AgntID task glue SDK — task metadata and MCP wrapper for agent frameworks (MSK and others)
The AgntID Python SDK exposes 5 task management tools via fastmcp with HTTP transport. All tools have descriptions and basic input schemas, but several critical quality gaps emerge: (1) Parameter descriptions are minimal or generic, lacking context about expected formats, constraints, or dependencies. (2) Output schemas are not documented, no visibility into response structure. (3) Error handling guidance is absent, LLMs cannot recover from failures. (4) Tool names follow a verb_noun pattern (task_open, action_update, delegation_close) which is good, but the semantic coupling between tools is underdocumented. (5) Risk annotations (WRITE) are present but no per-tool permission scopes or audit guidance. The server targets agent framework integration (langchain, deepagents, MSK), which adds context, but the MCP tool definitions themselves would not meet production expectations without significant enrichment.
Update status of an action within a task
Close an active delegation
Open a delegation to a subagent
Close an active task context in AgntID runtime
Open a new task context in AgntID runtime
Constrained parameters (e.g., 'status' fields) lack enum definitions or valid value lists. LLMs will hallucinate values.
No output schemas documented for any tool. LLMs cannot determine what fields are returned or plan downstream tool chains.
Parameter descriptions are generic or circular (e.g., 'Delegation description' for a description param). They do not explain format constraints, valid values, or dependencies.
No error handling guidance. Tool descriptions do not explain failure modes, recovery paths, or what to do if a resource is not found.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-22 | D | 51 | 2025-06-18+ | v2 |
| 2026-03-09 | C | 62 | - | v1 |
Tool interaction dependencies not documented (e.g., task_open must be called before action_update or delegation_open). LLMs cannot infer the correct call sequence.
Tool descriptions do not clarify what state changes are idempotent or what happens on retry. Agents need this to avoid duplicate side effects.
Permission scopes not declared. Tools are marked WRITE but no fine-grained permission model (e.g., 'write:tasks', 'delegate:subagents') is exposed to enable least-privilege agent configuration.