Skip to main content
Glama

Server Details

Read-only CVE intelligence, remediation playbooks, and agent setup guides. Not a scanner.

If you are the author of this connector, you can claim ownership with GitHub, an HTTP challenge, or a DNS record. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP
URL
Repository
stevologic/security-recipes.ai
GitHub Stars
1
Server Listing
Security Recipes

Available Tools

75 tools
recipes_a2a_agent_card_trust_profileCInspect

Return A2A Agent Card intake profiles, trust controls, and sample decisions.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
risk_tierNo
profile_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.2/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so the description carries the full burden. It only states output components ('intake profiles, trust controls, sample decisions') without disclosing whether the operation mutates anything, fetches from storage, or how the three outputs interrelate. Minimal behavioral disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single compact sentence with no waste, but it achieves brevity through under-specification rather than sharp editing. The resource list is front-loaded but the sentence lacks actionable substance.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Although an output schema exists, the tool has three parameters at 0% schema coverage and zero annotations. The description is too thin to support correct invocation—how params map to outputs and how to combine them is entirely unspecified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, and the description never mentions the three parameters (decision, risk_tier, profile_id). The names are inferable and map loosely to the output components, but there is no explicit guidance on how params select or filter results, leaving the agent to guess.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific resource ('A2A Agent Card intake profiles, trust controls, and sample decisions') which distinguishes it from sibling recipe packs, but the verb 'Return' is vague about mechanism—fetch, generate, or list. Given ~80 closely named siblings, the purpose is only mildly differentiated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool vs the many sibling recipes (e.g., recipes_get, recipes_list, recipes_agent_trust_fabric_pack). No conditions, exclusions, or alternative suggestions provided. With dozens of similar 'recipes_*' tools, the agent gets no routing help.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agent_capability_risk_registerCInspect

Return capability-based residual risk scores for agentic workflows.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
risk_tierNo
workflow_idNo
minimum_residual_scoreNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure, but it only says 'Return ... scores.' It does not state whether the operation is read-only, whether it computes or retrieves scores, whether filters are required, or how the residual risk scoring behaves.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one short sentence with no filler and the main action is front-loaded. However, it is under-specified for a tool with four optional parameters and no other context, so conciseness is achieved at the expense of usefulness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Because an output schema exists, the description does not need to explain return values, but it still lacks parameter semantics, usage guidance, and sibling differentiation. An agent cannot reliably determine what inputs to provide or what makes this tool different from the many adjacent risk-related tools.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description does not mention any of the four parameters: decision, risk_tier, workflow_id, and minimum_residual_score. The parameter names hint at their purpose, but the description adds no meaning beyond the bare schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: it returns capability-based residual risk scores for agentic workflows. It is clear on its own, but it does not explicitly distinguish itself from closely named siblings such as recipes_agentic_aivss_risk_scoring_pack or recipes_agentic_catastrophic_risk_annex.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance about when to use this tool instead of the many related risk-scoring and recipe tools listed among the siblings. It neither names alternatives nor provides any selection criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agent_handoff_boundary_packCInspect

Return agent handoff boundary profiles, protocol controls, and workflow maps.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
protocolNo
profile_idNo
workflow_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full burden. It only says 'Return', implying a read operation, but does not disclose side effects, authentication needs, filtering behavior, or what happens with no parameters.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one front-loaded sentence with no filler. It is concise but arguably too terse for a tool with four optional parameters and many siblings.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has four optional parameters, no annotations, and many similar siblings. The description does not explain how parameters affect results, when to use this tool, or what distinguishes it from alternatives, leaving too much to inference.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It does not explain the meaning or effect of decision, protocol, profile_id, or workflow_id, though the listed outputs loosely map to three of the four parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ('Return') and resource ('agent handoff boundary profiles, protocol controls, and workflow maps'), which distinguishes it from sibling boundary packs like memory, browser, or context-egress. However, terms like 'protocol controls' and 'workflow maps' are vague and not fully defined.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus the many similar boundary-pack siblings. An agent cannot determine the selection criteria from the description alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_action_runtime_packCInspect

Return action classes, workflow action envelopes, runtime policy, and evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
risk_tierNo
workflow_idNo
action_class_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.2/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It only enumerates return content; it says nothing about the read-only nature, how the four optional parameters affect results, defaults, or null handling. For a tool without annotation coverage this is a significant, undisclosed behavioral gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single efficient sentence with the verb front-loaded and no wasted words. However, it is closer to under-specification than disciplined conciseness — a one-line list of jargon artifacts carries almost no usable substance.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

A four-parameter tool with 0% schema coverage, no annotations, and no usage guidance gets only a line listing return artifacts. The output schema exists, but the parameters and the semantics of the returned entities are entirely unexplained, so the definition is not adequate for confident invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description mentions none of the four parameters (decision, risk_tier, workflow_id, action_class_id). The description adds zero meaning beyond the bare parameter names, so the agent has no idea how to populate them or how they filter the returned artifacts.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and lists four concrete deliverables (action classes, workflow action envelopes, runtime policy, evidence). However, these artifact types are opaque domain jargon with no elaboration, and nothing distinguishes this from the ~80 similarly named recipes_agentic_* siblings that also deal with runtime artifacts (e.g., recipes_agentic_run_receipt_pack).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description offers zero guidance on when to use this pack versus its near-identically named siblings. No when/when-not conditions, no alternative tool names, no exclusions or prerequisites. Given the massive overlapping sibling catalog, an agent gets no routing help at all.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_aivss_risk_scoring_packCInspect

Return AIVSS-aligned agentic risk scores, SLAs, evidence, and hosted MCP wedges.

ParametersJSON Schema
NameRequiredDescriptionDefault
ownerNo
severityNo
scenario_idNo
minimum_scoreNo
runtime_default_decisionNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure. It only states what is returned and does not explain whether the tool computes scores, filters existing records, has side effects, requires specific inputs, or consumes some upstream data source. 'Hosted MCP wedges' is left undefined.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single compact sentence and is front-loaded with the core action and output types. It earns conciseness credit, but the use of unexplained acronyms and jargon prevents a perfect score.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has five optional parameters, no annotations, no parameter documentation, and a large sibling family, yet the description gives no indication of how parameters affect results or what scenario this pack is meant for. The output schema may cover return values, but the description is inadequate for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description does not mention any of the five parameters. While names like severity and minimum_score are suggestive, runtime_default_decision is unclear, and the description adds no meaning to the schema at all.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and names the resources produced: AIVSS-aligned risk scores, SLAs, evidence, and hosted MCP wedges. It is clear in what the tool delivers, but does not differentiate it from the many similar risk-related sibling packs, and the acronym 'AIVSS' and phrase 'hosted MCP wedges' are unexplained jargon.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given about when to use this tool versus the many sibling risk packs, such as recipes_agentic_catastrophic_risk_annex or recipes_mcp_risk_coverage_pack. There are no stated conditions, exclusions, or toggles between alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_app_intake_packDInspect

Return generated agentic app launch-review profiles and decisions.

ParametersJSON Schema
NameRequiredDescriptionDefault
app_idNo
decisionNo
risk_tierNo
buyer_stageNo
minimum_scoreNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

D1.6/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of disclosing behavior. It only says 'Return generated...' which gives no indication of side effects, prerequisites, data mutation, or any other operational characteristic. The agent has no sense of what happens when calling this tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence, which is concise but far too under-specified for a tool with five parameters and no schema hints. It is not appropriately sized; it fails to deliver necessary information rather than being efficiently structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (5 optional parameters, no schema descriptions, no annotations, and a non-trivial output), the description is woefully incomplete. An agent cannot understand the tool's inputs, outputs, or purpose well enough to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has zero description coverage, so the description must explain the five parameters (app_id, decision, risk_tier, buyer_stage, minimum_score). It does not mention any of them, leaving agents unable to determine valid values, formats, or relationships between inputs.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a verb ('Return') and a resource ('generated agentic app launch-review profiles and decisions'), which is specific enough to avoid being a tautology. However, it does not explain what an 'agentic app launch-review' entails or how this pack differs from the many sibling packs (e.g., risk_scoring_pack, approval_receipt_pack). The purpose is partially clear but under-specified.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus any of the numerous sibling tools. No context, prerequisites, or exclusions are mentioned, leaving the agent to guess the intended scenario.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_approval_receipt_packCInspect

Return scope-bound approval receipt profiles, workflow requirements, and evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
risk_tierNo
workflow_idNo
action_classNo
approval_profile_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the burden of behavioral disclosure. It does convey that the tool returns profiles, workflow requirements, and evidence, and that results are scope-bound. But it does not clarify whether this is a read-only retrieval, whether it depends on prior approvals, or what side effects might occur.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no wasted words and front-loads the primary action. It is concise, though it sacrifices necessary detail; the brevity itself is not the problem, but the under-specification limits its value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given five optional nullable parameters, no schema descriptions, no annotations, and a large set of similarly named sibling packs, this one-line description is insufficient for an agent to know how to invoke the tool correctly. The output schema exists but is not enough to compensate for missing parameter semantics and usage context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate for five undocumented parameters: decision, risk_tier, workflow_id, action_class, and approval_profile_id. The phrase 'scope-bound' hints that parameters constrain the result set, but it does not explain what any parameter means or how they interact, leaving the agent without usable guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Return') and resource ('approval receipt profiles, workflow requirements, and evidence'), and the name makes the approval-receipt focus clear versus sibling packs like recipes_agentic_run_receipt_pack. However, it does not explicitly differentiate itself from those siblings or explain what makes it distinct other than the tool name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given about when to use this tool versus alternatives such as recipes_agentic_run_receipt_pack or other agentic recipe packs. The phrase 'scope-bound' implies some filtering by the optional parameters, but there is no explicit context, precondition, or exclusion stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_assurance_packCInspect

Return enterprise assurance controls, workflow evidence, and AI/Agent BOM seed.

ParametersJSON Schema
NameRequiredDescriptionDefault
control_idNo
workflow_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, and the description only says 'Return' without addressing side effects, data mutation, or permissions. It does not disclose whether the tool is read-only or has any impact on the system.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, concise sentence with no redundant information. It is well-structured and to the point, though it could benefit from a bit more detail without becoming verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema is present but not described, and the context of 'packs' is not explained, the description lacks sufficient context. It does not clarify what a pack represents or how the returned data is structured, limiting the agent's ability to use the response effectively.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema defines two optional parameters (control_id, workflow_id) but the description offers no explanation of their meaning or how they influence the result. Agents cannot infer what values are expected or how they filter the output.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool returns enterprise assurance controls, workflow evidence, and AI/Agent BOM seed. This is a specific and unambiguous action, making the purpose evident.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus the many sibling 'recipes_*' tools. It lacks context about the conditions that would make this pack appropriate, leaving agents to guess.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_catastrophic_risk_annexCInspect

Return the severe-risk annex for high-impact agentic AI runtime decisions.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
control_idNo
scenario_idNo
buyer_view_idNo
impact_domainNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It only says 'Return', implying a read operation, but does not state whether it is read-only, requires authentication, has side effects, or what happens when parameters are null/default. There is no mention of filtering, pagination, or error behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no wasted words, front-loading the core purpose. It is appropriately brief, though arguably too terse to convey necessary context, but conciseness itself is good.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 5 parameters, 0% parameter coverage, no annotations, and an output schema that is not described in the text, the description is severely incomplete. It does not explain what the annex looks like, how parameters affect output, or any constraints. An agent cannot safely invoke it without guessing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description provides no meaning for the five parameters (status, control_id, scenario_id, buyer_view_id, impact_domain). The schema only lists them as optional strings with null defaults, but not their roles or valid values. The description entirely fails to compensate for the lack of schema documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Return') and a specific resource ('severe-risk annex'), with context ('high-impact agentic AI runtime decisions'). It is not a tautology and names a concrete deliverable. However, it does not differentiate from numerous risk-related siblings (e.g., recipes_agentic_risk_register, recipes_agentic_aivss_risk_scoring_pack), leaving ambiguity about what makes this annex distinct.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus its many alternatives. No mention of scenarios, prerequisites, or complementary tools. An agent would have no signal about which of the ~70 siblings this one is suited for beyond the generic 'severe-risk annex' phrase.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_control_plane_blueprintCInspect

Return the acquisition-ready agentic control plane architecture and buyer evidence map.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
layer_idNo
question_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full disclosure burden, yet it only says the tool 'returns' a blueprint/map. It does not disclose that filtering is possible via status, layer_id, or question_id, what 'acquisition-ready' implies about the output, or any dynamic behavior. For a tool with zero annotation coverage this is a significant gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The single sentence is clean and front-loaded with the key qualifier 'acquisition-ready', but its brevity is under-specification rather than efficiency. It omits parameter behavior, usage context, and any hint of the filters, so the one sentence does not earn its keep beyond stating the purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Although an output schema exists (so return values needn't be spelled out), the tool is a complex architectural blueprint with three unexplained filter parameters and no annotations. The description fails to explain what the filters do or when this recipe applies, leaving the agent unable to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and there are three parameters (status, layer_id, question_id) with no enums or explanations anywhere in the description. The description adds no meaning beyond what the bare schema shows, and the field names suggest filters but no values or semantics are given.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Return'), a resource ('agentic control plane architecture and buyer evidence map'), and a qualifier ('acquisition-ready'), so an agent knows the general deliverable. However, it does not differentiate from the closely-named sibling recipes_workflow_control_plane, leaving which tool is which ambiguous without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no when-to-use guidance, no context for selecting this recipe over siblings, and no mention of alternatives such as recipes_workflow_control_plane or the secure_context_* evidence tools. The status/layer_id/question_id filters are not explained, so an agent gets zero help deciding when to invoke this versus a sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_entitlement_review_packCInspect

Return expiring agent entitlement leases, access reviews, and scope evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
namespaceNo
risk_tierNo
access_modeNo
identity_idNo
workflow_idNo
entitlement_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It merely states 'Return ...' with no mention of filtering defaults, data freshness, scope of coverage, or any side effects. For a read-oriented query tool this is a clear but thin disclosure that adds nothing beyond the action verb.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single, front-loaded sentence with no filler — efficient and easy to scan in a tool list. It is slightly under-specified rather than verbose, which is a conciseness strength.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return-value detail is not required from the description. However, with six undocumented optional parameters, zero usage guidance, and no annotations, the definition is too thin for a filter-heavy query tool — an agent cannot correctly scope a call without external knowledge.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description names none of the six parameters (namespace, risk_tier, access_mode, identity_id, workflow_id, entitlement_id). None of these are self-illustrating from the description, so an agent cannot infer valid values or how filters combine. The description contributes nothing to parameter understanding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and names a resource domain (expiring agent entitlement leases, access reviews, scope evidence), so purpose is discernible. However, listing three distinct outputs blurs what the tool actually produces, and nothing differentiates it from the many similar recipe packs (e.g., recipes_agentic_approval_receipt_pack, recipes_agentic_run_receipt_pack).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no statement of when to use this tool versus alternatives, no exclusions, and no context on prerequisites. With six optional filter parameters, an agent gets no guidance on how to scope an entitlement review or when a different pack is more appropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_exposure_graphCInspect

Return risk-ranked agentic exposure paths across context, identities, MCP tools, and evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
node_idNo
path_idNo
decisionNo
namespaceNo
identity_idNo
workflow_idNo
minimum_scoreNo
path_class_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It does convey a read-only query behavior and an ordering trait ('risk-ranked'), which is meaningful. However, it does not disclose how ranking works, how the optional filters interact, or whether traversal or performance constraints apply.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one front-loaded sentence with no filler, and the core action appears first. It is appropriately concise, though the heavy use of jargon like 'agentic exposure paths' slightly reduces clarity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The output schema reduces the need to describe return values, and the description gives a general sense of the result. Still, with 8 optional but undocumented parameters and no annotations, this is insufficient for reliable invocation; an agent cannot determine what values to supply or when this tool is the right choice.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description does not explain any of the eight parameters, including cryptic ones like path_id, decision, node_id, or path_class_id. The phrase 'identities' loosely maps to identity_id at best, but most parameters remain entirely unexplained.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Return'), a resource ('agentic exposure paths'), and useful qualifiers ('risk-ranked', across context, identities, MCP tools, and evidence). It clearly communicates what the tool produces, though it does not explicitly differentiate it from related sibling tools like recipes_agentic_threat_radar or recipes_agentic_posture_snapshot.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given for when to use this tool versus the many related sibling tools. There are no prerequisites, exclusions, or alternative tool names mentioned, so an agent must infer selection context entirely from the tool name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_incident_response_packCInspect

Return agentic incident response classes, phases, workflow matrix, and evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
severityNo
workflow_idNo
incident_class_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full behavioral burden. 'Return' weakly implies a read-style operation, but it does not disclose whether the tool is deterministic, how parameters influence results, error behavior, or whether any side effects exist.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one compact sentence with no filler, and the core content items are front-loaded. It earns its place, though the conciseness is achieved at the expense of substantive detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a pack tool with four optional parameters and no annotation coverage, this description is too thin. It does not explain how parameters shape the returned pack, when the tool should be used, or how it differs from related sibling packs; the output schema mitigates only the return-format gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description does not explicitly mention any of the four parameters. The listed content (classes, phases, workflow matrix, evidence) maps only loosely to incident_class_id, workflow_id, severity, and decision, adding little beyond the parameter names themselves.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and names the resource as agentic incident response content: classes, phases, workflow matrix, and evidence. It is fairly clear what domain this tool addresses, though it does not explicitly distinguish it from the many sibling recipe-pack tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No when-to-use guidance, exclusions, or alternative sibling tools are mentioned. An agent must infer from the name and the listed content when to use this pack instead of related ones such as recipes_agentic_soc_detection_pack or recipes_agentic_readiness_scorecard.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_measurement_probe_packCInspect

Return measurement probes for agentic workflow traceability and readiness.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
class_idNo
decisionNo
probe_idNo
workflow_idNo
minimum_scoreNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.2/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Since no annotations are provided, the description carries the full burden of behavioral disclosure. The verb 'Return' strongly implies a read-only operation, but the description does not explicitly state that it is non-mutating, nor does it mention any rate limits, authentication requirements, or side effects. It also does not describe what happens with the various parameters (e.g., filtering behavior) or the nature of the returned data. This is a minimal disclosure that leaves the agent guessing about operational details.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no wasted words, which is concise in a structural sense. However, it is under-specified: it lacks essential information and reads as a placeholder rather than a helpful guideline. It is not front-loaded with the most critical details, and the brevity comes at the cost of informativeness. It earns a middle score because it is not verbose, but it fails to provide necessary content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 6 parameters, no annotations, no output schema explanation (though it has an output schema), and a large family of sibling tools, the description is severely incomplete. It does not explain the meaning of the parameters, the nature of the returned probes, or how this tool fits into the broader agentic workflow measurement context. An agent would struggle to use this tool correctly without additional external knowledge, making the description inadequate for its context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, meaning the description must compensate by explaining the six parameters (status, class_id, decision, probe_id, workflow_id, minimum_score). It does not mention any of them, nor does it provide hints about their purpose or how they influence the returned probes. The description adds no value beyond what the schema already shows (which is just type information with null defaults). This is a critical gap for an agent needing to construct a valid call.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action (return) and a resource (measurement probes) with a domain qualifier (agentic workflow traceability and readiness), which gives a general idea of the tool's function. However, it does not explain what 'measurement probes' are or how this tool differs from the many sibling 'pack' tools, such as recipes_agentic_assurance_pack or recipes_agentic_run_receipt_pack. The purpose is clear enough to avoid total confusion but lacks the specificity needed to distinguish it from alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no guidance on when to use this tool versus any of the large sibling pack tools. It does not mention any conditions, prerequisites, or scenarios where this tool is preferred. An agent would have to infer the usage solely from the name and the generic purpose statement, which is insufficient given the abundance of similar tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_posture_snapshotCInspect

Return the generated enterprise posture snapshot for agentic AI and MCP operations.

ParametersJSON Schema
NameRequiredDescriptionDefault
finding_idNo
workflow_idNo
minimum_scoreNo
risk_factor_idNo
posture_decisionNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

There are no annotations, so the description carries the burden. It does disclose that the tool returns an already-generated artifact ('generated...snapshot') rather than creating one, but it does not mention whether the returned data can be filtered, how fresh it is, what auth is needed, or any other behavioral details.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no fluff, which earns efficiency credit. It is slightly terse, but word choice is direct.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite the presence of an output schema and only optional parameters, the description omits the meaning of the five filters and the selection context, making it incomplete for correct invocation. An agent cannot know whether to pass any of the parameters or how they alter the returned snapshot.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description adds no meaning to finding_id, workflow_id, minimum_score, risk_factor_id, or posture_decision. All five parameters are optional and nullable, so an agent has no basis for choosing values.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and names a concrete resource ('generated enterprise posture snapshot for agentic AI and MCP operations'), so an agent can tell this is a retrieval operation. However, it does not distinguish this snapshot from the many similar sibling recipe tools, such as readiness_scorecard or risk-related packs.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given about when to call this tool versus any alternative. With more than 70 sibling recipe tools, the absence of context or exclusions leaves the agent to guess which snapshot is meant.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_protocol_conformance_packCInspect

Return MCP/A2A protocol conformance evidence and buyer-ready drift controls.

ParametersJSON Schema
NameRequiredDescriptionDefault
check_idNo
decisionNo
source_idNo
protocol_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must carry the full burden of behavioral disclosure. The description only says 'Return', implying a read-only operation, but it does not explicitly state side-effect-free behavior, authentication needs, ordering, or failure modes. No contradiction with annotations exists because none are present.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence, front-loaded with the action word, and contains no filler. However, given the complexity of the tool (four optional parameters, output schema, and a large family of sibling packs), the brevity is under-specification rather than appropriate conciseness; it lacks necessary context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Providing only a terse summary, the description does not explain what the returned evidence or drift controls look like, how the parameters influence the output, or when this pack is appropriate. Even though an output schema exists, it is not referenced, and the description does not help the agent understand the expected result or use case.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not mention any of the four optional parameters (check_id, decision, source_id, protocol_id). There is no explanation of their purpose, constraints, or relationships, so the description adds no meaning beyond the bare schema, failing to compensate for the lack of detailed schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states the verb 'Return' and the resource 'MCP/A2A protocol conformance evidence and buyer-ready drift controls', giving a clear high-level action and subject. However, it does not distinguish this from many similar sibling packs, nor does it define what 'conformance evidence' or 'drift controls' concretely include.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus alternatives. It neither names alternative tools nor provides conditions, prerequisites, or exclusions. The empty description leaves the agent without criteria for selecting this pack over the numerous closely named sibling packs.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_readiness_scorecardCInspect

Return generated scale, pilot, gate, or block decisions for agentic workflows.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
workflow_idNo
minimum_scoreNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

There are no annotations, so the description must carry the behavioral burden. The word 'Return' suggests a read-only retrieval operation, which is helpful, but the description does not mention authentication, side effects, rate limits, or whether decisions are computed on the fly or retrieved from storage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single clear, front-loaded sentence with no redundant words. It is concise, though it forgoes additional context that would improve the other dimensions.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has three optional parameters with no descriptions, no required parameters, and no behavioral context beyond the return statement. An output schema exists, so the return shape is covered, but the agent still lacks enough information about parameters, preconditions, or how to choose this tool among many similar siblings.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not explain the three parameters: decision, workflow_id, and minimum_score. The mention of 'scale, pilot, gate, or block' provides some context for the decision parameter, but workflow_id and minimum_score semantics are entirely absent.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action and output: 'Return generated scale, pilot, gate, or block decisions for agentic workflows.' This clearly indicates the tool produces readiness decisions and names the decision categories. It does not heavily distinguish from similar sibling recipe tools, but the verb and resource are explicit enough.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus the many sibling tools, such as recipes_agentic_aivss_risk_scoring_pack or recipes_agentic_posture_snapshot. No conditions, exclusions, or alternative references are given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_red_team_drill_packCInspect

Return adversarial drills for agentic remediation workflows and MCP controls.

ParametersJSON Schema
NameRequiredDescriptionDefault
scenario_idNo
workflow_idNo
attack_familyNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations are absent, leaving the description as the sole source of behavioral disclosure. It implies a read-only generation action by saying 'Return', but it doesn't state whether the tool has side effects, requires authentication, or what the output structure is. The description does not add context beyond the action itself, and the existence of an output schema isn't referenced here.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single short sentence with no wasted words, and it gets to the point immediately. However, it is so terse that it borders on under-specification; it would be more effective if it front-loaded a bit of parameter context. Yet as conciseness goes, it is efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with three optional parameters and an output schema, the description is not complete. It doesn't explain what a 'drill pack' is, how the parameters refine the result, or what the returned adversarial drills contain. The agent is left guessing at the input semantics and expected output, making successful invocation uncertain.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description has 0% schema coverage and mentions none of the three parameters (scenario_id, workflow_id, attack_family). Since the schema gives only names and types, and the description doesn't explain how these affect the returned drills, an agent has no sense of how to set these fields.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a concrete action ('Return') and a specific resource ('adversarial drills for agentic remediation workflows and MCP controls'), which gives the agent a clear sense of what it will deliver. It stops short of a full 5 because it doesn't contrast with the many sibling red-team tools (e.g., recipes_agentic_red_team_replay_harness) or clarify the exact boundaries of 'agentic remediation' scope.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus any of the dozens of recipe siblings. No conditions, alternatives, or exclusions are offered, so an agent must infer when this is the right choice, which is risky given the large, highly overlapping toolset.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_red_team_replay_harnessCInspect

Return replay fixtures, expected decisions, and evidence gates for red-team drills.

ParametersJSON Schema
NameRequiredDescriptionDefault
severityNo
replay_idNo
scenario_idNo
workflow_idNo
attack_familyNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It states the operation is a read-style 'Return', but it does not explain how parameter combinations affect results, what happens with no arguments, or whether any side effects occur.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single efficient sentence with no filler, and the main outcome is front-loaded. It is appropriately concise, though it sacrifices necessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With five optional parameters, no annotations, and no usage or selection guidance, the description is too thin for an agent to know how to invoke the tool for a specific red-team drill. The output schema covers return shape, but the core selection semantics remain unexplained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description explains none of the five optional parameters (severity, replay_id, scenario_id, workflow_id, attack_family). The description must compensate for the bare schema but does not provide any mapping between these parameters and the returned fixtures.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ('Return') and resource ('replay fixtures, expected decisions, and evidence gates for red-team drills'), so an agent can tell this is a retrieval tool for red-team replay material. It is distinguishable from the generic sibling recipes_agentic_red_team_drill_pack mainly by the word 'replay', but that distinction is not made explicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus alternatives like recipes_agentic_red_team_drill_pack or when replay fixtures would be needed. The description does not mention any conditions, exclusions, or selection criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_run_receipt_packCInspect

Return agent run receipt templates for identity, context, tools, egress, approval, and evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
receipt_idNo
workflow_idNo
minimum_scoreNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description must carry the full behavioral disclosure burden. It only says 'Return ... templates', which is a read operation, but it does not reveal how parameters affect output, any error conditions, or other behaviors. The description adds minimal context beyond a simple retrieval.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single concise sentence that front-loads the primary action and scope. It is efficient and to the point, with no wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has an output schema and three optional parameters, but the description does not explain when to use certain parameters or how the tool fits into a workflow. Given the large set of sibling recipe tools, the lack of differentiation and usage context makes it incomplete for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has three optional parameters (receipt_id, workflow_id, minimum_score), but the description provides no explanation of their meaning or usage. With 0% schema description coverage, the description fails to compensate, leaving the agent to guess how to populate these parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Return agent run receipt templates') and enumerates the specific categories (identity, context, tools, egress, approval, and evidence), making the purpose unambiguous. It does not explicitly differentiate from sibling tools, but the focus on receipt templates is distinct enough.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus any of the many sibling recipe tools. The description does not mention alternatives, preconditions, or scenarios where this tool is preferred, leaving the agent to infer applicability.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_soc_detection_packCInspect

Return SIEM-ready detections for agentic AI and MCP telemetry.

ParametersJSON Schema
NameRequiredDescriptionDefault
rule_idNo
decisionNo
severityNo
event_classNo
workflow_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It only states that the tool returns detections, with no mention of side effects, read-only behavior, authentication requirements, filtering behavior, or what 'SIEM-ready' means operationally. This is not contradictory, but it is far too thin.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single efficient sentence with no wasted words, and the key outcome is front-loaded. However, it is under-specified for a tool with five parameters and no annotations, so brevity comes at the cost of useful operational detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite an output schema existing, the definition omits all parameter semantics, usage conditions, and behavioral context. With 0% schema coverage and no annotations, this one-line description is not enough for an agent to reliably select and invoke the tool across the large sibling set.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not mention any of the five parameters (rule_id, decision, severity, event_class, workflow_id). There is no compensation for the schema gap, so an agent has no guidance on what values these parameters take or how they affect the returned detections.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and a concrete resource ('SIEM-ready detections for agentic AI and MCP telemetry'), so the core purpose is clear. It does not explicitly distinguish this from siblings like recipes_agentic_incident_response_pack or recipes_agentic_action_runtime_pack, but the 'SIEM-ready detections' focus gives reasonable differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus any of the many sibling recipe packs. No alternative tools are named, no conditions for selection are given, and no exclusions are stated. An agent would have to infer usage from the tool name and one-line description.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_source_freshness_watchCInspect

Return source-freshness and standards-drift evidence for SecurityRecipes.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
source_idNo
freshness_classNo
publisher_familyNo
watched_source_idNo
source_class_familyNo
primary_watchlist_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of disclosing behavioral traits, but it only says 'Return' evidence. It does not clarify whether this is a read-only operation, how the watch is maintained, what data freshness means here, or what side effects, if any, occur. The phrase 'evidence' hints at output rather than mutation, but this is insufficient.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no fluff or repetition. The core idea is front-loaded and easy to parse. However, the extreme brevity is borderline under-specification, so it does not earn a 5.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has seven optional parameters and zero parameter documentation, but the description gives no sense of how to scope the call or which fields matter for different use cases. The existence of an output schema reduces the need to explain return values, but the input semantics remain almost entirely unexplained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not explain any of the seven optional parameters. Names like 'decision', 'watched_source_id', 'freshness_class', and 'primary_watchlist_id' are opaque without additional context. Since the description fails to compensate for the schema gap, this dimension is severely under-served.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific action ('Return') and object ('source-freshness and standards-drift evidence for SecurityRecipes'). It conveys what the tool produces and gives enough domain context to distinguish it from generic recipe tools. It falls short of 5 because it does not explicitly differentiate itself from siblings that may also report on standards conformance or freshness.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives. The description does not mention contexts, exclusions, or sibling tools like recipes_agentic_standards_crosswalk or recipes_agentic_readiness_scorecard. An agent would have to infer usage solely from the tool name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_standards_crosswalkCInspect

Return standards-to-evidence mappings for agentic AI, MCP, and prompt-injection guidance.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
source_idNo
control_idNo
standard_idNo
capability_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It clearly indicates a read-only retrieval behavior ('Return standards-to-evidence mappings'), but it does not disclose filtering behavior, default parameter handling, or what the returned evidence structure looks like.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single concise, front-loaded sentence with no filler. Every word contributes to stating the core function.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema, the description is far too sparse given zero annotation coverage and five unexplained parameters. It lacks essential context about how to construct a valid request, what each field means, and how results are filtered.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description does not explain any of the five parameters (status, source_id, control_id, standard_id, capability_id). An agent cannot infer what values to pass or how filters combine, making parameter use essentially guesswork.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and a concrete resource ('standards-to-evidence mappings'), scoped to agentic AI, MCP, and prompt-injection guidance. This distinguishes it from generic recipe tools, though it does not explicitly differentiate it from any sibling tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance about when to use this tool versus the many sibling recipe tools, nor any mention of alternatives, exclusions, or intended workflow context. The description only states what it returns, not when it should be chosen.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_system_bomCInspect

Return the Agentic System BOM for workflows, agents, identities, MCP tools, and evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
namespaceNo
agent_classNo
workflow_idNo
component_typeNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description only says the tool 'returns' the BOM, which implies a read operation but discloses no further behavioral traits. With no annotations, the description carries the full transparency burden and does not address whether the BOM is computed on demand, how filters affect output, or whether side effects or prerequisites exist.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with no filler, repetition, or unnecessary detail. Every word contributes to communicating the core deliverable and its scope.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema, the tool has no annotations, no parameter descriptions, and no usage guidance. The agent cannot determine how to construct meaningful filter values or what namespace or component_type mean, so the invocation context is materially incomplete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not mention namespace, agent_class, workflow_id, or component_type. The listed BOM categories only weakly hint at workflow_id and agent_class, providing no information about value formats, allowed values, or how parameters interact.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses an active verb and names a specific deliverable, 'Agentic System BOM,' then enumerates covered categories: workflows, agents, identities, MCP tools, and evidence. This distinguishes it from recipe/pack siblings and gives the agent a concrete sense of what the tool returns.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided about when to use this tool versus alternatives such as recipes_agentic_readiness_scorecard or recipes_agentic_incident_response_pack. There are no conditions, exclusions, or references to sibling tools, leaving selection entirely to inference from the name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_telemetry_contractCInspect

Return the OpenTelemetry-aligned agentic telemetry and redaction contract.

ParametersJSON Schema
NameRequiredDescriptionDefault
check_idNo
decisionNo
workflow_idNo
signal_class_idNo
required_attributeNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden, but it only says 'Return' and gives no detail about side effects, authentication, filtering behavior, or what the contract contains. 'Return' implies a read-only operation, but no behavioral traits beyond that are disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with no filler or redundant phrasing. It is concise, though it achieves conciseness by omitting useful guidance.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with five optional parameters and no annotation support, the description is too thin to be fully actionable. The output schema may cover return shape, but the description does not explain the purpose of the parameters or the context in which this contract should be requested.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description does not explain any of the five parameters (check_id, decision, workflow_id, signal_class_id, required_attribute). The agent cannot tell how these optional parameters affect the returned contract. Description adds no semantic value beyond the bare schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the specific verb 'Return' and names a concrete resource: the OpenTelemetry-aligned agentic telemetry and redaction contract. This is clear enough to know what the tool does, though it doesn't explicitly differentiate itself from the many sibling recipe tools beyond the unique contract name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool, what scenarios call for it, or how it relates to sibling tools like recipes_secure_context_evidence_contract or recipes_agentic_readiness_scorecard. The description only states what it returns, leaving the agent to infer usage.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agentic_threat_radarCInspect

Return current source-backed agentic AI threat signals and product priorities.

ParametersJSON Schema
NameRequiredDescriptionDefault
horizonNo
priorityNo
signal_idNo
capability_idNo
minimum_scoreNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral disclosure burden. It communicates that results are 'current' and 'source-backed,' which is a useful data-quality signal, but it does not disclose whether the call is read-only, how priorities are determined, whether filtering affects the output, or what side effects could occur.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single concise sentence with no fluff, which is good for front-loading. However, given the tool has five optional parameters and many close siblings, the brevity borders on under-specification rather than effective conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be fully described, but the description still leaves major gaps: no parameter explanations, no guidance on defaults or filtering behavior, and no differentiation from numerous threat/risk sibling tools. With no annotations and five optional inputs, an agent has too little context to call this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not explain any of the five optional parameters. While names like 'minimum_score' and 'signal_id' are somewhat self-explanatory, the description adds no meaning about values, formats, or interactions for 'horizon', 'priority', 'capability_id', or the other fields.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Return') and resource ('current source-backed agentic AI threat signals and product priorities'), making the tool's purpose clear. It adds meaningful qualifiers ('source-backed', 'current') not present in the tool name, and the output focus on threat signals plus product priorities helps set it apart from sibling packs, though it does not explicitly name any alternative.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description offers no guidance on when to use this tool versus the many sibling threat, risk, and posture tools. It implies a monitoring/radar use case through the word 'radar' and 'current', but there are no explicit when-to-use, exclusions, or alternative recommendations.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agent_identity_ledgerCInspect

Return agent non-human identity, delegation, scope, and audit contracts.

ParametersJSON Schema
NameRequiredDescriptionDefault
agent_classNo
identity_idNo
workflow_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of disclosing behavior. 'Return' weakly implies a read-only operation, but the description does not state whether this is purely a lookup, how results are scoped when optional parameters are omitted, whether any side effects occur, or how the returned contracts are assembled.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no filler. Every word carries meaningful content, and the description is appropriately brief for what little it commits to.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Although an output schema exists, the description leaves important intent ambiguous: what an 'identity ledger' contains, what selecting by identity_id versus workflow_id does, and how this tool relates to the large sibling set. A caller would likely need external documentation to choose and invoke this tool safely.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description provides no parameter-level explanation. The three optional parameters (agent_class, identity_id, workflow_id) remain semantically unexplained, and the description does not connect its contract categories to these parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a clear verb ('Return') and specifies a resource composed of distinct contract types: non-human identity, delegation, scope, and audit. It is concrete enough to separate it from many generic sibling tools, though it does not explicitly distinguish it from similar ledger/profile tools like recipes_secure_context_lineage_ledger.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance about when to use this tool versus any of the many sibling tools. The description gives no context for when a caller should select this ledger instead of an agent card, trust profile, handoff boundary, or lineage ledger.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agent_memory_boundary_packCInspect

Return agent memory classes, workflow profiles, TTLs, and persistence decisions.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
persistentNo
workflow_idNo
memory_class_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. 'Return' hints at a read-like operation, but there is no mention of side effects, prerequisites, whether decisions are computed or stored, or how persistence decisions are derived.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one compact sentence with a clear opening verb and list of returned items. It is appropriately short, though it sacrifices explanatory depth for brevity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with four optional parameters, no annotations, and a zero-coverage schema description, the description is too thin to support correct invocation. The output schema may document return values, but parameter semantics and usage context remain unexplained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not explain any of the four parameters: decision, persistent, workflow_id, or memory_class_id. The parameter names are suggestive but ambiguous, and the description adds no meaning beyond the raw schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear action ('Return') and a specific resource: agent memory classes, workflow profiles, TTLs, and persistence decisions. It is distinct enough from sibling boundary packs by focusing on agent memory, though it does not explicitly explain what a 'boundary pack' is.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given on when to use this tool versus the many sibling boundary-pack tools. The description implies it returns memory-related data, but it does not state conditions, exclusions, or alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agent_skill_supply_chain_packCInspect

Return agent skill provenance, permission, isolation, and supply-chain decisions.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
platformNo
skill_idNo
risk_tierNo
minimum_scoreNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. 'Return' implies a read operation, but it doesn't state whether it's read-only, whether it makes external calls, or any side effects. There's no mention of auth, rate limits, or data handling. Significant gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, concise sentence with no filler. However, it is under-specified and doesn't earn its place because it lacks essential details about parameters and usage. It's concise but not adequately informative.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 5 optional parameters, no annotations, and 0% schema coverage, the description is far too sparse. It doesn't explain the purpose of parameters, the output format (even though an output schema exists, the description doesn't mention it), or how to use the tool effectively. It is inadequate for an agent to correctly invoke this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and the description gives no information about the five parameters (decision, platform, skill_id, risk_tier, minimum_score). The description only says what the tool returns, not how parameters affect it. This is a critical omission.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear action (Return) and a specific resource (agent skill supply-chain decisions), listing the kinds of decisions (provenance, permission, isolation). However, it doesn't explicitly single out the tool from siblings, and 'supply-chain decisions' is broad. It's clear enough but not sharply differentiated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus the many sibling tools. It doesn't mention prerequisites, conditions, or alternatives. Agents are left to guess based on the name alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_agent_trust_fabric_packCInspect

Return Agent Trust Fabric dimensions, workflow tiers, source evidence, and buyer proof.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
trust_tierNo
workflow_idNo
dimension_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations supplied, the description carries the behavioral transparency burden. 'Return' implies a read-only retrieval operation and the description lists what it returns, which is helpful. However, it does not disclose how filtering parameters affect results, the scope of evidence, or any limitations, so the transparency is only partial.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with no redundant phrasing. It names the verb and the key output categories efficiently, though it is terse to the point of omitting useful guidance in other dimensions.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with four optional parameters, no annotations, and no parameter explanations, this one-sentence description is incomplete. The output schema may document return shapes, but the agent still lacks enough context about filtering, parameter relationships, and when this recipe pack should be used among dozens of siblings.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not compensate by explaining any of the four parameters. The parameter names and the outputs listed in the description provide weak implicit mapping, but status, trust_tier, workflow_id, and dimension_id remain semantically vague with no enforcement, format, or meaning described.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and identifies a clear resource ('Agent Trust Fabric'), then enumerates the main outputs: dimensions, workflow tiers, source evidence, and buyer proof. This makes the tool's purpose reasonably clear, though it does not explicitly differentiate it from sibling trust-related recipe packs.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus alternatives such as recipes_secure_context_trust_pack, recipes_a2a_agent_card_trust_profile, or other trust-related packs. No context, exclusions, or preconditions are provided, leaving selection to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_browser_agent_boundary_packCInspect

Return browser-agent workspace classes, task profiles, controls, and evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
risk_tierNo
task_profile_idNo
workspace_class_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full behavioral disclosure burden, but it only says 'Return' and lists output categories. It does not explain whether filtering occurs, how the four nullable inputs affect results, whether this is read-only, or any side effects or access considerations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, compact sentence with no filler or redundancy. It is front-loaded with the main action and resource list, though it is shorter than the complexity of a four-parameter tool might warrant.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with four optional nullable parameters, no annotations, and many similar sibling packs, the description is incomplete. The output schema covers return structure, but an agent still lacks needed context about when to use this pack, what each input means, and how this boundary pack differs from related ones.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description only loosely maps to parameters: 'task profiles' suggests task_profile_id and 'workspace classes' suggests workspace_class_id, but 'decision' and 'risk_tier' are entirely unexplained. The description does not compensate for the schema's lack of parameter documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a clear verb ('Return') and identifies a specific resource: browser-agent workspace classes, task profiles, controls, and evidence. The browser-agent qualifier helps distinguish it from the many other boundary-pack siblings, though the description does not explicitly contrast it with them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance about when to use this tool versus alternatives such as recipes_agent_handoff_boundary_pack or recipes_context_egress_boundary_pack. The browser-agent wording implies a context, but the description never states selection criteria, prerequisites, or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_context_egress_boundary_packCInspect

Return context egress data classes, destination classes, and workflow boundary policy.

ParametersJSON Schema
NameRequiredDescriptionDefault
source_idNo
data_classNo
workflow_idNo
destination_classNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full responsibility for behavioral disclosure. It only says 'Return', implying a read operation, but does not state whether it is read-only, what side effects occur, or how parameters modify the output. No behavioral traits beyond the name are disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence, concise and front-loaded with the verb 'Return'. However, it is so minimal that it lacks structure—the three output types are listed without separation or context, making it less scannable than it could be.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 4 optional parameters and no schema descriptions, the description is inadequate. It does not explain the purpose of each parameter or how they are used. The existence of an output schema helps, but the description still leaves the agent guessing about call semantics and expected usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must explain parameters. It mentions 'data classes' and 'destination classes' but does not map them to the four parameters (source_id, data_class, workflow_id, destination_class). It fails to clarify what each parameter does or how they filter results.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb 'Return' and lists three resource types (context egress data classes, destination classes, workflow boundary policy), which clearly explains the tool's output. However, it does not differentiate from numerous sibling 'pack' tools that also return policies or classes, so it is not fully distinctive.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives. The description does not mention conditions for use, exclusions, or any reference to sibling tools, leaving the agent to infer the appropriate context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_context_poisoning_guard_packCInspect

Return context-poisoning scan results for registered secure-context sources.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNo
rule_idNo
decisionNo
severityNo
source_idNo
actionable_onlyNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. It only states 'Return', implying a read-only operation, but does not disclose potential side effects, data freshness, pagination, or any caveats. This is minimal for a tool with no annotation support.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single concise sentence with no redundant words. It is appropriately short, though it may be too terse given the complexity of the tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 6 optional parameters, no schema descriptions, and no annotations, the description is severely incomplete. An agent cannot determine what inputs to provide or what the scan results entail, despite having an output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 6 parameters with 0% description coverage, and the description does not explain any of them. Parameter names like 'limit', 'rule_id', 'decision', 'severity', 'source_id', and 'actionable_only' are not elaborated, leaving the agent without clarity on valid values or their purpose.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear verb ('Return') and resource ('context-poisoning scan results for registered secure-context sources'). It conveys the purpose effectively, but it does not explicitly differentiate from sibling tools like recipes_secure_context_trust_pack or recipes_secure_context_attestation_pack, though the name itself implies a focused function.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It does not mention context, preconditions, or exclusions. An agent would have to infer use cases from the name alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_critical_infrastructure_secure_context_packCInspect

Return the generated critical-infrastructure secure-context profile.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
sector_idNo
control_idNo
buyer_view_idNo
readiness_statusNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full disclosure burden. 'Return' implies a read operation rather than a mutation, which is helpful, but the description does not disclose what happens if the profile has not been generated, whether parameters filter or transform the result, or any side effects or prerequisites.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with no filler. It communicates the core action and object efficiently, though it is sparse. Conciseness is good even though completeness is lacking.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has five optional parameters, no annotations, and no parameter-level documentation. The description names the returned profile but does not explain how the parameters relate to that profile, what 'critical-infrastructure' means in this context, or how this tool fits into the broader secure-context recipe family. The output schema reduces the need to explain return structure, but the operational context is still under-specified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate for the five undocumented parameters. It does not mention decision, sector_id, control_id, buyer_view_id, or readiness_status at all. An agent gets no additional meaning beyond the parameter names and default-null values in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a retrieval verb ('Return') and a specific resource ('generated critical-infrastructure secure-context profile'). It is more specific than a tautology, but it does not differentiate this pack from the many other secure-context sibling tools such as recipes_secure_context_trust_pack or recipes_secure_context_attestation_pack.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance about when this tool should be used, how it relates to sibling secure-context tools, or what prior steps are needed for the profile to exist. The word 'generated' implies a dependency but nothing explicitly states when to call this vs. alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_cve_catalog_infoAInspect

Return the complete Medium/High/Critical CVE catalog scope, coverage, provenance, and counts.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It clearly indicates a read-only, informational operation and specifies what is returned: scope, coverage, provenance, and counts. It does not overstate side effects, and no mutation is implied.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no wasted words. It states the action, the resource, and the specific information returned, making it easy to scan and parse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a simple zero-parameter informational tool with an output schema present, so the description fully covers what an agent needs to decide whether to call it. It names the returned dimensions and does not need to enumerate output fields because the schema handles that.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and the schema fully covers this, so the baseline of 4 applies. The description does not need to add parameter detail because there are none; it correctly focuses on the return content instead.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a clear verb ('Return') with a specific resource: the Medium/High/Critical CVE catalog, and names the exact facets returned (scope, coverage, provenance, counts). This clearly distinguishes it from sibling tools that fetch individual CVEs or search CVE data.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly establishes this as a catalog-level metadata overview rather than a CVE lookup, so an agent can infer when to choose it over recipes_cve_get or recipes_cve_search. It does not explicitly name alternatives or exclusion conditions, but the context is unambiguous.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_cve_getAInspect

Get evidence, recipe authority, and a bounded code/config/file change plan for one exact CVE.

ParametersJSON Schema
NameRequiredDescriptionDefault
cveYes

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must carry the full burden. It describes what the tool returns (evidence, recipe authority, bounded change plan) but does not disclose side effects (read-only vs. write), permission requirements, or error behavior. While 'Get' likely implies read-only, this is not explicitly stated. The description adds some context but lacks depth on operational behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Single sentence, front-loaded with the core purpose, with no unnecessary words. The description is efficient and self-contained.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has an output schema that presumably describes the return structure, and the description covers the purpose and parameter semantics. It does not mention prerequisites (e.g., CVE existence) or error handling, but for a simple get operation with one parameter, it is reasonably complete. The description provides enough context for an agent to decide when to call it and what to pass.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema only defines 'cve' as a string without description (0% coverage). The description compensates by specifying that the tool works for 'one exact CVE', clarifying that the parameter should be a specific CVE identifier. This adds meaningful semantic context beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Get') and a clear resource ('evidence, recipe authority, and a bounded code/config/file change plan') for one exact CVE. This distinguishes it from sibling tools like recipes_cve_search (which searches) and recipes_cve_catalog_info (which provides catalog info). The scoping to 'one exact CVE' adds precision.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Implies usage when the agent has a specific CVE identifier (as opposed to searching). The phrase 'one exact CVE' provides context, but it does not explicitly name alternatives or state when not to use this tool. No exclusionary guidance is given, so a 4 is appropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_design_partner_pilot_packDInspect

Return the design partner pilot motion for buyer proof and hosted MCP validation.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
risk_idNo
phase_idNo
wedge_idNo
metric_idNo
segment_idNo
question_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

D1.3/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries full responsibility for behavioral disclosure. It only says 'Return...' with no detail on side effects, permission requirements, or what the response contains. It does not contradict annotations (there are none), but it reveals almost nothing about runtime behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single short sentence, which is concise, but it severely under-specifies the tool. It is not appropriately sized because it omits crucial information; it is merely terse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 7 optional parameters, no parameter documentation, no behavior explanation, and no clear return value (despite an output schema existing), the description is grossly incomplete. Even the presence of an output schema does not help because the description does not indicate what data is returned or how it is structured.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description names none of the 7 parameters. The parameters are all optional and untyped beyond 'string' or 'null', with no explanation of what they filter or control. The description provides no semantic context for any of them.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a vague noun phrase 'design partner pilot motion' without defining it, and gives no indication of what the tool actually produces (e.g., a document, a workflow, a recommendation). It does not distinguish this tool from the dozens of other 'recipes_' siblings, making selection ambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus the many sibling 'recipes_' tools. No mention of prerequisites, typical scenarios, or what problem it solves. The phrase 'for buyer proof and hosted MCP validation' hints at a purpose, but it is not actionable instruction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_enterprise_trust_center_exportCInspect

Return the bundled enterprise trust-center export for buyer and platform diligence.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
pack_idNo
categoryNo
section_idNo
question_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure, but it only says 'Return.' It does not explain whether this is read-only, whether parameters filter the output, or what 'bundled' means operationally.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single well-formed sentence that front-loads the action and purpose. It is not padded, though brevity is achieved by omitting parameter and behavioral context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with five unannotated parameters and no behavioral guidance, this is incomplete. The output schema covers return structure, but the agent cannot tell whether to pass filters, whether parameters combine, or what 'bundled' means in practice.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description adds no meaning to the five optional parameters. An agent cannot tell how status, pack_id, category, section_id, or question_id affect the returned export.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Return') and resource ('bundled enterprise trust-center export') and gives the audience/purpose ('buyer and platform diligence'). It doesn't explicitly differentiate among sibling trust/diligence tools, but the core action is clear.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'for buyer and platform diligence' supplies a usage context and implies when this tool is relevant. However, it does not state when to prefer this tool over siblings like recipes_secure_context_buyer_diligence_brief, nor does it give exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_getBInspect

Get a full recipe record by slug or path.

ParametersJSON Schema
NameRequiredDescriptionDefault
slug_or_pathYes

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description does not disclose any side effects or explicitly state that it is read-only. Without annotations, the behavioral transparency is limited to the implied meaning of 'Get'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise and to the point, with no unnecessary words. It effectively communicates the core functionality in a single sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is sufficient for a simple retrieval operation, but it lacks details about error handling or return structure. Since an output schema exists, it does not need to explain return values, but it could benefit from mentioning potential null results or not-found behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The parameter name 'slug_or_path' and the description indicate that the identifier can be either a slug or a path. However, no further details are given about format, examples, or validation rules.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (Get), the resource (full recipe record), and the identifier (slug or path). It is specific and unambiguous, distinguishing it from list or search tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not provide guidance on when to use this tool over alternatives like recipes_list or recipes_search. It only describes what it does, not the context or conditions for its use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_hosted_mcp_readiness_packCInspect

Return the hosted MCP readiness plan for enterprise product rollout.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
gate_idNo
risk_idNo
stage_idNo
control_idNo
buyer_evidence_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries full responsibility for disclosing behavioral traits. It only states that a plan is returned, with no mention of side effects, permissions, rate limits, or what 'readiness plan' entails. The agent has no idea if this is a read-only operation or if it has implications.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no redundancy. It conveys the core action efficiently, though it may be too terse given the need for parameter context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema, the description fails to provide context on what the readiness plan contains or how the parameters affect it. With 6 optional parameters and no documentation, the tool is under-specified for practical use. The sibling list is long, further requiring differentiation that is absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not explain any of the six optional parameters (status, gate_id, risk_id, stage_id, control_id, buyer_evidence_id). None of these are described, leaving the agent without any clue how to populate them or what filtering they enable.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a verb ('Return') and a resource ('hosted MCP readiness plan'), and specifies the context ('enterprise product rollout'). It distinguishes from most siblings by focusing on readiness planning, though it doesn't explicitly contrast with closely related tools like recipes_agentic_readiness_scorecard.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus the many sibling recipe tools. It doesn't mention alternatives, exclusions, or prerequisites. The agent is left to infer that this is the go-to for hosted MCP readiness, but with no explicit routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_listDInspect

List recipes with optional metadata filtering.

ParametersJSON Schema
NameRequiredDescriptionDefault
tagsNo
agentNo
limitNo
facetsNo
sectionNo
severityNo
min_qualityNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

D1.8/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It only says 'List recipes', which implies a read-only operation, but does not disclose pagination, default limits, sorting, or any side effects. There is no explicit statement of safety or side-effect behavior, making it insufficient for an agent to understand the operational profile.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely brief (six words), but this is under-specification rather than conciseness. The single sentence lacks essential details about filters, sorting, or output, making it inadequate for a tool with seven optional parameters. It is not front-loaded with critical information because no critical information is present.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (seven optional parameters) and the presence of an output schema, the description should explain what filters are available, how they combine, and what the response contains. However, it provides only a generic statement. The description is completely inadequate for an agent to understand how to construct a valid request or interpret the results, especially in a large sibling family where similar tools exist.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate by explaining parameter usage. It mentions 'optional metadata filtering' but does not map any of the seven parameters (tags, agent, limit, facets, section, severity, min_quality) to their meaning or purpose. The description adds no semantic value beyond what the parameter names themselves imply, which is insufficient for correct usage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear verb ('List') and resource ('recipes'), and mentions 'optional metadata filtering'. However, it does not differentiate from sibling tools like recipes_search or recipes_get, which also list or retrieve recipes. The term 'metadata filtering' is vague and doesn't specify which metadata fields or how filtering works, leaving ambiguity about its unique role.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives. There is no mention of when not to use it, no examples, and no reference to sibling tools. The description simply states what it does without context on selection criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_match_findingCInspect

Heuristic matcher that suggests best-fit recipes for a security finding.

ParametersJSON Schema
NameRequiredDescriptionDefault
cveNo
limitNo
facetsNo
packageNo
rule_idNo
keywordsNo
ecosystemNo
min_qualityNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description bears the full burden. 'Heuristic' and 'best-fit' disclose approximate behavior, but the description does not explain ranking, quality thresholds, empty results, or how the multiple criteria combine.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The one-sentence description is free of filler and front-loads the core notion. However, it is under-specified rather than appropriately sized, so the brevity reduces overall usefulness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has no annotations, 8 optional parameters, and no parameter documentation, and the description does not fill that gap. It lacks when-to-use guidance, behavioral details, and any parameter semantics needed to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description names none of the 8 parameters. An agent must guess the meaning and format of cve, package, facets, rule_id, keywords, ecosystem, min_quality, and limit.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear action ('suggests best-fit recipes') and target domain ('security finding'), with 'heuristic' signaling approximate matching. The name distinguishes it from the many other recipes_* tools, though it does not explicitly compare itself to siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given on when to choose this matcher over sibling tools such as recipes_cve_get, recipes_cve_search, or recipes_search. The 'match_finding' verb implies a use case, but conditions and exclusions are left unstated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_authorization_conformance_packCInspect

Return MCP authorization conformance, scope-drift, and token-boundary evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
namespaceNo
workflow_idNo
connector_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full burden, but it only says 'Return ... evidence.' It does not disclose read-only behavior, how the parameters affect the result, whether any context is required, or what 'scope-drift' and 'token-boundary' evidence mean operationally. The wording is not misleading but is too thin to be transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single clear sentence with no filler and front-loads the main deliverable. It is easy to scan and efficient, though its brevity is partly achieved by omitting useful detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with four optional parameters and no annotations, one sentence is not enough to convey invocation semantics, evidence boundaries, or how this pack differs from similarly named siblings. Even with an output schema present, the description lacks the context needed to use the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description mentions none of the four parameters: decision, namespace, workflow_id, and connector_id. Their nullable/default null shapes are documented only structurally, with no meaning added. An agent cannot determine what values to supply or how they influence the returned evidence.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific deliverable—'MCP authorization conformance, scope-drift, and token-boundary evidence'—with the verb 'Return', so it is not a tautology and has a clear resource. However, it does not differentiate this pack from closely related siblings such as recipes_mcp_tool_surface_drift_pack or recipes_agentic_protocol_conformance_pack, so it misses the top score.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus the many sibling recipe packs. The description provides no scenario, prerequisites, exclusions, or alternative tool names. An agent would have to infer the intended context entirely from the tool name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_connector_intake_packCInspect

Return MCP connector intake decisions, risk findings, gaps, and promotion plans.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
namespaceNo
candidate_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It indicates a read-like 'Return' operation but does not state whether state changes, whether parameters are filters or inputs, what decisions are based on, or any side effects. The behavioral surface is largely opaque.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single concise sentence with no fluff and front-loads the main action and outputs. It is under-specified in content, but strictly for structure and economy it is well-formed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

While an output schema exists, the description still lacks usage context, parameter semantics, and any differentiation from sibling intake/risk tools. An agent would not know how to correctly invoke this tool or interpret the role of its optional parameters.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not mention or explain decision, namespace, or candidate_id. The parameter names are somewhat suggestive but their meaning, allowed values, and role in the operation are completely undocumented, so the description provides no compensating value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and resource ('MCP connector intake decisions, risk findings, gaps, and promotion plans'), so an agent can tell it involves connector intake outputs. However, it does not differentiate this from closely named siblings like recipes_mcp_connector_trust_pack or recipes_mcp_risk_coverage_pack.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance about when to use this tool versus the many sibling recipe/risk/pack tools. No alternatives, conditions, or exclusions are provided, leaving the agent to infer the appropriate context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_connector_trust_packCInspect

Return MCP connector trust tiers, controls, evidence, and workflow namespace coverage.

ParametersJSON Schema
NameRequiredDescriptionDefault
namespaceNo
workflow_idNo
connector_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must disclose behavioral traits. The description indicates a read-only operation ('Return'), but it does not mention whether authentication is required, whether results are paginated, whether it is safe to call during planning, or any side effects. The description is minimal and does not add meaningful behavioral context beyond the single verb.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, grammatically simple sentence with no redundant words, which is concise. However, it lacks structure: it does not front-load the most critical information (e.g., the primary resource or how to target a specific connector). The brevity is appropriate but the content is too vague to be truly efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present (though not shown), the description does not need to explain return structure, but it must explain the tool's role and when to invoke it. Given the extensive sibling list, the description should clarify its unique purpose and parameter usage. It is incomplete for an agent to confidently decide when to use this tool and how to set parameters.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

All three parameters are optional and the schema provides no descriptions (schema coverage 0%). The description mentions 'workflow namespace coverage' but does not explain the roles of namespace, workflow_id, or connector_id. It does not clarify whether these act as filters, how they interact, or what formats are expected. The description fails to compensate for the complete lack of schema-level documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a clear purpose: returns MCP connector trust tiers, controls, evidence, and workflow namespace coverage. The verb 'Return' indicates a read operation, and the resource is MCP connector trust information. However, it doesn't explicitly differentiate from sibling tools like recipes_mcp_connector_intake_pack or recipes_mcp_risk_coverage_pack, though the focus on 'trust tiers' hints at its niche. Slightly distinguishes itself but not fully.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus the many sibling tools. It does not mention alternatives, conditions for selection, or exclusions. The description implies it is for retrieving trust-related MCP connector data, but there is no explicit 'when to use' or 'when not to use' information, leaving the agent to infer from the tool name and context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_elicitation_boundary_packCInspect

Return MCP form-mode and URL-mode elicitation boundary evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNo
decisionNo
risk_tierNo
profile_idNo
workflow_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full behavioral burden. 'Return ... evidence' implies a read-only retrieval, but it does not disclose whether the call is safe, whether filtering parameters affect behavior, what 'evidence' includes, or any side-effect or prerequisite context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no filler and front-loads the action. However, it is under-specified for a tool with five undocumented optional parameters and a highly specialized domain, so brevity is achieved at the expense of necessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The output schema may document return shape, but parameter semantics, usage context, and boundary evidence meaning are all absent. Given the dense sibling list and cryptic 'elicitation boundary' terminology, this description gives an agent only a weak starting point.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not mention mode, decision, risk_tier, profile_id, or workflow_id at all. These parameter names are ambiguous in this domain, so with no schema descriptions and no parameter guidance in the description, the agent cannot reliably know what values to supply.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and a resource ('MCP form-mode and URL-mode elicitation boundary evidence'), which differentiates it from sibling boundary packs like stdio_launch or browser_agent. However, 'elicitation boundary evidence' is jargon that is not expanded, so the exact purpose remains somewhat opaque.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance about when to use this tool versus the many sibling boundary packs. No alternatives, exclusions, or contextual triggers are provided, leaving the agent to guess which of the roughly 70 sibling recipes this tool fits.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_gateway_policyCInspect

Return generated MCP gateway policy for scoped tool access and runtime controls.

ParametersJSON Schema
NameRequiredDescriptionDefault
workflow_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are supplied, so the description is the only behavioral disclosure. It indicates a return/generation operation, but it does not disclose side effects, authentication requirements, whether generation depends on workflow_id, or any runtime behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no filler and front-loads the action and output object. It is efficient, though terse enough that some semantic burden is shifted elsewhere.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite low parameter complexity and the presence of an output schema, the description leaves parameter semantics and sibling differentiation entirely unaddressed. The agent still cannot confidently decide when to call this tool or how to pass workflow_id.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

workflow_id has zero schema description coverage and the description does not mention it at all. An agent cannot know what values are valid or how null versus a supplied workflow_id affects the generated policy.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a concrete verb and object: 'Return generated MCP gateway policy,' and scopes it to 'scoped tool access and runtime controls.' This clearly identifies the artifact and domain, though it does not explicitly contrast with any of the many sibling recipe tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to invoke this tool instead of related siblings such as recipes_mcp_authorization_conformance_pack or recipes_workflow_control_plane. No exclusions, prerequisites, or alternative-selection conditions are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_risk_coverage_packCInspect

Return OWASP MCP and agentic-skill risk coverage mapped to generated evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
risk_idNo
risk_tierNo
source_idNo
standard_idNo
capability_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It states only that the tool returns a mapping, giving no information about filtering behavior, default handling of the six optional parameters, whether results are restricted by status or risk tier, or what 'generated evidence' refers to. The read-only nature is implied by 'Return' but never confirmed or elaborated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short, which is good, but it is under-specified rather than deliberately concise. The single sentence earns its place as a purpose statement but omits necessary guidance. There is no structure or additional detail that would help an agent use the tool effectively.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema, the description fails to explain the tool's six completely undocumented parameters, the meaning of 'generated evidence,' or how to interpret the risk coverage results. Given the breadth of sibling tools and the lack of any annotation or schema descriptions, this description is far too thin for reliable tool selection and invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, with six optional parameters (status, risk_id, risk_tier, source_id, standard_id, capability_id) and no descriptions in the schema. The description does not explain what any parameter means, how they filter the coverage mapping, or how they combine. This is a significant gap that the description makes no attempt to fill.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ('Return') and resource ('OWASP MCP and agentic-skill risk coverage mapped to generated evidence'), making the core purpose understandable. It does not sharply differentiate this tool from the many sibling risk/pack tools, but the 'OWASP' and 'generated evidence' qualifiers provide meaningful context.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given on when to use this tool versus alternatives such as recipes_mcp_tool_risk_contract or recipes_agentic_assurance_pack. There are no stated conditions, exclusions, or sibling references, leaving the agent to infer usage from the name and one-line description alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_server_getBInspect

Return one publicly documented MCP server with official setup and safety guidance.

ParametersJSON Schema
NameRequiredDescriptionDefault
server_idYes

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the burden of behavioral disclosure. It does clarify that only publicly documented servers are returned and that the content includes setup and safety guidance, which is useful filtering context. However, it does not describe error handling for unknown server IDs, authorization needs, or freshness/caching behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence that is front-loaded with the action and object, with no filler or redundancy. Every word contributes to the meaning, and the length is appropriate for a simple retrieval tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a simple one-parameter getter and an output schema is present, so the return shape is already structured. Still, the description leaves the parameter unexplained and offers no usage context, making it adequate but not fully complete for guiding an agent's selection and invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate for the unexplained server_id parameter, but it never mentions it. The parameter name and the tool's get semantics make the meaning inferable, but the description adds no actual semantic value beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and identifies the resource ('one publicly documented MCP server') and the content included ('official setup and safety guidance'). The word 'one' implies a single-item get operation and weakly distinguishes it from list-style siblings, though no sibling is named.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no when-to-use guidance, prerequisites, or alternatives. An agent must infer that it is the tool for retrieving a single server by ID, and there is no indication of when to prefer recipes_mcp_servers_list or other lookup tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_servers_listCInspect

Search the bundled catalog of publicly documented MCP servers and ecosystems.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNo
queryNo
availabilityNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It only states that it searches a catalog; it does not mention whether it is read-only, any side effects, authorization requirements, or the nature of results. This is minimal and does not add beyond the name's implication.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence, which is concise, but it is under-specified for the complexity of the tool. It lacks any structure that would help an agent understand parameters or usage. The brevity is not 'appropriately sized' because it omits essential information an agent needs.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has three parameters, no annotations, and an output schema, the description is incomplete. It does not explain return value semantics, parameter usage, or when to use this over sibling tools. An agent would struggle to call this tool correctly without further investigation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, meaning the description mentions none of the three parameters (query, limit, availability) or their semantics. The description must compensate for the lack of schema detail, but it fails to explain what these parameters control. This is a significant gap for a tool with three parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Search') and the resource ('bundled catalog of publicly documented MCP servers and ecosystems'), providing a specific verb+resource. However, it does not distinguish this from sibling tools like recipes_search, recipes_list, or recipes_mcp_upstream_servers, all of which could be confused for similar operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus alternatives. The description does not mention when a search is appropriate, how it differs from a plain list, or any exclusions. The user must infer usage from context, which is not provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_stdio_launch_boundary_packDInspect

Return MCP STDIO launch boundaries, profiles, decisions, and evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
launch_idNo
profile_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

D1.3/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Since no annotations are provided, the description must disclose behavior. It only says 'Return...', implying a read operation but without confirming side-effect-freeness, auth requirements, or whether results are complete. There is no mention of what happens with null parameters, how many results are returned, or any potential limitations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The single sentence is concise but also under-specified. While there is no fluff, the brevity hurts usefulness because it omits critical details. A well-structured description would front-load the primary purpose but still offer parameter context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a 3-parameter tool with no schema descriptions, no annotations, and a rich set of sibling tools. The description fails to explain the tool's role, the meaning of its inputs, or expected output format (even though an output schema exists). It is thoroughly incomplete for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 0% description coverage for its three parameters (decision, launch_id, profile_id), so the description must explain their roles. It does not mention any of them, leaving the agent guessing what each parameter controls (e.g., whether decision is a filter or a modifier) and how they interact.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a verb ('Return') and lists four nouns ('MCP STDIO launch boundaries, profiles, decisions, and evidence'), but these terms are undefined and the tool's exact scope is unclear. It does not differentiate from many similar boundary-pack siblings (e.g., recipes_agent_handoff_boundary_pack, recipes_mcp_elicitation_boundary_pack), making it hard for an agent to know what makes this tool distinct.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no mention of when to use this tool, when not to, or which alternatives to consider. The description gives no context about the intended scenario, such as 'when analyzing MCP STDIO launch configurations' or 'prefer this over the handoff pack when...'.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_tool_risk_contractCInspect

Return MCP tool annotation, trust, and session-combination risk evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
namespaceNo
risk_tierNo
workflow_idNo
connector_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

'Return' communicates a non-mutating retrieval operation, which is a useful behavioral cue, but nothing is disclosed about data sources, freshness, authentication, or failure behavior. Since annotations are absent, the description carries the transparency burden and only partially satisfies it; the existence of an output schema helps offset the lack of return-shape detail.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with no filler, making it structurally concise and easy to scan. The brevity is achieved at the cost of missing usage and parameter context, but that is more appropriately penalized in other dimensions.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with five filter parameters and a large sibling set of risk, trust, and contract tools, the one-sentence description leaves meaningful gaps: no matching semantics, no alternatives, and no preconditions or scope. The output schema may document return values, but it does not clarify input semantics or when this evidence contract is the right choice.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema lists five optional nullable strings, but the description gives no mapping between parameters such as decision, risk_tier, workflow_id, or connector_id and how they filter or shape the returned evidence. With 0% schema description coverage, the description does not compensate, leaving meaning to be inferred from parameter names alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and names the output domain ('MCP tool annotation, trust, and session-combination risk evidence'), which clarifies the core purpose. However, it does not contrast with semantically close siblings such as recipes_mcp_risk_coverage_pack or recipes_secure_context_evidence_contract, so some differentiation is left to the agent.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided about when to call this tool versus alternatives like recipes_mcp_risk_coverage_pack, recipes_agentic_telemetry_contract, or recipes_secure_context_evidence_contract. The description states only what is returned, not when it should be used or when a different tool would be more appropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_tool_surface_drift_packCInspect

Return pinned MCP tool descriptions, schemas, annotations, and drift evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
namespaceNo
tool_nameNo
surface_idNo
source_kindNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It mentions the returned content types but does not explain what 'pinned' or 'drift evidence' mean, whether the operation is read-only, or what side effects or constraints exist.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, direct sentence with no filler and lists the output components in a straightforward way. It is concise and front-loaded, though it is also too terse to be fully useful.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given five undocumented optional parameters, no annotations, and a large sibling group, the description is incomplete. It does not explain the role of 'pinned', the meaning of 'drift evidence', or how parameters combine to select the surfaced data. The presence of an output schema helps but does not resolve input ambiguity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

All five parameters (decision, namespace, tool_name, surface_id, source_kind) have zero schema description coverage and the description does not explain any of them. The description must compensate for the lack of parameter documentation but does not.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Return') and the resource ('pinned MCP tool descriptions, schemas, annotations, and drift evidence'), giving an agent a concrete idea of the output. It does not explicitly differentiate from sibling recipe tools, but 'drift evidence' is a distinctive element.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no guidance on when to use this tool versus alternatives, nor does it mention any prerequisites, filtering intent, or exclusions. An agent is left to infer appropriate usage from the name and input schema alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_upstream_callBInspect

Call an allowed read-only tool on a configured upstream MCP server.

ParametersJSON Schema
NameRequiredDescriptionDefault
argumentsNo
server_idYes
tool_nameYes

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the behavioral burden and does disclose the important trait that the tool is read-only and restricted to allowed tools. It does not describe error behavior, permission enforcement details, or argument pass-through behavior, so an agent gets only a partial behavioral picture.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with no filler; every word contributes the core action, scope, and safety qualifier. It is concise but not informative enough to be a 5 because it omits usable parameter guidance.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a generic dispatch tool with three parameters, no annotations, and zero schema description coverage, the description is too thin: it does not explain how to identify the server_id or tool_name, what arguments should contain, or what 'allowed' means in practice. The presence of an output schema helps clarify returns but does not make the call usable.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description only loosely implies that server_id refers to the configured upstream MCP server and tool_name to the allowed tool; arguments is not mentioned at all. Since the description does not name or explain the parameters, it only partially compensates for the missing schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Call'), a clear resource ('an allowed read-only tool on a configured upstream MCP server'), and the tool's scope. It also distinguishes itself from sibling tools such as recipes_mcp_upstream_servers and recipes_mcp_upstream_tools, which manage or list upstream servers/tools rather than invoke them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'configured upstream MCP server' and 'allowed read-only tool' imply the precondition that the server is configured and the tool is permitted, and that this is the invocation path for upstream tools. However, it gives no explicit when-to-use versus alternatives, such as using recipes_mcp_upstream_tools first to discover tool names or using a local tool when no upstream call is needed.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_upstream_contextCInspect

Collect bounded context from configured upstream MCP servers for a remediation query.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryYes
max_charsNo
server_idsNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of disclosing behavioral traits. It does not explicitly state whether the tool is read-only, makes outbound network calls, requires authentication, or has any side effects. The verb 'collect' implies passivity, but this is not confirmed, and limitations like max_chars are not mentioned in the description.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single concise sentence with no wordiness, which earns points for structure. However, it is too brief to be useful – it omits critical details that should be present, so the conciseness comes at the cost of adequacy. It is under-specified rather than appropriately condensed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's purpose of collecting context from external MCP servers and the presence of an output schema, the description fails to explain the operational context. It does not clarify what 'bounded context' means, how the query should be phrased, or any constraints. An agent would likely need to invoke the tool to discover behavior, which is risky for a 3-parameter tool with no annotations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has three parameters (query, max_chars, server_ids) with zero description coverage. The description adds no explanation of what these parameters mean, how they interact, or what valid values look like. An agent cannot infer that query is the remediation question, max_chars bounds the output, or server_ids filters which upstream servers are consulted.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action (collect), resource (bounded context), source (upstream MCP servers), and purpose (remediation query). It is clear enough to distinguish from sibling tools like recipes_mcp_upstream_call (direct call) and recipes_mcp_upstream_servers (list servers). However, 'bounded context' is jargon that is not explained, slightly reducing clarity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given on when to use this tool versus the many sibling tools. The description does not mention prerequisites, conditions that favor this tool over others, or illustrative scenarios. An agent must guess when 'collecting context' is appropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_upstream_serversAInspect

List optional upstream MCP servers configured for this Security Recipes server.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

There are no annotations, so the description carries the behavioral burden. 'List' clearly signals a read-only operation, and 'configured for this Security Recipes server' scopes the behavior to local configuration. It does not disclose operational details such as whether the list is sorted, whether upstream connectivity is checked, or whether any configuration values are redacted, but for a simple list operation the basic behavior is clear.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no filler. Every word adds meaning, and it successfully conveys the operation and scope without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given zero parameters and the presence of an output schema, this description is complete enough for an agent to select and invoke the tool. The scope is explicitly stated, and no additional setup, prerequisites, or return-value documentation is necessary.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and an empty schema, so the baseline is 4. The description correctly indicates that the tool simply lists configured servers; no additional parameter semantics are needed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List') and a specific resource ('optional upstream MCP servers configured for this Security Recipes server'). It distinguishes itself from sibling tools like recipes_mcp_servers_list and recipes_mcp_upstream_tools by narrowing scope to 'optional upstream servers' that are 'configured for this server'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use it: when you need to see the optional upstream MCP servers configured for this server. However, it does not explicitly state when not to use it or name alternative tools, so the agent must infer the boundary from context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_mcp_upstream_toolsAInspect

List tools exposed by a configured upstream MCP server and show local allow decisions.

ParametersJSON Schema
NameRequiredDescriptionDefault
server_idYes

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the behavioral disclosure burden. It does add useful non-obvious context by saying the output includes local allow decisions. However, it does not address whether the operation is read-only, whether it contacts the upstream server, how errors or missing allow decisions are handled, or how the local decisions are determined.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One sentence with no filler. The primary action is front-loaded, and the secondary output detail about local allow decisions is included without bloating the description.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that the tool takes a single required parameter and has an output schema available, the description covers the core behavior and the distinctive output element. The main missing piece is guidance on how to resolve server_id, but that is a minor gap for such a simple interface.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is one required string parameter, server_id, with zero schema description coverage. The description only indirectly clarifies the parameter via 'configured upstream MCP server', which makes it reasonably clear that server_id identifies the upstream server. This is adequate for a single simple parameter, but it would be stronger if it said where to find valid server IDs.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states the action and resource clearly: it lists tools exposed by a configured upstream MCP server and shows local allow decisions. This is specific enough to understand the tool's job, though it does not explicitly distinguish it from sibling tools such as recipes_mcp_upstream_servers or recipes_mcp_upstream_call.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool: when an agent needs to see the tool surface exposed by an upstream MCP server, along with local allow decisions. However, it provides no explicit when-not-to-use guidance, no prerequisites, and no direct comparison to alternative upstream MCP tools, leaving routing partly to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_model_provider_routing_packCInspect

Return model-provider route profiles, workflow mappings, and required evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
model_idNo
route_idNo
risk_tierNo
provider_idNo
workflow_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure, but it only states that the tool returns three categories of data. It does not state whether the operation is read-only, whether it requires special credentials, what happens if none of the six optional parameters are provided, or how results are scoped. The output schema provides return shape but not behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence starting with the verb and listing three concrete output types. It contains no filler or repetition. However, it is so compressed that it sacrifices essential semantic content, so it earns partial credit for brevity rather than full credit.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has six undocumented optional parameters, no annotations, and a large sibling family, yet the description provides no context about parameter interactions, default behavior, or use cases. The output schema exists but cannot compensate for the absence of guidance on how to invoke the tool meaningfully. Significant information is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not mention any of the six parameters (decision, model_id, route_id, risk_tier, provider_id, workflow_id). Since all parameters are optional, nullable, and lack enums or descriptions, the agent has no basis for knowing how to use them to filter or shape the returned data.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ('Return') and a concrete resource domain ('model-provider route profiles, workflow mappings, and required evidence'). This distinguishes it from the many sibling recipe packs by topic, though it doesn't clarify what a 'routing pack' encompasses or how it differs from closely related governance packs.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to invoke this tool versus any of the dozens of similar recipe_* pack tools. No alternatives are named, no exclusions are stated, and no triggering conditions are described. The agent must infer usage entirely from the name and the bare description.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_playbook_getBInspect

Get one complete remediation workflow, evidence, output, and Python contract.

ParametersJSON Schema
NameRequiredDescriptionDefault
playbook_idYes

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description does disclose the content bundle—'workflow, evidence, output, and Python contract'—which tells the agent what it will get back. However, there are no annotations, so the description carries the full burden; it does not explicitly state read-only semantics, required permissions, or failure behavior, though the verb 'Get' and the output schema mitigate the gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single concise sentence with no padding; it front-loads the action and enumerates the returned components compactly. It is appropriately sized, though the terseness contributes to the lack of context elsewhere.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is simple—one required string parameter and an output schema—so the description does not need to document the return shape. It is still incomplete because it gives no pointer for discovering playbook IDs and does not contrast with the list/plan siblings, though an agent handed a playbook_id can likely invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage, this description was the only place to explain playbook_id, and it does not mention the parameter at all. The parameter name is self-explanatory enough to guess it identifies the playbook, but no format, source, or relationship to the list tool is provided.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the verb 'Get' and identifies the resource as 'one complete remediation workflow' along with evidence, output, and Python contract, so an agent can infer this is a fetch operation for a single playbook. It clearly states what is returned, but it never names a sibling such as recipes_playbooks_list or recipes_playbook_plan, so differentiation is only implicit through the word 'one'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no explicit guidance about when to use this tool versus recipes_playbooks_list or recipes_playbook_plan, nor does it say where a playbook_id comes from or when the tool is inappropriate. The singular 'one' implies the intended use case, but that is too weak to qualify as real guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_playbook_planBInspect

Build a deterministic, read-only phase, gate, and evidence checklist for a finding.

ParametersJSON Schema
NameRequiredDescriptionDefault
findingNo
playbook_idYes

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of disclosing behavior. It explicitly states the operation is 'deterministic' and 'read-only,' which meaningfully conveys the safety and reproducibility profile. It does not mention auth, rate limits, or whether the checklist is persisted, but the read-only claim covers the most important behavioral trait.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with no filler words. It is concise, though it omits key input semantics, so it earns high marks for structure but not perfection.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The output schema covers return shape, but the description leaves the required playbook_id unexplained and does not reference sibling tools like recipes_playbooks_list or recipes_playbook_get for obtaining it. The relationship between finding and playbook_id is also unclear, making the tool difficult to invoke correctly without external knowledge.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, but it only hints at 'finding' and never explains the required 'playbook_id' parameter. An agent cannot determine what a valid playbook_id is, how it relates to the finding, or what the default null finding means.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Build') and names a concrete deliverable ('phase, gate, and evidence checklist') for a finding. It is clearly distinct from sibling tools like recipes_playbook_get or recipes_playbooks_list, though it does not explicitly name any sibling for differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'for a finding' implies when the tool should be used, but it does not state prerequisites, exclusions, or alternatives. An agent is left to infer that this is for planning rather than executing or retrieving a playbook, with no explicit guidance on when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_playbooks_listBInspect

List concise remediation playbook records, optionally filtered by query or category.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNo
queryNo
categoryNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description must carry the behavioral burden. It indicates a read-only listing operation (implying no side effects), but doesn't disclose any details about pagination, ordering, or whether the list is exhaustive. 'Concise' is vague. Since there is no annotation for readOnlyHint, the description should clarify these aspects but doesn't.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence with no waste. The action, resource, and optional filters are stated efficiently. Information is front-loaded without any redundant phrasing.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

While an output schema exists (covering return structure), the description leaves gaps about how filters combine (query AND category?), limit behavior, and any ordering. For a list endpoint with 3 parameters, this is somewhat incomplete, but the presence of an output schema reduces the burden for return details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It explains 'query' and 'category' as filters, which gives some semantic meaning. However, 'limit' is not referenced, and the relationship between query and category (AND vs OR) is unclear. Partial compensation but not complete.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List') and resource ('concise remediation playbook records'), clearly indicating a listing operation for playbooks. It distinguishes from siblings like recipes_playbook_get and recipes_playbook_plan by implying a collection-level view, though it doesn't explicitly name those alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives. It only mentions optional filters but doesn't state, for example, that recipes_playbook_get should be used to fetch a single playbook or that this tool is for browsing. The context signals show many sibling tools, but the description gives no comparative direction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_quality_reportCInspect

Summarize recipe quality tiers and list recipes missing world-class signals.

ParametersJSON Schema
NameRequiredDescriptionDefault
tierNo
facetNo
limitNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description bears full responsibility for disclosing side effects. It only states read-like actions (summarize, list) but does not explicitly confirm read-only behavior, permissions, or whether any modification occurs. No details about output structure or potential side effects are given.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, concise sentence that effectively front-loads the primary actions. However, it omits necessary details about parameters, which slightly diminishes its structural completeness, though it remains efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description lacks essential context: it does not explain what 'quality tiers' or 'world-class signals' mean, nor does it clarify the intended output or how it relates to the broader recipe toolset. Given the large sibling list, this sparse description is insufficient for an agent to determine when and how to use the tool effectively.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The parameters (tier, facet, limit) are entirely undocumented in the schema and receive no explanation in the description. Since schema coverage is 0%, the description must compensate, but it fails to mention any of these parameters, leaving their meaning and usage completely ambiguous.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: to summarize recipe quality tiers and list recipes missing world-class signals. It distinguishes itself from generic recipe retrieval tools by focusing on quality assessment and gaps, though it does not explicitly reference sibling tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool instead of the many sibling tools (e.g., recipes_get, recipes_list). The description lacks conditions, use cases, or relationships to alternatives, leaving the agent without clear selection criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_refreshCInspect

Refresh the in-memory copy of recipes-index.json.

ParametersJSON Schema
NameRequiredDescriptionDefault
forceNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must disclose side effects on its own. It states that the operation mutates an in-memory copy, but does not explain whether it is idempotent, whether it can disrupt concurrent reads, whether it overwrites unsaved changes, or how it behaves if recipes-index.json is missing or malformed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, tightly worded sentence with no filler. The action and target are front-loaded and easy to parse. It is concise to the point of under-specification, but structurally it is efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with one undocumented parameter and no annotations, the description leaves 'force' unexplained and provides no information about idempotency, failure modes, or side effects. The presence of an output schema covers return values, but the invocation semantics are incomplete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description never mentions the 'force' parameter. The agent cannot determine what force=true versus force=false means, when to pass it, or what consequences it has. The parameter name offers only a weak hint; the description adds no semantic value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific operation ('Refresh') and a specific resource ('the in-memory copy of recipes-index.json'). It clearly identifies this as a cache-reload action, distinct from the many read/search sibling tools, though it does not explicitly name any sibling for comparison.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given about when to call this tool versus alternatives like recipes_get, recipes_list, or recipes_search. The agent is left to infer that a refresh is needed when the in-memory index is stale, with no exclusions or alternative conditions provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_secure_context_attestation_packCInspect

Return secure-context attestation subjects, verification policy, and recertification state.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
source_idNo
artifact_idNo
workflow_idNo
subject_typeNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It implies a read-only retrieval action with 'Return,' but it does not disclose side effects, authorization requirements, rate limits, or any caveats. The description adds some behavioral context (what is returned) but leaves important safety and operational traits unstated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence with no filler or redundancy. Every phrase contributes to stating what the tool returns. The structure is compact and immediately readable, which is appropriate for a straightforward retrieval-style tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given five optional parameters, no annotations, and a large sibling family, this one-sentence description is incomplete. It fails to explain how the output categories relate to parameters, when to invoke this pack instead of a similar one, and what behavioral expectations the caller should have. The output schema helps, but it cannot substitute for missing usage and parameter guidance.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate by explaining how the five optional parameters affect behavior. It does not mention status, source_id, artifact_id, workflow_id, or subject_type at all. The only faint connection is that 'subjects' might echo subject_type, but this is not explicit enough to guide invocation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description has a clear verb ('Return') and identifies the resource ('secure-context attestation') along with its three main output categories: subjects, verification policy, and recertification state. It is understandable in isolation, though it does not distinguish this pack from closely related secure-context siblings such as recipes_secure_context_trust_pack or recipes_secure_context_evidence_contract.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no guidance about when to use this tool, what conditions favor it, or which alternatives to prefer. With dozens of sibling recipe tools covering related security and attestation concepts, an agent receives no explicit or implicit selection criteria beyond the tool's own name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_secure_context_buyer_diligence_briefCInspect

Return buyer and acquirer diligence evidence for the secure context layer.

ParametersJSON Schema
NameRequiredDescriptionDefault
bet_idNo
statusNo
buyer_idNo
source_idNo
question_idNo
objection_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description must carry the full burden of behavioral disclosure. It only says 'Return', implying a read operation, but does not explain what 'diligence evidence' entails, whether results are filtered, paginated, or require authentication, or how failures manifest. This is minimal disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single short sentence, which is concise in length, but it is under-specified rather than appropriately condensed. It lacks the content that would earn its place as a definition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity of the domain (secure context, buyer diligence), the six optional parameters, and the absence of annotations, this description is incomplete. It does not explain the intended use, the meaning of the evidence, or any filtering behavior, leaving critical gaps for the agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate by explaining the six parameters (bet_id, status, buyer_id, etc.). It does not mention any of them, leaving the agent with no semantic understanding beyond their names.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Return') and a specific resource ('buyer and acquirer diligence evidence for the secure context layer'), which is clear. However, it does not differentiate from any of the many secure-context sibling tools, leaving some ambiguity about scope.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus the numerous secure-context alternatives, nor any exclusions, prerequisites, or typical invocation scenarios. The agent is left to infer when this is the right choice.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_secure_context_customer_proof_packCInspect

Return the customer proof contract for design partner and acquisition evidence.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
gate_idNo
risk_idNo
claim_idNo
event_idNo
metric_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden for behavioral disclosure. It only implies a read-only retrieval ('Return') but does not mention how the six optional parameters filter results, what a 'customer proof contract' contains, or any permissions or side effects. Minimal behavioral insight is offered.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single concise sentence with no redundant words, and the action is front-loaded. It is efficient, though perhaps overly terse given the tool's complexity; still, it earns a high score purely on conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given six optional parameters, zero schema descriptions, no annotations, and a bare one-sentence description, the tool is severely under-specified. An agent cannot determine what the parameters mean, how to filter, or what the returned contract contains. The output schema exists but the input semantics are completely absent, making this inadequate for reliable use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 0% description coverage and the tool description mentions none of the six parameters (status, gate_id, risk_id, claim_id, event_id, metric_id). The description provides zero additional meaning for these parameters, leaving agents without any guidance on how to set them.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Return' and the resource 'customer proof contract' for a specific purpose (design partner and acquisition evidence). It distinguishes the tool's core function, though it doesn't explicitly differentiate from many similar 'recipes_secure_context_*' siblings, which lowers it slightly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given on when to use this tool versus the many alternative sibling tools, such as recipes_secure_context_evidence_contract or recipes_secure_context_attestation_pack. The description provides no context on when this specific 'customer proof contract' is needed or what scenarios favor it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_secure_context_eval_packCInspect

Return scenario-backed secure-context evals for retrieval, attestation, egress, and handoffs.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
scenario_idNo
workflow_idNo
minimum_scoreNo
scenario_typeNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It only says 'Return... evals' implying a read operation, but does not disclose side effects, performance implications, or how null parameters are handled. Given the existence of an output schema, some behavioral detail is still missing, such as whether this is a pure retrieval or if it carries side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence, which is concise, but it lacks structure and leaves many questions unanswered. It is not front-loaded with the most critical information, and its brevity is more under-specification than effective conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given five parameters with zero explanation, an output schema that is not described, and a domain with many overlapping tools, the description is clearly incomplete. It does not provide enough context for an agent to understand what 'scenario-backed secure-context evals' means or how to construct a valid request.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description mentions none of the five parameters (decision, scenario_id, workflow_id, minimum_score, scenario_type). The provider has no clue what these parameters mean, making correct invocation impossible without external knowledge.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Return') and resource ('scenario-backed secure-context evals') with scope covering four domains. It is clear but does not explicitly differentiate from many similar sibling tools like recipes_secure_context_attestation_pack or recipes_secure_context_trust_pack, though the term 'evals' hints at a distinct purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus the dozens of sibling tools. The description does not mention any conditions, prerequisites, or alternative tools. An agent has no basis for selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_secure_context_evidence_contractCInspect

Return the secure context evidence API and release contract.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
channel_idNo
artifact_idNo
endpoint_idNo
object_type_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must carry the burden. It only says 'Return', implying read-only, but does not disclose how the five parameters affect the output, whether there are side effects, or any constraints. Minimal behavioral disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no wasted words. It is concise, though the brevity sacrifices necessary detail. Structurally it is direct and front-loaded with the action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema, the description fails to explain parameter usage, the nature of the 'evidence API and release contract', or how to select this tool among siblings. With five parameters and zero schema coverage, this is inadequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate for the five undocumented parameters. It does not mention status, channel_id, artifact_id, endpoint_id, or object_type_id at all, leaving the agent without any meaning beyond their names.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a clear verb 'Return' and a resource 'secure context evidence API and release contract', but the resource is vague and does not differentiate from many sibling secure_context_* tools. It is not a tautology but lacks specific scope or distinction.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus siblings like recipes_secure_context_attestation_pack or recipes_secure_context_trust_pack. The description does not mention any context, prerequisites, or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_secure_context_lineage_ledgerCInspect

Return context lineage, reuse policy, stage requirements, hashes, and workflow envelopes.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
stage_idNo
source_idNo
reuse_classNo
workflow_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure. 'Return' implies a read operation, but the description does not explain how the optional parameters affect results, whether results are filtered or complete, whether there are access requirements, or how the ledger behaves with no parameters provided.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single efficient sentence, front-loaded with the verb and resource. It is concise and not bloated, though the long list of return items makes it slightly dense and would benefit from a sentence that connects the return values to the optional parameters.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has no annotations and all five parameters are optional, so the description needs to explain selection semantics and parameter interactions; it does not. An output schema exists, so return-value shape is covered, but the core invocation context—what the ledger contains, how parameters narrow it, and what happens with no parameters—is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not explicitly map the five parameters (decision, stage_id, source_id, reuse_class, workflow_id) to the listed output categories. Some loose inference is possible—'reuse policy' to reuse_class and 'workflow envelopes' to workflow_id—but the agent is left to guess how each parameter filters or scopes the returned data.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a clear verb ('Return') and enumerates specific resources: context lineage, reuse policy, stage requirements, hashes, and workflow envelopes. This meaningfully distinguishes the tool from the many recipe siblings, especially under the secure_context prefix, though it does not explicitly name what it is not or scope its input.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage: an agent would call this tool when it needs context lineage, reuse policy, stage requirements, hashes, or workflow envelopes. However, it gives no explicit guidance about when to prefer this tool over related tools, and it does not mention any exclusion or alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_secure_context_trust_packCInspect

Return context provenance, retrieval policy, source hashes, and workflow context packages.

ParametersJSON Schema
NameRequiredDescriptionDefault
decisionNo
source_idNo
trust_tierNo
workflow_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must carry the full burden of behavioral disclosure. The word 'Return' implies a read-only operation, but the description does not state whether it modifies any state, what authentication is needed, any rate limits, or what happens when parameters are left null. It also does not mention any restrictions or side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no filler and is appropriately front-loaded, stating the action and the key outputs. While it is short, it does not waste words. However, it is arguably too brief for a tool with four undocumented parameters, but for pure conciseness it earns credit.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has four optional parameters, no annotations, and no schema coverage, the description is severely incomplete. It does not explain any parameter behavior, typical use cases, or how it relates to the many sibling trust and context packs. While an output schema exists, the description still fails to provide enough context for an agent to decide when and how to invoke it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 0%, meaning the description must compensate for the lack of parameter explanations. The description lists output categories but does not map them to the four parameters (decision, source_id, trust_tier, workflow_id). An agent cannot infer what these parameters do or how they affect the returned package, so the description fails to add meaningful parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'Return' and enumerates concrete outputs: context provenance, retrieval policy, source hashes, and workflow context packages. It clearly indicates what the tool produces, though it does not explicitly differentiate it from sibling tools like recipes_secure_context_lineage_ledger or recipes_secure_context_attestation_pack, which likely have overlapping purposes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus alternatives. The description does not mention preferred scenarios, prerequisites, or conditions that should route an agent to a different sibling tool. It is purely a functional statement with no usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_secure_context_value_modelCInspect

Return the secure context value model for buyer, ROI, and acquisition diligence.

ParametersJSON Schema
NameRequiredDescriptionDefault
statusNo
wedge_idNo
driver_idNo
segment_idNo
question_idNo
scenario_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Because no annotations are provided, the description carries the full burden of behavioral disclosure. 'Return' implies a read-only operation, but the description does not explain whether this is a template, a filtered query, or a generated model, nor does it disclose side effects, matching behavior, or any other runtime traits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no filler. While it is terse and could convey more, every word contributes to the purpose statement and the structure is clean.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With six optional parameters, no annotations, and minimal description, an agent lacks enough context to invoke the tool confidently. The output schema covers return structure, but parameter semantics and behavioral expectations are left unexplained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description does not mention any of the six optional parameters. The names such as wedge_id, driver_id, and segment_id give hints, but the description fails to explain how these parameters affect the returned value model.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Return') and names the resource ('secure context value model') plus its domain ('buyer, ROI, and acquisition diligence'). This makes the primary purpose reasonably clear, though it does not explicitly distinguish the tool from the many sibling secure-context recipe tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance about when to use this tool versus alternatives, and no exclusions or preferred conditions are stated. The phrase 'for buyer, ROI, and acquisition diligence' gives some context but does not help an agent decide between this and siblings like recipes_secure_context_buyer_diligence_brief or recipes_secure_context_eval_pack.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_server_infoBInspect

Return MCP server metadata and source-index configuration.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the behavioral burden. It does disclose the read-only nature via 'Return' and specifies what is returned, but it does not explicitly mention side effects, access requirements, or any operational constraints. This is acceptable for a zero-parameter info tool but not fully transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single efficient sentence with the key verb and subject front-loaded. There is no filler or redundant detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The zero-parameter schema and presence of an output schema keep the call simple, but the description leaves gaps: it does not clarify how this differs from sibling server-info tools or what 'source-index configuration' means. It is minimally viable but not fully self-contained.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are zero parameters, so the baseline is 4. The description adds useful context about what information is returned, even though there is nothing to parameterize.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ('Return') and a clear resource ('MCP server metadata and source-index configuration'). It is not a tautology, but it does not explicitly distinguish this from siblings like recipes_mcp_server_get or recipes_mcp_servers_list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus alternatives, no mention of related server-info tools, and no contextual placement among the many sibling recipes tools. The agent must rely on the name and one-line description.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

recipes_workflow_control_planeCInspect

Return workflow control-plane policy for agents, reviewers, and MCP gateways.

ParametersJSON Schema
NameRequiredDescriptionDefault
workflow_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description bears the full burden of behavioral disclosure. The word 'Return' signals a read operation, but the description does not disclose side effects, authorization needs, scope behavior, or what happens when workflow_id is omitted. It adds little beyond the basic purpose statement.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single focused sentence with no filler, front-loads the action verb, and conveys the core purpose efficiently. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Although the tool has a simple optional-parameter schema and an output schema, the description omits workflow_id semantics and any guidance for navigating the large sibling set. Given the number of similar recipe and control-plane tools, the agent lacks enough context to select and invoke this tool with confidence.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description never mentions workflow_id or how it affects the returned policy. The parameter name is somewhat self-explanatory, but the description does not compensate for the schema's complete lack of detail, leaving the agent to guess whether the argument filters, selects, or is ignored.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Return'), a specific resource ('workflow control-plane policy'), and the intended audience ('agents, reviewers, and MCP gateways'). This clearly identifies the tool's function. However, it does not distinguish itself from nearby siblings like recipes_agentic_control_plane_blueprint or recipes_mcp_gateway_policy, so it falls slightly short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no guidance on when to use this tool versus the many overlapping control-plane, gateway, and policy siblings. There is no mention of when-not-to-use, prerequisites, or alternative tools, leaving the agent to infer selection purely from the name and generic phrasing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 75 tool updates
    • First observedrecipes_a2a_agent_card_trust_profile
    • First observedrecipes_agent_capability_risk_register
    • First observedrecipes_agent_handoff_boundary_pack
    • First observedrecipes_agent_identity_ledger
    • First observedrecipes_agent_memory_boundary_pack
    • First observedrecipes_agent_skill_supply_chain_pack
    • First observedrecipes_agent_trust_fabric_pack
    • First observedrecipes_agentic_action_runtime_pack
    • First observedrecipes_agentic_aivss_risk_scoring_pack
    • First observedrecipes_agentic_app_intake_pack
    • First observedrecipes_agentic_approval_receipt_pack
    • First observedrecipes_agentic_assurance_pack
    • First observedrecipes_agentic_catastrophic_risk_annex
    • First observedrecipes_agentic_control_plane_blueprint
    • First observedrecipes_agentic_entitlement_review_pack
    • First observedrecipes_agentic_exposure_graph
    • First observedrecipes_agentic_incident_response_pack
    • First observedrecipes_agentic_measurement_probe_pack
    • First observedrecipes_agentic_posture_snapshot
    • First observedrecipes_agentic_protocol_conformance_pack
    • First observedrecipes_agentic_readiness_scorecard
    • First observedrecipes_agentic_red_team_drill_pack
    • First observedrecipes_agentic_red_team_replay_harness
    • First observedrecipes_agentic_run_receipt_pack
    • First observedrecipes_agentic_soc_detection_pack
    • First observedrecipes_agentic_source_freshness_watch
    • First observedrecipes_agentic_standards_crosswalk
    • First observedrecipes_agentic_system_bom
    • First observedrecipes_agentic_telemetry_contract
    • First observedrecipes_agentic_threat_radar
    • First observedrecipes_browser_agent_boundary_pack
    • First observedrecipes_context_egress_boundary_pack
    • First observedrecipes_context_poisoning_guard_pack
    • First observedrecipes_critical_infrastructure_secure_context_pack
    • First observedrecipes_cve_catalog_info
    • First observedrecipes_cve_get
    • First observedrecipes_cve_search
    • First observedrecipes_design_partner_pilot_pack
    • First observedrecipes_enterprise_trust_center_export
    • First observedrecipes_get
    • First observedrecipes_hosted_mcp_readiness_pack
    • First observedrecipes_list
    • First observedrecipes_match_finding
    • First observedrecipes_mcp_authorization_conformance_pack
    • First observedrecipes_mcp_connector_intake_pack
    • First observedrecipes_mcp_connector_trust_pack
    • First observedrecipes_mcp_elicitation_boundary_pack
    • First observedrecipes_mcp_gateway_policy
    • First observedrecipes_mcp_risk_coverage_pack
    • First observedrecipes_mcp_server_get
    • First observedrecipes_mcp_servers_list
    • First observedrecipes_mcp_stdio_launch_boundary_pack
    • First observedrecipes_mcp_tool_risk_contract
    • First observedrecipes_mcp_tool_surface_drift_pack
    • First observedrecipes_mcp_upstream_call
    • First observedrecipes_mcp_upstream_context
    • First observedrecipes_mcp_upstream_servers
    • First observedrecipes_mcp_upstream_tools
    • First observedrecipes_model_provider_routing_pack
    • First observedrecipes_playbook_get
    • First observedrecipes_playbook_plan
    • First observedrecipes_playbooks_list
    • First observedrecipes_quality_report
    • First observedrecipes_refresh
    • First observedrecipes_search
    • First observedrecipes_secure_context_attestation_pack
    • First observedrecipes_secure_context_buyer_diligence_brief
    • First observedrecipes_secure_context_customer_proof_pack
    • First observedrecipes_secure_context_eval_pack
    • First observedrecipes_secure_context_evidence_contract
    • First observedrecipes_secure_context_lineage_ledger
    • First observedrecipes_secure_context_trust_pack
    • First observedrecipes_secure_context_value_model
    • First observedrecipes_server_info
    • First observedrecipes_workflow_control_plane

Frequently Asked Questions

Discussions

No comments yet. Be the first to start the discussion!

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables CVE lookups and risk assessment by integrating CISA Known Exploited Vulnerabilities (KEV) data and CVSS metrics. It helps users prioritize patching efforts by ranking vulnerabilities based on exploitation status and calculated risk scores.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Provides CVE lookup, search, and exploit intelligence from public vulnerability sources (NVD, CISA KEV, EPSS) for AI agents to produce remediation guidance without consuming LLM tokens for data fetching.
    1
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

C2.2/5.0
Disambiguation2/5

Many tools return 'pack' artifacts with nearly identical descriptions, such as recipes_agentic_assurance_pack, recipes_agentic_posture_snapshot, and recipes_agentic_readiness_scorecard, or recipes_mcp_connector_intake_pack versus recipes_mcp_connector_trust_pack. Distinct domains like CVE lookup and playbooks are clear, but dozens of evidence/profile packs blur together and will cause misselection.

Naming Consistency3/5

All names use the recipes_ prefix and snake_case, and most pack tools follow a [domain]_[topic]_pack pattern, which aids recognition. However, verbs are placed inconsistently and mixed with noun-only names: recipes_get, recipes_cve_get, recipes_mcp_server_get, recipes_refresh, and many pure 'pack' names.

Tool Count1/5

Seventy-five tools is an extreme count for any MCP server, especially when the majority are highly specialized 'pack' endpoints with narrow outputs. The sheer number creates major selection overhead and makes the tool surface difficult for an agent to navigate reliably.

Completeness4/5

The server covers its apparent read-only scope thoroughly: recipe search/get, CVE lookup, playbook planning, MCP server catalog, upstream MCP introspection, and extensive evidence packs. There are no obvious dead ends, though the massive pack proliferation makes it harder for agents to know which tool to call.