agent-sec

The two tools are clearly distinct: one retrieves the entire security baseline, while the other checks a specific action against that baseline. There is no overlap in their purposes, so an agent can easily choose between them.

Both tool names follow the same verb_noun pattern: 'check_action' and 'get_security_baseline'. This is consistent and predictable, making the tool surface easy to understand.

With only two tools, the server feels thin for a security-focused utility. However, the two tools cover the essential advisory operations (obtaining the baseline and checking actions), so the count is not unreasonable for a narrowly scoped purpose.

The server covers its stated purpose: providing the baseline and enabling action checks. Minor gaps exist (e.g., no tool to inspect specific rules or handle bulk checks), but the core advisory workflow is complete.