Skip to main content
Glama

Agent Receipts

Your agent says it's done. Prove it.

Agent Receipts gives the work your AI agent does a signed receipt: what went in, what came out, which model ran, how long it took and what it cost. Each receipt is signed with Ed25519 and linked to the one before it, so anyone can check it offline with your public key, without trusting you, your server or the agent. Change one byte and it no longer verifies.

claude mcp add agent-receipts -- npx @agent-receipts/mcp-server

receipts.webaes.com (what it is, install, and a page that signs itself) · demo.receipts.webaes.com (the dashboard with sample data) · verify.webaes.com (a real issuer's verify page) · by Webaes

Live Demo Interactive Walkthrough npm version License: MIT

Automatic receipts · Get started · Magic Folder · Memory · How it's different


Automatic receipts

Get a signed receipt for everything your agent does, without changing how you work.

Claude Code: one command. Every file edit, file write, notebook edit and shell command gets its own signed receipt, chained per session, and the session ends with a summary (actions, files touched, duration):

npx @agent-receipts/cli hooks install            # or --scope project / --scope local

It shows the change to Claude Code's settings.json and asks first; hooks uninstall takes it out again. Or install it as a Claude Code plugin:

claude plugin marketplace add webaesbyamin/agent-receipts
claude plugin install agent-receipts@agent-receipts

Any MCP server: the proxy. Put it in front of a stdio MCP server and every tool call through it is signed (mcp.<server>.<tool>), while every message passes through unchanged:

claude mcp add fs-receipted -- npx -y @agent-receipts/cli proxy --name fs -- npx -y @modelcontextprotocol/server-filesystem ~/Documents

Receipts hold hashes only (inputs, outputs, and each changed file), never commands, file contents or results. See them in the dashboard's Sessions view (npx @agent-receipts/dashboard) or check one with agent-receipts verify-chain <session id>. Setup for Claude Desktop and Cursor: CLI README.

What these receipts do and don't prove:

  • They prove what Claude Code (or the MCP client) reported, signed outside the agent. The hook and the proxy run as separate processes, and each receipt is signed the moment the tool finishes, so the agent can't edit a receipt afterwards without breaking it. They don't prove the work was right, only what was done and that the record hasn't changed.

  • claude -p can stop the last one. In a scripted run, Claude Code stops background hooks still running when the run ends, so a tool call in the last moment of a run can go unrecorded.

  • The computer's owner controls the keys. Receipts are signed with keys in ~/.agent-receipts on your machine. They show the record wasn't changed after signing; someone who controls that machine could sign a false one. To show others, publish your public key so they know which key to trust.

  • stdio MCP servers only for now. Remote (HTTP) MCP servers aren't covered yet.

Related MCP server: evermint-mcp

Proof

Every memory observation and every action your agent tracks produces a receipt — a signed JSON document with:

  • Ed25519 signature over every field (receipt format v2) — tamper-proof, independently verifiable

  • Input/output hashes — proves exactly what went in and came out (raw data never stored)

  • Timestamps — when it happened, when it completed

  • Agent ID — which agent did it

  • Link to the previous receipt — the hash of the one before it, so a missing receipt shows

  • Provenance chain — trace any memory back to the conversation that created it

This isn't logging. Logs are mutable text files the agent writes about itself. Receipts are cryptographic proof that a third party can verify without trusting you, your server, or the agent.

Everything runs locally

npx @agent-receipts/mcp-server

That's it. No API key. No account. No cloud. No monthly fee. No data leaving your machine. SQLite database in ~/.agent-receipts/. Works offline. Needs Node.js 22.16 or later.

Get Started

Needs Node.js 22.16 or later.

1. Add the MCP Server

Claude Code:

claude mcp add agent-receipts -- npx @agent-receipts/mcp-server

Claude Desktop (claude_desktop_config.json) / Cursor (.cursor/mcp.json):

{
  "mcpServers": {
    "agent-receipts": {
      "command": "npx",
      "args": ["@agent-receipts/mcp-server"]
    }
  }
}

2. Add the System Prompt

This tells your agent when to observe memories, recall context, and track actions — so it works automatically:

npx @agent-receipts/cli prompts claude-code

Copy the output into your project instructions or system prompt.

3. Start Using It

Your agent will now:

  • Call memory_context at the start of sessions to load what it knows about you

  • Call memory_observe when it learns something worth remembering

  • Call track_action when it performs significant actions

  • Sign everything with Ed25519

4. See What's Happening

npx @agent-receipts/dashboard    # Web UI at localhost:3274
npx @agent-receipts/cli stats    # Terminal overview
npx @agent-receipts/cli memory entities  # See what your agent remembers

5. Try Before Installing

Run the interactive demo → — experience memory, verification, and bundle export in 60 seconds. No install required.

Magic Folder: receipts for people who don't code

Drop a file into a folder named after a job ("Write product descriptions", "Fix typos"). An agent does the work, and the result comes back in Done/ with your untouched original and a one-page receipt.html that anyone can check, plus an approval step for anything client-facing.

npm install -g @agent-receipts/magic-folder
magic-folder init ~/"Magic Folder"
magic-folder run ~/"Magic Folder" --engine ollama --issuer "Your Studio"

Needs Node 22.16 or later and, for free local jobs, Ollama. Step-by-step for Mac, Windows and Linux: receipts.webaes.com/install.

The runner writes the receipt, not the agent: it hashes the real files and records the model, time and cost itself (on Claude, the cost is the Agent SDK's own estimate and is marked as one; on Ollama it's $0). See packages/magic-folder and the static verify page.

Memory

Your agent gets structured, persistent memory across sessions — people, projects, tools, preferences, facts. Not a flat key-value store. An entity-observation graph where every fact links to the conversation that created it.

# Your agent learns something
memory_observe → "User prefers TypeScript, uses Neovim, building a SaaS called ModQuote"

# Next session, it already knows
memory_context → loads everything: entities, observations, relationships, preferences

# You can search it
memory_recall → "what tech stack does the user prefer?" → structured results

# You can forget (and the forget itself is tracked)
memory_forget → soft delete with audit trail

The agent handles this automatically when you add the system prompt. You don't manage memory manually.

Portable memory bundles

Export your agent's entire memory as a single verifiable file:

npx @agent-receipts/cli memory export > my-project.bundle.json

The bundle includes every entity, observation, relationship, the receipts that created them, and the public key needed to verify everything. Hand it to another agent, another team, or another Agent Receipts instance — they can verify every fact without trusting you.

The Problem

You're building with AI agents. Claude Code refactors your auth module and says "done, all tests pass." Your agent generates a customer quote and says it applied the right pricing. Your assistant remembers your preferences from last week — but you can't see why it thinks that, or whether it's right.

Three things are broken:

  1. Agents forget everything between sessions. Every conversation starts from zero. Context is lost. You re-explain the same things.

  2. When agents do remember, you can't see inside. Platform memory is a black box. You can't see what it stored, when, or why. You can't correct it, export it, or verify it.

  3. There's no proof of what agents actually did. Logs are mutable. Agents write their own logs. "I updated 3 files and all tests pass" — did it? You're trusting the agent's word about its own work.

Why This Exists

The idea came from building ModQuote, a multi-tenant SaaS for automotive protection and detailing shops: PPF, ceramic coatings, window tint.

AI-drafted quotes are on ModQuote's roadmap, and designing that feature raised a question I couldn't answer with the tools I had. If an agent drafts a $2,400 PPF quote and the customer disputes the price, how do I show what vehicle data it received and which pricing rules it applied? Not with a log entry the agent wrote about itself, but with proof that someone outside my system can check.

Memory tools could tell me what an agent remembered, and observability tools could tell me what happened inside my own pipeline. Neither gave me a record that a customer, a client or an auditor could verify without trusting me.

So I built Agent Receipts first, as its own open-source project. When AI quoting ships in ModQuote, every quote will come with a signed receipt. Until then, Agent Receipts stands on its own: any agent, any client, any workflow.

How It's Different

Most AI tooling answers one of two questions. Memory tools answer "What does my agent remember?" Observability tools answer "What happened in my pipeline?" Agent Receipts answers a third: "Can you prove it?"

  • Proof, not logs. Every receipt is signed with Ed25519 over every field (format v2). Logs can be edited and are written by the agent about itself; a receipt breaks if anything changes.

  • Anyone can verify it. Offline, in a browser, from the CLI or in code, with a public key. No account, no server, no trusting the person who sent it.

  • History you can't quietly rewrite. Receipts link to the one before them, and verify-chain detects edited, removed or forked receipts.

  • Memory with provenance. Every fact your agent remembers links to the receipt that created it, and can be exported as a bundle someone else can verify.

  • Local-first and free. npx and done. Keys and receipts stay in ~/.agent-receipts. MIT licensed.

What's Inside

  • Automatic receipts — Claude Code hooks (and a plugin) and an MCP proxy that sign every action as it happens

  • 24 MCP tools — memory, actions, verification, constraints, judgments, invoicing, bundles

  • 21 SDK methods — full TypeScript API

  • 17 CLI commands + 9 memory and 3 hooks subcommands — terminal-first

  • 20 dashboard pages — receipts, sessions, memory graph, chains, agents, constraints, judgments, invoices

  • 714 tests (697 across the packages, 17 for the website) — zero TypeScript any in package source

  • Ed25519 + SHA-256 — via @noble/ed25519 (pure JS, no native code); receipt format v2 signs every field

  • SQLite + FTS5 — Node's built-in SQLite, local-first with full-text memory search; no native modules to install

Interactive Demo

Try it in your browser — 60 seconds

Live Dashboard

See the full dashboard with sample data

How It Works

Receipt anatomy, memory model, a worked quoting example

npm

All 7 packages

receipts.webaes.com

Magic Folder, install guide for Mac, Windows and Linux

verify.webaes.com

A real issuer's verify page

Action Tracking

  • ar.track(params) — Track a completed action with automatic hashing

  • ar.start(params) — Create a pending receipt

  • ar.complete(receiptId, params) — Complete a pending receipt

  • ar.verify(receiptId) — Verify a receipt's Ed25519 signature

  • ar.get(receiptId) — Get a receipt by ID

  • ar.list(filter?) — List receipts with filtering and pagination

  • ar.getPublicKey() — Get the signing public key

  • ar.getJudgments(receiptId) — Get judgments for a receipt

  • ar.cleanup() — Delete expired receipts

  • ar.generateInvoice(options) — Generate invoice from receipts

Memory

  • ar.context(params?) — Get full memory context dump for session init

  • ar.observe(params) — Store a memory observation (always receipted)

  • ar.recall(params?) — Search memories (quiet by default, audited: true for receipt)

  • ar.forget(params) — Soft-delete observation or entity (always receipted)

  • ar.entities(filters?) — List entities

  • ar.relate(params) — Create entity relationship

  • ar.provenance(observationId) — Get provenance chain

  • ar.memoryAudit(params?) — Memory audit report

Bundles

  • ar.exportBundle(params?) — Export portable, verifiable memory bundle

  • ar.importBundle(bundle, params?) — Import and verify a memory bundle

Aliases

  • ar.emit(params) — Alias for track()

Tool

Description

Key Parameters

track_action

Track an agent action with automatic hashing

action, input, output, constraints

create_receipt

Create a receipt with pre-computed hashes

action, input_hash, output_hash

complete_receipt

Complete a pending receipt with results

receipt_id, output, status

verify_receipt

Verify the cryptographic signature

receipt_id

get_receipt

Retrieve a receipt by ID

receipt_id

list_receipts

List receipts with filtering

agent_id, status, chain_id

get_chain

Get all receipts in a chain

chain_id

get_public_key

Export the Ed25519 public key

—

judge_receipt

Start AI Judge evaluation

receipt_id, rubric

complete_judgment

Complete a pending judgment

receipt_id, verdict, score

get_judgments

Get all judgments for a receipt

receipt_id

cleanup

Delete expired receipts

dry_run, cleanup_memory

generate_invoice

Generate invoice from receipts

from, to, format

get_started

Getting-started guide

—

memory_context

Full context dump for session init

scope, max_entities

memory_observe

Store a memory observation

entity_name, entity_type, content

memory_recall

Search stored memories

query, entity_type, scope

memory_forget

Soft-delete observation or entity

entity_id or observation_id

memory_entities

List known entities

entity_type, scope, query

memory_relate

Create entity relationship

from_entity_id, to_entity_id, type

memory_provenance

Provenance chain for observation

observation_id

memory_audit

Memory operations audit report

agent_id, from, to

memory_export_bundle

Export portable memory bundle

entity_ids, include_receipts

memory_import_bundle

Import and verify memory bundle

bundle, skip_existing

Command

Description

init

Create data directory and generate signing keys

keys [--export] [--import]

Display, export, or import signing keys

inspect <id|file>

Pretty-print a receipt

verify <id|file> [--key]

Verify a receipt signature

verify-chain <chain_id>

Verify every signature and link in a chain

list [--agent] [--status] [--json]

List receipts with filters

chain <chain_id> [--tree]

Show receipt chain

judgments <id> [--json]

List judgments for a receipt

cleanup [--dry-run]

Delete expired receipts

stats

Aggregate receipt statistics

export <id|--all> [--pretty]

Export receipts as JSON

invoice --from --to [--format]

Generate invoice

seed [--demo] [--count] [--clean]

Seed demo data

watch [--agent] [--action]

Watch for new receipts

prompts <client>

Setup guide (claude-code, cursor, system)

memory context

Memory context summary

memory observe <name> <type> <content>

Store observation

memory recall [query]

Search memories

memory entities [--type]

List entities

memory forget <id>

Forget observation or entity

memory audit

Memory audit report

memory provenance <obs_id>

Provenance chain

memory export

Export memories as JSON

memory import <file>

Import memories

Environment Variable

Description

Default

AGENT_RECEIPTS_DATA_DIR

Data directory path

~/.agent-receipts

AGENT_RECEIPTS_AGENT_ID

Default agent ID

local-agent

AGENT_RECEIPTS_ORG_ID

Organization ID

local-org

AGENT_RECEIPTS_ENVIRONMENT

Environment label

production

RECEIPT_SIGNING_PRIVATE_KEY

Ed25519 private key (hex)

Auto-generated

Storage:

~/.agent-receipts/
├── keys/
│   ├── private.key    # Ed25519 private key (mode 0600)
│   └── public.key     # Ed25519 public key
├── receipts.db        # SQLite database (receipts + memory)
└── config.json        # Agent and org configuration

Packages

Package

Version

Description

@agent-receipts/schema

0.6.0

Zod schemas and TypeScript types

@agent-receipts/crypto

0.6.0

Ed25519 signing, verification, key management

@agent-receipts/mcp-server

0.6.0

MCP server with 24 tools

@agent-receipts/sdk

0.6.0

TypeScript SDK (21 methods)

@agent-receipts/cli

0.6.0

Command-line interface, Claude Code hooks, MCP proxy

@agent-receipts/dashboard

0.6.0

Mission Control web UI, on your own computer

@agent-receipts/magic-folder

0.2.0

Drop-a-file job runner with signed, self-checking receipts

All MIT, all on npm. Node.js 22.16 or later, using its built-in SQLite. (Node 22, and 24 before 24.15, call built-in SQLite experimental; Agent Receipts hides that one notice.)

Roadmap

  • Cloud tier — team dashboards, multi-agent memory sync, cross-org verification

  • Semantic recall — embedding-powered memory search

  • Framework adapters — LangChain, CrewAI, AutoGen integrations

  • Cross-org trust bridges — two organizations verifying each other's agent receipts

License

MIT


Built by Amin Suleiman — building ModQuote and Agent Receipts.

Available Tools

24 tools
cleanupA

Delete receipts that have passed their expiration time based on the expires_at field in metadata. Expired receipts are receipts where metadata.expires_at is set and is earlier than the current time. Supports dry_run mode to preview deletions without committing. Returns count of deleted receipts and remaining total. Use periodically to manage storage and enforce TTL policies set during receipt creation. Set cleanup_memory to also soft-delete expired memory observations.

NameRequiredDescriptionDefault
dry_runNoIf true, returns what would be deleted without actually deleting. Defaults to false.
cleanup_memoryNoAlso clean up expired memory observations (soft-delete). Defaults to false.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses deletion behavior, dry_run preview mode, and soft-delete for memory; no annotations to contradict.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Concise, front-loaded, no unnecessary words. Every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema, description explains return values (counts) and covers key aspects like dry_run and memory cleanup.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers both parameters with descriptions; the description adds context (dry_run preview, cleanup_memory soft-delete) beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the tool deletes expired receipts based on metadata.expires_at, distinguishing it from other tools like create_receipt or list_receipts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly mentions periodic use for storage management and TTL enforcement, but does not specify when not to use or provide alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

complete_judgmentA

Submit evaluation results to finalize a pending judgment receipt created by judge_receipt. Records the verdict, overall score, per-criterion scores and reasoning, and confidence. The judgment receipt is re-signed with Ed25519 and linked to the original receipt via parent_receipt_id. Returns the judgment receipt ID, verdict, score, and chain ID. Use immediately after evaluating the prompt returned by judge_receipt.

NameRequiredDescriptionDefault
scoreYesOverall quality score from 0.0 to 1.0
verdictYesOverall evaluation result: "pass" (meets threshold), "fail" (below threshold), or "partial" (mixed results)
confidenceYesYour confidence in this evaluation, 0.0 to 1.0
criteria_resultsYesArray of per-criterion results. Each item needs: criterion (name string), score (0.0-1.0), reasoning (explanation string)
overall_reasoningYesOverall explanation of the evaluation verdict
judgment_receipt_idYesThe pending judgment receipt ID returned by judge_receipt

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries burden. Discloses that receipt is re-signed with Ed25519 and linked via parent_receipt_id, and returns certain fields. However, does not fully describe side effects or whether the operation is final/immutable.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is four sentences, with first sentence stating purpose, followed by details of what it records, a technical detail, and usage instruction. It is concise and front-loaded, though could be slightly tighter.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, but description explains returns (judgment receipt ID, verdict, score, chain ID). Covers technical detail (Ed25519 signing, parent_receipt_id). Explains that it finalizes a pending receipt. Lacks error conditions or idempotency but sufficient for a workflow completion tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema has 100% description coverage, so baseline is 3. Description mentions parameters (verdict, score, criteria, confidence) but does not add significant detail beyond schema. The description adds process context (finalize, re-sign) but not new parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it submits evaluation results to finalize a pending judgment receipt, with specific verb 'complete_judgment' and resource. It distinguishes from sibling judge_receipt by mentioning 'finalize a pending judgment receipt created by judge_receipt' and 'Use immediately after evaluating the prompt returned by judge_receipt'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use immediately after evaluating the prompt returned by judge_receipt', indicating the correct usage context. It does not explicitly mention when not to use, but the context of pending receipt implies a specific workflow step.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

complete_receiptA

Finalize a pending receipt by recording execution results, costs, and output data. Updates the receipt status to completed, failed, or timeout and re-signs with Ed25519. Use after create_receipt when you need to record results separately from creation (two-phase tracking). Cannot complete an already-completed receipt. Returns the updated signed receipt.

NameRequiredDescriptionDefault
errorNoError details if status is "failed" (e.g., {"code": "TIMEOUT", "message": "..."})
modelNoAI model used during execution
statusYesFinal status: "completed" (success), "failed" (error occurred), or "timeout" (timed out)
cost_usdNoTotal cost in USD
tokens_inNoInput tokens consumed
confidenceNoConfidence score for output quality, 0.0 to 1.0
latency_msNoTotal execution time in milliseconds
receipt_idYesThe receipt ID to complete — must be a pending receipt (status: "pending")
tokens_outNoOutput tokens generated
tool_callsNoNames of tools called during execution
output_hashNoPre-computed SHA-256 hash of the output in format "sha256:hexstring"
output_summaryNoHuman-readable summary of the execution result
callback_verifiedNoWhether an external callback verified the result

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses behavioral traits: updates status, re-signs with Ed25519, and cannot complete an already-completed receipt. It does not mention potential side effects or immutability, but the disclosed traits are sufficient for the tool's purpose.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences long, each serving a distinct purpose: stating the action, providing usage context, and adding constraints/return info. It is front-loaded with the key verb and resource, with no superfluous words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 13 parameters (schema-documented), no output schema, and no annotations, the description covers the core functionality, usage context, constraints, and return value. It could mention the optional parameters for detailed tracking, but the schema covers them, so completeness is adequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description does not add meaning beyond the schema, merely stating the tool records results and outputs. No param-specific enrichment is provided, but the schema already handles parameter semantics well.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Finalize' and resource 'pending receipt', detailing that it records execution results, costs, output data, updates status, and re-signs with Ed25519. It explicitly distinguishes from 'create_receipt' by mentioning two-phase tracking, making it distinct from its sibling tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit usage guidance: 'Use after create_receipt when you need to record results separately from creation (two-phase tracking).' It also includes a constraint: 'Cannot complete an already-completed receipt.' This provides clear when-to-use and when-not-to-use information.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_receiptA

Create an Ed25519-signed receipt with pre-computed SHA-256 hashes. Use when you have already hashed the input/output data externally or need full control over receipt fields. For automatic hashing, use track_action instead. Returns the signed receipt object with receipt_id. The receipt is stored locally in SQLite and can be completed later with complete_receipt.

NameRequiredDescriptionDefault
tagsNoTags for categorization
modelNoAI model used
actionYesAction name being recorded (e.g., "generate_code", "analyze_data")
statusNoInitial status: "pending" (default, complete later) or "completed"
ttl_msNoTime-to-live in milliseconds from now
chain_idNoChain ID (auto-generated if not provided)
cost_usdNoCost in USD
metadataNoArbitrary metadata
tokens_inNoInput tokens
confidenceNoConfidence score 0-1
expires_atNoISO datetime when this receipt expires
input_hashYesPre-computed SHA-256 hash of the input data in format "sha256:hexstring"
latency_msNoLatency in milliseconds
tokens_outNoOutput tokens
tool_callsNoTools called during the action
constraintsNoArray of constraint definitions to evaluate (types: max_latency_ms, max_cost_usd, min_confidence, required_fields, status_must_be, output_schema)
output_hashNoPre-computed SHA-256 hash of the output data in format "sha256:hexstring"
receipt_typeNoReceipt type: "action" (default), "verification", "judgment", or "arbitration"
output_summaryNoHuman-readable summary of the output
parent_receipt_idNoParent receipt ID for chains

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses key behaviors: Ed25519 signing, local SQLite storage, ability to complete later, and return of receipt_id. However, lacks details on idempotency, error conditions, or permission requirements. With no annotations, the description carries a high burden and mostly meets it.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, each essential. Front-loaded with purpose, then guidelines, then storage/return info. No redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (20 params, nested objects), the description covers purpose, input requirements, alternatives, storage, and lifecycle. Missing details on validation or error handling, but overall comprehensive.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description reinforces the pre-computed hash requirement and notes optionality of many parameters, but adds minimal new semantic value beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description specifies a concrete action ('Create an Ed25519-signed receipt with pre-computed SHA-256 hashes') and clearly differentiates from siblings like track_action (automatic hashing) and complete_receipt (completion later).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use ('when you have already hashed... or need full control') and provides an alternative ('For automatic hashing, use track_action'). Also mentions return value and storage for full context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_invoiceA

Generate a client invoice from cryptographically signed receipts within a date range. Aggregates receipt data by agent, action, or day and calculates total costs, token usage, and receipt counts. Supports JSON, CSV, and Markdown output formats. Each line item references a signed receipt for verifiable billing. Use to bill clients for AI agent work with cryptographic proof of every billed action.

NameRequiredDescriptionDefault
toYesInvoice period end date in ISO 8601 format (e.g., "2026-01-31" or "2026-01-31T23:59:59Z")
fromYesInvoice period start date in ISO 8601 format (e.g., "2026-01-01" or "2026-01-01T00:00:00Z")
notesNoAdditional notes to include in the invoice
formatNoOutput format: "json" (structured data), "csv" (spreadsheet), or "md" (markdown table)
actionsNoFilter to specific action names only
group_byNoHow to group line items: "action" (by action name), "agent" (by agent ID), "day" (by date), or "none" (single total)
agent_idsNoFilter to specific agent IDs only
client_nameNoClient or bill-to name for the invoice header
client_emailNoClient email address
payment_termsNoPayment terms text (e.g., "Net 30", "Due on receipt")
provider_nameNoYour company or provider name
provider_emailNoYour email address
include_receiptsNoIf true, includes full receipt objects in JSON output for full auditability
constraints_passed_onlyNoIf true, only include receipts where all constraints passed

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden. It explains the aggregation, calculation, and output formats, and mentions each line item references a signed receipt for verifiability. It does not disclose potential side effects or limitations, but the generative nature is implied and the description is otherwise transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single paragraph of five sentences, each sentence adding value. It is front-loaded with the main purpose and efficiently covers key aspects without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (14 parameters, no output schema), the description adequately covers purpose, outputs, and usage. It explains the output formats and the inclusion of signed receipts, though it could elaborate on the exact structure of the generated invoice or error conditions.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

All 14 parameters have descriptions in the input schema, so schema coverage is 100%. The description adds high-level context for grouping and output formats but does not provide additional per-parameter meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool generates invoices from signed receipts within a date range, specifying aggregation and output formats. It distinguishes itself from sibling receipt-related tools by focusing on billing-oriented aggregation and cryptographic proof.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says 'Use to bill clients for AI agent work with cryptographic proof,' which provides clear usage context. However, it does not mention when not to use it or contrast it with alternatives like list_receipts or verify_receipt.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_chainA

Retrieve all receipts belonging to a chain, ordered by timestamp ascending to show the sequence of operations. A chain groups related receipts from a multi-step agent workflow. Returns the complete receipt objects for every step. Use to audit a complete workflow, calculate total chain cost and duration, or identify which step in a pipeline failed.

NameRequiredDescriptionDefault
chain_idYesThe chain ID to retrieve (format: "chain_" followed by 8 alphanumeric characters)

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided; description specifies ordering by timestamp ascending, returns complete receipt objects, and states it's read-only retrieval. Does not cover authentication or edge cases, but sufficient for typical use.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, first sentence front-loads action and resource, followed by context and use cases. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema but description explains return value (complete receipt objects) and ordering. For a single-param retrieval tool, all necessary context is present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema already covers the one parameter (chain_id) with format and example. Description adds no extra semantic value beyond stating it identifies the chain.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Retrieve' and the resource 'all receipts belonging to a chain', distinguishing it from sibling tools like get_receipt (single receipt) and list_receipts (filtered list).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit use cases are provided: audit workflow, calculate cost/duration, identify failed step. Lacks explicit exclusion guidance, but context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_judgmentsA

Retrieve all judgment receipts associated with a given receipt ID. Judgment receipts are linked via parent_receipt_id. Returns an array of judgment receipt objects ordered by timestamp, including verdict, score, criteria results, and confidence. Use to review the evaluation history of a receipt, compare multiple judgments, or audit AI quality assessments. Returns empty array if no judgments exist.

NameRequiredDescriptionDefault
receipt_idYesThe original receipt ID to get judgments for (not the judgment receipt ID)

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. It discloses return format (array ordered by timestamp with verdict, score, criteria, confidence) and edge case (empty array). No mention of performance or side effects, but it's a read operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Five sentences, front-loaded with core purpose, then linking logic, return format, use cases, and edge case. No fluff; every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, but description explains return format adequately. Covers verdict, score, criteria, confidence, and ordering. No pagination details, but likely unnecessary. Enough for agent to understand tool's output.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The only parameter receipt_id has 100% schema coverage. The description adds clarity by distinguishing it from judgment receipt ID. This prevents misuse.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb (retrieve), resource (judgment receipts), and the input (receipt ID). It distinguishes itself from sibling tools like judge_receipt (creates) and get_receipt (gets receipt itself).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description specifies use cases: review evaluation history, compare judgments, audit AI quality. It lacks explicit when-not-to-use guidance or alternative tool names, but the positive usage is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_public_keyA

Export the Ed25519 public key used to sign all receipts on this instance. Returns the key as a 64-character hex string. Share this key with clients or third parties so they can independently verify receipt signatures without accessing your private key. The private key never leaves your machine — only the public key is needed for verification.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description compensates by stating it exports (read operation), returns a hex string, and emphasizes that the private key never leaves, providing adequate behavioral insight.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three concise sentences, each contributing value: function, return format, and security context. No superfluous words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given zero parameters and no output schema, the description fully explains the tool's purpose, return format, and usage context. No gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

No parameters exist, and schema coverage is 100%. Per guidelines, baseline 4 is appropriate as no parameter description is needed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool exports the Ed25519 public key used for signing receipts, distinguishing it from sibling tools like create_receipt or verify_receipt.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains when to use (share key for verification without private key access) and implies security context, but does not explicitly mention when not to use or compare with alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_receiptA

Retrieve a single receipt by its ID from local SQLite storage. Returns the full receipt object including all 27 fields: identity, timestamps, action data, performance metrics, constraints, cryptographic proof, and metadata. Returns an error message if the receipt ID does not exist. Use to inspect a specific receipt or retrieve it before verification.

NameRequiredDescriptionDefault
receipt_idYesThe receipt ID to retrieve (format: "rcpt_" followed by 12 alphanumeric characters)

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Describes return of full object with 27 fields and error on missing ID. Without annotations, it adequately conveys read-only behavior, though lacks discussion of idempotency or permissions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with action, each sentence adds distinct value: purpose, return details, and usage context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers action, return, error, and usage. Simple tool missing only minor details like explicit read-only guarantee, but overall complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema already describes receipt_id format (100% coverage). Description adds no new meaning beyond the schema, meeting baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states 'Retrieve a single receipt by its ID' with specific verb, resource, and storage location, distinguishing it from siblings like list_receipts and verify_receipt.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use to inspect a specific receipt or retrieve it before verification,' but does not mention when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_startedA

Display a getting-started guide with usage examples for all Agent Receipts tools. Shows how to record agent actions, verify receipts, use receipt chains, evaluate with constraints, and generate invoices. Call this tool first when setting up Agent Receipts or when you need a reference for available tools and their typical usage patterns.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without annotations, the description carries the burden. It implies no destructive actions by stating it 'displays' a guide. However, it does not explicitly state it is read-only or safe, which would further enhance transparency. Still, the behavior is clearly non-mutating.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no extraneous information. It front-loads the main purpose and follows with usage examples, making it concise and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has no parameters, no output schema, and no annotations, the description completely conveys its purpose and usage. It tells the agent what to expect (a guide with examples) and when to call it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has zero parameters and 100% coverage. The description adds no parameter details, which is appropriate since there are no parameters. The baseline of 4 is correct for a tool with no parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool displays a getting-started guide with usage examples for all Agent Receipts tools. It specifies the verb 'display' and the resource 'guide', and distinguishes itself from sibling tools by focusing on setup and reference.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says 'Call this tool first when setting up Agent Receipts or when you need a reference for available tools and their typical usage patterns.' This provides clear guidance on when to use it and implies it should be used before other tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

judge_receiptA

Start an AI judgment evaluation for a receipt by creating a pending judgment receipt and returning a structured evaluation prompt. The host model (you) evaluates the receipt's output against the provided rubric criteria and then calls complete_judgment with the results. Use to assess output quality beyond simple pass/fail constraints — supports weighted criteria, partial verdicts, and confidence scores. Judgment receipts are themselves Ed25519-signed for auditability.

NameRequiredDescriptionDefault
rubricYesEvaluation rubric with criteria array. Each criterion needs: name (string), description (string), weight (0.0-1.0), and optional passing_threshold (0.0-1.0, default 0.7). Also set: passing_threshold (overall, default 0.7) and require_all (boolean, default false)
receipt_idYesThe receipt ID to evaluate — the original action receipt
output_summary_for_reviewNoThe actual output content to evaluate — provide if output_summary on the receipt is insufficient for evaluation

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden. It discloses the workflow: creating a pending judgment, returning a prompt, requiring a subsequent complete_judgment call, and that receipts are Ed25519-signed. This provides good transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose and structured details. No redundant information. Every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists. The description mentions returning a structured evaluation prompt but does not detail its format. However, given the complexity (nested rubric), it provides sufficient high-level completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds some context (e.g., host model evaluates, output_summary_for_review when insufficient), but the schema already adequately describes the parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Start an AI judgment evaluation' and the resource 'a receipt'. It distinguishes itself by mentioning the creation of a pending judgment receipt and the need to later call complete_judgment, differentiating it from siblings like verify_receipt.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description advises using this tool for assessing output quality beyond simple pass/fail, implying when it is appropriate. It does not explicitly list alternatives, but the contrast with 'simple pass/fail' provides usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_receiptsA

Query and paginate receipts from local SQLite storage with optional filtering by agent, action, status, environment, type, chain, or tag. Supports sorting by timestamp, cost, or latency. Returns paginated results with total count, page info, and has_next/has_prev flags. Default: 50 receipts per page, sorted by timestamp descending. Use to audit agent activity, generate reports, or find specific receipts.

NameRequiredDescriptionDefault
tagNoFilter to receipts containing this tag
pageNoPage number, starting at 1 (default: 1)
sortNoSort field and direction in format "field:asc" or "field:desc" (e.g., "timestamp:desc", "cost_usd:asc")
limitNoResults per page, 1 to 100 (default: 50)
actionNoFilter by action name (exact match)
statusNoFilter by status: "pending", "completed", "failed", or "timeout"
agent_idNoFilter by agent ID (exact match)
chain_idNoFilter to receipts in a specific chain
environmentNoFilter by environment: "development", "production", "staging", or "test"
receipt_typeNoFilter by type: "action", "verification", "judgment", or "arbitration"

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description adequately discloses behavior: it reads from local SQLite storage, returns paginated results with count and navigation flags, and specifies default sorting and limit. It does not cover all edge cases (e.g., empty results) but is thorough for a list tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description comprises four well-structured sentences, each conveying essential information: core action, sorting, output, and defaults/use cases. No redundant or missing content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (10 parameters, no output schema), the description covers core functionality, pagination details, and use cases. It does not describe the receipt structure, but that is likely known from context; still sufficiently complete for tool selection.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and the description repeats some parameter info but adds context on sorting format and defaults. However, the schema already describes parameters well, so the added value is marginal.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it queries and paginates receipts with filtering and sorting, and specifies use cases like auditing and report generation. It distinctively focuses on listing multiple receipts, differentiating from siblings like get_receipt (single) and generate_invoice.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly tells when to use the tool ('Use to audit agent activity, generate reports, or find specific receipts'). It does not mention when not to use it or alternatives, but the context is clear given siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_auditA

Generate an audit report of memory operations. Shows what was remembered, forgotten, merged, and by which agents over a time period.

NameRequiredDescriptionDefault
toNoEnd date (ISO 8601)
fromNoStart date (ISO 8601)
agent_idNoFilter by agent
entity_idNoFilter by entity

TDQS

A3.5/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description bears full responsibility for disclosing behavioral traits. The description does not indicate whether this operation is read-only, whether it requires special permissions, or what side effects (if any) occur. As a report generator, it is likely safe, but that is not explicitly stated, leaving ambiguity.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences provide a clear and complete overview. The first sentence states the action, the second specifies what the report shows. No unnecessary words, and the information is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no output schema, the description should explain the report's output structure. It mentions what information is included but does not specify the format (e.g., list, summary, counts) or behavior when no results are found. Given the parameter count and lack of annotations, some additional context would improve completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% with clear descriptions for each parameter. The description adds context about the report content (remembered, forgotten, merged, by agents), which aligns with the parameters. However, it does not add significant new meaning beyond summarizing the filter capabilities already in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description starts with 'Generate an audit report of memory operations,' which is a specific verb+resource combination. It further details what the report shows (remembered, forgotten, merged, by agents, over time period), distinguishing it from sibling tools like memory_recall (retrieve specific memories) or memory_forget (perform forgetting).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage when an audit overview is needed, but it does not explicitly state when to avoid using this tool or mention alternative tools for more granular queries. Given the context of many sibling tools, explicit guidance would help, but the current text at least suggests its purpose.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_contextA

Get a complete context dump of all stored memories — top entities, recent observations, active relationships, and preferences. Call this at the start of a conversation to understand what is already known about the user, their projects, and their preferences. Every context pull is logged as a signed receipt.

NameRequiredDescriptionDefault
scopeNoFilter memories by scope (default: returns all accessible scopes)
auditedNoCreate a signed receipt for this read operation (default: false)
max_entitiesNoMaximum entities to return, ordered by activity (default: 10, max: 50)
max_observationsNoMaximum recent observations to return (default: 20, max: 100)

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations present, so description carries full weight. It discloses that every pull is logged as a signed receipt, but lacks details on performance implications, rate limits, or authorization needs. Acceptable but not comprehensive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no wasted words. First defines the tool's result, second gives usage guidance, third a behavioral note. Efficient and front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite no output schema, the description enumerates return contents (entities, observations, relationships, preferences) and mentions logging. Adequate for a straightforward context dump tool. Some missing details on ordering or format, but overall sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers all four parameters with descriptions (100% coverage). The description adds no additional parameter meaning beyond what the schema already provides, so baseline score applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves a 'complete context dump' of memories, listing specific components (entities, observations, relationships, preferences). It distinguishes from sibling tools like 'memory_entities' (which focuses on entities only) by being a comprehensive snapshot.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly recommends calling at conversation start to understand what's known, providing clear context. Does not explicitly exclude alternative tools but implies this is for full context, not filtered queries.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_entitiesB

List known entities (people, projects, organizations, etc.) with optional filtering. Returns entities with their observation counts.

NameRequiredDescriptionDefault
limitNoMax results (default: 20)
queryNoSearch entity names and aliases
scopeNo
entity_typeNo
include_forgottenNoInclude forgotten entities (default: false)

TDQS

B3.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description should disclose behavioral traits. It only says 'List known entities' and 'returns entities with their observation counts'. It does not mention read-only nature, authentication needs, rate limits, or any side effects, providing minimal transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise (two sentences), with the purpose in the first sentence and return info in the second. No waste, front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 5 parameters, no required ones, and no output schema, the description is too sparse. It does not explain the entity_type or scope enums, default behaviors, or how this differs from similar tools like memory_recall. The description is insufficient for an agent to use the tool correctly without additional context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 60%, but the tool description adds no parameter explanations. The description's mention of 'people, projects, organizations' hints at entity_type enum values but does not clarify the enum or other parameters like scope, query, etc. Thus it adds little value beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists known entities with optional filtering, and specifies what entities are (people, projects, etc.). The verb 'list' and resource 'entities' are specific, and it distinguishes from sibling tools by focusing on entity listing rather than observations or audits.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for listing entities with optional filtering, but it does not explicitly state when to use this tool vs alternatives like memory_recall or memory_audit. No when-not or alternative guidance is provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_export_bundleA

Export memories as a portable, verifiable bundle. Includes entities, observations, relationships, source receipts, and the public key needed to verify them. Share with other agents or import into another Agent Receipts instance.

NameRequiredDescriptionDefault
entity_idsNoExport specific entities (default: all)
descriptionNoDescription of what this bundle contains
include_receiptsNoInclude source receipts for verification (default: true)
include_forgottenNoInclude forgotten/deleted memories (default: false)

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Describes bundle contents (entities, observations, etc.) but no annotations provided; no mention of side effects, format, or resource impact beyond the description.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, no fluff. Front-loaded with action and resource, then lists contents and purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers purpose and contents but lacks details on output format, size limits, or verification process. No output schema. Adequate but not thorough.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the description adds little beyond schema. However, it summarizes the bundle components, which provides context.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states 'Export memories as a portable, verifiable bundle' — a specific verb and resource. Distinguishes from siblings like memory_import_bundle.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Implies usage for sharing with other agents or importing into another instance, but does not explicitly exclude alternatives or state when not to use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_forgetB

Forget a specific observation or an entire entity. This is a soft delete — the memory is marked as forgotten but retained for audit purposes. The forget operation itself is recorded as a signed receipt.

NameRequiredDescriptionDefault
reasonNoWhy this memory is being forgotten
entity_idNoEntity to forget entirely (all its observations)
observation_idNoSpecific observation to forget

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses soft delete behavior and signed receipt recording, but lacks details on required permissions, reversibility, or side effects on related data.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the main action, no redundant information. Every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers purpose and soft delete, but missing explanation of return value (signed receipt format) and whether forgetting an entity cascades to its observations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers all parameters with descriptions; the tool description implies that one of entity_id or observation_id is needed but doesn't explicitly state requirement. Adds minimal beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (forget) and resource (specific observation or entire entity), but does not explicitly differentiate from sibling tools like memory_audit or memory_recall.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives like memory_observe or memory_audit; no context on prerequisites or typical use cases.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_import_bundleA

Import a memory bundle from another Agent Receipts instance. Verifies checksums before importing. Skips memories that already exist locally. The import operation itself is recorded as a signed receipt.

NameRequiredDescriptionDefault
bundleYesThe memory bundle JSON object to import
skip_existingNoSkip entities/observations that already exist (default: true)

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It discloses checksum verification, skipping existing memories, and recording the import as a signed receipt. This is good for a write operation, though it doesn't mention potential failure modes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences, front-loaded with purpose, and contains no fluff. Every sentence provides essential information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no output schema and no annotations, the description covers purpose, input handling, deduplication, and side effects. It lacks explanation of return values, but that is partially compensated by the schema coverage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds context for 'bundle' (from another instance) and aligns with 'skip_existing' schema, but doesn't compensate beyond that.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool imports a memory bundle from another instance, using specific verbs ('Import') and resources ('memory bundle'). It distinguishes from siblings like 'memory_export_bundle' by focusing on import behavior.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions importing from another instance and skipping existing memories, but lacks explicit guidance on when to use this tool versus alternatives (e.g., memory_audit, memory_context). It does not state when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_observeA

Store a memory observation about a person, project, preference, or any entity. Automatically creates the entity if it doesn't exist. Every observation is cryptographically signed and linked to a receipt.

NameRequiredDescriptionDefault
tagsNoTags for categorization
scopeNoWho can see this memory (default: agent)
contentYesThe observation/fact to remember
contextNoWhat conversation or task produced this observation
confidenceNoHow confident you are in this observation (default: medium)
entity_nameYesName of the entity (person, project, tool, etc.)
entity_typeYesType of entity
ttl_secondsNoTime-to-live in seconds. After this duration, the observation expires and is excluded from recall but retained for audit.

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds behavioral details beyond the input schema, such as automatic entity creation and cryptographic signing with receipt linking. Since annotations are absent, the description carries the full burden and does well, though it could mention potential side effects or permissions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with two sentences, front-loading the primary purpose and key behaviors. Every sentence adds value with no redundant or irrelevant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 8 parameters, no output schema, and no annotations, the description covers the core action and important behaviors (entity creation, cryptography). It omits return value details but is largely sufficient for an agent to understand the tool's use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline is 3. The description does not elaborate on individual parameters beyond what the schema provides, so it meets the minimum but adds no extra semantic value for parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'store' and the resource 'memory observation', and specifies the scope as persons, projects, preferences, or entities. It distinguishes from sibling tools by noting automatic entity creation and cryptographic signing linked to a receipt, which are unique features.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains what the tool does but does not provide any guidance on when to use this tool versus alternatives like memory_recall or memory_forget. No explicit when or when-not scenarios are mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_provenanceA

Get the full provenance chain for a memory observation. Shows when it was created, which conversation produced it, which agent made the observation, and every subsequent modification.

NameRequiredDescriptionDefault
observation_idYesThe observation to trace

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description effectively discloses the tool's behavior: it is read-only and returns creation details, conversation, agent, and modification history. It does not mention permissions or rate limits, but the read-only nature is clear from 'Get the full provenance chain.'

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the action and resource. Every word contributes meaning without redundancy. It is efficient and easy to parse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's moderate complexity (provenance chain), the description adequately outlines what is returned but does not detail the structure of the chain. With no output schema, a bit more structure detail could help, but overall it is sufficient for most use cases.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema covers 100% of parameters, each with a description. The tool description adds context by explaining what the parameter 'observation_id' is used for (tracing provenance), but does not provide additional value beyond what the schema already conveys.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Get the full provenance chain for a memory observation.' It specifies the resource (memory observation) and the action (trace provenance), distinguishing it from sibling tools like memory_audit or memory_context by detailing what it shows (creation, conversation, agent, modifications).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implicitly indicates usage when provenance information is needed, but it does not explicitly state when to use this tool versus alternatives like memory_audit or memory_recall. No when-not-to-use or conditional guidance is provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_recallA

Search and retrieve stored memories. Use text search to find relevant observations across all entities, or filter by entity type, specific entity, or scope. Every recall is logged as a receipt.

NameRequiredDescriptionDefault
limitNoMax results to return (default: 20, max: 100)
queryNoText to search for across all observations
scopeNoFilter by memory scope
auditedNoCreate a signed receipt for this read operation (default: false)
entity_idNoGet memories for a specific entity
entity_typeNoFilter by entity type
include_forgottenNoInclude soft-deleted memories (default: false)

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description adds one behavioral note: 'Every recall is logged as a receipt.' However, it does not disclose read-only nature, side effects beyond logging, or rate limits. The note on receipt logging is partially contradicted by the 'audited' parameter description (see parameter semantics).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences: first states the core purpose, second lists key features and a behavioral claim. No redundant words, front-loaded, and efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 7 optional parameters and no output schema, the description covers basic use and one side effect. However, it omits explanation of the return format, pagination behavior, and the relationship between receipt logging and the 'audited' parameter, leaving ambiguity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description summarizes filtering by entity_type, entity_id, and scope but adds no novel meaning beyond the schema. The mention of receipt logging conflicts with the audited parameter description, causing slight confusion.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb+resource phrase 'Search and retrieve stored memories' and distinguishes from siblings like memory_observe (create) and memory_forget (delete) by focusing on retrieval and filtering.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for text search and filtering but does not explicitly state when to use this tool versus alternatives like memory_audit or memory_entities. No exclusions or alternative tool names are mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

memory_relateA

Create a relationship between two entities (e.g., "Amin" builds "ModQuote"). Relationships are bidirectional for querying but stored with a direction.

NameRequiredDescriptionDefault
contextNoWhat established this relationship
strengthNo
to_entity_idYesTarget entity ID
from_entity_idYesSource entity ID
relationship_typeYesType of relationship (e.g., "builds", "uses", "works_at", "prefers")

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses bidirectional querying but directional storage, which is useful. No annotations provided, so description bears full burden; however, it omits side effects, permissions, or implications like idempotency or overwrites.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, concise and front-loaded with purpose. No redundant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Lacks description of return value (no output schema). For a creation tool with 5 parameters, details on what is returned upon success or failure are missing. Adequate for basic understanding but not fully self-contained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 80% of parameters with descriptions. The description adds minimal parameter insight beyond the schema; the example is helpful but does not clarify optional parameters like 'strength' or 'context' beyond their schema definitions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the tool creates a relationship between two entities with an example ("Amin builds ModQuote"). Differentiates from siblings like memory_observe and memory_entities by focusing on relational creation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives (e.g., memory_observe for observations, memory_entities for entity creation). Lacks context about prerequisites or when not to use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

track_actionA

Create a completed Ed25519-signed receipt for an AI agent action with automatic SHA-256 hashing of input and output data. Records model usage, costs, latency, and constraint evaluations. Returns the signed receipt with receipt_id for future reference. Use this as the primary tool for recording agent actions — prefer over create_receipt + complete_receipt for single-step actions.

NameRequiredDescriptionDefault
tagsNoArbitrary tags for filtering and categorization (e.g., ["production", "critical"])
inputNoInput data passed to the agent — automatically hashed with SHA-256, raw data is never stored
modelNoAI model used (e.g., "claude-sonnet-4-20250514", "gpt-4o", "gemini-2.0-flash")
actionYesAction name being recorded (e.g., "generate_code", "summarize_text", "classify_intent")
outputNoOutput produced by the agent — automatically hashed with SHA-256, raw data is never stored
ttl_msNoTime-to-live in milliseconds from now — alternative to expires_at
chain_idNoChain identifier for grouping related receipts — auto-generated if not provided
cost_usdNoExecution cost in USD (e.g., 0.0045)
metadataNoArbitrary key-value metadata attached to the receipt
tokens_inNoInput tokens consumed by the model
confidenceNoConfidence score for the output quality, 0.0 to 1.0
expires_atNoISO 8601 datetime when this receipt expires (e.g., "2026-12-31T23:59:59Z")
latency_msNoTotal execution time in milliseconds
tokens_outNoOutput tokens generated by the model
tool_callsNoNames of tools called during this action (e.g., ["web_search", "code_exec"])
constraintsNoConstraint definitions to evaluate against this receipt (e.g., max_latency_ms, max_cost_usd, min_confidence)
output_summaryNoHuman-readable summary of the output for audit purposes (max 500 chars recommended)
parent_receipt_idNoParent receipt ID for chaining — links this receipt to a previous step

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. It discloses automatic SHA-256 hashing, no raw data storage, and returns signed receipt. Lacks explicit mention of write nature but is clear enough. Good behavioral context beyond schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no waste. First sentence packs core functionality, second provides usage guidance. Efficient and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 18 parameters, nested objects, and no output schema, description covers main purpose, key behaviors, and usage. Mentions return of receipt_id, sufficient for selection. Could elaborate on constraint evaluation but schema covers details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% (18 parameters all described), baseline is 3. Description adds value by explaining automatic hashing for input/output and constraint evaluation, which is beyond schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the tool creates a completed Ed25519-signed receipt for AI agent actions with automatic hashing. It also explicitly differentiates from siblings by recommending use over create_receipt + complete_receipt for single-step actions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit guidance: 'Use this as the primary tool for recording agent actions — prefer over create_receipt + complete_receipt for single-step actions.' This clearly indicates when and why to use this tool over alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_receiptA

Cryptographically verify an Ed25519 signature on a stored receipt to confirm it has not been tampered with since signing. Extracts the 12-field signable payload, canonicalizes it, and verifies against the stored public key. Returns verified: true if the signature is valid. Use to audit receipts before using them as evidence or before completing payments based on agent work.

NameRequiredDescriptionDefault
receipt_idYesThe receipt ID to verify — must exist in local storage

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. It explains the verification process (extract, canonicalize, verify) and mentions the return field. But it does not disclose behavior on invalid inputs (e.g., missing receipt_id, tampered receipt, or invalid signature).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no redundancy, front-loaded with the main action. Every sentence adds value and the structure is optimal for agent parsing.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (1 param, no output schema), the description covers purpose, process, and use case. However, it does not explicitly describe the failure case (e.g., returns false or error) or the full return format, which would be beneficial.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of the single parameter with clear description. The description adds no new semantic detail beyond the schema, so baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses specific verb+resource: 'cryptographically verify an Ed25519 signature on a stored receipt'. It clearly states the core operation but does not explicitly differentiate from sibling tools like create_receipt or judge_receipt.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit context: 'Use to audit receipts before using them as evidence or before completing payments based on agent work.' However, it does not mention when NOT to use it or suggest alternative tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 24 tool updates
    • Addedcleanup
    • Addedcomplete_judgment
    • Addedcomplete_receipt
    • Addedcreate_receipt
    • Addedgenerate_invoice
    • Addedget_chain
    • Addedget_judgments
    • Addedget_public_key
    • Addedget_receipt
    • Addedget_started
    • Addedjudge_receipt
    • Addedlist_receipts
    • Addedmemory_audit
    • Addedmemory_context
    • Addedmemory_entities
    • Addedmemory_export_bundle
    • Addedmemory_forget
    • Addedmemory_import_bundle
    • Addedmemory_observe
    • Addedmemory_provenance
    • Addedmemory_recall
    • Addedmemory_relate
    • Addedtrack_action
    • Addedverify_receipt

TDQS

A4/5.0

Scored across 24 tools

Disambiguation5/5

Each tool has a clearly distinct purpose, grouped into receipt lifecycle, memory management, judgment evaluation, and utility. No two tools overlap significantly; even similar tools like track_action and create_receipt are differentiated by use case.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern using snake_case (e.g., create_receipt, list_receipts, memory_observe). This pattern makes the tool set predictable and easy for an agent to infer.

Tool Count4/5

At 24 tools, the set is on the higher side but still appropriate given the server's multi-domain scope (receipts, memory, judgments, invoicing). Each tool has a clear role, though some consolidation might be possible.

Completeness4/5

The server covers the full lifecycle of receipts, memory operations, and judgments with CRUD-like tools. Minor gaps exist (e.g., no direct update for memory observations, but provenance and re-observation can work around it). Overall, the surface is well-scoped for the stated purpose.

Maintenance

ActivityMaintained
ResponsivenessSlow

Related MCP Connectors

Related MCP Servers