Agent Receipts
The agent-receipts server creates, manages, and verifies cryptographically signed receipts for AI agent actions, providing an immutable audit trail of what an agent did, with what inputs and outputs.
Core Receipt Operations
track_action— Record a completed action with automatic SHA-256 hashing of input/output, capturing model, cost, latency, token usage, confidence, tags, tool calls, and custom metadatacreate_receipt— Create a receipt with pre-computed hashescomplete_receipt— Finalize a pending receipt with execution results (status, output hash, cost, latency, errors)get_receipt/list_receipts— Fetch a single receipt by ID or browse all receipts with filtering (agent, status, chain, action, tag, environment, type) and pagination/sorting
Cryptographic Verification
verify_receipt— Confirm a receipt's Ed25519 signature is valid and untamperedget_public_key— Export the signing public key for offline third-party verification
Chaining & Lineage
get_chain— Retrieve all receipts in a multi-step pipeline, ordered chronologically
AI Judge / Quality Evaluation
judge_receipt— Evaluate a receipt against a custom rubric with weighted criteria and passing thresholdscomplete_judgment— Record evaluation results (verdict, per-criterion scores, reasoning, confidence)get_judgments— Retrieve all judgments for a specific receipt
Constraints & Compliance
Attach constraints (e.g.,
max_latency_ms,max_cost_usd,min_confidence) when tracking actions to automatically flag pass/fail results
Maintenance & Billing
cleanup— Delete expired receipts past their TTL, with optional dry-run previewgenerate_invoice— Produce invoices from completed receipts within a date range, with grouping (by agent, action, or day) and output formats (JSON, CSV, Markdown)
Onboarding
get_started— Display usage examples and documentation for all tools
Agent Receipts
Your AI agent remembers everything — and you can prove it.
Persistent memory for AI agents, backed by cryptographic receipts. Every fact your agent learns is signed, traceable, and independently verifiable. No cloud required.
Try the Interactive Demo · Install in 30 Seconds · How It's Different
The Problem
You're building with AI agents. Claude Code refactors your auth module and says "done, all tests pass." Your agent generates a customer quote and says it applied the right pricing. Your assistant remembers your preferences from last week — but you can't see why it thinks that, or whether it's right.
Three things are broken:
Agents forget everything between sessions. Every conversation starts from zero. Context is lost. You re-explain the same things.
When agents do remember, you can't see inside. Platform memory is a black box. You can't see what it stored, when, or why. You can't correct it, export it, or verify it.
There's no proof of what agents actually did. Logs are mutable. Agents write their own logs. "I updated 3 files and all tests pass" — did it? You're trusting the agent's word about its own work.
Related MCP server: evermint-mcp
What Agent Receipts Does
Memory that actually works
Your agent gets structured, persistent memory across sessions — people, projects, tools, preferences, facts. Not a flat key-value store. An entity-observation graph where every fact links to the conversation that created it.
# Your agent learns something
memory_observe → "User prefers TypeScript, uses Neovim, building a SaaS called ModQuote"
# Next session, it already knows
memory_context → loads everything: entities, observations, relationships, preferences
# You can search it
memory_recall → "what tech stack does the user prefer?" → structured results
# You can forget (and the forget itself is tracked)
memory_forget → soft delete with audit trailThe agent handles this automatically when you add the system prompt. You don't manage memory manually.
Proof that's actually proof
Every memory observation and every agent action produces a receipt — a signed JSON document with:
Ed25519 signature — tamper-proof, independently verifiable
Input/output hashes — proves exactly what went in and came out (raw data never stored)
Timestamps — when it happened, when it completed
Agent ID — which agent did it
Provenance chain — trace any memory back to the conversation that created it
This isn't logging. Logs are mutable text files the agent writes about itself. Receipts are cryptographic proof that a third party can verify without trusting you, your server, or the agent.
Everything runs locally
npx @agent-receipts/mcp-serverThat's it. No API key. No account. No cloud. No monthly fee. No data leaving your machine. SQLite database in ~/.agent-receipts/. Works offline.
Why This Exists
I was building ModQuote — a multi-tenant SaaS where AI agents generate quotes for automotive protection shops. Real money, real customers, real liability.
When Claude generated a $2,400 PPF quote, I needed answers: What vehicle data did it receive? What pricing rules did it apply? If a customer disputes the price, can I prove what happened — not with a log entry the agent wrote about itself, but with cryptographic proof?
I looked at the existing tools:
Mem0 — great memory, but no proof. It remembers things, but can't prove when or why it learned them. Memories are mutable.
Langfuse — great observability, but it's tracing, not proof. Logs are internal to your system, not verifiable by third parties.
Zep — temporal knowledge graph, but hosted and opaque.
None of them could answer: "Prove to someone outside your system that this specific agent took this specific action with this specific input at this specific time."
So I built Agent Receipts. Now every quote generation is a signed receipt. Every memory has a provenance chain. And when someone asks "how did the agent come up with that number?" — I hand them a receipt they can verify themselves.
How It's Different
Agent Receipts | Mem0 | Langfuse | Zep | |
Memory | Signed entity-observation graph | Smart extraction + consolidation | No memory | Temporal knowledge graph |
Proof | Ed25519 signed receipts | None | Mutable traces | None |
Verification | Offline, by anyone, no server | No | No | No |
Infrastructure |
| Requires LLM for extraction | Cloud or self-host | Cloud API |
Cost | Free forever (local) | Free tier, then paid | Free tier, then paid | Paid |
Export | Portable bundles with crypto verification | Export available | API export | No |
Audit trail | Immutable receipt chain | Mutable | Mutable logs | Mutable |
Agent Receipts isn't a better version of these tools. It's a different thing.
Mem0 answers: "What does my agent remember?" Langfuse answers: "What happened in my LLM pipeline?" Agent Receipts answers: "Can you prove it?"
Get Started
1. Add the MCP Server
Claude Code:
claude mcp add agent-receipts -- npx @agent-receipts/mcp-serverClaude Desktop (claude_desktop_config.json) / Cursor (.cursor/mcp.json):
{
"mcpServers": {
"agent-receipts": {
"command": "npx",
"args": ["@agent-receipts/mcp-server"]
}
}
}2. Add the System Prompt
This tells your agent when to observe memories, recall context, and track actions — so it works automatically:
npx @agent-receipts/cli prompts claude-codeCopy the output into your project instructions or system prompt.
3. Start Using It
Your agent will now:
Call
memory_contextat the start of sessions to load what it knows about youCall
memory_observewhen it learns something worth rememberingCall
track_actionwhen it performs significant actionsSign everything with Ed25519
4. See What's Happening
npx @agent-receipts/dashboard # Web UI at localhost:3274
npx @agent-receipts/cli stats # Terminal overview
npx @agent-receipts/cli memory entities # See what your agent remembers5. Try Before Installing
Run the interactive demo → — experience memory, verification, and bundle export in 60 seconds. No install required.
What's Inside
24 MCP tools — memory, actions, verification, constraints, judgments, invoicing, bundles
21 SDK methods — full TypeScript API
14 CLI commands + 9 memory subcommands — terminal-first
18 dashboard pages — receipts, memory graph, chains, agents, constraints, judgments, invoices
492 tests — zero TypeScript
any, zero ESLint warningsEd25519 + SHA-256 — via
@noble/ed25519(audited, pure JS)SQLite + FTS5 — local-first with full-text memory search
Portable Memory Bundles
Export your agent's entire memory as a single verifiable file:
npx @agent-receipts/cli memory export > my-project.bundle.jsonThe bundle includes every entity, observation, relationship, the receipts that created them, and the public key needed to verify everything. Hand it to another agent, another team, or another Agent Receipts instance — they can verify every fact without trusting you.
Links
Try it in your browser — 60 seconds | |
See the full dashboard with sample data | |
Receipt anatomy, memory model, ModQuote story | |
All 6 packages |
Action Tracking
ar.track(params)— Track a completed action with automatic hashingar.start(params)— Create a pending receiptar.complete(receiptId, params)— Complete a pending receiptar.verify(receiptId)— Verify a receipt's Ed25519 signaturear.get(receiptId)— Get a receipt by IDar.list(filter?)— List receipts with filtering and paginationar.getPublicKey()— Get the signing public keyar.getJudgments(receiptId)— Get judgments for a receiptar.cleanup()— Delete expired receiptsar.generateInvoice(options)— Generate invoice from receipts
Memory
ar.context(params?)— Get full memory context dump for session initar.observe(params)— Store a memory observation (always receipted)ar.recall(params?)— Search memories (quiet by default,audited: truefor receipt)ar.forget(params)— Soft-delete observation or entity (always receipted)ar.entities(filters?)— List entitiesar.relate(params)— Create entity relationshipar.provenance(observationId)— Get provenance chainar.memoryAudit(params?)— Memory audit report
Bundles
ar.exportBundle(params?)— Export portable, verifiable memory bundlear.importBundle(bundle, params?)— Import and verify a memory bundle
Aliases
ar.emit(params)— Alias fortrack()
Tool | Description | Key Parameters |
| Track an agent action with automatic hashing |
|
| Create a receipt with pre-computed hashes |
|
| Complete a pending receipt with results |
|
| Verify the cryptographic signature |
|
| Retrieve a receipt by ID |
|
| List receipts with filtering |
|
| Get all receipts in a chain |
|
| Export the Ed25519 public key | — |
| Start AI Judge evaluation |
|
| Complete a pending judgment |
|
| Get all judgments for a receipt |
|
| Delete expired receipts |
|
| Generate invoice from receipts |
|
| Getting-started guide | — |
| Full context dump for session init |
|
| Store a memory observation |
|
| Search stored memories |
|
| Soft-delete observation or entity |
|
| List known entities |
|
| Create entity relationship |
|
| Provenance chain for observation |
|
| Memory operations audit report |
|
| Export portable memory bundle |
|
| Import and verify memory bundle |
|
Command | Description |
| Create data directory and generate signing keys |
| Display, export, or import signing keys |
| Pretty-print a receipt |
| Verify a receipt signature |
| List receipts with filters |
| Show receipt chain |
| List judgments for a receipt |
| Delete expired receipts |
| Aggregate receipt statistics |
| Export receipts as JSON |
| Generate invoice |
| Seed demo data |
| Watch for new receipts |
| Setup guide (claude-code, cursor, system) |
| Memory context summary |
| Store observation |
| Search memories |
| List entities |
| Forget observation or entity |
| Memory audit report |
| Provenance chain |
| Export memories as JSON |
| Import memories |
Environment Variable | Description | Default |
| Data directory path |
|
| Default agent ID |
|
| Organization ID |
|
| Environment label |
|
| Ed25519 private key (hex) | Auto-generated |
Storage:
~/.agent-receipts/
├── keys/
│ ├── private.key # Ed25519 private key (mode 0600)
│ └── public.key # Ed25519 public key
├── receipts.db # SQLite database (receipts + memory)
└── config.json # Agent and org configurationPackages
Package | Description |
Zod schemas and TypeScript types | |
Ed25519 signing, verification, key management | |
MCP server with 24 tools | |
TypeScript SDK (21 methods) | |
Command-line interface | |
Mission Control web UI |
Roadmap
Cloud tier — team dashboards, multi-agent memory sync, cross-org verification
Semantic recall — embedding-powered memory search
Framework adapters — LangChain, CrewAI, AutoGen integrations
Cross-org trust bridges — two organizations verifying each other's agent receipts
License
MIT
Built by Amin Suleiman — building ModQuote and Agent Receipts.
Available Tools
24 toolscleanupA
Delete receipts that have passed their expiration time based on the expires_at field in metadata. Expired receipts are receipts where metadata.expires_at is set and is earlier than the current time. Supports dry_run mode to preview deletions without committing. Returns count of deleted receipts and remaining total. Use periodically to manage storage and enforce TTL policies set during receipt creation. Set cleanup_memory to also soft-delete expired memory observations.
| Name | Required | Description | Default |
|---|---|---|---|
| dry_run | No | If true, returns what would be deleted without actually deleting. Defaults to false. | |
| cleanup_memory | No | Also clean up expired memory observations (soft-delete). Defaults to false. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses deletion behavior, dry_run preview mode, and soft-delete for memory; no annotations to contradict.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Concise, front-loaded, no unnecessary words. Every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, description explains return values (counts) and covers key aspects like dry_run and memory cleanup.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers both parameters with descriptions; the description adds context (dry_run preview, cleanup_memory soft-delete) beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool deletes expired receipts based on metadata.expires_at, distinguishing it from other tools like create_receipt or list_receipts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly mentions periodic use for storage management and TTL enforcement, but does not specify when not to use or provide alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
complete_judgmentA
Submit evaluation results to finalize a pending judgment receipt created by judge_receipt. Records the verdict, overall score, per-criterion scores and reasoning, and confidence. The judgment receipt is re-signed with Ed25519 and linked to the original receipt via parent_receipt_id. Returns the judgment receipt ID, verdict, score, and chain ID. Use immediately after evaluating the prompt returned by judge_receipt.
| Name | Required | Description | Default |
|---|---|---|---|
| judgment_receipt_id | Yes | The pending judgment receipt ID returned by judge_receipt | |
| verdict | Yes | Overall evaluation result: "pass" (meets threshold), "fail" (below threshold), or "partial" (mixed results) | |
| score | Yes | Overall quality score from 0.0 to 1.0 | |
| criteria_results | Yes | Array of per-criterion results. Each item needs: criterion (name string), score (0.0-1.0), reasoning (explanation string) | |
| overall_reasoning | Yes | Overall explanation of the evaluation verdict | |
| confidence | Yes | Your confidence in this evaluation, 0.0 to 1.0 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries burden. Discloses that receipt is re-signed with Ed25519 and linked via parent_receipt_id, and returns certain fields. However, does not fully describe side effects or whether the operation is final/immutable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is four sentences, with first sentence stating purpose, followed by details of what it records, a technical detail, and usage instruction. It is concise and front-loaded, though could be slightly tighter.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema, but description explains returns (judgment receipt ID, verdict, score, chain ID). Covers technical detail (Ed25519 signing, parent_receipt_id). Explains that it finalizes a pending receipt. Lacks error conditions or idempotency but sufficient for a workflow completion tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 100% description coverage, so baseline is 3. Description mentions parameters (verdict, score, criteria, confidence) but does not add significant detail beyond schema. The description adds process context (finalize, re-sign) but not new parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it submits evaluation results to finalize a pending judgment receipt, with specific verb 'complete_judgment' and resource. It distinguishes from sibling judge_receipt by mentioning 'finalize a pending judgment receipt created by judge_receipt' and 'Use immediately after evaluating the prompt returned by judge_receipt'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use immediately after evaluating the prompt returned by judge_receipt', indicating the correct usage context. It does not explicitly mention when not to use, but the context of pending receipt implies a specific workflow step.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
complete_receiptA
Finalize a pending receipt by recording execution results, costs, and output data. Updates the receipt status to completed, failed, or timeout and re-signs with Ed25519. Use after create_receipt when you need to record results separately from creation (two-phase tracking). Cannot complete an already-completed receipt. Returns the updated signed receipt.
| Name | Required | Description | Default |
|---|---|---|---|
| receipt_id | Yes | The receipt ID to complete — must be a pending receipt (status: "pending") | |
| status | Yes | Final status: "completed" (success), "failed" (error occurred), or "timeout" (timed out) | |
| output_hash | No | Pre-computed SHA-256 hash of the output in format "sha256:hexstring" | |
| output_summary | No | Human-readable summary of the execution result | |
| model | No | AI model used during execution | |
| tokens_in | No | Input tokens consumed | |
| tokens_out | No | Output tokens generated | |
| cost_usd | No | Total cost in USD | |
| latency_ms | No | Total execution time in milliseconds | |
| tool_calls | No | Names of tools called during execution | |
| confidence | No | Confidence score for output quality, 0.0 to 1.0 | |
| callback_verified | No | Whether an external callback verified the result | |
| error | No | Error details if status is "failed" (e.g., {"code": "TIMEOUT", "message": "..."}) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses behavioral traits: updates status, re-signs with Ed25519, and cannot complete an already-completed receipt. It does not mention potential side effects or immutability, but the disclosed traits are sufficient for the tool's purpose.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences long, each serving a distinct purpose: stating the action, providing usage context, and adding constraints/return info. It is front-loaded with the key verb and resource, with no superfluous words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 13 parameters (schema-documented), no output schema, and no annotations, the description covers the core functionality, usage context, constraints, and return value. It could mention the optional parameters for detailed tracking, but the schema covers them, so completeness is adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description does not add meaning beyond the schema, merely stating the tool records results and outputs. No param-specific enrichment is provided, but the schema already handles parameter semantics well.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Finalize' and resource 'pending receipt', detailing that it records execution results, costs, output data, updates status, and re-signs with Ed25519. It explicitly distinguishes from 'create_receipt' by mentioning two-phase tracking, making it distinct from its sibling tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit usage guidance: 'Use after create_receipt when you need to record results separately from creation (two-phase tracking).' It also includes a constraint: 'Cannot complete an already-completed receipt.' This provides clear when-to-use and when-not-to-use information.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_receiptA
Create an Ed25519-signed receipt with pre-computed SHA-256 hashes. Use when you have already hashed the input/output data externally or need full control over receipt fields. For automatic hashing, use track_action instead. Returns the signed receipt object with receipt_id. The receipt is stored locally in SQLite and can be completed later with complete_receipt.
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | Action name being recorded (e.g., "generate_code", "analyze_data") | |
| input_hash | Yes | Pre-computed SHA-256 hash of the input data in format "sha256:hexstring" | |
| receipt_type | No | Receipt type: "action" (default), "verification", "judgment", or "arbitration" | |
| output_hash | No | Pre-computed SHA-256 hash of the output data in format "sha256:hexstring" | |
| output_summary | No | Human-readable summary of the output | |
| model | No | AI model used | |
| tokens_in | No | Input tokens | |
| tokens_out | No | Output tokens | |
| cost_usd | No | Cost in USD | |
| latency_ms | No | Latency in milliseconds | |
| tool_calls | No | Tools called during the action | |
| tags | No | Tags for categorization | |
| confidence | No | Confidence score 0-1 | |
| metadata | No | Arbitrary metadata | |
| parent_receipt_id | No | Parent receipt ID for chains | |
| chain_id | No | Chain ID (auto-generated if not provided) | |
| status | No | Initial status: "pending" (default, complete later) or "completed" | |
| constraints | No | Array of constraint definitions to evaluate (types: max_latency_ms, max_cost_usd, min_confidence, required_fields, status_must_be, output_schema) | |
| expires_at | No | ISO datetime when this receipt expires | |
| ttl_ms | No | Time-to-live in milliseconds from now |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses key behaviors: Ed25519 signing, local SQLite storage, ability to complete later, and return of receipt_id. However, lacks details on idempotency, error conditions, or permission requirements. With no annotations, the description carries a high burden and mostly meets it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four sentences, each essential. Front-loaded with purpose, then guidelines, then storage/return info. No redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (20 params, nested objects), the description covers purpose, input requirements, alternatives, storage, and lifecycle. Missing details on validation or error handling, but overall comprehensive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description reinforces the pre-computed hash requirement and notes optionality of many parameters, but adds minimal new semantic value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description specifies a concrete action ('Create an Ed25519-signed receipt with pre-computed SHA-256 hashes') and clearly differentiates from siblings like track_action (automatic hashing) and complete_receipt (completion later).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use ('when you have already hashed... or need full control') and provides an alternative ('For automatic hashing, use track_action'). Also mentions return value and storage for full context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
generate_invoiceA
Generate a client invoice from cryptographically signed receipts within a date range. Aggregates receipt data by agent, action, or day and calculates total costs, token usage, and receipt counts. Supports JSON, CSV, and Markdown output formats. Each line item references a signed receipt for verifiable billing. Use to bill clients for AI agent work with cryptographic proof of every billed action.
| Name | Required | Description | Default |
|---|---|---|---|
| from | Yes | Invoice period start date in ISO 8601 format (e.g., "2026-01-01" or "2026-01-01T00:00:00Z") | |
| to | Yes | Invoice period end date in ISO 8601 format (e.g., "2026-01-31" or "2026-01-31T23:59:59Z") | |
| client_name | No | Client or bill-to name for the invoice header | |
| client_email | No | Client email address | |
| provider_name | No | Your company or provider name | |
| provider_email | No | Your email address | |
| group_by | No | How to group line items: "action" (by action name), "agent" (by agent ID), "day" (by date), or "none" (single total) | |
| format | No | Output format: "json" (structured data), "csv" (spreadsheet), or "md" (markdown table) | |
| include_receipts | No | If true, includes full receipt objects in JSON output for full auditability | |
| agent_ids | No | Filter to specific agent IDs only | |
| actions | No | Filter to specific action names only | |
| constraints_passed_only | No | If true, only include receipts where all constraints passed | |
| notes | No | Additional notes to include in the invoice | |
| payment_terms | No | Payment terms text (e.g., "Net 30", "Due on receipt") |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It explains the aggregation, calculation, and output formats, and mentions each line item references a signed receipt for verifiability. It does not disclose potential side effects or limitations, but the generative nature is implied and the description is otherwise transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single paragraph of five sentences, each sentence adding value. It is front-loaded with the main purpose and efficiently covers key aspects without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (14 parameters, no output schema), the description adequately covers purpose, outputs, and usage. It explains the output formats and the inclusion of signed receipts, though it could elaborate on the exact structure of the generated invoice or error conditions.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All 14 parameters have descriptions in the input schema, so schema coverage is 100%. The description adds high-level context for grouping and output formats but does not provide additional per-parameter meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool generates invoices from signed receipts within a date range, specifying aggregation and output formats. It distinguishes itself from sibling receipt-related tools by focusing on billing-oriented aggregation and cryptographic proof.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Use to bill clients for AI agent work with cryptographic proof,' which provides clear usage context. However, it does not mention when not to use it or contrast it with alternatives like list_receipts or verify_receipt.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_chainA
Retrieve all receipts belonging to a chain, ordered by timestamp ascending to show the sequence of operations. A chain groups related receipts from a multi-step agent workflow. Returns the complete receipt objects for every step. Use to audit a complete workflow, calculate total chain cost and duration, or identify which step in a pipeline failed.
| Name | Required | Description | Default |
|---|---|---|---|
| chain_id | Yes | The chain ID to retrieve (format: "chain_" followed by 8 alphanumeric characters) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided; description specifies ordering by timestamp ascending, returns complete receipt objects, and states it's read-only retrieval. Does not cover authentication or edge cases, but sufficient for typical use.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, first sentence front-loads action and resource, followed by context and use cases. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema but description explains return value (complete receipt objects) and ordering. For a single-param retrieval tool, all necessary context is present.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema already covers the one parameter (chain_id) with format and example. Description adds no extra semantic value beyond stating it identifies the chain.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Retrieve' and the resource 'all receipts belonging to a chain', distinguishing it from sibling tools like get_receipt (single receipt) and list_receipts (filtered list).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit use cases are provided: audit workflow, calculate cost/duration, identify failed step. Lacks explicit exclusion guidance, but context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_judgmentsA
Retrieve all judgment receipts associated with a given receipt ID. Judgment receipts are linked via parent_receipt_id. Returns an array of judgment receipt objects ordered by timestamp, including verdict, score, criteria results, and confidence. Use to review the evaluation history of a receipt, compare multiple judgments, or audit AI quality assessments. Returns empty array if no judgments exist.
| Name | Required | Description | Default |
|---|---|---|---|
| receipt_id | Yes | The original receipt ID to get judgments for (not the judgment receipt ID) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It discloses return format (array ordered by timestamp with verdict, score, criteria, confidence) and edge case (empty array). No mention of performance or side effects, but it's a read operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Five sentences, front-loaded with core purpose, then linking logic, return format, use cases, and edge case. No fluff; every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema, but description explains return format adequately. Covers verdict, score, criteria, confidence, and ordering. No pagination details, but likely unnecessary. Enough for agent to understand tool's output.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter receipt_id has 100% schema coverage. The description adds clarity by distinguishing it from judgment receipt ID. This prevents misuse.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb (retrieve), resource (judgment receipts), and the input (receipt ID). It distinguishes itself from sibling tools like judge_receipt (creates) and get_receipt (gets receipt itself).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description specifies use cases: review evaluation history, compare judgments, audit AI quality. It lacks explicit when-not-to-use guidance or alternative tool names, but the positive usage is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_public_keyA
Export the Ed25519 public key used to sign all receipts on this instance. Returns the key as a 64-character hex string. Share this key with clients or third parties so they can independently verify receipt signatures without accessing your private key. The private key never leaves your machine — only the public key is needed for verification.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description compensates by stating it exports (read operation), returns a hex string, and emphasizes that the private key never leaves, providing adequate behavioral insight.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three concise sentences, each contributing value: function, return format, and security context. No superfluous words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given zero parameters and no output schema, the description fully explains the tool's purpose, return format, and usage context. No gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, and schema coverage is 100%. Per guidelines, baseline 4 is appropriate as no parameter description is needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool exports the Ed25519 public key used for signing receipts, distinguishing it from sibling tools like create_receipt or verify_receipt.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains when to use (share key for verification without private key access) and implies security context, but does not explicitly mention when not to use or compare with alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_receiptA
Retrieve a single receipt by its ID from local SQLite storage. Returns the full receipt object including all 27 fields: identity, timestamps, action data, performance metrics, constraints, cryptographic proof, and metadata. Returns an error message if the receipt ID does not exist. Use to inspect a specific receipt or retrieve it before verification.
| Name | Required | Description | Default |
|---|---|---|---|
| receipt_id | Yes | The receipt ID to retrieve (format: "rcpt_" followed by 12 alphanumeric characters) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Describes return of full object with 27 fields and error on missing ID. Without annotations, it adequately conveys read-only behavior, though lacks discussion of idempotency or permissions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, front-loaded with action, each sentence adds distinct value: purpose, return details, and usage context.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers action, return, error, and usage. Simple tool missing only minor details like explicit read-only guarantee, but overall complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema already describes receipt_id format (100% coverage). Description adds no new meaning beyond the schema, meeting baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states 'Retrieve a single receipt by its ID' with specific verb, resource, and storage location, distinguishing it from siblings like list_receipts and verify_receipt.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use to inspect a specific receipt or retrieve it before verification,' but does not mention when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_startedA
Display a getting-started guide with usage examples for all Agent Receipts tools. Shows how to record agent actions, verify receipts, use receipt chains, evaluate with constraints, and generate invoices. Call this tool first when setting up Agent Receipts or when you need a reference for available tools and their typical usage patterns.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries the burden. It implies no destructive actions by stating it 'displays' a guide. However, it does not explicitly state it is read-only or safe, which would further enhance transparency. Still, the behavior is clearly non-mutating.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no extraneous information. It front-loads the main purpose and follows with usage examples, making it concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has no parameters, no output schema, and no annotations, the description completely conveys its purpose and usage. It tells the agent what to expect (a guide with examples) and when to call it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has zero parameters and 100% coverage. The description adds no parameter details, which is appropriate since there are no parameters. The baseline of 4 is correct for a tool with no parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool displays a getting-started guide with usage examples for all Agent Receipts tools. It specifies the verb 'display' and the resource 'guide', and distinguishes itself from sibling tools by focusing on setup and reference.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'Call this tool first when setting up Agent Receipts or when you need a reference for available tools and their typical usage patterns.' This provides clear guidance on when to use it and implies it should be used before other tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
judge_receiptA
Start an AI judgment evaluation for a receipt by creating a pending judgment receipt and returning a structured evaluation prompt. The host model (you) evaluates the receipt's output against the provided rubric criteria and then calls complete_judgment with the results. Use to assess output quality beyond simple pass/fail constraints — supports weighted criteria, partial verdicts, and confidence scores. Judgment receipts are themselves Ed25519-signed for auditability.
| Name | Required | Description | Default |
|---|---|---|---|
| receipt_id | Yes | The receipt ID to evaluate — the original action receipt | |
| rubric | Yes | Evaluation rubric with criteria array. Each criterion needs: name (string), description (string), weight (0.0-1.0), and optional passing_threshold (0.0-1.0, default 0.7). Also set: passing_threshold (overall, default 0.7) and require_all (boolean, default false) | |
| output_summary_for_review | No | The actual output content to evaluate — provide if output_summary on the receipt is insufficient for evaluation |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses the workflow: creating a pending judgment, returning a prompt, requiring a subsequent complete_judgment call, and that receipts are Ed25519-signed. This provides good transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with purpose and structured details. No redundant information. Every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists. The description mentions returning a structured evaluation prompt but does not detail its format. However, given the complexity (nested rubric), it provides sufficient high-level completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds some context (e.g., host model evaluates, output_summary_for_review when insufficient), but the schema already adequately describes the parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Start an AI judgment evaluation' and the resource 'a receipt'. It distinguishes itself by mentioning the creation of a pending judgment receipt and the need to later call complete_judgment, differentiating it from siblings like verify_receipt.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description advises using this tool for assessing output quality beyond simple pass/fail, implying when it is appropriate. It does not explicitly list alternatives, but the contrast with 'simple pass/fail' provides usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_receiptsA
Query and paginate receipts from local SQLite storage with optional filtering by agent, action, status, environment, type, chain, or tag. Supports sorting by timestamp, cost, or latency. Returns paginated results with total count, page info, and has_next/has_prev flags. Default: 50 receipts per page, sorted by timestamp descending. Use to audit agent activity, generate reports, or find specific receipts.
| Name | Required | Description | Default |
|---|---|---|---|
| agent_id | No | Filter by agent ID (exact match) | |
| action | No | Filter by action name (exact match) | |
| status | No | Filter by status: "pending", "completed", "failed", or "timeout" | |
| environment | No | Filter by environment: "development", "production", "staging", or "test" | |
| receipt_type | No | Filter by type: "action", "verification", "judgment", or "arbitration" | |
| chain_id | No | Filter to receipts in a specific chain | |
| tag | No | Filter to receipts containing this tag | |
| page | No | Page number, starting at 1 (default: 1) | |
| limit | No | Results per page, 1 to 100 (default: 50) | |
| sort | No | Sort field and direction in format "field:asc" or "field:desc" (e.g., "timestamp:desc", "cost_usd:asc") |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description adequately discloses behavior: it reads from local SQLite storage, returns paginated results with count and navigation flags, and specifies default sorting and limit. It does not cover all edge cases (e.g., empty results) but is thorough for a list tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description comprises four well-structured sentences, each conveying essential information: core action, sorting, output, and defaults/use cases. No redundant or missing content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (10 parameters, no output schema), the description covers core functionality, pagination details, and use cases. It does not describe the receipt structure, but that is likely known from context; still sufficiently complete for tool selection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, and the description repeats some parameter info but adds context on sorting format and defaults. However, the schema already describes parameters well, so the added value is marginal.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it queries and paginates receipts with filtering and sorting, and specifies use cases like auditing and report generation. It distinctively focuses on listing multiple receipts, differentiating from siblings like get_receipt (single) and generate_invoice.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly tells when to use the tool ('Use to audit agent activity, generate reports, or find specific receipts'). It does not mention when not to use it or alternatives, but the context is clear given siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_auditA
Generate an audit report of memory operations. Shows what was remembered, forgotten, merged, and by which agents over a time period.
| Name | Required | Description | Default |
|---|---|---|---|
| agent_id | No | Filter by agent | |
| entity_id | No | Filter by entity | |
| from | No | Start date (ISO 8601) | |
| to | No | End date (ISO 8601) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description bears full responsibility for disclosing behavioral traits. The description does not indicate whether this operation is read-only, whether it requires special permissions, or what side effects (if any) occur. As a report generator, it is likely safe, but that is not explicitly stated, leaving ambiguity.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences provide a clear and complete overview. The first sentence states the action, the second specifies what the report shows. No unnecessary words, and the information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema, the description should explain the report's output structure. It mentions what information is included but does not specify the format (e.g., list, summary, counts) or behavior when no results are found. Given the parameter count and lack of annotations, some additional context would improve completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% with clear descriptions for each parameter. The description adds context about the report content (remembered, forgotten, merged, by agents), which aligns with the parameters. However, it does not add significant new meaning beyond summarizing the filter capabilities already in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with 'Generate an audit report of memory operations,' which is a specific verb+resource combination. It further details what the report shows (remembered, forgotten, merged, by agents, over time period), distinguishing it from sibling tools like memory_recall (retrieve specific memories) or memory_forget (perform forgetting).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage when an audit overview is needed, but it does not explicitly state when to avoid using this tool or mention alternative tools for more granular queries. Given the context of many sibling tools, explicit guidance would help, but the current text at least suggests its purpose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_contextA
Get a complete context dump of all stored memories — top entities, recent observations, active relationships, and preferences. Call this at the start of a conversation to understand what is already known about the user, their projects, and their preferences. Every context pull is logged as a signed receipt.
| Name | Required | Description | Default |
|---|---|---|---|
| scope | No | Filter memories by scope (default: returns all accessible scopes) | |
| max_entities | No | Maximum entities to return, ordered by activity (default: 10, max: 50) | |
| max_observations | No | Maximum recent observations to return (default: 20, max: 100) | |
| audited | No | Create a signed receipt for this read operation (default: false) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations present, so description carries full weight. It discloses that every pull is logged as a signed receipt, but lacks details on performance implications, rate limits, or authorization needs. Acceptable but not comprehensive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no wasted words. First defines the tool's result, second gives usage guidance, third a behavioral note. Efficient and front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description enumerates return contents (entities, observations, relationships, preferences) and mentions logging. Adequate for a straightforward context dump tool. Some missing details on ordering or format, but overall sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers all four parameters with descriptions (100% coverage). The description adds no additional parameter meaning beyond what the schema already provides, so baseline score applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool retrieves a 'complete context dump' of memories, listing specific components (entities, observations, relationships, preferences). It distinguishes from sibling tools like 'memory_entities' (which focuses on entities only) by being a comprehensive snapshot.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly recommends calling at conversation start to understand what's known, providing clear context. Does not explicitly exclude alternative tools but implies this is for full context, not filtered queries.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_entitiesB
List known entities (people, projects, organizations, etc.) with optional filtering. Returns entities with their observation counts.
| Name | Required | Description | Default |
|---|---|---|---|
| entity_type | No | ||
| scope | No | ||
| query | No | Search entity names and aliases | |
| include_forgotten | No | Include forgotten entities (default: false) | |
| limit | No | Max results (default: 20) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description should disclose behavioral traits. It only says 'List known entities' and 'returns entities with their observation counts'. It does not mention read-only nature, authentication needs, rate limits, or any side effects, providing minimal transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise (two sentences), with the purpose in the first sentence and return info in the second. No waste, front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 5 parameters, no required ones, and no output schema, the description is too sparse. It does not explain the entity_type or scope enums, default behaviors, or how this differs from similar tools like memory_recall. The description is insufficient for an agent to use the tool correctly without additional context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 60%, but the tool description adds no parameter explanations. The description's mention of 'people, projects, organizations' hints at entity_type enum values but does not clarify the enum or other parameters like scope, query, etc. Thus it adds little value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists known entities with optional filtering, and specifies what entities are (people, projects, etc.). The verb 'list' and resource 'entities' are specific, and it distinguishes from sibling tools by focusing on entity listing rather than observations or audits.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for listing entities with optional filtering, but it does not explicitly state when to use this tool vs alternatives like memory_recall or memory_audit. No when-not or alternative guidance is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_export_bundleA
Export memories as a portable, verifiable bundle. Includes entities, observations, relationships, source receipts, and the public key needed to verify them. Share with other agents or import into another Agent Receipts instance.
| Name | Required | Description | Default |
|---|---|---|---|
| entity_ids | No | Export specific entities (default: all) | |
| include_receipts | No | Include source receipts for verification (default: true) | |
| include_forgotten | No | Include forgotten/deleted memories (default: false) | |
| description | No | Description of what this bundle contains |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Describes bundle contents (entities, observations, etc.) but no annotations provided; no mention of side effects, format, or resource impact beyond the description.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, no fluff. Front-loaded with action and resource, then lists contents and purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers purpose and contents but lacks details on output format, size limits, or verification process. No output schema. Adequate but not thorough.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the description adds little beyond schema. However, it summarizes the bundle components, which provides context.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states 'Export memories as a portable, verifiable bundle' — a specific verb and resource. Distinguishes from siblings like memory_import_bundle.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage for sharing with other agents or importing into another instance, but does not explicitly exclude alternatives or state when not to use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_forgetB
Forget a specific observation or an entire entity. This is a soft delete — the memory is marked as forgotten but retained for audit purposes. The forget operation itself is recorded as a signed receipt.
| Name | Required | Description | Default |
|---|---|---|---|
| entity_id | No | Entity to forget entirely (all its observations) | |
| observation_id | No | Specific observation to forget | |
| reason | No | Why this memory is being forgotten |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses soft delete behavior and signed receipt recording, but lacks details on required permissions, reversibility, or side effects on related data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the main action, no redundant information. Every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers purpose and soft delete, but missing explanation of return value (signed receipt format) and whether forgetting an entity cascades to its observations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers all parameters with descriptions; the tool description implies that one of entity_id or observation_id is needed but doesn't explicitly state requirement. Adds minimal beyond schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (forget) and resource (specific observation or entire entity), but does not explicitly differentiate from sibling tools like memory_audit or memory_recall.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like memory_observe or memory_audit; no context on prerequisites or typical use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_import_bundleA
Import a memory bundle from another Agent Receipts instance. Verifies checksums before importing. Skips memories that already exist locally. The import operation itself is recorded as a signed receipt.
| Name | Required | Description | Default |
|---|---|---|---|
| bundle | Yes | The memory bundle JSON object to import | |
| skip_existing | No | Skip entities/observations that already exist (default: true) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses checksum verification, skipping existing memories, and recording the import as a signed receipt. This is good for a write operation, though it doesn't mention potential failure modes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences, front-loaded with purpose, and contains no fluff. Every sentence provides essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema and no annotations, the description covers purpose, input handling, deduplication, and side effects. It lacks explanation of return values, but that is partially compensated by the schema coverage.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds context for 'bundle' (from another instance) and aligns with 'skip_existing' schema, but doesn't compensate beyond that.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool imports a memory bundle from another instance, using specific verbs ('Import') and resources ('memory bundle'). It distinguishes from siblings like 'memory_export_bundle' by focusing on import behavior.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions importing from another instance and skipping existing memories, but lacks explicit guidance on when to use this tool versus alternatives (e.g., memory_audit, memory_context). It does not state when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_observeA
Store a memory observation about a person, project, preference, or any entity. Automatically creates the entity if it doesn't exist. Every observation is cryptographically signed and linked to a receipt.
| Name | Required | Description | Default |
|---|---|---|---|
| entity_name | Yes | Name of the entity (person, project, tool, etc.) | |
| entity_type | Yes | Type of entity | |
| content | Yes | The observation/fact to remember | |
| confidence | No | How confident you are in this observation (default: medium) | |
| scope | No | Who can see this memory (default: agent) | |
| context | No | What conversation or task produced this observation | |
| tags | No | Tags for categorization | |
| ttl_seconds | No | Time-to-live in seconds. After this duration, the observation expires and is excluded from recall but retained for audit. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds behavioral details beyond the input schema, such as automatic entity creation and cryptographic signing with receipt linking. Since annotations are absent, the description carries the full burden and does well, though it could mention potential side effects or permissions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise with two sentences, front-loading the primary purpose and key behaviors. Every sentence adds value with no redundant or irrelevant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 8 parameters, no output schema, and no annotations, the description covers the core action and important behaviors (entity creation, cryptography). It omits return value details but is largely sufficient for an agent to understand the tool's use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so baseline is 3. The description does not elaborate on individual parameters beyond what the schema provides, so it meets the minimum but adds no extra semantic value for parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'store' and the resource 'memory observation', and specifies the scope as persons, projects, preferences, or entities. It distinguishes from sibling tools by noting automatic entity creation and cryptographic signing linked to a receipt, which are unique features.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains what the tool does but does not provide any guidance on when to use this tool versus alternatives like memory_recall or memory_forget. No explicit when or when-not scenarios are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_provenanceA
Get the full provenance chain for a memory observation. Shows when it was created, which conversation produced it, which agent made the observation, and every subsequent modification.
| Name | Required | Description | Default |
|---|---|---|---|
| observation_id | Yes | The observation to trace |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description effectively discloses the tool's behavior: it is read-only and returns creation details, conversation, agent, and modification history. It does not mention permissions or rate limits, but the read-only nature is clear from 'Get the full provenance chain.'
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the action and resource. Every word contributes meaning without redundancy. It is efficient and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (provenance chain), the description adequately outlines what is returned but does not detail the structure of the chain. With no output schema, a bit more structure detail could help, but overall it is sufficient for most use cases.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema covers 100% of parameters, each with a description. The tool description adds context by explaining what the parameter 'observation_id' is used for (tracing provenance), but does not provide additional value beyond what the schema already conveys.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Get the full provenance chain for a memory observation.' It specifies the resource (memory observation) and the action (trace provenance), distinguishing it from sibling tools like memory_audit or memory_context by detailing what it shows (creation, conversation, agent, modifications).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implicitly indicates usage when provenance information is needed, but it does not explicitly state when to use this tool versus alternatives like memory_audit or memory_recall. No when-not-to-use or conditional guidance is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_recallA
Search and retrieve stored memories. Use text search to find relevant observations across all entities, or filter by entity type, specific entity, or scope. Every recall is logged as a receipt.
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | Text to search for across all observations | |
| entity_type | No | Filter by entity type | |
| entity_id | No | Get memories for a specific entity | |
| scope | No | Filter by memory scope | |
| limit | No | Max results to return (default: 20, max: 100) | |
| include_forgotten | No | Include soft-deleted memories (default: false) | |
| audited | No | Create a signed receipt for this read operation (default: false) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description adds one behavioral note: 'Every recall is logged as a receipt.' However, it does not disclose read-only nature, side effects beyond logging, or rate limits. The note on receipt logging is partially contradicted by the 'audited' parameter description (see parameter semantics).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences: first states the core purpose, second lists key features and a behavioral claim. No redundant words, front-loaded, and efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 7 optional parameters and no output schema, the description covers basic use and one side effect. However, it omits explanation of the return format, pagination behavior, and the relationship between receipt logging and the 'audited' parameter, leaving ambiguity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description summarizes filtering by entity_type, entity_id, and scope but adds no novel meaning beyond the schema. The mention of receipt logging conflicts with the audited parameter description, causing slight confusion.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb+resource phrase 'Search and retrieve stored memories' and distinguishes from siblings like memory_observe (create) and memory_forget (delete) by focusing on retrieval and filtering.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for text search and filtering but does not explicitly state when to use this tool versus alternatives like memory_audit or memory_entities. No exclusions or alternative tool names are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
memory_relateA
Create a relationship between two entities (e.g., "Amin" builds "ModQuote"). Relationships are bidirectional for querying but stored with a direction.
| Name | Required | Description | Default |
|---|---|---|---|
| from_entity_id | Yes | Source entity ID | |
| to_entity_id | Yes | Target entity ID | |
| relationship_type | Yes | Type of relationship (e.g., "builds", "uses", "works_at", "prefers") | |
| strength | No | ||
| context | No | What established this relationship |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses bidirectional querying but directional storage, which is useful. No annotations provided, so description bears full burden; however, it omits side effects, permissions, or implications like idempotency or overwrites.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, concise and front-loaded with purpose. No redundant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Lacks description of return value (no output schema). For a creation tool with 5 parameters, details on what is returned upon success or failure are missing. Adequate for basic understanding but not fully self-contained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers 80% of parameters with descriptions. The description adds minimal parameter insight beyond the schema; the example is helpful but does not clarify optional parameters like 'strength' or 'context' beyond their schema definitions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the tool creates a relationship between two entities with an example ("Amin builds ModQuote"). Differentiates from siblings like memory_observe and memory_entities by focusing on relational creation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives (e.g., memory_observe for observations, memory_entities for entity creation). Lacks context about prerequisites or when not to use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
track_actionA
Create a completed Ed25519-signed receipt for an AI agent action with automatic SHA-256 hashing of input and output data. Records model usage, costs, latency, and constraint evaluations. Returns the signed receipt with receipt_id for future reference. Use this as the primary tool for recording agent actions — prefer over create_receipt + complete_receipt for single-step actions.
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | Action name being recorded (e.g., "generate_code", "summarize_text", "classify_intent") | |
| input | No | Input data passed to the agent — automatically hashed with SHA-256, raw data is never stored | |
| output | No | Output produced by the agent — automatically hashed with SHA-256, raw data is never stored | |
| output_summary | No | Human-readable summary of the output for audit purposes (max 500 chars recommended) | |
| model | No | AI model used (e.g., "claude-sonnet-4-20250514", "gpt-4o", "gemini-2.0-flash") | |
| tokens_in | No | Input tokens consumed by the model | |
| tokens_out | No | Output tokens generated by the model | |
| cost_usd | No | Execution cost in USD (e.g., 0.0045) | |
| latency_ms | No | Total execution time in milliseconds | |
| tool_calls | No | Names of tools called during this action (e.g., ["web_search", "code_exec"]) | |
| tags | No | Arbitrary tags for filtering and categorization (e.g., ["production", "critical"]) | |
| confidence | No | Confidence score for the output quality, 0.0 to 1.0 | |
| metadata | No | Arbitrary key-value metadata attached to the receipt | |
| parent_receipt_id | No | Parent receipt ID for chaining — links this receipt to a previous step | |
| chain_id | No | Chain identifier for grouping related receipts — auto-generated if not provided | |
| constraints | No | Constraint definitions to evaluate against this receipt (e.g., max_latency_ms, max_cost_usd, min_confidence) | |
| expires_at | No | ISO 8601 datetime when this receipt expires (e.g., "2026-12-31T23:59:59Z") | |
| ttl_ms | No | Time-to-live in milliseconds from now — alternative to expires_at |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It discloses automatic SHA-256 hashing, no raw data storage, and returns signed receipt. Lacks explicit mention of write nature but is clear enough. Good behavioral context beyond schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no waste. First sentence packs core functionality, second provides usage guidance. Efficient and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 18 parameters, nested objects, and no output schema, description covers main purpose, key behaviors, and usage. Mentions return of receipt_id, sufficient for selection. Could elaborate on constraint evaluation but schema covers details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% (18 parameters all described), baseline is 3. Description adds value by explaining automatic hashing for input/output and constraint evaluation, which is beyond schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool creates a completed Ed25519-signed receipt for AI agent actions with automatic hashing. It also explicitly differentiates from siblings by recommending use over create_receipt + complete_receipt for single-step actions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit guidance: 'Use this as the primary tool for recording agent actions — prefer over create_receipt + complete_receipt for single-step actions.' This clearly indicates when and why to use this tool over alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_receiptA
Cryptographically verify an Ed25519 signature on a stored receipt to confirm it has not been tampered with since signing. Extracts the 12-field signable payload, canonicalizes it, and verifies against the stored public key. Returns verified: true if the signature is valid. Use to audit receipts before using them as evidence or before completing payments based on agent work.
| Name | Required | Description | Default |
|---|---|---|---|
| receipt_id | Yes | The receipt ID to verify — must exist in local storage |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It explains the verification process (extract, canonicalize, verify) and mentions the return field. But it does not disclose behavior on invalid inputs (e.g., missing receipt_id, tampered receipt, or invalid signature).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no redundancy, front-loaded with the main action. Every sentence adds value and the structure is optimal for agent parsing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (1 param, no output schema), the description covers purpose, process, and use case. However, it does not explicitly describe the failure case (e.g., returns false or error) or the full return format, which would be beneficial.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers 100% of the single parameter with clear description. The description adds no new semantic detail beyond the schema, so baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses specific verb+resource: 'cryptographically verify an Ed25519 signature on a stored receipt'. It clearly states the core operation but does not explicitly differentiate from sibling tools like create_receipt or judge_receipt.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit context: 'Use to audit receipts before using them as evidence or before completing payments based on agent work.' However, it does not mention when NOT to use it or suggest alternative tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
TDQS
Each tool has a clearly distinct purpose, grouped into receipt lifecycle, memory management, judgment evaluation, and utility. No two tools overlap significantly; even similar tools like track_action and create_receipt are differentiated by use case.
All tool names follow a consistent verb_noun pattern using snake_case (e.g., create_receipt, list_receipts, memory_observe). This pattern makes the tool set predictable and easy for an agent to infer.
At 24 tools, the set is on the higher side but still appropriate given the server's multi-domain scope (receipts, memory, judgments, invoicing). Each tool has a clear role, though some consolidation might be possible.
The server covers the full lifecycle of receipts, memory operations, and judgments with CRUD-like tools. Minor gaps exist (e.g., no direct update for memory observations, but provenance and re-observation can work around it). Overall, the surface is well-scoped for the stated purpose.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Issue signed receipts for AI agent actions; verify any receipt offline - free, no account.
Tamper-evident proof creation and verification for AI agents via MCP, A2A, and REST.
AI agent infrastructure for discovery, authorization, execution, identity, and signed receipts.
Post-quantum, tamper-evident receipts for agent actions. Ed25519 + ML-DSA-65, offline verify.
Related MCP Servers
- AlicenseAqualityCmaintenancePolicy-gated MCP execution for AI agents—ShadeGuard, x402, signed receipts, no custody. 16 tools, 18 chains.182MIT

evermint-mcpofficial
AlicenseNot gradedqualityDmaintenanceTamper-evident receipts for AI agent actions. The notary layer for agent-to-agent transactions.701MIT- AlicenseNot gradedqualityCmaintenanceTamper-evident audit logging for AI agents. Append-only, hash-chained, optionally Ed25519-signed log. The MCP server lets an agent keep and verify a record of what it actually did.7MIT
- FlicenseAqualityCmaintenanceMCP server that auto-emits tamper-evident receipts for every tool call, enabling EU AI Act Article 12 compliance with signed, chain-linked receipts.1-
Appeared in Searches
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/webaesbyamin/agent-receipts'
If you have feedback or need assistance with the MCP directory API, please join our Discord server