Skip to main content
Glama

MUJ428 Trust Layer — VERIFY BEFORE ACT

publish_trust_request

Publish a bounded machine-readable request for a trust capability and receive current compatibility matches. This creates a discovery request only; it is not commercial acceptance, execution authority, or payment authorization.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
actionNo
protocolsNo
capabilityNo
descriptionYes
requirementsNo
requester_refYes

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. Added

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so the description carries full disclosure burden. It does meaningful work by clarifying that the tool only creates a discovery request and deliberately creates no binding authority — a critical behavioral trait that prevents misuse. It could go further by disclosing whether the request is publicly visible, persists, or can be withdrawn, but the core side-effect profile is well communicated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, both earning their place: the first front-loads the action and result, the second supplies the essential caveat. No filler, no repetition of schema content, and the most important scoping information is delivered immediately.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 6 parameters (including a nested arbitrary-key requirements object), zero annotations, and no output schema, the description leaves too much unexplained. An agent knows what the tool is for but not how to construct a valid request payload or what a 'compatibility match' response looks like. The description captures intent and danger but not operability.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% and the description supplies no parameter-level guidance. The agent receives no explanation of what requester_ref should contain, what the requirements object expects, how protocols should be chosen, or what the action enum values mean — despite requester_ref and description being required. The phrase 'bounded machine-readable request' gives only the faintest hint about request construction.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('publish') with a specific resource ('a bounded machine-readable request for a trust capability') and states the expected outcome ('receive current compatibility matches'). It distinguishes itself from sibling read/list tools like find_trust_capabilities and observe_trust_compatibility by making explicit that this is a publish action, not a read action.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a clear when-not-to-use signal: it is explicitly 'not commercial acceptance, execution authority, or payment authorization.' However, it stops short of naming which sibling tool should be used when those capabilities ARE needed, so the agent must infer the alternative from the sibling list.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.8/5.0
Disambiguation3/5

There is some overlap among get_service_catalog and get_trust_layer_pricing, since both surface pricing information, and between invoke_trust_service and trust_action, since both use x402 challenges and payment signatures. The descriptions help clarify differences, but an agent could still misselect when trying to choose between the generic bridge and the Trust Reflex preflight.

Naming Consistency4/5

Most tools follow a clear verb_noun pattern: get_capabilities, get_service_catalog, get_trust_layer_pricing, invoke_trust_service, and select_assurance_tier are all imperative and readable. trust_action breaks the pattern slightly, reading more like a noun phrase than an action command, but it is still understandable alongside the others.

Tool Count5/5

Six tools is well-scoped for a trust-layer server focused on discovery, pricing, fee calculation, and x402 payment flow. Each tool has a defined role in the set, and the count does not feel too heavy or too thin.

Completeness4/5

The surface covers the main workflow well: capabilities discovery, service catalog, pricing, assurance tier fee calculation, generic service invocation, and preflight trust checks. A minor gap is the lack of a direct tool for checking remaining free quota or payment/verification status, but the core trust and payment lifecycle is represented.

Resources