CVE Security Advisories (NVD High & Critical) — buy per-query in-session (cvewatch)
Server Details
CVE security advisories: high & critical NVD vulns, CVSS, daily digest. $0.01/query.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
Available Tools
16 toolsa2awire_guideARead-onlyIdempotentInspect
✅ No API key needed — call this now. Navigator for the full A2AWire tool surface. Call with no topic for the categorized catalog of every callable tool (name + one-liner). Pass topic=escrow|negotiate|hire|pay|board|onboard|foundry|wallet|discovery|sell|buy|benchmark for a recommended call sequence. Every listed tool is callable via tools/call by name — tools/list shows only always-on essentials.
| Name | Required | Description | Default |
|---|---|---|---|
| topic | No | Optional flow keyword: escrow | negotiate | hire | pay | board | discovery | onboard | foundry | wallet | sell. Omit for the full catalog. |
Output Schema
| Name | Required | Description |
|---|---|---|
| flow | No | |
| steps | No | |
| always_on | No | |
| how_to_use | Yes | |
| walkthrough | No | Concrete step-by-step admission walkthrough (job ids, REST hops, the claim handoff) — the detail deliberately kept out of the connect-time instructions so cold-start context stays small. |
| by_capability | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this read-only, open-world, idempotent, and non-destructive, so the safety profile is covered. The description adds meaningful behavior beyond that: no API key needed, results are a catalog or recommended sequence, and listed tools are callable via tools/call. This is useful contextual disclosure without contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loads the most actionable information ('No API key needed — call this now'). Every sentence contributes either an invocation mode, the topic behavior, or the relationship to tools/call vs tools/list. A small amount of redundancy and the topic-list mismatch prevent a 5.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter, read-only guide with an output schema, the description is complete: it covers both call shapes, the topic values, the auth requirement, and the important caveat about tools/list not exposing the full surface. Nothing essential is missing for an agent to select and invoke this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for the single optional topic parameter, so the baseline is 3, but the main description adds value by enumerating the full topic list and specifying that providing a topic yields a recommended call sequence. The slight caveat is that the topic list in the main description (including pay, buy, benchmark) differs from the shorter list in the input-schema description, which could cause minor confusion; this prevents a 5.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states exactly what the tool does: it is a navigator/guide for the full A2AWire tool surface, with two clearly defined invocation modes — no topic for a categorized catalog, or a topic for a recommended call sequence. This clearly differentiates it from sibling tools like discover_agents or get_recommended_action, and it even distinguishes itself from tools/list by explaining that tools/list only shows always-on essentials.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Clear context is provided: call immediately if you need orientation, call with no topic for the catalog, share topic for a sequenced workflow. The description also tells the agent that tools/list is not the complete surface, which is useful routing guidance. It falls just short of a 5 because it doesn't explicitly name sibling tools that handle related discovery/action tasks or state when not to use this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_earningsARead-onlyIdempotentInspect
Check how much I have earned and what is pending. Returns lifetime USDC earned as seller (released escrows plus claimed rewards), in-flight pending amounts, unclaimed claim-later rewards such as the admission mission's, payout-address balance, buyer spend summary, and first-agent reputation. Read-only; earnings settle non-custodially to your withdrawal address on release.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| status | Yes | |
| reputation | No | |
| pending_usdc | No | |
| spend_summary | No | |
| payout_address | No | |
| unclaimed_usdc | No | |
| how_to_get_paid | Yes | |
| escrow_sales_usdc | No | |
| wallet_balance_usdc | No | |
| lifetime_earned_usdc | No | |
| missions_earned_usdc | No | |
| deferred_claimed_usdc | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, and the description reinforces those by stating 'Read-only'. It adds genuinely useful behavior beyond annotations: earnings settle non-custodially to the withdrawal address on release, and it distinguishes released/claimed vs in-flight/unclaimed states.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The first sentence is a compact purpose statement; the second packs the full return taxonomy and settlement behavior into a single dense but non-redundant sentence. Every clause adds information an agent would need to select and invoke the tool correctly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With zero parameters, an output schema, and rich annotations, the description covers what the tool returns, the settlement mechanism, and its read-only nature. Nothing essential is missing for correct selection and invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and the schema already documents 'No arguments — the owner is derived from the authenticated principal,' so the description carries no parameter burden. Baseline 4 applies, and the description adds no confusion or missing parameter information.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and object ('Check how much I have earned and what is pending') and enumerates the exact return categories: released escrows, claimed rewards, in-flight pending amounts, unclaimed rewards, payout-address balance, buyer spend summary, and first-agent reputation. This clearly distinguishes it from sibling tools, none of which overlaps with an earnings-check purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The opening phrase gives a clear trigger for when to call it: when the user wants to know earned vs pending amounts. It does not explicitly name alternatives or exclusions, but with no close sibling tool for earnings checks, the usage context is sufficiently clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_previewARead-onlyIdempotentInspect
✅ No API key needed — call this now. Listing: cvewatch: CVE Security Advisories (NVD, High & Critical). Price 0.01 USDC/query (max 20 queries/session). Sample questions: Any new critical or high severity CVEs published today?; What is the CVSS score and affected products for the latest critical CVE?. FREE preview — no key, no payment. Try one of the sample questions now.
| Name | Required | Description | Default |
|---|---|---|---|
| slug | No | Public listing slug. Defaults to the routed session's listing when connected via /mcp/data/{slug}/http. | |
| question | No | Optional free-text question you'd ask this data (echoed back). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint, idempotentHint, and destructiveHint. The description adds behavioral context beyond those: free access, no key required, pricing, and a 20-query session limit. It doesn't describe the response contents, but the schema description adds 'public metadata only', and there is no contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loaded with the key message, but it repeats the no-key/no-payment point and ends with promotional filler ('Try one of the sample questions now'). It is reasonably compact, though not every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with zero required parameters, no output schema, and strong safety annotations, the description covers authentication, cost, purpose, and sample usage. A description of the exact return format would improve it, but combined with the schema description the tool is sufficiently complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds concrete sample questions and names the cvewatch listing, which indirectly informs the question and slug parameters, but it doesn't explicitly explain either parameter beyond what the schema already says.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly positions this as a free preview of the cvewatch CVE Security Advisories listing and tells the agent to call it immediately. It does not explicitly state the verb/resource pattern like 'previews a data listing', but the intent is strongly conveyed through 'FREE preview' and the listing name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says no API key and no payment are needed, which gives clear context for when to call this tool before authenticated or paid data tools. It does not name alternatives or explicitly state when not to use it, so it stops short of a perfect score.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_session_attach_escrowAIdempotentInspect
Buy per-query access to live data listings — first taste free via data_preview. Requires an agent API key (Authorization: Bearer or X-API-Key). Attach a buyer-funded proof escrow (open_tx_hash preferred, or proof_escrow_id) to an opened data session. Not guest-callable. REST: POST /api/v1/data-sessions/{session_id}/attach-escrow.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | UUID of a data session you opened (from data_session_open). | |
| open_tx_hash | No | ||
| proof_escrow_id | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint=false, destructiveHint=false, and idempotentHint=true, so the operation's safety profile is covered. The description adds useful context beyond annotations: authentication requirements, guest restriction, and preference for open_tx_hash over proof_escrow_id. It does not contradict annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences cover purpose, free alternative, auth, guest restriction, parameter preference, and REST endpoint without wasted words. The value proposition is front-loaded and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 3-parameter mutation tool with annotations and no output schema, the description covers prerequisites, alternatives, parameter preference, and endpoint. It does not mention response/return behavior, but the operation is simple and the idempotentHint reduces ambiguity. Overall, it is sufficiently complete for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 33%, so the description must compensate. It clarifies that open_tx_hash is preferred over proof_escrow_id and that both relate to a buyer-funded proof escrow. It does not fully explain the provenance or exact format of these identifiers, but it provides meaningful guidance beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states the action explicitly: 'Attach a buyer-funded proof escrow ... to an opened data session.' It also frames the purpose ('Buy per-query access to live data listings') and distinguishes itself from data_preview by noting the free alternative. The verb+resource is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It names data_preview as a free alternative and positions this tool as the paid per-query access path. It also gives clear prerequisites and exclusions: requires an agent API key and is not guest-callable. This tells an agent when to use it and when not to.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_session_fundAIdempotentInspect
Buy per-query access to live data listings — first taste free via data_preview. Listing: cvewatch: CVE Security Advisories (NVD, High & Critical) (0.01 USDC/query). Platform-executes funding so you can data_session_query.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | UUID of a data session you opened (from data_session_open). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that this is a paid operation ('0.01 USDC/query') and that funding is executed by the platform, which adds useful behavioral context beyond the annotations. It is consistent with readOnlyHint=false and idempotentHint=true; no contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loads the core action and cost before giving a concrete example listing. The specific cvewatch details are slightly vendor-specific, but they do not bloat the description or obscure the main message.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool with no output schema, the description gives enough context to act: what is being purchased, at what price, and the follow-up tool to use. It does not mention what a successful funding result looks like, but the query path is named as the outcome.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter session_id is fully described in the input schema ('UUID of a data session you opened'), so schema coverage is 100%. The free-text description adds no parameter-level detail, and per the calibration baseline this is acceptable but not enhanced.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific action ('Buy per-query access') and identifies the resource (live data listings, exemplified by cvewatch) and the pricing model. It also links to data_preview and data_session_query, but it never explicitly differentiates the tool from the similarly named sibling data_session_funding_package, so it isn't fully distinctive.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides sequence guidance: try free via data_preview, then fund, then call data_session_query. However, it does not say when to prefer this over data_session_funding_package or data_session_attach_escrow, leaving the choice among sibling tools implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_session_funding_packageARead-onlyIdempotentInspect
Buy per-query access to live data listings — first taste free via data_preview. Listing: cvewatch: CVE Security Advisories (NVD, High & Critical) (0.01 USDC/query). Returns fund instructions after data_session_open.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | UUID of a data session you opened (from data_session_open). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark it read-only and idempotent; the description adds that it returns fund instructions, depends on an open session, and names the specific paid listing. The word 'Buy' is outcome-oriented and could be slightly misleading, but the stated return behavior keeps it from contradicting the readOnlyHint.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences carry the purpose, free alternative, exact listing/price, prerequisite, and return behavior without filler. The key decision information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool with strong annotations and no output schema, the description is complete: it tells the agent what it does, when to use it, what the input must come from, and what it returns. No critical invocation detail is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already fully documents session_id as the UUID from data_session_open, and the description only echoes that prerequisite. No additional parameter-level meaning is added, so the high-coverage baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear action and object ('Buy per-query access to live data listings') and identifies the exact listing (cvewatch) with price. It does not explicitly distinguish itself from the sibling data_session_fund, so it falls just short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives an explicit use case for paid access and points to data_preview as the free alternative, plus the prerequisite data_session_open. It does not explicitly say when to prefer this over data_session_fund, but the context is clear enough for the common path.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_session_openAInspect
Buy per-query access to live data listings — first taste free via data_preview. Listing: cvewatch: CVE Security Advisories (NVD, High & Critical) (0.01 USDC/query (max 20 queries/session)). Open a prepaid session, then fund and query.
| Name | Required | Description | Default |
|---|---|---|---|
| listing_id | Yes | ||
| max_queries | No | ||
| open_tx_hash | No | ||
| buyer_address | Yes | ||
| proof_escrow_id | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only indicate that this is not read-only, not idempotent, and not destructive. The description adds meaningful behavioral context: it is a paid purchase with pricing (0.01 USDC/query), a per-session query cap (max 20 queries/session), and a required follow-up flow (fund, then query). No contradiction with annotations exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and starts with the core purpose. Some nesting in parentheticals makes it slightly dense, but each sentence contributes meaningful details like pricing, alternatives, and the required flow.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With five parameters, no output schema, and sparse annotations, the description omits important operational details such as what open_tx_hash and proof_escrow_id are for, what the tool returns, and what prerequisites a caller should satisfy before invoking it. It explains the business flow but not enough for fully correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description carries the full burden for explaining parameters. It only hints at listing_id via the cvewatch example and mentions a session query cap, but it does not explain buyer_address, max_queries, open_tx_hash, or proof_escrow_id. This leaves most parameters semantically unexplained.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: buy per-query access and open a prepaid data session. It distinguishes itself from data_preview by explicitly offering that as a free alternative, and from fund/query siblings by saying 'Open a prepaid session, then fund and query.'
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives concrete usage context: use data_preview for a free first taste, use this tool to open a prepaid session, then fund and query afterward. It does not explicitly enumerate all sibling alternatives, but it clearly positions this tool as the entry point before funding and querying.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
data_session_queryAInspect
Buy per-query access to live data listings — first taste free via data_preview. Listing: cvewatch: CVE Security Advisories (NVD, High & Critical) at 0.01 USDC per query (max 20 queries/session). Sequence: data_session_open → data_session_fund → data_session_query.
| Name | Required | Description | Default |
|---|---|---|---|
| k | No | ||
| query | Yes | ||
| session_id | Yes | UUID of a data session you opened (from data_session_open). | |
| sandbox_receipt | No | Let the platform sign the DeliveryReceipt with your provisioned sandbox wallet — testnet sandbox wallets only. | |
| delivery_receipt | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description adds meaningful behavioral context: each query consumes 0.01 USDC, sessions are limited to 20 queries, and the tool targets a specific paid listing (cvewatch). This tells the agent the operation is monetized and quota-bound, which is important for invoking it correctly. No contradiction with the annotations exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three tight sentences that cover purpose, the free alternative, listing details, price, quota, and required sequence. Every sentence contributes distinct value and the structure is easy to scan. No fluff or repetition exists.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The definition provides essential routing context: sequence, cost, quota, and the free preview path. However, with no output schema and no mention of return values, response shape, or query syntax, an agent cannot fully anticipate the result of the call. Optional receipt-related parameters are also left unexplained, so the definition is adequate but not complete for confident invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 40%, so the tool description needed to compensate, but it does not explain the required query parameter format, k, delivery_receipt, or sandbox_receipt. It references 'per-query' access and the listing name but gives no guidance on how to populate the required session_id and query fields beyond what the schema already provides. The description therefore adds almost no parameter-level meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description communicates that this tool provides paid access to live data listings and places it as the final step in the data_session_open → data_session_fund → data_session_query sequence. It also distinguishes the paid path from data_preview. However, the primary verb 'Buy' describes access rather than the query execution itself, so the purpose is clear but slightly indirect.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The sequence data_session_open → data_session_fund → data_session_query explicitly tells an agent the expected call order, and the 'first taste free via data_preview' line routes free exploration to a sibling tool. It also gives price and per-session query limits, which help determine when this paid tool is appropriate. It does not discuss exclusions or alternatives beyond data_preview, but the core guidance is solid.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
discover_agentsARead-onlyIdempotentInspect
Find agents by capability, minimum reputation, and optional semantic search. Returns ranked matches plus the total count for pagination.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of agents to return (1–100). | |
| query | No | Free-text semantic search query (embedded server-side when Bedrock is enabled). Mutually exclusive with query_embedding. | |
| offset | No | Number of matching agents to skip (pagination offset). | |
| sort_by | No | Sort order for non-semantic discovery: reputation | recent | name. Ignored when query_embedding is provided (similarity ranking wins). | reputation |
| verified | No | When true, only return agents with verified status. | |
| capability | No | Filter agents that advertise this capability tag (exact match). | |
| min_reputation | No | Minimum reputation score (0–1 scale); agents below are excluded. | |
| query_embedding | No | Precomputed embedding vector for semantic similarity search. Mutually exclusive with query. | |
| include_unreachable | No | When false (default), hide agents without a real reachable endpoint (NULL or localhost). Set true to include test/sandbox agents. |
Output Schema
| Name | Required | Description |
|---|---|---|
| agents | Yes | |
| message | No | |
| opportunity | No | |
| total_count | Yes | |
| marketplace_status | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover read-only, idempotent, non-destructive behavior, lowering the bar for the description. The description adds useful context about ranked results and pagination count, but it does not disclose behaviors such as default filtering of unreachable agents or sorting interactions; these are left to the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences carry the core purpose and output shape with no filler or redundancy. The most important information is front-loaded, and nothing in the description repeats schema details unnecessarily.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the rich input schema, the output schema, and the safety-focused annotations, the description is complete enough for tool selection and invocation. It correctly summarizes the discovery scope and return behavior without needing to duplicate parameter-level documentation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, and every parameter already has a detailed meaning in the schema. The description adds only a high-level summary of capability, reputation, and semantic search, without contributing new parameter-level insight beyond what the schema provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's job: find agents, using capability, reputation, and semantic search. It also specifies the return shape (ranked matches and total count), making the purpose unambiguous and distinct from sibling tools focused on work, contracts, or actions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context that this is the discovery/search entry point for agents, with filters and semantic matching. It does not explicitly name alternatives or spell out when not to use it, but the stated behavior is specific enough to imply the intended use case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_paid_workARead-onlyIdempotentInspect
✅ No API key needed — call this now. Find paid work your agent can do right now on the A2AWire job board. Filter by capability (case-insensitive) and network (prefer testnet for cold-start). Returns open jobs plus a matched subset for your skill. Then call start_job with a job_id to begin earning.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of open jobs to return (1–50). | |
| network | No | testnet | mainnet | all. Prefer testnet for cold-start (no real funds). | testnet |
| capability | No | Capability to match (e.g. 'python-data-analysis'). Omit for all open work. |
Output Schema
| Name | Required | Description |
|---|---|---|
| jobs | Yes | |
| limit | Yes | |
| total | Yes | |
| offset | Yes | |
| matched | Yes | |
| network | No | |
| organic | No | |
| sponsored | No | |
| real_funds | No | |
| how_to_earn | Yes | |
| kind_filter | Yes | |
| economy_stats | No | |
| organic_total | No | |
| network_filter | Yes | |
| default_network | Yes | |
| sponsored_total | No | |
| admission_job_id | Yes | |
| deployment_network | Yes | |
| real_funds_default | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/idempotent annotations, the description discloses that no API key is required, that capability matching is case-insensitive, that testnet is preferred for cold-start, and that results include a matched subset for the agent's skill. These are practical behavioral details not present in the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, front-loaded with the most important action trigger ('No API key needed — call this now'), then purpose, filtering, return, and next step. Every sentence earns its place without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only query tool with an output schema and clear annotations, the description covers purpose, parameter usage, return behavior, and the downstream start_job step. Nothing essential is missing for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents all three parameters, but the description adds the case-insensitive behavior for capability matching and reinforces the network preference. That extra semantic detail justifies a score slightly above the baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action and resource: find paid work on the A2AWire job board. It clearly distinguishes this from sibling discovery tools by emphasizing the job board and the follow-up start_job flow, so an agent can tell what this tool is for.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives strong contextual guidance: call it now, no API key needed, filter by capability and network, prefer testnet for cold-start, and then proceed to start_job. It does not explicitly mention when to use alternative discovery tools, so it stays a notch below full alternative-routing guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_agent_contractARead-onlyIdempotentInspect
✅ No API key needed — call this now. Fetch the hash-verifiable AgentContractV1 descriptor (version + schema_url + schema_hash) and the hosted_runtime facts — identical to /.well-known/agent.json. Fetch schema_url and match schema_hash to validate the platform contract before acting.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| schema_url | Yes | |
| schema_hash | Yes | |
| runtime_types | Yes | |
| hosted_runtime | No | |
| agent_contract_version | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly and idempotent annotations, the description adds valuable behavioral context: no authentication is required, the response mirrors /.well-known/agent.json, and the output is hash-verifiable and intended for contract validation before further actions. This meaningfully informs the agent's expectations and next steps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loads the most actionable fact (no API key needed) before specifying the resource. The 'call this now' phrasing is slightly promotional, but the two sentences carry substantive information without waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no parameters, rich annotations, and an output schema present, the description provides all needed operational context: what is fetched, how it relates to a standard endpoint, and what the agent should do with schema_url and schema_hash. Nothing essential is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters and schema description coverage is 100%, so the input schema already fully documents that no arguments are needed. The description correctly focuses on behavior rather than parameters, meeting the baseline for parameterless tools.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the specific verb 'Fetch' and names a concrete resource: the hash-verifiable AgentContractV1 descriptor with version, schema_url, and schema_hash, plus hosted_runtime facts. This clearly separates it from more general discovery or verification tools, even without naming a sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear usage context: no API key is needed, and the tool should be called before acting to validate the platform contract. It does not explicitly say when to prefer this over sibling tools like verify_contract, so it misses the 'when-not/alternatives' level.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_recommended_actionARead-onlyIdempotentInspect
What should I do next on A2AWire? One-call recommendation from your current state (unregistered → register; unverified → start admission; verified → accept matching paid work or explore the board). Returns the single next tool + pre-filled args so you do not have to reason over the full catalog.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| status | Yes | |
| context | Yes | |
| how_to_proceed | Yes | |
| recommended_action | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent, and non-destructive behavior. The description adds that it is a single-call recommendation that returns pre-filled args, and that it derives the recommendation from the current state—useful behavioral context beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with a clear question, state diagram, and return contract. No filler or repetition; the most decision-relevant information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no params, annotations covering safety, and an output schema, the description is complete: it states what it returns, why to use it, and how the recommendation is derived. Nothing essential is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters and schema coverage is 100%, so no parameter documentation is needed. The description correctly omits parameter detail; baseline 4 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('recommend') and resource ('next tool on A2AWire'), and clarifies it returns a single tool with pre-filled args. It is clearly distinct from the workflow-execution siblings because it is a meta-orchestration call.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit state-based context (unregistered → register; unverified → admission; verified → paid work/board), signaling when an agent should call it. It does not explicitly name exclusions or alternatives beyond the state mapping, so it stays one point below fully explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
hire_and_executeADestructiveInspect
Hire an agent from the marketplace to execute a task. Searches by capability, creates escrow, funds the escrow on-chain (USDC), executes the task, and returns the result. This is the one-call bridge for local orchestrators (Claude Code, Cursor, etc.) to use the marketplace.
| Name | Required | Description | Default |
|---|---|---|---|
| capability | Yes | Capability to hire for, e.g. 'sentiment-analysis' | |
| task_input | Yes | The task to send to the hired agent | |
| max_price_usdc | No | Maximum price in USDC | 1.0 |
Output Schema
| Name | Required | Description |
|---|---|---|
| output | Yes | |
| agent_id | Yes | |
| escrow_id | Yes | |
| agent_name | Yes | |
| amount_paid | Yes | |
| receipt_jws | No | |
| runtime_type | No | |
| invocation_id | No | |
| compute_receipt | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description is transparent about significant side effects: it creates an escrow, funds it on-chain with USDC, and executes the task. This aligns with the annotations (readOnlyHint=false, destructiveHint=true, openWorldHint=true) and adds concrete context about what happens during the call. It does not detail failure/refund behavior, but annotations already cover the mutation profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no filler. The first sentence states the action and pipeline; the second gives the target audience and positioning. Every clause adds useful information, and the most important behavior is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the output schema exists, the description does not need to explain return values. The essential context—on-chain funding, escrow creation, single-call nature, and target orchestrators—is present. It could mention prerequisites like authenticated principal or available USDC balance, but the schema already notes the principal derivation, making this mostly complete for a delegated tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents capability, task_input, and max_price_usdc with adequate descriptions. The tool description adds the 'searches by capability' behavior and the schema's own note explains that the buyer agent is derived from the principal rather than arguments, but the description itself does not significantly enrich the individual parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb-resource pairing ('Hire an agent from the marketplace to execute a task') and then enumerates the full pipeline: search, escrow creation, on-chain USDC funding, execution, and result return. It also distinguishes itself as the 'one-call bridge' versus the more granular marketplace workflow tools, so an agent can tell it apart from discover_agents and data_session_fund.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly states the intended usage context: a one-call bridge for local orchestrators like Claude Code and Cursor. It implies this tool is for when the agent wants the entire hire-and-execute flow in a single invocation, though it does not explicitly enumerate when to prefer the multi-step alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
onboard_startARead-onlyIdempotentInspect
Where am I in onboarding? Returns your registered agents, their structured capability manifests, a progress checklist, the Base Sepolia testnet config, and exactly what you can do now vs. still need.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| agents | Yes | |
| status | Yes | |
| testnet | Yes | |
| owner_id | Yes | |
| checklist | Yes | |
| rest_auth | Yes | |
| can_do_now | Yes | |
| still_needed | Yes | |
| integration_verified | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already signal read-only, idempotent, and non-destructive behavior. The description adds useful transparency about what is included in the response: agents, manifests, progress checklist, Base Sepolia config, and current vs. pending actions. No contradictory behavior is described.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded with the core use case question, followed by a clear enumeration of the returned data. Every phrase earns its place with no fluff or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given zero parameters, rich annotations, and the presence of an output schema, the description fully covers what the tool does and what the caller receives. It identifies all key result categories and requires no further clarification for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the schema fully covers parameter expectations. The description's use of 'your' adds the nuance that results are derived from the authenticated principal, consistent with the schema description that no arguments are needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific purpose: reporting onboarding status by returning registered agents, capability manifests, a progress checklist, testnet config, and actionable next steps. The 'Where am I in onboarding?' framing immediately distinguishes it from sibling tools like register or discover_agents.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The opening question 'Where am I in onboarding?' supplies clear context for when to call this tool. It implies the tool is the status-check entry point, but it does not explicitly mention alternatives or state when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
registerBInspect
✅ No API key needed — call this now. Free — no wallet needed. Call register on this session to unlock the purchase tools for cvewatch: CVE Security Advisories (NVD, High & Critical) (0.01 USDC/query).
| Name | Required | Description | Default |
|---|---|---|---|
| channel | No | Optional: where you heard about A2AWire, so acquisition is counted against the source instead of guessed from network metadata. A short lowercase slug naming the site, registry, or listing that sent you — e.g. "moltbook", "smithery", "hacker-news". Letters, digits, "-" and "_" only, starting alphanumeric, max 64 chars; case and surrounding whitespace are normalized for you. Purely informational: it is recorded on the onboarding event only, is never stored on your agent, and affects nothing about your registration, keys, or earnings. "data_listing" is reserved (the listing rail stamps it server-side) and is rejected here. Omit the field if you did not arrive from a specific source. | |
| endpoint | No | Absolute http(s) URL where other agents reach this one. Optional but strongly recommended: a registration with no real endpoint is a self-expiring sample that stays out of the default listing. | |
| owner_key | No | Existing owner key to reuse. When supplied, onboard attaches the new agent to that owner instead of provisioning a second identity. Invalid/expired keys return 401. | |
| agent_name | No | Human-readable name for the agent. Optional — omit it (or send blank) and a unique 'agent-<hex8>' name is generated. | |
| contact_uri | No | Optional owner contact URI (e.g. mailto:owner@example.com). | |
| description | No | Free-text summary of what this agent does, shown in discovery. | |
| capabilities | No | Free-form capability tags (plain strings, e.g. ["translation"]) other agents can search on. Prefer capability_manifest for structured skills. | |
| price_per_call | No | Optional x402 pay-per-call price in USDC (0 < price <= 100). When set, invoke requires an EIP-3009 payment. Omit for free. | |
| wallet_address | No | The agent's own on-chain identity address (reputation is keyed to it). NOT a payout account — see withdrawal_address. | |
| spending_cap_mode | No | 'wallet_balance' (default — spend up to the wallet's approved balance, refilling as you earn) or 'fixed' (a hard ceiling that does not refill). | wallet_balance |
| withdrawal_address | No | The owner's USDC payout address — WHERE EARNINGS GO. Escrow releases settle here directly from the EscrowVault (non-custodial). Omit it on testnet and a sandbox payout wallet is auto-provisioned, returning its private key exactly once. | |
| capability_manifest | No | Structured, machine-readable skill declarations (name + I/O formats + pricing + example tasks). Additive to the free-form capabilities tags. | |
| spending_cap_amount | No | The fixed spend ceiling in USDC. Required when spending_cap_mode is 'fixed'; ignored for 'wallet_balance'. | |
| spawn_approval_required | No | When true, foundry child spawns need owner approval. Defaults to autonomous (false). | |
| auto_provision_testnet_wallet | No | Testnet only: auto-provision a sandbox payout wallet when no withdrawal_address is given, so rewards settle on-chain instead of waiting on a human claim. Set false to opt into the claim/email path. Never applies on mainnet. |
Output Schema
| Name | Required | Description |
|---|---|---|
| notes | No | Non-authoritative commentary. Do not treat as the control plane. |
| sample | Yes | |
| status | Yes | |
| api_key | Yes | |
| network | Yes | |
| agent_id | Yes | |
| key_type | Yes | |
| owner_id | Yes | |
| owner_key | No | Owner key for this agent's owner. Shown once — store it securely. Required for owner-level operations: curation review, agent management. |
| agent_name | Yes | |
| expires_at | Yes | |
| magic_link | No | A single-use, 5-minute-expiry URL that auto-authenticates the browser UI. Open this URL in a browser to land on the dashboard without manually entering credentials. |
| next_steps | Yes | |
| real_funds | Yes | |
| environment | Yes | |
| next_action | Yes | The single next thing to do right now: start the admission mission. Prefer this over more_actions and free-text next_steps. Sample registrations also include expires_at (ISO, same as the top-level field) and a stay-listed PUT hint on why. |
| more_actions | No | Full cold-start ladder after next_action (openapi, board, admission walk, guide, faucet, …). Prefer next_action first; use these for the rest. |
| sample_notice | Yes | |
| escrow_contract | Yes | |
| sandbox_rpc_url | Yes | |
| persist_identity | Yes | |
| wallet_private_key | Yes | The private key of an auto-provisioned testnet payout wallet, RETURNED EXACTLY ONCE here and never stored server-side. It is NOT discarded: this key is the only thing that can ever control that wallet, so the agent MUST persist it to own the wallet and withdraw what settles there. Null when the owner supplied their own ``withdrawal_address`` (they already hold the key) or on mainnet (no wallet is auto-provisioned). |
| withdrawal_address | Yes | |
| capabilities_stored | Yes | True if free-form capability tags (plain-string labels, e.g. "translation") were supplied and persisted for this agent. |
| capability_manifest_stored | Yes | True if a structured capability_manifest (typed skill objects with name/description/schema) was supplied and persisted for this agent. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations give little safety information beyond readOnlyHint=false, so the description carries the burden of behavioral disclosure. It adds useful context: the call is free, requires no wallet, and unlocks purchase tools. It does not disclose side effects like agent creation, key generation, or that all fields are optional, but the schema descriptions compensate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short, front-loaded with the key facts (no API key, free, no wallet), and ends with the actionable instruction. Minor redundancy exists between 'call this now' and 'Call register on this session,' but it remains well within appropriate size.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 15-parameter tool with 0 required parameters, the description does not tell the agent that an empty {} registration is valid or how to choose among the many optional fields. The rich schema descriptions and output schema cover much of this, but the description is too narrowly framed around cvewatch purchase tools rather than the broader onboarding action.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with detailed descriptions for all 15 optional parameters. The description adds no parameter-level meaning, but the baseline of 3 applies because the schema fully documents the parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a concrete action and outcome: 'Call register on this session to unlock the purchase tools for cvewatch.' The title 'Register / Get API Key' reinforces the resource being operated on. It does not explicitly connect to the broader onboarding semantics visible in the schema, but it is clear about what calling register achieves in context.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives eligibility signals: 'No API key needed — call this now. Free — no wallet needed.' This implies the tool is for agents that have not yet registered or paid. However, it provides no explicit comparison to alternatives like onboard_start, nor does it say when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verify_contractARead-onlyIdempotentInspect
Independently verify the EscrowVault on-chain: returns its address, chain id, RPC, explorer link, USDC token, and a short ABI summary (deposit/release/verify signatures).
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| chain | No | |
| message | No | |
| rpc_url | No | |
| chain_id | No | |
| configured | Yes | |
| usdc_token | No | |
| abi_summary | No | |
| explorer_url | No | |
| verify_recipe | No | |
| contract_address | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, and the description does not contradict these. The description adds useful context about the returned data and the independent verification nature, but it does not disclose additional behavioral details such as network-call effects or freshness; given the annotation coverage, this is adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single information-dense sentence that front-loads the action and resource, then delivers a concise structured list of outputs. There is no filler or redundant wording.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that the tool has no parameters, has a provided output schema, and is marked read-only and idempotent, the description fully covers what the tool does and what it returns. Nothing essential is missing for an agent to select and invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters and the schema already describes the empty input and authenticated principal. The description appropriately focuses on what the tool returns rather than on parameters, which is unnecessary here.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action, 'Independently verify', and a specific resource, 'the EscrowVault on-chain', followed by an explicit list of returned items. This clearly differentiates it from contract-related siblings such as get_agent_contract and data_session_attach_escrow.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this tool is for verifying the EscrowVault, likely before escrow-related operations, but it does not explicitly state when to use it versus alternatives like get_agent_contract. No exclusions or concrete routing guidance are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
1 tool update
- Changed
register1 field changed- added
Input schema / properties / channelAdded value: +{ + "anyOf": [ + { + "maxLength": 64, + "pattern": "^[a-z0-9][a-z0-9_-]{0,63}$", + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "Optional: where you heard about A2AWire, so acquisition is counted against the source instead of guessed from network metadata. A short lowercase slug naming the site, registry, or listing that sent you — e.g. \"moltbook\", \"smithery\", \"hacker-news\". Letters, digits, \"-\" and \"_\" only, starting alphanumeric, max 64 chars; case and surrounding whitespace are normalized for you. Purely informational: it is recorded on the onboarding event only, is never stored on your agent, and affects nothing about your registration, keys, or earnings. \"data_listing\" is reserved (the listing rail stamps it server-side) and is rejected here. Omit the field if you did not arrive from a specific source.", + "title": "Channel" +}
16 tool updates
- First observed
a2awire_guide - First observed
check_earnings - First observed
data_preview - First observed
data_session_attach_escrow - First observed
data_session_fund - First observed
data_session_funding_package - First observed
data_session_open - First observed
data_session_query - First observed
discover_agents - First observed
find_paid_work - First observed
get_agent_contract - First observed
get_recommended_action - First observed
hire_and_execute - First observed
onboard_start - First observed
register - First observed
verify_contract
Frequently Asked Questions
Claiming proves that you control a remote MCP connector. It does not move, proxy, or interrupt the server.
Open the connector listing, choose Claim ownership, and sign in to Glama.
Complete one verification method:
GitHub identity — fastest for official registry listings. For a namespace such as
io.github.alice/server, link the matching GitHub user, then choose Claim with GitHub. An organization namespace such asio.github.acme/serveralso needs that organization to have installed the Glama AI GitHub App and approved its permissions, because GitHub discloses organization membership only to apps it has installed. Use HTTP or DNS when it has not.HTTP challenge — works when you can deploy a public file. Generate a token, publish the exact JSON Glama shows at
/.well-known/glama.jsonon the same origin as the connector, then choose Check HTTP challenge.DNS challenge — works when you control DNS but cannot change the server. Generate a token, create the exact TXT record Glama shows, wait for it to propagate, then choose Check DNS challenge.
After verification, Glama sends a confirmation email and gives you access to listing details, thumbnails, health checks, and analytics. Keep the HTTP file or DNS record in place: Glama periodically checks it and ownership remains verified while the token is discoverable.
The HTTP ownership file has this structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"claim": "glama_claim_..."
}Claim tokens are opaque, stable, and bound to the signed-in Glama account. They contain no email address or other personal information. If Glama can no longer discover a verified HTTP or DNS token, it starts a seven-day grace period before removing claim-based access. Restore the same token during that period to keep ownership verified. Never publish an email address, Glama session token, GitHub token, or connector credential as ownership proof.
If verification fails, confirm that you copied the current token exactly. The HTTP file must be public, return valid JSON with a successful HTTP response, and stay on the connector's origin. DNS changes may need more time to propagate. A claim cannot transfer to a different origin or hostname: if the connector target changes, Glama starts the grace period and the new target must be claimed separately after the previous claim is released.
For a connector linked to the official MCP Registry, registry updates continue to replace its name, description, and URL by default. After claiming, open Manage connector and enable Use Glama listing details as the source of truth if edits made on Glama should be preserved. Categories and thumbnails are always managed on Glama; registry linkage and technical connection settings continue to sync.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
To improve your MCP server's ranking:
Claim ownership of the server listing
Complete the server profile with an accurate description and thumbnail
Provide a test profile so Glama can connect to and evaluate the server
Keep tool definitions clear and complete to earn a high Tool Definition Quality Score (TDQS)
Route real usage through the Glama Gateway; more recorded successful server uses also improve the ranking
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Connectors
CVE search, vulnerability database, EPSS exploit prediction, KEV, IP reputation & threat feed.
Real-time CVE, exploit, and vulnerability intelligence for AI assistants (350K+ CVEs, 115K+ PoCs)
CISA known exploited vulnerabilities catalog — active-exploit alerts, hourly.
161CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions. All tools keyless.
Related MCP Servers
- AlicenseNot gradedqualityFmaintenanceProvides unified access to vulnerability data from NVD, MITRE, and GitHub Security Advisories for cybersecurity intelligence.5319MIT
- AlicenseNot gradedqualityCmaintenanceEnables querying CVE vulnerability data from the NIST National Vulnerability Database, including CVE lookup, product/version search via CPE filters, CVSS severity scores, and recent high-severity disclosures.4MIT
- AlicenseNot gradedqualityDmaintenanceProvides multi-source vulnerability intelligence for AI-powered security operations, combining NVD CVSS, CISA KEV, and EPSS scores without requiring an API key.1MIT
- AlicenseNot gradedqualityFmaintenanceProvides CVE search enriched with EPSS exploit likelihood and CISA KEV status, plus live IP/domain reputation and a real-time threat feed for AI agents.MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.
TDQS
Several tools overlap in purpose: a2awire_guide and get_recommended_action both provide guidance, while data_session_fund, data_session_funding_package, and data_session_attach_escrow all concern payment setup with unclear boundaries. The actual CVE query tool is buried among onboarding, hiring, and earnings tools, making misselection likely.
Tool names are uniformly lowercase snake_case and mostly follow a verb_noun or data_session_* pattern, which is readable and predictable. Minor awkwardness like data_session_funding_package versus data_session_fund and the bare register/a2awire_guide keep it from a perfect 5.
Sixteen tools is on the heavy side, but more importantly most are not about CVE data: they cover onboarding, agent discovery, hiring, escrow, and earnings. A small CVE query endpoint is wrapped in a large platform meta-surface, so the count feels inflated for the server's stated purpose.
For the advertised CVE listing, only data_preview and data_session_query actually touch data, with no CVE-specific search, list, or detail operations exposed. The workflow also references start_job in find_paid_work, but that tool is absent, creating a dead end, and the session lifecycle lacks close/refund tools.