Skip to main content
Glama

report repo

report_repo
Read-only

Should you depend on this open-source project? Repository report: adoption and maintenance (stars, forks, releases, commit activity, issues), license, known vulnerabilities in its dependencies (OSV), and an AI code review of the main entry file. Verdict adopt / trial / caution / avoid with a score and a PDF. If too few sources answer you are not charged (with async=true the core source is checked before the job is queued and charged). Costs $2 USDC per call (x402).

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
pdfNoInclude a 7-day PDF link (default true)
repoYesowner/name or github.com URL
asyncNoReturn a job id now and the report later
webhook_urlNoWith async: POST the finished report here

Schema Changelog

Changes observed during successful MCP inspections.

  1. Added

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations only declare readOnlyHint and openWorldHint; the description adds substantive behavior the agent cannot infer: $2 USDC per call via x402, no charge when too few sources answer, and that with async=true the core source is verified before the job is queued and charged. This is exactly the billing/async disclosure an agent needs before invoking a paid tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the user-facing question and then the report contents, followed by billing/async notes. Dense but largely waste-free; the charging rule is stated twice (general no-charge and async-specific), a minor redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a paid, async-capable, webhook-delivering tool with no output schema, the description covers deliverables (verdict, score, PDF), the async job flow, and the cost model. It stops short of describing pagination/rate limits or expected latency for the sync path, but nothing critical to calling it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds meaning beyond the schema: it explains pdf as a 7-day link, that async=true still performs a pre-queue core-source check, and that webhook_url posts the finished report. The async pre-check detail in particular goes past 'Return a job id now'.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific verb+resource (repository report) and enumerates exactly what it covers: adoption/maintenance metrics, license, OSV dependency vulnerabilities, and an AI code review of the entry file. Easily distinguished from siblings like report_company, report_domain, or report_token by the open-source-dependency framing.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The opening question ('Should you depend on this open-source project?') gives clear intent for when to reach for it, and it explains the async path and the no-charge failure condition. However, it names no alternative sibling (e.g. github, code_review, vulns) for narrower lookups, so the routing guidance is incomplete.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources