A thin MCP proxy to your organisation's Sealgate AI security gateway and data firewall.
Two tools with clear, descriptive names and well-structured schemas. Both tools have good descriptions (150+ chars) and properly typed input parameters with constraints. However, output schemas are not explicitly documented in the source, and error handling guidance is minimal. Parameter descriptions are present but lack some actionable detail (e.g., what constitutes a 'risk level' in get_session_status). No tool annotations (readOnlyHint, destructiveHint) despite both being READ_ONLY operations. Naming follows verb_noun convention well (list_*, get_*). Pagination support is present with min/max constraints (1-200 items per page).
Fetch recent Sealgate agent sessions and audit events so you can see what agents did, which data flowed, and any blocked actions. Returns a paginated page of sessions (agent_name, user_email, created_at, status, tool_call_count, trifecta_flags, block_severity, acl_level).
List the MCP servers registered with your Sealgate gateway, with their access-control classification and connection status. Returns a paginated page of servers (name, display_name, domain, enabled, tool_count, needs_config, transport_type).
Output schemas not documented. Tool descriptions state what fields are returned (e.g., 'Returns a paginated page of sessions (agent_name, user_email, ...)') but no formal JSON Schema for response structure is visible in source code. LLMs cannot reliably extract or chain results without explicit output schema.
Parameter 'risk' in get_session_status lacks enum or valid values. Description says 'Filter by risk level' but does not specify what risk levels are valid (e.g., low, medium, high, critical?). LLMs will guess or hallucinate values.
No tool annotations despite both tools being READ_ONLY. Modern MCP spec supports readOnlyHint annotation to signal to clients that these tools do not modify state. Omission forces clients to infer safety from descriptions.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 64 | 2026-07-28+ | v2 |
Error handling guidance absent. No indication of what errors are retryable, user-fixable, or fatal. If API returns 401 (auth failure) or 429 (rate limit), the LLM has no recovery path documented.
Parameter 'status' in get_session_status mentions 'e.g. active, completed' as examples in description. Should be replaced with an enum constraint.