runx
Server Details
The governed runtime for agent skills. Search the catalog and inspect a skill before running it.
- Status
- Healthy
- Uptime
- 99.8% over 22 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- runxhq/runx
- GitHub Stars
- 84
TDQS
Scored across 2 tools
The two tools have clearly distinct purposes: search_skills finds skills by criteria, while get_skill retrieves full details for a specific skill. There is zero overlap in functionality, making selection unambiguous.
Both tool names follow a consistent verb_noun pattern: get_skill and search_skills. The verbs (get, search) are distinct and descriptive, and the noun (skill) is consistent, creating a predictable naming convention.
With only two tools, the set is minimal and on the thin side of the typical 3-15 tool range. However, for a focused read-only discovery server, this count is defensible, though it does not offer the breadth usually expected from an MCP server.
The domain of discovering and inspecting runx skills is fully covered: search_skills provides the discovery mechanism, and get_skill provides the detailed inspection. There are no obvious missing operations for the stated purpose of evaluating and selecting skills.
Available Tools
2 toolsget_skillARead-onlyIdempotentInspect
Read one runx skill in full before running it: its manifest, the authority it asks for, its publisher and trust signals, and the exact command to install and run it through the runx CLI. Everything needed to decide whether to trust a skill arrives in this one call.
| Name | Required | Description | Default |
|---|---|---|---|
| version | No | Exact version to read. Defaults to the latest published version. | |
| skill_id | Yes | Skill id in owner/name form, for example `ausca/browser-session`. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, and the description's 'Read' is consistent with these. No additional behavioral details (e.g., auth, rate limits, side effects) are provided, but the alignment with annotations keeps the score at a baseline level.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the verb and resource, and includes essential details without any fluff. It is efficient and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description fully covers what the tool does, what it returns (manifest, authority, publisher, trust signals, command), and its purpose (trust decision). Given the simplicity of the tool and absence of an output schema, no additional context is needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% (both parameters have descriptions), so the baseline is 3. The description does not add extra semantics beyond the schema, so no higher score is warranted.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Read' and the specific resource 'one runx skill', and distinguishes itself from search_skills by focusing on full details needed for trust decisions. It is unambiguous and concise.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions 'before running it', which indicates when to use the tool, but it does not explicitly reference the sibling tool search_skills as an alternative for finding skills. However, the purpose is clear enough that an agent would know to use this for inspection rather than discovery.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_skillsARead-onlyIdempotentInspect
Find runx skills by what they do. Returns each match with its skill id, owner, description, latest version, and trust tier, so a caller can pick one and then read it in full with get_skill.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum matches to return. | |
| query | Yes | What the skill should do, in plain words. An empty string browses everything. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnly, idempotent, and non-destructive behavior. The description adds transparency by specifying the return fields (skill id, owner, description, latest version, trust tier) and the intended flow. It does not mention errors or edge cases, but the annotations cover safety.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and well-structured. The main purpose is stated upfront, followed by the return details and the relationship to get_skill. No unnecessary words or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description provides sufficient context for a caller to understand what the tool returns and how to proceed after using it. It mentions the sibling tool get_skill, giving a complete workflow without requiring an output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema descriptions for query and limit are already clear and complete (100% coverage). The tool description does not add any additional meaning about the parameters, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: to find skills by what they do. It distinguishes itself from the sibling get_skill by noting that the caller should use get_skill to read a skill in full after picking it from the search results.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains when to use the tool (to find skills based on functionality) and implicitly when not to use it (use get_skill for reading a full skill). It provides a clear scenario but does not explicitly list exclusions or alternative tools beyond the sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
- First observed
get_skill - First observed
search_skills
Related MCP Connectors
Search and discover Agent Skills from the skills.sh registry. Powered by HAPI MCP server.
Agent skills from the ProvenSkills Labs store, delivered with updates over one connector.
- SkilderOAuthai.skilder
One place to build, share, and govern the skills and tools your AI agents use at work.
Scoped agent execution. Server-side credentials, policy, budgets and verifiable receipts.
Related MCP Servers
- AlicenseNot gradedqualityAmaintenanceEnables MCP-capable agents to search, inspect, lint, and safely install Agent Skills from the skillmd registry mid-conversation.01MIT
- AlicenseAqualityBmaintenanceEnables AI agents to manage, search, plan, and execute reusable skills while automatically enforcing always-on coding and reasoning guidelines. It provides workflow orchestration, permission-controlled execution, dynamic skill registration, and feedback-based ranking.916 npm1MIT
- AlicenseNot gradedqualityCmaintenanceEnables agents to install compatible SKILL.md skills from Git repositories or local directories into a persistent registry, then discover them through search, progressive loading, and asset reads. It exposes only user-selected hot skills as individual activation tools, keeping execution and trust decisions under explicit operator control.MIT
- AlicenseAqualityAmaintenanceEnables agents to search a lightweight catalog, inspect permissions, lazily start trusted MCP servers, and call child tools without keeping all schemas in context. It also loads approved skills on demand and routes third-party additions through a human approval queue.11MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.