MCP server for verifying high-impact decisions with Trust OS
Two tools with complete schemas and descriptions, but significant gaps in parameter documentation and output schema clarity. verify_decision and create_decision both have action/decision verbs and reasonable descriptions (100+ chars), meeting baseline naming and description standards. However, parameter descriptions lack specificity on constraints, formats, and valid ranges. Output schemas are not formally documented, responses are inferred from code. Error handling is present but generic. No tool annotations (readOnlyHint/destructiveHint) despite clear semantic differences (verify is read-only, create is destructive).
Create and verify a decision via the Trust OS Decision API. Returns decision_id, recommendation, risk assessment, proof_hash, and a trace_url for Dashboard inspection.
Verify a high-impact decision before execution using Trust OS.
Output schemas not formally documented. Response fields (decision_id, recommendation, risk_score, etc.) are inferred from code; LLMs cannot plan downstream calls without explicit schema documentation.
Parameter descriptions lack format/constraint specificity. 'amount' is marked positive but no min/max bounds stated. 'priority' accepts 'high, critical' but no enum constraint or validation guidance. 'currency' has no format (ISO 4217 assumed but not stated).
Missing tool annotations. create_decision is destructive (writes to Trust OS) but lacks destructiveHint. verify_decision is read-only but lacks readOnlyHint. Agents cannot distinguish side-effect profiles without annotations.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 57 | 2026-07-28+ | v2 |
Error messages are generic. 'Trust OS request failed' or 'Trust OS API error 500' do not guide recovery. No distinction between retryable (timeout, 5xx) vs user-fixable (invalid policy, missing approver) vs fatal errors.
Metadata parameter is under-specified. Both tools accept metadata as 'object' with no guidance on expected keys, structure, or required fields. LLMs will guess at structure, risking API rejections.