Agent Permissions Index
Server Details
Grade Claude Code, Gemini CLI and Cursor configs for risky permissions; get public config stats.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 3 tools
get_index_stats and get_leaderboard both surface aggregate data from the same index, so an agent must read descriptions to pick correctly, but their purposes (headline numbers vs. ranked agents with sample sizes) are distinguishable. grade_config is clearly separate, targeting a user-supplied config file.
All three tools follow a consistent snake_case verb_noun pattern (get_index_stats, get_leaderboard, grade_config). The verb choice matches the action (get for retrieval, grade for evaluation) with no stylistic mixing.
Three tools is on the lean side but each covers a distinct need: aggregate stats, comparative ranking, and self-assessment of a config. Nothing feels redundant, though the surface is small enough that it borders on thin.
The server covers aggregate stats, rankings, and grading your own config, but an 'index' with no way to look up or fetch a specific agent/repo config (or filter the leaderboard) leaves a notable gap. Agents can still accomplish the core grading workflow, but detail lookup is a dead end.
Available Tools
3 toolsget_index_statsAgent Permissions Index statsBInspect
Headline aggregate numbers from the latest weekly snapshot of public AI agent configs on GitHub.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose one meaningful trait: data comes from a weekly snapshot, so results are not live. It says nothing about auth, rate limits, caching, or the granularity of the aggregates.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no filler or redundancy. It is tight, though the brevity leaves the reader wanting more substance rather than being over-long.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, so the description is the only guide to return values, and 'headline aggregate numbers' does not say which metrics or dimensions come back. For a zero-parameter stats tool the gaps are modest but real.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so the baseline of 4 applies; there is nothing for the description to explain beyond the call semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific resource (headline aggregate numbers from the Agent Permissions Index) and the data source (public AI agent configs on GitHub). It implicitly separates itself from get_leaderboard by advertising aggregates rather than rankings, though the sibling differentiation is left to inference.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to call this instead of get_leaderboard or grade_config, and no prerequisites or context for use. The reader must infer usage from the one-line purpose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_leaderboardAgent safety leaderboardAInspect
Agent tools ranked by how safely their public configs are set up, with sample sizes and method.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It adds some context by noting rankings include sample sizes and method, which hints at a read-only, statistically transparent retrieval. However, it does not explicitly state read-only/no side effects, auth requirements, or pagination behavior, leaving gaps for a no-annotation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence with no filler. Every phrase — ranked, safety of public configs, sample sizes, method — adds useful information for a tool with no parameters.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple, zero-parameter tool with no output schema and no annotations, the description gives enough context to understand what is returned: ranked agent tools with sample sizes and method. It could be slightly more complete by clarifying what a 'leaderboard' entry contains or what 'public configs' means, but overall it is adequate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has zero parameters, so the baseline for parameter semantics is 4. There are no parameter names, types, or meanings needing description, and the description does not need to compensate for schema gaps.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear resource: agent tools ranked by safety of public configs, with sample sizes and method. It distinguishes the tool from generic stats (get_index_stats) and grading (grade_config) by describing the ranked leaderboard concept, but does not explicitly name or differentiate from those siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No when-to-use guidance is provided, nor are any alternatives mentioned. The description does not explain when an agent should choose this leaderboard over get_index_stats or grade_config; usage is only implied by the tool name and concept.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
grade_configGrade agent configAInspect
Grade an AI coding agent permissions config (Claude Code .claude/settings.json, Gemini CLI .gemini/settings.json, or mcp.json). Returns a letter grade, findings, a safer config and README badge Markdown. Inputs are not stored or logged.
| Name | Required | Description | Default |
|---|---|---|---|
| tool | No | Which tool the config is for | claude_code |
| config | Yes | The config file contents as JSON text (max 100 KB) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does meaningful work: it discloses the return artifacts (letter grade, findings, a safer config, README badge Markdown) and a privacy behavior ('Inputs are not stored or logged'). It does not explicitly state there are no side effects on the caller's config or describe failure behavior on malformed JSON, but overall it exceeds the minimum for an unannotated tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with purpose, followed by return values and the privacy note. No filler; every sentence adds information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description appropriately explains the return values and adds a privacy guarantee. It is nearly complete for a two-parameter analysis tool; only edge-case behavior (invalid JSON, grading criteria) is unaddressed, which is acceptable here.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters are already documented, making 3 the baseline. The description adds some value by naming the config file formats, but it lists only three of the four enum values and omits cursor_mcp, so it does not fully clarify the 'tool' parameter's option set.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('Grade'), a precise resource ('AI coding agent permissions config'), and lists concrete example files (Claude Code settings.json, Gemini CLI settings.json, mcp.json). An agent can immediately tell this is an analysis tool for agent configs, which is clearly distinct from the sibling tools get_index_stats and get_leaderboard.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context on what inputs are accepted and what the tool produces, so an agent knows when to reach for it. It stops short of explicit when-not conditions or naming alternatives, but the sibling tools are unrelated in domain, so this is a minor gap.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
- First observed
get_index_stats - First observed
get_leaderboard - First observed
grade_config
Related MCP Connectors
Scan configs, files, or text for leaked secrets and obvious misconfigurations. Nothing stored.
Risk-scan a diff, flag AI-generated-code tells, find secrets. 5 of 7 tools need no account.
Detects database migration table locks, terraform cost leaks, and OWASP API flaws.
Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes
Related MCP Servers
AlicenseNot gradedqualityBmaintenanceScans AI coding sessions and assistant configs for leaked secrets and risky hooks; local, redacted35MIT- FlicenseNot gradedqualityDmaintenanceAudits Claude Code permission settings (.claude/settings.json) via an MCP tool, detecting conflicts and misconfigurations.-
- AlicenseNot gradedqualityDmaintenanceVets MCP servers, Claude Code skills, or plugins for unsafe behavior like shell execution, secret access, data exfiltration, prompt injection, and remote code before installation, returning a graded verdict with findings.MIT
- AlicenseAqualityDmaintenanceSecurity scanning for AI coding tools (Claude Code, Cursor, Windsurf) including secrets detection, MCP config vulnerabilities, agent instruction checks, threat modeling, prompt injection testing, pre-commit security checks, and dependency vulnerability scanning.729 npm1MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.