NessGate
Server Details
Resolve a domain to its published AI interfaces: discovery, readiness, and connection plans.
- Status
- Healthy
- Uptime
- 100.0% over 21 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- NessGate/nessgate
- GitHub Stars
- 2
- Server Listing
- com.nessgate/nessgate
TDQS
Scored across 3 tools
Each tool has a clearly distinct purpose: discover_domain for raw metadata discovery, check_readiness for client-agnostic readiness assessment, and connect_domain for client-specific connection planning. The descriptions explicitly guide when to use which (e.g., check_readiness suggests connect_domain when client capabilities are known).
All tool names follow a consistent verb_noun pattern (check_readiness, connect_domain, discover_domain) in snake_case. No deviations or mixed conventions.
Three tools cover the core workflow of discovering a domain, assessing readiness, and planning a connection. This is well-scoped for the server's purpose, with each tool earning its place.
The surface covers discovery, readiness assessment, and connection planning, which are the essential operations for a read-only, stateless service that helps agents connect to domains. No obvious gaps given the stated scope.
Available Tools
3 toolscheck_readinessCheck how ready a domain's endpoints are to connect toAInspect
Given a domain, return each connectable resource it publishes with a readiness assessment (ready | credentials-required | incomplete | broken, with the exact missing field) read from the service's own metadata. Client-agnostic; read-only. Use connect_domain when you know the client's capabilities.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Registrable domain, e.g. example.com |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full safety burden and does so: it declares 'read-only' and 'client-agnostic' and specifies that results are 'read from the service's own metadata,' which explains why the assessment is authoritative. It does not cover failure modes, auth requirements for the underlying fetch, or rate limits, so it falls short of exhaustive disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences; the return shape and status vocabulary come first, and the routing hint to connect_domain comes last where it belongs. Every clause adds information, with no restatement of the tool name or title.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, but the description compensates by enumerating the return contents (each connectable resource plus readiness status plus the exact missing field) and by flagging the operation as read-only. An agent has everything needed to call this correctly and interpret the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Only one parameter and schema description coverage is 100% ('Registrable domain, e.g. example.com'), so the schema already documents the input fully. The description adds no format, normalization, or validation nuance about the domain beyond what the schema states, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb+resource: 'Given a domain, return each connectable resource it publishes with a readiness assessment.' It also enumerates the four possible statuses (ready | credentials-required | incomplete | broken), which pins down the semantics, and names the sibling connect_domain so it is distinguishable without opening sibling schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It names the alternative explicitly ('Use connect_domain when you know the client's capabilities') and gives the discriminating condition, which by implication is also the when-to-use condition for this tool (you don't yet know capabilities). discover_domain is not mentioned, but no inference is needed to choose between this and connect_domain.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
connect_domainGet a connection plan for this clientAInspect
Given a domain AND the calling client's capabilities, return HOW the client can connect: one outcome (ready | credentials-required | incomplete | broken | no-compatible-method) with a connection plan (protocol, endpoint, transport, version, and the auth metadata the service published — e.g. the OAuth authorize/token endpoints and scopes), or the exact missing field when the service under-publishes. Deterministic matching, no scores. Read-only; credentials stay with the caller and are never sent to NessGate.
| Name | Required | Description | Default |
|---|---|---|---|
| client | No | The calling client's capabilities. Omit a dimension to accept any. If client/supports is omitted entirely, a broad default (mcp, openapi, a2a) is assumed and the response carries clientAssumed:true. | |
| domain | Yes | Registrable domain, e.g. example.com |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does so well: it declares read-only, states credentials stay with the caller and are never transmitted, notes matching is deterministic with no scores, and enumerates failure outcomes including under-published services. It does not mention rate limits, caching, or what an unknown/unregistered domain yields, so it falls short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The outcome list leads the sentence and the return shape, determinism, and safety guarantees follow in a compact block with no filler. It is dense and slightly overloaded for one sentence, but every clause carries information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and no annotations, the description must cover both return shape and safety, and it does list the plan contents (protocol, endpoint, transport, version, published auth metadata) plus the read-only/no-credential posture. It leaves open edge behavior such as unknown registrable domains, so it is strong but not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% across both parameters, including the nested supports/auth/versions/transports and the clientAssumed default behavior, so the schema already does the heavy lifting. The description reinforces the role of client capabilities but adds no syntax or format detail beyond the schema, matching the baseline 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a precise verb+resource ('return HOW the client can connect' for a given domain) and enumerates the exact outcome space (ready | credentials-required | incomplete | broken | no-compatible-method), which makes its scope unmistakable. It never names discover_domain or check_readiness, so the agent gets no explicit sibling routing, keeping this at a 4 rather than a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The preconditions are stated ('Given a domain AND the calling client's capabilities') and the purpose implies when it is useful, but there is no explicit when-to-use versus discover_domain or check_readiness, and no exclusion conditions. Usage is implied rather than directed.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
discover_domainResolve a domain's machine-readable resourcesAInspect
Given a domain, read whatever it publishes at the standard machine-discovery locations (llms.txt, /.well-known/ard.json, /.well-known/agent-card.json, /.well-known/api-catalog, ai-info.json, openapi.json, and more) and return one normalized answer. Each resource keeps a sourceUrl pointing back to the domain so the caller can verify. NessGate reads the domain live and stores nothing; it makes no ownership or safety claim.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | Registrable domain, e.g. example.com |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does well: it discloses that NessGate reads the domain live, stores nothing, adds no ownership/safety claim, and that each returned resource carries a sourceUrl for verification. This is meaningful behavioral context, though it omits failure behavior (what happens when a domain publishes none of these) and any rate-limit or timeout information.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core action and input, then the endpoint list, then trust/verification caveats. The long enumeration is informative rather than filler, though it is somewhat dense for three sentences.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description usefully sketches the return contract ('one normalized answer', per-resource sourceUrl) and states the live/no-storage behavior. Missing only edge-case handling and any indication of result size or shape when discovery yields little.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the single 'domain' parameter is fully documented in the schema, so the baseline is 3. The description adds only 'Given a domain', with no extra format or validation detail (e.g. subdomain handling) beyond the schema's registrable-domain clarification.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource (read a domain's published machine-discovery resources) and enumerates the exact locations checked (llms.txt, /.well-known/ard.json, agent-card.json, api-catalog, openapi.json), leaving no ambiguity about what it does. An agent can immediately tell this resolves a domain's metadata rather than, say, fetching a URL or calling an API.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There are no sibling tools, but the description only implies the trigger (resolve what a domain publishes) rather than stating when to reach for this versus other approaches. It never says when not to use it or what scenario makes it the right first step.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- Changed
connect_domain1 field changed- changed
Input schema / properties / client / descriptionPrevious value: -"The calling client's capabilities. Omit a dimension to accept any."New value: +"The calling client's capabilities. Omit a dimension to accept any. If client/supports is omitted entirely, a broad default (mcp, openapi, a2a) is assumed and the response carries clientAssumed:true."
2 tool updates
- Added
check_readiness - Added
connect_domain
1 tool update
- First observed
discover_domain
Related MCP Connectors
Check whether AI agents can discover, validate, and trust your domain's services.
Discover MCP endpoints for real-world entities by resolving business domains.
Check any domain for UCP support and resolve verified UCP storefronts. Read-only, keyless.
Discover, compare, route, and execute machine-accessible capabilities for AI agents.
Related MCP Servers
AlicenseAqualityAmaintenanceEnables AI agents to look up XRPL domain availability, pricing, profiles, portfolios, and transaction status, and to get registration links for signing in the user's own wallet.10136 npm1MIT- AlicenseAqualityCmaintenanceAn MCP server for domain intelligence — WHOIS, DNS records, SSL certificate inspection, SPF/DMARC validation, security-header audits, and blacklist/reputation checks, callable by AI agents. Powered by domainintel.app; runs server-side, no local setup.746 npmMIT
- AlicenseNot gradedqualityFmaintenanceDomain -> company intelligence for AI agents. Look up company name, country, contacts, and social profiles from any MCP-compatible client.6MIT

Dock AI MCPofficial
FlicenseAqualityDmaintenanceDiscover which MCP servers can interact with real-world entities like restaurants, hotels, and salons by querying the Dock AI registry using domain names.12-
Glama MCP Gateway
Add one secure layer between your agents and this server.