Sandbox Timer
Server Details
Flags idle agent sandboxes (E2B, Vercel, Daytona, Modal), shows idle cost, returns kill calls.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 5 tools
Each tool has a fairly distinct role: track_sessions sends/analyzes live sessions, set_idle_rules configures thresholds, idle_report reads flagged idle data, weekly_report summarizes, and usage_and_upgrade handles account info. The only mild overlap is between idle_report and weekly_report, both being read-only idle/cost views over different time windows, but descriptions clarify the difference.
The set mixes verb_noun names (set_idle_rules, track_sessions) with noun-only names (idle_report, weekly_report, usage_and_upgrade). All use snake_case and remain readable, but there is no single predictable pattern across the set.
Five tools is well-scoped for a sandbox idle-monitoring service: one tracking core, one config, two report views, and one usage/upgrade tool. Each tool earns its place with no filler.
Coverage of the core lifecycle (track sessions, set rules, report idle costs, weekly summary, usage) is solid, and killing is intentionally delegated to the agent so no kill tool is needed. Minor gaps remain around rule retrieval/deletion and fleet listing, but agents can work around these.
Available Tools
5 toolsidle_reportAInspect
Which sandboxes were flagged idle and what idle time cost, per provider, from what track_sessions has seen. Without an API key pass fleet. With a key: every fleet on it. Free shows 7 days, Pro 30.
| Name | Required | Description | Default |
|---|---|---|---|
| days | No | 1-30 (free max 7). | |
| fleet | No | A stable name for this group of sandboxes, e.g. "my-agent". State and rules are kept per fleet. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose meaningful behavior: the API key materially changes scope, and plan tier caps the window (Free 7 days, Pro 30). It omits whether the operation is strictly read-only and how the key is actually supplied, which are the remaining gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Very compact and front-loaded: the output scope comes first, then the key/fleet behavior, then the tier limits. The telegraphic phrasing ('from what track_sessions has seen') is slightly awkward but every clause carries information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter, no-output-schema, no-annotation tool, the description covers the output content, the data source, auth-driven scoping, and tier limits. The one actionable omission is how an API key is presented to the call, since no parameter exists for it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters are already documented, making 3 the baseline. The description adds a little meaning by tying fleet scoping to key presence and restating the tier-based day cap, but offers no syntax or format detail beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific output — which sandboxes were flagged idle and the idle time cost, broken down per provider — and ties the data source to track_sessions. It is clearly distinct from set_idle_rules (configuration) and weekly_report (time-based digest), though it doesn't explicitly contrast itself with those siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives real conditional guidance for the fleet parameter: omit it without an API key, and the call spans every fleet on that key. But there is no guidance on when to choose this over weekly_report or usage_and_upgrade, and no stated prerequisites beyond the key behavior.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
set_idle_rulesAInspect
Pro: save the rules track_sessions applies to a fleet: idle_minutes threshold, max_lifetime_minutes, default rates_per_hour by provider, and alert_webhook. Free returns a preview of the rules and saves nothing (pass the same values on each track_sessions call instead).
| Name | Required | Description | Default |
|---|---|---|---|
| fleet | No | A stable name for this group of sandboxes, e.g. "my-agent". State and rules are kept per fleet. | |
| idle_minutes | No | ||
| alert_webhook | No | ||
| rates_per_hour | No | ||
| max_lifetime_minutes | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden, and it does disclose meaningful behavior: persistence on Pro versus a non-mutating preview on Free, plus the fallback pattern for Free users. However, it never says whether it replaces or merges with existing fleet rules, what omitted optional fields do given zero required parameters, or anything about permissions/quota for the Pro write.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two dense sentences with the core action and field list front-loaded, and the Free-tier caveat correctly placed last. The parenthetical alternative is slightly compressed but earns its space since it prevents a wrong call pattern.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter, all-optional mutation tool with no annotations and no output schema, the description covers purpose, fields, and tier behavior, which is a reasonable baseline. It still omits the update semantics (replace vs merge) that an agent needs before calling with a partial payload.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 20% (only 'fleet' is documented), so the description has to compensate. It does add real semantics for two parameters ('idle_minutes threshold', 'default rates_per_hour by provider') but leaves max_lifetime_minutes and alert_webhook as bare names with no units, format, or expected values, so the gap is only partially closed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('save the rules ... to a fleet') and enumerates exactly what is persisted: idle_minutes, max_lifetime_minutes, rates_per_hour, and alert_webhook. It also explicitly positions the tool relative to the sibling track_sessions, which is the tool that applies these rules, so the agent can tell them apart without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives clear tier-conditioned guidance: on Pro it persists the rules, on Free it 'returns a preview ... and saves nothing', with the explicit alternative of passing the same values on each track_sessions call. It lacks an explicit statement of when rules must be set at all (or what happens when a fleet already has rules), so it stops short of full when/when-not coverage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
track_sessionsAInspect
Send your agent's running sandbox sessions (up to 200; call it on a heartbeat, e.g. every 5 minutes) and get back which are idle past your threshold or over their max lifetime, the dollars idle time has cost at the hourly rates you pass, and what to do. Pro acts: returns a ready-to-run kill call per idle sandbox for its provider (E2B kill, Vercel Sandbox stop, Daytona stop, Modal terminate) and POSTs one alert per sandbox to your webhook. Free watch-only returns would_kill and sends nothing. We never hold provider keys and never kill anything ourselves: your agent runs the call with its own key.
| Name | Required | Description | Default |
|---|---|---|---|
| fleet | No | A stable name for this group of sandboxes, e.g. "my-agent". State and rules are kept per fleet. | |
| sessions | Yes | ||
| idle_minutes | No | Idle minutes before a sandbox counts as idle. Default 15 (or your saved Pro rule). | |
| alert_webhook | No | https URL Pro posts the idle alert (with the kill call) to. | |
| rates_per_hour | No | Optional default USD per hour by provider, e.g. {"e2b": 0.17}. Your own numbers; per-session rate_per_hour wins. | |
| max_lifetime_minutes | No | Optional: flag sandboxes running longer than this, idle or not. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and delivers: it discloses the Free watch-only vs Pro act distinction, that Pro POSTs one webhook alert per sandbox, and that it never holds provider keys or kills anything itself. This is exactly the behavioral context an agent needs before invoking a mutating-by-proxy tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The core action and cadence are front-loaded, and the dense prose is justified by a genuinely complex tool. It is information-rich rather than padded, though the second half packs several distinct behaviors into long clauses.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, so the description must explain returns — and it does, describing idle detection, dollar costs, and ready-to-run kill calls, plus the Pro/Free behavioral split and the key-security caveat. Nothing an agent needs to call this correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is high (83%), so the schema already documents the parameters in depth, and per the rubric the baseline is 3. The description only loosely echoes parameters ('your threshold', 'hourly rates you pass') without adding syntax or semantics beyond what the schema states.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a concrete verb and resource: send running sandbox sessions and receive back idle/over-lifetime sessions, cost figures, and kill calls. The purpose is unmistakable, though it never names a sibling (idle_report, set_idle_rules, weekly_report) to sharpen the boundary.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly tells the agent when to call it (on a heartbeat, e.g. every 5 minutes) and encodes the Pro-vs-Free decision logic. It stops short of naming an alternative tool or an explicit when-not-to-use condition, so it sits below the top tier.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
usage_and_upgradeAInspect
Show today's usage for your key or IP and the $9/month upgrade link. Free tier: 500 calls/day. Not metered.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations, so the description carries the burden. It adds useful context: free tier of 500 calls/day, not metered. However, it doesn't state whether the call itself counts toward quota, rate limits, or whether the upgrade link is static/dynamic.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short, front-loaded sentences with no waste. The primary output is stated first, followed by the supporting quota context.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a no-param, no-output-schema read tool, the description covers what is returned (usage and upgrade link) and the quota context. It lacks detail on return format, but that's minor given the simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Zero parameters, so baseline is 4. The description correctly indicates the scope is implicit (your key or IP), needing no input.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Show') and resource ('today's usage for your key or IP') plus a secondary output (the upgrade link). It's clearly distinguishable from siblings like budget_status and weekly_report which deal with budgets/reports.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implied usage via 'today's usage' and the free-tier context, but no explicit when-to-use or when-not-to-use versus siblings like budget_status or weekly_report. The agent must infer that this is a quick self-check rather than a budget query.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
weekly_reportAInspect
Plain-English summary of the last 7 days: sandboxes watched, how many sat idle, dollars idle time cost at your rates, kill calls returned (Pro) or that would have been (free). Read-only; sends nothing. Needs a free API key.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden and does notably well: it declares 'Read-only; sends nothing,' which establishes it is a safe, side-effect-free read, and flags the free API key requirement. It stops short of disclosing rate limits, whether the report is computed fresh or cached, or what a free-tier response looks like.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One dense, front-loaded sentence naming the return contents, followed by two short behavioral clauses. Zero filler, and the most decision-relevant information (what you get, 7-day window) comes first.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no parameters, no annotations, and no output schema, the description does the work of all three: it describes the return payload field by field, states the safety profile, the auth requirement, and the tier behavior. Nothing essential to calling or interpreting this report is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so there is nothing for the description to disambiguate and the baseline is 4. The description's enumeration of returned fields is a bonus that compensates for the absent output schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (summary) and resource (last 7 days of sandbox idle data) and enumerates the exact content returned: sandboxes watched, idle count, dollar cost, kill calls. The 7-day window implicitly distinguishes it from idle_report, but no sibling is named, so the differentiation is left to inference.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to call this versus idle_report or usage_and_upgrade, and no exclusions. It notes 'Needs a free API key,' which is a prerequisite rather than usage guidance, and the tier note hints at Pro gating but never tells the agent when this report is the right choice.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
- First observed
idle_report - First observed
set_idle_rules - First observed
track_sessions - First observed
usage_and_upgrade - First observed
weekly_report
Related MCP Connectors
Cost per run, tool, model and day for AI agents, from one call or an OpenTelemetry export.
Cloud cost + FinOps knowledge for AI agents: AWS/Azure/GCP optimisation, AI spend, waste playbooks.
See, price, and control every tool call your AI agents make: policy checks, cost, and audit tools.
Agentic workflow budget approvals with usage receipts.
Related MCP Servers
- FlicenseNot gradedqualityBmaintenanceEnables autonomous agents to detect and clean up idle or abandoned cloud GPU/disk resources for FinOps cost optimization.8-
- AlicenseAqualityAmaintenanceProvides agents with real Linux VMs to run commands, manage files, expose ports, and track costs, all through an ephemeral sandbox service.11MIT
- AlicenseNot gradedqualityBmaintenanceRead-only audit of the per-turn token cost of agent instruction files (AGENTS.md, CLAUDE.md, Cursor, Copilot and Windsurf rules) for 16 coding agents, with a preview of safe fixes.700 npmMIT
- AlicenseNot gradedqualityBmaintenanceEnables monitoring of running agent loops with token and monetary cost estimation, pruning of verbose thinking chains near limits, and routing sub-tasks between fast/cheap and deep reasoning models. It provides deterministic, MCP-compatible budget optimization for autonomous agents and copilot frameworks.7MIT
Glama MCP Gateway
Add one secure layer between your agents and this server.