('provisioning mock database datasets for automated testing, staging environments, or sandbox demos') plus a named alternative and the condition that selects it ('for compiling ORM models from schemas, use generate_orm_models instead'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

synthesize_sql_queryDeterministic NL-to-SQL Synthesizer & Dialect Query GeneratorA
Read-onlyIdempotent
Inspect

Translates natural language questions into dialect-accurate, optimized SQL SELECT queries with schema awareness and safety checks. Use when generating reporting queries or automated data analytics pipelines; for analyzing SQL execution performance and EXPLAIN plans, use analyze_query_plan instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'natural_language_request' and 'schema_ddl' ('sql_dialect' defaults to 'postgresql_dialect'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
schema_ddlYesDatabase schema DDL statements defining available tables, columns, and relations.
sql_dialectNoTarget SQL dialect specification: PostgreSQL dialect, MySQL dialect, or SQLite dialect.
read_only_modeNoWhether to enforce strict read-only SELECT query constraints.
natural_language_requestYesNatural language question or reporting requirement to transform into SQL.

Output Schema

NameRequiredDescription
dialectYesDatabase engine dialect target the query was generated for.
sql_queryYesSynthesized, formatted SQL query tailored to the provided schema and dialect.
query_typeYesOperation classification (e.g., SELECT_AGGREGATE, SELECT_JOIN, FILTERED_SCAN).
explanationYesStep-by-step rationale explaining table joins, filtering predicates, and grouping logic.
safety_checkedYesTrue if AST static analysis verified the query has zero mutation side-effects.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds substantial behavior beyond the annotations: it is stateless and read-only, capped at 32 KB and 60 RPM, defaults sql_dialect to postgresql_dialect, supports demo mode or L402 payment, and returns HTTP 400 for invalid input. These operational constraints and failure modes are exactly the kind of context annotations alone do not convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded: purpose first, usage and alternative second, operational constraints third. Every sentence contributes distinct information, and the parenthetical details are dense but purposeful rather than ornamental.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With full schema coverage, annotations, and an output schema present, the description supplies the remaining operational context an agent needs: statelessness, size and rate limits, dialect default, payment/demo behavior, and error behavior. Nothing important for correct invocation appears to be missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is already 100%, so the schema carries most parameter meaning. The description adds useful semantics by noting that sql_dialect defaults to 'postgresql_dialect', but it does not add much about read_only_mode or the required inputs beyond naming them.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb and resource: translating natural language questions into dialect-accurate, optimized SQL SELECT queries with schema awareness and safety checks. It also explicitly distinguishes the tool from the sibling analyze_query_plan, so an agent can tell when this is the right NL-to-SQL generator rather than a query-plan analyzer.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states the intended use cases directly: generating reporting queries or automated data analytics pipelines. It also names a concrete alternative, analyze_query_plan, for SQL execution performance and EXPLAIN plans, which gives the agent a clear routing rule.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

synthesize_web_intelligence_briefReal-Time Google Search Grounded JSON Market Intelligence BriefA
Read-onlyIdempotent
Inspect

Synthesizes a real-time market or technical intelligence brief grounded in live Google Search, returning strict JSON ('executive_summary', 'key_developments', 'sentiment', 'sources'). Use when fetching a structured JSON market/news brief with live web citations and sentiment classification; for summarizing caller-supplied text offline without live web search, use summarize_technical_document instead. Read-only edge call (32 KB, 60 RPM): accepts 'topic' ('focus' defaults to 'technical_and_market_catalysts'), supports '?demo=true' or L402 (75 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
focusNoAnalytical angle applied to the brief; defaults to 'technical_and_market_catalysts' when omitted.
topicYesCompany, protocol, market sector, or technical topic to brief.

Output Schema

NameRequiredDescription
topicYesResearched intelligence topic.
sourcesYesVerified web source titles and URLs.
sentimentYesDirectional sentiment classification ('BULLISH', 'BEARISH', or 'NEUTRAL').
key_developmentsYesDated factual developments grounded in search results.
executive_summaryYesConcise synthesis of current developments.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare read-only/open-world/idempotent/non-destructive, but the description adds operational facts an agent cannot get elsewhere: 32 KB response ceiling, 60 RPM limit, L402 payment of 75 sats or ?demo=true, and an HTTP 400 failure mode for invalid input. This is exactly the kind of cost, rate, and error context that a grounded paid edge call needs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose and the sibling routing rule are front-loaded in the first two clauses, and nothing is filler. The operational facts (size, rate, payment, error) are packed into one dense trailing sentence rather than separated, which slightly hurts scanability but not content value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, the description needn't explain return values, yet it still names the top-level keys for quick triage and covers cost, quotas, auth alternatives, and error behavior. For a live, paid, open-world call the agent has everything required to decide and invoke.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and both parameters are already documented, so the baseline would be 3. The description goes slightly beyond by restating the 'focus' default and, more usefully, surfacing the '?demo=true' switch and L402 payment path that are not represented in the input schema at all.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (synthesizes), resource (real-time market/technical intelligence brief), grounding source (live Google Search), and return shape (strict JSON with named keys). It is clearly distinguishable from siblings such as summarize_technical_document and compile_research_dossier because it commits to live web grounding plus sentiment.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly names the triggering condition ('structured JSON market/news brief with live web citations and sentiment classification') and the exclusion plus the alternative call ('for summarizing caller-supplied text offline without live web search, use summarize_technical_document instead'). The when/when-not pair leaves no inference required.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

track_solana_whale_flowsSolana Whale Wallet Net-Flow & Insider Cluster TrackerA
Read-onlyIdempotent
Inspect

Tracks 24-hour net accumulation or distribution flows across top Solana whale wallets and flags coordinated insider wallet clusters for a given SPL token. Use when analyzing on-chain smart-money order flow and holder clustering on Solana; for checking static SPL contract mint/freeze authority permissions, use evaluate_solana_token_risk instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'token' ('window' defaults to '1h'), supports '?demo=true' or x402 (50 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
tokenYesBase58 Solana SPL token mint address or ticker symbol to track whale flows for.
windowNoAggregation lookback window for net whale flow; defaults to '24h' when omitted.

Output Schema

NameRequiredDescription
tokenYesTracked Solana token identifier.
signalYesOrder-flow classification ('ACCUMULATION' or 'DISTRIBUTION').
net_flow_24h_usdYesSigned 24-hour net whale flow denominated in USD.
insider_cluster_detectedYesTrue if synchronized funding patterns indicate an insider wallet cluster.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the readOnly/idempotent annotations: discloses statelessness, a 32 KB size cap, 60 RPM rate limit, '?demo=true' and x402 (50 sats) payment paths, and HTTP 400 on invalid input. This is exactly the operational context annotations cannot carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads purpose, then usage, then operational constraints; every sentence carries weight. Docked one point because the embedded default-window detail is both wrong and adds noise against the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema covers return values and annotations cover safety, so the description only needs operational context — which it supplies (rate limit, size, payment, demo). The one gap is the ambiguous/conflicting window default that undercuts otherwise complete guidance.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline would be 3, but the description states window 'defaults to 1h' while the schema says it 'defaults to 24h when omitted' — an active contradiction that could cause wrong-window calls. The description adds no reliable meaning beyond the schema and instead introduces conflicting default info.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: tracks net accumulation/distribution flows across top Solana whale wallets and flags coordinated insider clusters for an SPL token. It explicitly distinguishes itself from the sibling evaluate_solana_token_risk, so an agent can tell them apart without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit when-to-use (analyzing on-chain smart-money order flow and holder clustering) and a named alternative for a different task (static mint/freeze authority checks → evaluate_solana_token_risk). The routing decision is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

transpile_sql_dialectPolyglot SQL Dialect Transpiler (PostgreSQL, MySQL, SQLite)A
Read-onlyIdempotent
Inspect

Transpiles SQL queries and DDL schemas across PostgreSQL, MySQL, and SQLite dialects, rewriting functions and syntax quirks. Use when migrating application queries across database backends or testing against in-memory SQLite; for generating new queries from natural language, use synthesize_sql_query instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'sql_code' and 'source_dialect' ('target_dialect' defaults to 'sqlite'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
sql_codeYesSQL query or DDL statement to convert from source dialect into target dialect.
source_dialectYesOriginal SQL dialect of the input code: postgresql, mysql, or sqlite.
target_dialectYesDestination SQL dialect to transpile into: postgresql, mysql, or sqlite.

Output Schema

NameRequiredDescription
transpiled_sqlYesTranspiled SQL code compliant with the target database dialect specification.
compatibility_warningsYesPotential semantic differences or unsupported features flagged during transpilation.
syntax_transformationsYesList of dialect-specific transformations applied (e.g., NOW() to CURRENT_TIMESTAMP).

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover safety (readOnly, idempotent, non-destructive, closed-world), and the description goes well beyond them: stateless edge call, 32 KB payload cap, 60 RPM throttle, demo flag, L402 payment of 10 sats, and HTTP 400 on invalid input. This is exactly the runtime context annotations cannot express, though the payment gating is stated tersely and its interaction with a 'read-only' call is not explained.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose, then usage, then operational constraints — a sensible order with no filler. However the second half is a dense semicolon-chained run of limits, payment, and error codes that would scan better as discrete clauses.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 3-parameter, fully-described, output-schema-backed tool, the description supplies everything an agent still needs: trigger conditions, the sibling alternative, size/rate ceilings, and failure mode. Return values are correctly left to the output schema rather than duplicated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with enums on both dialect parameters, so the baseline is 3. The description adds a claim that 'target_dialect' defaults to 'sqlite', which conflicts with the schema listing it as required — potentially misleading an agent into omitting it. The 'sql_code' size limit is the only genuinely additive parameter fact.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Transpiles SQL queries and DDL schemas') plus the exact scope (PostgreSQL, MySQL, SQLite) and the concrete work performed ('rewriting functions and syntax quirks'). 'Transpile' is distinct from sibling verbs like synthesize_sql_query, validate_sql_query_ast, and analyze_query_plan, so an agent can separate it without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives two positive triggers — migrating application queries across backends and testing against in-memory SQLite — and an explicit exclusion routing to synthesize_sql_query for natural-language query generation. When-to-use and when-not-to-use are both stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

validate_mcp_sampling_requestInbound MCP sampling/createMessage Reverse-Injection FirewallA
Read-onlyIdempotent
Inspect

Audits inbound MCP sampling/createMessage callbacks from connected servers to block cross-server context snooping (includeContext='allServers') and token quota hijacking. Use when filtering a connected MCP server's request to sample the host LLM; for scrubbing text returned from a standard synchronous tools/call response, use sanitize_tool_output_stream instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'sampling_request_json' ('max_tokens_ceiling' defaults to '512'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
max_tokens_ceilingNoMaximum completion token quota allowed for server callbacks; defaults to '2048' when omitted.
sampling_request_jsonYesJSON string or object representing the inbound MCP sampling/createMessage payload.

Output Schema

NameRequiredDescription
sampling_safeYesTrue if the sampling request respects context isolation and token caps.
timestamp_utcYesISO-8601 UTC timestamp of the inspection.
recommended_actionYesHost enforcement action ('APPROVE_SAMPLING_REQUEST' or 'REJECT_SAMPLING_REQUEST').
violations_detectedYesSpecific policy violations found in the sampling request.

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already say read-only, idempotent, non-destructive, but the description adds substantial operational context the agent cannot get from them: statelessness, a 32 KB payload cap, 60 RPM rate limit, auth via '?demo=true' or L402 (20 sats), and the HTTP 400 failure mode. That is exactly the kind of beyond-schema behavior disclosure this dimension rewards.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two dense sentences that front-load the purpose, then usage routing, then constraints; very little waste. The parenthetical constraint block (limits, auth, error code) is packed tightly but remains scannable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With only 2 params, full schema coverage, a rich annotation set and an output schema, the description covers nearly everything an agent needs to call it correctly. The one gap is the wrong stated default for max_tokens_ceiling, which should be reconciled with the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline would be 3, but the description actively conflicts with the schema: it claims 'max_tokens_ceiling' defaults to '512', while the schema says it 'defaults to 2048' when omitted. That contradiction is worse than silence, since an agent may assume a tighter quota than is actually applied.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Audits inbound MCP sampling/createMessage callbacks') and names the two concrete threats it blocks (includeContext='allServers' snooping and token quota hijacking). It is unmistakable against siblings like sanitize_tool_output_stream or audit_mcp_server_manifest.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit use condition ('when filtering a connected MCP server's request to sample the host LLM') and explicitly routes the adjacent case elsewhere ('for scrubbing text returned from a standard synchronous tools/call response, use sanitize_tool_output_stream instead'). The when/when-not split is fully resolved in the text.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

validate_schema_normalizationRelational Schema Normalization Auditor (3NF, BCNF) & Integrity GuardA
Read-onlyIdempotent
Inspect

Audits database schemas for third normal form (3NF) compliance, transitive dependencies, and missing foreign key constraints. Use when reviewing database architectures, preventing update anomalies, or validating relational integrity; for detecting breaking schema migrations, use detect_breaking_migrations instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'schema_ddl' ('target_normal_form' defaults to 'third_normal_form_3nf'), supports '?demo=true' or L402 (10 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
schema_ddlYesDatabase schema DDL statements defining table columns, primary keys, and relations.
strict_keysNoWhether to enforce explicit foreign key constraints on all ID references.
target_normal_formNoTarget normalization standard: 3NF, Boyce-Codd BCNF, or denormalized OLAP star.

Output Schema

NameRequiredDescription
conforms_to_targetYesTrue if the schema strictly satisfies the chosen normal form requirements.
normalization_scoreYesSchema relational design quality score on a 0 to 100 scale.
redundancies_flaggedYesList of redundant fields, missing primary keys, or transitive dependencies identified.
refactoring_suggestionsYesSpecific table decomposition and foreign key recommendations to achieve compliance.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnlyHint, idempotentHint, destructiveHint=false, openWorldHint=false), and the description goes beyond them with statelessness, a 32 KB payload cap, 60 RPM rate limit, demo mode or L402 payment of 10 sats, and HTTP 400 on invalid input. These are operational facts an agent cannot obtain from the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with purpose and the sibling alternative before the operational constraints, with no filler sentences. It is dense to the point of being one long sentence with stacked parentheticals, which slightly hurts scanability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no explanation, and the annotations carry the safety profile. What remains — payload limits, rate limit, payment path, error behavior, and the parameter default — is all covered, leaving nothing an agent needs to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3; the description adds genuine value by disclosing that target_normal_form defaults to 'third_normal_form_3nf', a default the schema does not state. It adds little else about strict_keys, keeping it below a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource set: audits schemas for 3NF compliance, transitive dependencies, and missing foreign key constraints. It also explicitly names the sibling it is not (detect_breaking_migrations), so an agent can distinguish it without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete use cases (reviewing database architectures, preventing update anomalies, validating relational integrity) and an explicit exclusion routing to detect_breaking_migrations for migration breakage. Both the when and the when-not are present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

validate_sql_query_astAST-Level Read-Only SQL Query & Injection Safety ValidatorA
Read-onlyIdempotent
Inspect

Performs static AST syntax tree parsing on SQL statements to verify strictly read-only SELECT clauses and reject mutations, stacked queries, or comment bypasses. Use when verifying that an agent-authored SQL statement is strictly read-only before running it on a database; for screening non-SQL bash commands or general agent prompts, use verify_agent_command_safety instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'sql_statement' ('dialect' defaults to 'postgres'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
dialectNoSQL dialect ruleset used for AST token inspection; defaults to 'postgres' when omitted.
sql_statementYesSQL statement string to statically parse and audit for read-only SELECT compliance (e.g. 'SELECT id, email FROM users WHERE active = 1').

Output Schema

NameRequiredDescription
verdictYesExecution decision ('ALLOW_EXECUTION' or 'BLOCK_EXECUTION').
safe_read_onlyYesTrue when the query is a pure SELECT statement with zero injection clauses.
blocked_clausesYesList of destructive or injection SQL tokens detected.
tables_accessedYesTable identifiers referenced in FROM and JOIN clauses.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive), yet the description adds genuinely new operational context: statelessness, a 32 KB input cap, 60 RPM rate limit, an L402 payment path (15 sats), a '?demo=true' mode, and HTTP 400 on invalid input. These are exactly the constraints an agent needs and are not derivable from annotations or schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two dense sentences, front-loaded with the verb and compliance guarantee, followed by routing and operational limits — no wasted framing. The payment/rate-limit clause is packed tightly mid-sentence, which slightly hurts scannability but every element carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no explanation, and the description still covers the remaining gaps an agent would hit: input size ceiling, throughput limit, payment mechanics, and error signaling (HTTP 400). Nothing needed to invoke it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3; the description modestly exceeds it by restating the 'sql_statement' and default-'postgres' dialect behavior and by surfacing the '?demo=true' selector, which is not represented in the input schema at all. No syntax or size-per-dialect guidance beyond the 32 KB cap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('static AST syntax tree parsing on SQL statements') plus the exact success condition ('verify strictly read-only SELECT clauses') and failure modes rejected (mutations, stacked queries, comment bypasses). An agent can immediately tell this apart from synthesize_sql_query or transpile_sql_dialect.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use it ('verifying that an agent-authored SQL statement is strictly read-only before running it on a database') and names an alternative for out-of-scope input ('use verify_agent_command_safety instead'). It does not address the closely overlapping sibling audit_sql_injection_ast, whose injection-rejection remit overlaps the 'stacked queries or comment bypasses' language, leaving one ambiguity unresolved.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_a2a_agent_cardA2A /.well-known/agent.json Identity & Capability Card VerifierA
Read-onlyIdempotent
Inspect

Verifies a remote agent's A2A /.well-known/agent.json discovery card, checking JWS/DID signature binding, endpoint HTTPS enforcement, and capability spoofing. Use when authenticating a peer autonomous agent before delegating subtasks or exchanging payments over A2A; for auditing an MCP tool server's tools/list manifest rather than a peer agent's A2A card, use audit_mcp_server_manifest instead. Read-only edge call (32 KB, 60 RPM): accepts 'agent_card_json' ('trust_policy' defaults to 'require_https_and_did'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
trust_policyNoVerification policy for DID/DNS binding; defaults to 'require_https_and_did' when omitted.
agent_card_jsonYesJSON string or object of the peer agent's /.well-known/agent.json descriptor.

Output Schema

NameRequiredDescription
agent_idYesCanonical identifier of the verified peer agent.
card_validYesTrue when the A2A agent card schema, transport, and identity claims pass verification.
spoofing_flagsYesList of impersonation or downgrade anomalies detected.
delegation_verdictYesHandshake decision ('SAFE_TO_DELEGATE_A2A' or 'REJECT_UNVERIFIED_AGENT').

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), but the description adds material operational detail annotations cannot express: a 32 KB payload ceiling, a 60 RPM rate limit, the default trust_policy, the '?demo=true'/L402 15-sat access path, and an HTTP 400 on invalid input. That is exactly the kind of cost, limit, and failure-mode disclosure the description is supposed to carry.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the purpose and the sibling routing before the operational details, which is the right ordering. The second half is dense — size, rate limit, parameters, default, demo/L402, and error code packed into one sentence — costing a little scannability but no clause is filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need no explanation, and the description still flags the HTTP 400 failure path. For a two-parameter read-only validator, every decision an agent needs — when to call it, what to pass, defaults, limits, and cost — is present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the enum is documented, so the schema already does the semantic work; baseline 3 applies. The description does restate the trust_policy default and add the non-schema '?demo=true' access flag, but it adds no meaning about what the three policies actually accept or reject.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Verifies a remote agent's A2A /.well-known/agent.json discovery card') and enumerates the exact checks performed (JWS/DID signature binding, HTTPS enforcement, capability spoofing). It explicitly names the closest sibling, audit_mcp_server_manifest, and the axis that distinguishes them (peer agent card vs. MCP tools/list manifest).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit trigger ('Use when authenticating a peer autonomous agent before delegating subtasks or exchanging payments over A2A') and an explicit exclusion with the correct alternative for the MCP-manifest case. Nothing is left to inference about when to reach for this tool versus its nearest sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_agent_command_safetyAutonomous Agent Pre-Execution Command & Prompt Injection GateA
Read-onlyIdempotent
Inspect

Evaluates untrusted agent prompts, bash commands, and tool arguments to block prompt injection, destructive shell commands, and private-key exfiltration. Use when screening a general shell command or user prompt before autonomous agent execution; for statically validating SQL database queries at the AST level, use validate_sql_query_ast instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'payload' ('action_type' defaults to 'bash_command'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
payloadYesRaw command string, script snippet, or untrusted prompt to inspect for safety violations.
action_typeNoExecution context of the payload; defaults to 'bash_command' when omitted.

Output Schema

NameRequiredDescription
safeYesTrue when zero injection, exfiltration, or destructive patterns are found.
verdictYesEnforcement decision ('ALLOW', 'BLOCK', or 'QUARANTINE').
risk_scoreYesNormalized threat probability from 0.0 (benign) to 1.0 (critical).
threats_detectedYesList of specific threat categories triggered by the payload.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations (which already declare readOnly, idempotent, non-destructive, closed-world): it discloses statelessness, a 32 KB payload ceiling, a 60 RPM rate limit, the demo/L402 pricing path, and the HTTP 400 failure mode for invalid input. These are exactly the operational constraints an agent cannot infer from structured fields.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the action and the sibling differentiation, then compresses pricing/limits/errors into one trailing sentence — efficient overall. The final clause is somewhat dense with operational trivia (L402, 20 sats, 20 s timeout) that slightly crowds the core guidance, but nothing is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return-value detail is correctly omitted, and the description still covers the constraints that block a correct call: size cap, rate limit, auth/payment options, and error behavior. Nothing an agent needs before invoking is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and already documents both fields, including the 'bash_command' default. The description restates the default and names the payload field but adds no new syntax, size-per-field, or format guidance beyond the schema, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (evaluates/blocks) against specific resources (untrusted prompts, bash commands, tool arguments) and names the exact threat classes it addresses (prompt injection, destructive shell commands, key exfiltration). It also explicitly contrasts itself with validate_sql_query_ast, so an agent can route correctly without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a positive trigger ('use when screening a general shell command or user prompt before autonomous agent execution') and a negative one with the named alternative ('for statically validating SQL database queries at the AST level, use validate_sql_query_ast instead'). Both the when-and the when-not are explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_context_compaction_fidelityPre/Post Context Compaction Information Retention VerifierA
Read-onlyIdempotent
Inspect

Audits a compacted conversation summary against the original full context to detect dropped user constraints, lost file paths, altered numbers, or missing pending tasks. Use when verifying that an LLM context-compaction summary retained all task-critical facts before truncating history; for generating a new executive summary from a raw technical document, use summarize_technical_document instead. Read-only edge call (32 KB, 60 RPM): accepts 'original_context' ('compacted_summary' defaults to 'standard'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
audit_focusNoEntity class prioritized during retention scoring; defaults to 'constraints_paths_and_numbers' when omitted.
original_contextYesFull pre-compaction conversation history or task log.
compacted_summaryYesCandidate compacted summary to audit for dropped constraints or entities.

Output Schema

NameRequiredDescription
safe_to_resumeYesTrue when retention_score >= 0.90 and zero critical constraints were lost.
retention_scoreYesInformation preservation score from 0.0 to 1.0.
preserved_entitiesYesCritical constraints, paths, and numbers verified present in the summary.
missing_critical_entitiesYesImportant entities or constraints dropped during compaction.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish read-only, idempotent, non-destructive, and non-open-world behavior. The description adds useful operational context beyond annotations, including a 32 KB payload note, 60 RPM rate limit, demo/L402 access paths, and an HTTP 400 invalid-input behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded and compact, with no wasted sentences. The final operational sentence is dense and slightly awkward, mixing payload size, rate limit, parameters, auth options, and error behavior into one clause.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema, full schema description coverage, and annotations, the description provides enough context for an agent to understand the task, when to select it, and key operational constraints. The main remaining issue is the curious 'defaults to standard' phrasing, but overall completeness is strong.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, including enum documentation for audit_focus, so the schema already carries most parameter meaning. The description adds little beyond mentioning original_context and compacted_summary, and the parenthetical saying compacted_summary defaults to 'standard' is confusing because the schema marks it as required with no default.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: auditing a compacted summary against the original full context for dropped constraints, file paths, altered numbers, and pending tasks. It also distinguishes the tool from summarize_technical_document, so an agent can separate this verification task from summary generation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says when to use it: verifying that an LLM context-compaction summary retained task-critical facts before truncating history. It also names the alternative summarize_technical_document for generating a new executive summary from a raw document.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_eve_zklogin_characterEVE Frontier Sui zkLogin BN254 Proof & SmartCharacter VerifierA
Read-onlyIdempotent
Inspect

Verifies EVE Frontier Sui zkLogin BN254 zero-knowledge proofs, ephemeral session signatures, and SmartCharacter ownership capabilities. Use when authenticating a pilot's off-chain OAuth/zkLogin session before granting tribe vault or dApp access; for auditing tribe-wide diplomatic standings and reputation registries, use audit_eve_tribe_standings instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'jwt_proof' ('ephemeral_scheme' defaults to 'ED25519'), supports '?demo=true' or L402 (25 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
jwt_proofYesEncoded Sui zkLogin proof payload or JWT session token string (minimum 20 characters).
ephemeral_schemeNoCryptographic signature scheme of the ephemeral session key; defaults to 'ED25519' when omitted.

Output Schema

NameRequiredDescription
character_verifiedYesTrue when the zkLogin BN254 proof and salt derivation are valid.
tribe_acl_eligibleYesTrue if the verified SmartCharacter holds active Tribe membership.
sui_address_derivedYesDeterministic 32-byte Sui address derived from the zkLogin issuer and salt.
verification_verdictYesAuthentication result ('AUTHENTICATED_FRONTIER_PILOT' or 'INVALID_ZK_PROOF').

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnly, idempotent, non-destructive, closed-world), yet the description still adds real context beyond them: stateless edge call, 32 KB payload cap, 60 RPM rate limit, demo-mode or L402 payment (25 sats), and an HTTP 400 failure mode for invalid proofs. That is exactly the operational detail annotations cannot express.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, purpose and routing front-loaded, with no filler. It is dense and slightly over-packed (rate limits, L402 pricing, and HTTP status codes in one breath), but each clause carries information an agent could act on.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 2-parameter read-only verifier with a full output schema and rich annotations, the description covers authentication intent, inputs, limits, and failure behavior. Nothing an agent needs in order to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and both parameters carry their own descriptions, so the schema does the heavy lifting. The description restates the 'ephemeral_scheme' default already documented in the schema and adds a non-parameter detail ('?demo=true'), which is mildly useful but not meaningful parameter semantics. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Verifies') plus three concrete resources: Sui zkLogin BN254 zero-knowledge proofs, ephemeral session signatures, and SmartCharacter ownership capabilities. It also explicitly names the sibling it is not (audit_eve_tribe_standings), so an agent can route without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit trigger ('Use when authenticating a pilot's off-chain OAuth/zkLogin session before granting tribe vault or dApp access') and an explicit alternative with its condition ('for auditing tribe-wide diplomatic standings... use audit_eve_tribe_standings instead'). Nothing about when-to-use is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_factual_claimsFact Verification & Consensus Evidence EvaluatorA
Read-onlyIdempotent
Inspect

Audits factual statements against authoritative consensus sources and assigns truthfulness scores with counter-evidence. Use when checking disputed claims, detecting AI hallucinations, or validating quotes before citation; for formatting academic citations, use extract_scholarly_citations instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'claim_statement' ('verification_rigor' defaults to 'multi_source_consensus'), supports '?demo=true' or L402 (20 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
context_domainNoOptional domain context such as economics, medicine, history, or computer science.
claim_statementYesFactual assertion, statistic, or quote requiring independent source verification.
verification_rigorNoFact verification method: multi-source consensus, official records only, or probabilistic check.

Output Schema

NameRequiredDescription
verdictYesFactual evaluation verdict (VERIFIED_TRUE, DISPUTED, REFUTED_FALSE, UNVERIFIABLE).
truth_confidenceYesConfidence percentage score between 0.0 and 1.0 in the verdict.
refuting_evidenceYesContradictory findings or counter-evidence disproving the claim.
supporting_evidenceYesAuthoritative statements and sources supporting the claim.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/non-destructive, and the description layers on genuinely new operational facts: statelessness, a 32 KB payload cap, 60 RPM throttling, demo-mode or L402 payment (20 sats), and an HTTP 400 failure mode for invalid input. A mild tension exists with openWorldHint=false given the outsourced 'authoritative consensus sources' and Lightning payment path, but this reads as a hosted proxy rather than an outright contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with zero filler, front-loading the action and outcome before routing guidance and then operational constraints. Parenthetical packing is dense but every clause (limits, auth, error code) carries information an agent needs.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists so return values need not be described, and the description still covers the remaining gaps an agent would hit: size limit, rate limit, statelessness, payment/auth route, and error behavior. Nothing material for correct invocation is missing at this complexity level.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3; the description adds value by disclosing a default that the schema does not state ('verification_rigor' defaults to 'multi_source_consensus') and by tying the 32 KB cap to the claim input. It does not explain the tradeoffs between the three rigor enum values, which would have earned a 5.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Audits factual statements against authoritative consensus sources') plus the output it produces ('truthfulness scores with counter-evidence'). It explicitly distances itself from extract_scholarly_citations, but does not differentiate from the similarly named sibling audit_response_factuality, leaving one close overlap unresolved.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives concrete triggering conditions ('checking disputed claims, detecting AI hallucinations, or validating quotes before citation') and names an alternative with the condition that selects it ('for formatting academic citations, use extract_scholarly_citations'). No guidance is offered on when to prefer it over audit_response_factuality, so it stops short of the 5 level.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_http402_payment_challengePre-Payment HTTP 402 (L402 / x402 / MPP) Invoice & Macaroon Fraud VerifierA
Read-onlyIdempotent
Inspect

Decodes inbound HTTP 402 Payment Required challenges (L402 BOLT11 + Macaroon, x402 Solana USDC, MPP Base intents) to verify cryptographic payment-hash binding and block overcharge fraud. Use when auditing a 402 challenge header before an autonomous agent pays a Lightning invoice or USDC transfer; for checking on-chain Bitcoin L1 mempool feerates, use estimate_bitcoin_mempool_fees instead. Stateless read-only edge call (max 32 KB, 60 RPM): accepts 'www_authenticate' ('protocol_hint' defaults to 'L402'), supports '?demo=true' or L402 (15 sats), and returns HTTP 400 if invalid.

NameRequiredDescriptionDefault
protocol_hintNoExpected HTTP 402 payment protocol; defaults to 'L402' when omitted.
www_authenticateYesRaw WWW-Authenticate or Payment-Required HTTP header string from a 402 response.

Output Schema

NameRequiredDescription
protocol_detectedYesIdentified 402 settlement protocol ('L402', 'x402', or 'MPP').
overcharge_detectedYesTrue if the invoice amount exceeds the declared endpoint price ceiling.
payment_safety_verdictYesAuthorization recommendation ('SAFE_TO_PAY' or 'REJECT_HASH_MISMATCH').
macaroon_payment_hash_matches_bolt11YesTrue when the macaroon caveat hash matches the BOLT11 invoice payment hash.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnly/idempotent/openWorld annotations, the description discloses statelessness, a 32 KB payload ceiling, a 60 RPM rate limit, and that invalid input yields HTTP 400 — operational facts an agent cannot get from structured fields. Annotations already cover the safety profile, so this is pure added value.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three dense, well-ordered sentences: purpose, usage/alternative, operational constraints — properly front-loaded with no filler. It is somewhat run-on, and the '?demo=true' / '15 sats' fragment is compressed to the point of obscurity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema handling return values and annotations covering safety, the description still supplies what an agent needs to call correctly: input source (raw WWW-Authenticate header), default protocol, size/rate limits, and error behavior. Nothing material is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description restates the 'protocol_hint' default of L402 which the schema already documents verbatim. The reference to '?demo=true' and 'L402 (15 sats)' is cryptic and maps to no declared parameter, adding ambiguity rather than semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States specific verbs (decodes, verifies) against a specific resource (inbound HTTP 402 payment challenges) and enumerates the three supported protocol shapes (L402 BOLT11+Macaroon, x402 Solana USDC, MPP Base). It explicitly names the sibling it is not (estimate_bitcoin_mempool_fees), so an agent can route without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives an explicit trigger — 'Use when auditing a 402 challenge header before an autonomous agent pays a Lightning invoice or USDC transfer' — plus a named alternative for the adjacent need. When-to-use and when-to-use-something-else are both present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 54 tool updatesv2.6.0
    • Changedanalyze_ast_symbol_graph2 fields changed
      • addedInput schema / properties / source_text
        Added value: +{
        +  "description": "Alias for code: source code file content to parse.",
        +  "type": "string"
        +}
      • changedInput schema / required
        Previous value: -[
        -  "source_text"
        -]New value: +[
        +  "code"
        +]
    • Addedanalyze_eve_killmail_threats
    • Addedanalyze_media_sentiment
    • Addedanalyze_news_recency
    • Addedanalyze_query_plan
    • Addedaudit_eve_tribe_standings
    • Addedaudit_sql_injection_ast
    • Addedaudit_transaction_isolation
    • Addedcalculate_pool_headroom
    • Addedcluster_topic_subgraphs
    • Addedcompile_competitive_landscape
    • Addedcompile_eve_gate_acl
    • Changedcompile_mpp_research_dossier3 fields changed
      • addedInput schema / properties / research_topic
        Added value: +{
        +  "description": "Alias for query: research topic or technical question to investigate.",
        +  "type": "string"
        +}
      • changedInput schema / required
        Previous value: -[
        -  "research_topic"
        -]New value: +[
        +  "query"
        +]
      • changedOutput schema / required
        Previous value: -[
        -  "search_prompt",
        -  "key_findings",
        -  "synthesis_quality_score",
        -  "sources_cited"
        -]New value: +[
        +  "query",
        +  "key_findings",
        +  "synthesis_quality_score",
        +  "sources_cited"
        +]
    • Addedcompile_research_dossier
    • Addedcompile_rss_feed
    • Addedcrawl_sitemap_urls
    • Addeddetect_breaking_migrations
    • Addeddetect_paywall_and_bypass
    • Changedevaluate_deterministic_math2 fields changed
      • addedInput schema / properties / math_formula
        Added value: +{
        +  "description": "Alias for expression: algebraic formula to evaluate.",
        +  "type": "string"
        +}
      • changedInput schema / required
        Previous value: -[
        -  "math_formula"
        -]New value: +[
        +  "expression"
        +]
    • Addedevaluate_seo_diagnostics
    • Addedexpand_search_queries
    • Addedextract_clean_markdown
    • Addedextract_contact_info
    • Addedextract_page_hyperlinks
    • Addedextract_scholarly_citations
    • Addedextract_structured_metadata
    • Addedfilter_domain_intelligence
    • Addedfind_eve_ssu_arbitrage
    • Addedgenerate_eve_assembly_move
    • Addedgenerate_orm_models
    • Addedinspect_eve_assembly_state
    • Addedisolate_css_selectors
    • Addedmonitor_eve_constellation_fuel
    • Addedoptimize_eve_node_power
    • Addedparse_html_tables
    • Addedplan_eve_gate_route
    • Addedprioritize_eve_turret_targets
    • Addedquote_eve_ssu_market
    • Addedrank_expert_sources
    • Addedrecommend_database_indexes
    • Changedrerank_hybrid_rag_chunks3 fields changed
      • addedInput schema / properties / query
        Added value: +{
        +  "description": "Technical search query or question used to score candidate chunks.",
        +  "type": "string"
        +}
      • removedInput schema / properties / search_prompt
        Removed value: -{
        -  "description": "Technical search prompt or question used to score candidate chunks.",
        -  "type": "string"
        -}
      • changedInput schema / required
        Previous value: -[
        -  "search_prompt",
        -  "documents_json"
        -]New value: +[
        +  "query",
        +  "documents_json"
        +]
    • Addedsanitize_html_content
    • Addedsanitize_sql_telemetry
    • Addedscrape_readable_article
    • Addedsimulate_eve_capacitor_siege
    • Addedsimulate_eve_sui_ptb
    • Addedsummarize_temporal_timeline
    • Addedsynthesize_neural_search
    • Addedsynthesize_seed_fixtures
    • Addedsynthesize_sql_query
    • Addedtranspile_sql_dialect
    • Addedvalidate_schema_normalization
    • Addedverify_eve_zklogin_character
    • Addedverify_factual_claims
  2. 132 tool updatesv1.3.3
    • Removedagent_context_compaction_verifier
    • Removedagent_hallucination_auditor
    • Removedagent_loop_circuit_breaker
    • Removedagent_mcp_manifest_auditor
    • Removedagent_mcp_router
    • Removedagent_prompt_compiler
    • Removedagent_schema_enforcer
    • Removedagent_sql_guard
    • Removedai_antigravity_agent
    • Removedai_audio_live
    • Removedai_code_gen
    • Removedai_computer_use
    • Removedai_deep_research
    • Removedai_embeddings
    • Removedai_extract
    • Removedai_generate
    • Removedai_grounded_maps
    • Removedai_grounded_search
    • Removedai_image_gen
    • Removedai_music_gen
    • Removedai_omni
    • Removedai_robotics
    • Removedai_summarize
    • Removedai_tts
    • Removedai_video_gen
    • Addedanalyze_ast_symbol_graph
    • Addedanalyze_omni_multimodal_input
    • Addedapply_fuzzy_code_patch
    • Addedarbitrate_agent_deliverable_escrow
    • Addedaudit_mcp_server_manifest
    • Addedaudit_module_dependency_cycles
    • Addedaudit_outbound_egress_url
    • Addedaudit_response_factuality
    • Addedaudit_smart_contract_code
    • Addedcalculate_spot_swap_rate
    • Removedclean_data
    • Addedclean_tabular_dataset
    • Removedcode_sandbox
    • Addedcompare_crosschain_bridge_routes
    • Addedcompile_mpp_research_dossier
    • Addedcompile_polyglot_type_schemas
    • Addedcompile_xml_agent_prompt
    • Addedcompose_lyria_music_track
    • Addedconduct_deep_research_investigation
    • Removedcontract_audit
    • Removedcrypto_address_poisoning_check
    • Removedcrypto_bridge_quote
    • Removedcrypto_eip712_permit_decoder
    • Removedcrypto_utxo_consolidation_planner
    • Addeddecode_eip712_permit_signature
    • Addeddetect_address_poisoning_scam
    • Addeddetect_agent_action_loop
    • Addeddetect_mcp_schema_rugpull
    • Addeddetect_openapi_breaking_changes
    • Addeddiff_agent_memory_checkpoint
    • Addedenforce_json_schema_types
    • Addedestimate_bitcoin_mempool_fees
    • Addedestimate_solana_priority_fees
    • Addedevaluate_ab_statistical_significance
    • Addedevaluate_deterministic_math
    • Addedevaluate_dex_mev_risk
    • Addedevaluate_solana_token_risk
    • Removedeve_gate_route_planner
    • Removedeve_killmail_threat_intel
    • Removedeve_move_assembly_coder
    • Removedeve_network_node_gj_optimizer
    • Removedeve_sovereignty_fuel_radar
    • Removedeve_ssu_market_maker
    • Removedeve_sui_ptb_simulator
    • Removedeve_turret_target_matrix
    • Removedeve_zklogin_character_verifier
    • Addedexecute_antigravity_agent
    • Addedexecute_python_sandbox
    • Addedextract_structured_json_entities
    • Addedgenerate_boundary_test_vectors
    • Addedgenerate_gemini_completion
    • Addedgenerate_gemini_embeddings
    • Addedgenerate_nano_banana_image
    • Addedgenerate_veo_cinematic_video
    • Addedgenerate_x402_vector_embeddings
    • Removedguardrail_verify
    • Addedheal_malformed_json
    • Removedhttp402_challenge_verifier
    • Addedinfer_mpp_streaming_session
    • Addedinspect_solana_token_liquidity
    • Addedisolate_stacktrace_root_cause
    • Removedjson_repair
    • Removedmcp_rugpull_diff
    • Removedmcp_sampling_guard
    • Removedmempool_fee
    • Removedmev_risk
    • Removedmpp_agent_escrow_arbiter
    • Removedmpp_deep_search
    • Removedmpp_session_infer
    • Addedoperate_computer_use_agent
    • Addedplan_bitcoin_utxo_consolidation
    • Addedplan_context_token_budget
    • Addedplan_robotics_spatial_trajectory
    • Addedprocess_live_audio_dialogue
    • Addedprune_context_skeleton
    • Addedredact_sensitive_pii
    • Removedregex_oracle
    • Addedrerank_hybrid_rag_chunks
    • Addedroute_mcp_workflow_plan
    • Addedsanitize_tool_output_stream
    • Addedscan_solana_cpi_reentrancy
    • Addedschedule_critical_path_tasks
    • Removedscrub_pii
    • Addedsearch_gemini_grounded_maps
    • Addedsearch_gemini_grounded_web
    • Addedsimulate_evm_transaction_calldata
    • Addedsimulate_monte_carlo_risk
    • Removedsolana_risk
    • Addedsummarize_technical_document
    • Removedswap_rate
    • Addedsynthesize_gemini_speech_audio
    • Addedsynthesize_python_automation_code
    • Addedsynthesize_safe_regex
    • Addedsynthesize_web_intelligence_brief
    • Removedtool_output_firewall
    • Addedtrack_solana_whale_flows
    • Addedvalidate_mcp_sampling_request
    • Addedvalidate_sql_query_ast
    • Addedverify_a2a_agent_card
    • Addedverify_agent_command_safety
    • Addedverify_context_compaction_fidelity
    • Addedverify_http402_payment_challenge
    • Removedweb_brief
    • Removedx402_embeddings
    • Removedx402_solana_priority_fee_oracle
    • Removedx402_token_meta
    • Removedx402_whale_radar
  3. 61 tool updatesv1.3.0
    • First observedagent_context_compaction_verifier
    • First observedagent_hallucination_auditor
    • First observedagent_loop_circuit_breaker
    • First observedagent_mcp_manifest_auditor
    • First observedagent_mcp_router
    • First observedagent_prompt_compiler
    • First observedagent_schema_enforcer
    • First observedagent_sql_guard
    • First observedai_antigravity_agent
    • First observedai_audio_live
    • First observedai_code_gen
    • First observedai_computer_use
    • First observedai_deep_research
    • First observedai_embeddings
    • First observedai_extract
    • First observedai_generate
    • First observedai_grounded_maps
    • First observedai_grounded_search
    • First observedai_image_gen
    • First observedai_music_gen
    • First observedai_omni
    • First observedai_robotics
    • First observedai_summarize
    • First observedai_tts
    • First observedai_video_gen
    • First observedclean_data
    • First observedcode_sandbox
    • First observedcontract_audit
    • First observedcrypto_address_poisoning_check
    • First observedcrypto_bridge_quote
    • First observedcrypto_eip712_permit_decoder
    • First observedcrypto_utxo_consolidation_planner
    • First observedeve_gate_route_planner
    • First observedeve_killmail_threat_intel
    • First observedeve_move_assembly_coder
    • First observedeve_network_node_gj_optimizer
    • First observedeve_sovereignty_fuel_radar
    • First observedeve_ssu_market_maker
    • First observedeve_sui_ptb_simulator
    • First observedeve_turret_target_matrix
    • First observedeve_zklogin_character_verifier
    • First observedguardrail_verify
    • First observedhttp402_challenge_verifier
    • First observedjson_repair
    • First observedmcp_rugpull_diff
    • First observedmcp_sampling_guard
    • First observedmempool_fee
    • First observedmev_risk
    • First observedmpp_agent_escrow_arbiter
    • First observedmpp_deep_search
    • First observedmpp_session_infer
    • First observedregex_oracle
    • First observedscrub_pii
    • First observedsolana_risk
    • First observedswap_rate
    • First observedtool_output_firewall
    • First observedweb_brief
    • First observedx402_embeddings
    • First observedx402_solana_priority_fee_oracle
    • First observedx402_token_meta
    • First observedx402_whale_radar

TDQS

A3.9/5.0

Scored across 121 tools

Disambiguation3/5

Descriptions are unusually explicit and often include 'use X instead' routing, which helps. However, several families overlap heavily: multiple research/dossier/brief tools, L402 vs MPP vs x402 embeddings, and overlapping SQL/web-intelligence audits. Boundaries are clear only after reading long descriptions, so an agent selecting by name will often misselect.

Naming Consistency5/5

All 121 tool names follow a consistent snake_case verb_noun pattern (generate_, audit_, verify_, synthesize_, extract_, simulate_, etc.) with no camelCase or arbitrary mixing. Names are long but predictable and use helpful domain prefixes such as eve_, sql_, mcp_, and solana_.

Tool Count1/5

121 tools is far beyond a well-scoped MCP set; even for a broad gateway it forces routing across many near-duplicate microservices. The count is an extreme mismatch for practical agent selection, despite each individual tool being narrowly bounded.

Completeness3/5

The gateway spans AI modalities, security, crypto, web parsing, research, SQL, and EVE Frontier, so breadth is high. But there are notable dead ends: no generic URL fetch before HTML parsers, no service/model discovery or account/billing lifecycle, and no stateful execution/signing for many blockchain workflows. Agents can work around some gaps by supplying inputs or using adjacent tools, but the surface is broad rather than complete.

Maintenance

ActivityMaintained
ResponsivenessLimited data

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to call 93 pay-per-call machine-to-machine services spanning web scraping, crypto sentiment, market data, on-chain analytics, social and threat intelligence, vulnerability scanning, and micro-SaaS utilities. Payments are settled in USDC on Arbitrum via the x402 protocol using a wallet header, so no API keys, signups, or billing setup are required.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Pay-per-call AI microservices settled in USDC on Base via the x402 (HTTP 402) protocol. 28 tools including web search, summarization, extraction, code review, deep research, crypto safety, sanctions screening and on-chain data — no accounts or API keys.
    4 npm
    Apache 2.0
  • A
    license
    C
    quality
    C
    maintenance
    Provides AI agents with 200 deterministic micro-services covering code auditing, 3D/robotics, media processing, cryptography, blockchain settlement, AI safety, networking, and math, with automatic x402 USDC micropayments.
    200
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to discover, pay for, and invoke x402-priced services such as document OCR, document analysis, media transcription, remote browser sessions, and receive-only email inboxes using USDC on Base, with no API keys and receipt-backed results.
    38
    MIT