Skip to main content
Glama

Package Intel MCP

package_health

A composite trust/health check for a package an agent is considering: latest-release recency, deprecation status, license present, maintainer count, dependency count, and any known security advisories (via deps.dev). Returns a summary an agent can act on. Ecosystems: npm, pypi, cargo.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
nameYesExact package name as published in that registry, e.g. express for npm, requests for pypi, serde for cargo.
ecosystemYesPackage registry to look in. One of: npm, pypi, cargo.

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. First observed

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it lists the checks performed, mentions the external data source (deps.dev) for advisories, and states that the output is an actionable summary. It does not disclose potential rate limits, external call side effects, or error behavior, but the core behavior is transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two compact sentences: the first front-loads the purpose and the metrics checked, the second states the ecosystem coverage and output type. Every sentence earns its place with no redundancy or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a moderately complex tool with no output schema, the description covers the return format ('summary an agent can act on'), the supported ecosystems, and the specific components of the health check. Minor omissions like not-found behavior and third-party dependency caveats are not critical for basic invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already fully documents both parameters, including the ecosystem enum and exact name expectations with examples. The description adds context by linking parameters to the health-check purpose, but it does not add new syntactic or formatting details beyond the schema, which is the baseline for 100% schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'health check' and resource 'package', and enumerates the exact dimensions checked (release recency, deprecation, license, maintainer count, dependency count, security advisories). This clearly distinguishes it from sibling tools that each focus on a single aspect like dependencies or downloads.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'For a package an agent is considering' gives clear context for when to use this tool, and 'Returns a summary an agent can act on' signals its decision-support role. However, it does not explicitly state when not to use it or name alternatives among the sibling tools, so it stops short of full exclusion guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A4.1/5.0
Disambiguation4/5

Each tool maps to a clearly identifiable package-intelligence task—search, metadata, versions, dependencies, downloads, or health. The only real overlap is between package_health and package_info, since health includes deprecation status, license, and maintainer data that also appear in info, but the composite vs. core-metadata framing keeps them distinguishable.

Naming Consistency5/5

Every tool follows the same package_<noun> pattern, making the API surface predictable and easy to navigate. The nouns are all simple, descriptive, and consistent in style.

Tool Count5/5

Six tools is well-scoped for a package intelligence server; each tool addresses a distinct facet of evaluating a dependency. There is no bloat or redundancy that would make the set feel heavy.

Completeness4/5

The set covers the core package evaluation workflow: discover via search, inspect metadata and versions, understand dependencies, gauge popularity, and get a health/advisory summary. Minor gaps exist, such as no transitive dependency traversal or ecosystem-wide comparison, but agents can still make solid dependency decisions with the provided tools.