agent-lint
Server Details
Checks CLAUDE.md, AGENTS.md or a system prompt for 12 safeguards unattended agents need.
The last two health checks of this connector failed. If this server requires authentication, missing or expired test credentials may be the cause. A test profile lets Glama authenticate for health checks and discover tools; it is separate from your personal connections.
If you are the author, claim ownership, then add or update a test profile under Admin → Test Profile.
- Status
- Unhealthy
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
TDQS
Scored across 1 tool
There is only one tool, so there is nothing to confuse it with. Its purpose (lint a rules file for unattended-agent safeguards) is stated clearly and precisely.
The single name 'lint_rules_file' follows a clear verb_noun convention in snake_case. With only one tool there is no opportunity for inconsistency.
One tool is thin even for a narrow linter server; there is no companion tool to list the 12 safeguards, explain a rule, or check a directory of files. It is defensible but borderline under-scoped.
The core check exists, but the surface offers no way to discover the rule catalog, configure severity, or batch-scan multiple files. Agents can work with a single file, but the lifecycle is a dead end after one call.
Available Tools
1 toollint_rules_fileLint an agent rules fileARead-onlyIdempotentInspect
Check an agent rules file (CLAUDE.md, AGENTS.md, system prompt) for 12 safeguards an unattended agent needs (kill switch, spending limit, untrusted-input rule, secrets, memory, audit...). Keyword checks: they report what is written down, not what is enforced. Also flags live-looking API keys and hardcoded URLs/IDs that can go stale. Pass the file's text; nothing is stored.
| Name | Required | Description | Default |
|---|---|---|---|
| text | Yes | The full text of the rules file |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/non-destructive/closed-world, so the safety profile is covered. The description adds real value beyond that: it sets expectations that checks are keyword-based ('report what is written down, not what is enforced'), names extra detections (live-looking API keys, stale hardcoded URLs/IDs), and states 'nothing is stored.' What it does not describe is the shape of the findings returned, which keeps it at a 4.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with purpose, then the important caveat, then the side detections and the input instruction - the ordering is good and every sentence earns its place. The parenthetical safeguard list is slightly list-heavy but still tight overall.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter, no-output-schema lint tool, the description covers input, what is checked, detection categories, and the key limitation of keyword matching. The only gap is how results are surfaced back to the caller, which prevents a 5 but is minor given the read-only nature.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Only one parameter and schema description coverage is 100%, so the schema fully documents 'text' as the full file contents. The description reinforces this ('Pass the file's text') and adds a privacy note, but adds no format/size constraints beyond the schema. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb (Check/lint) plus a specific resource (agent rules files) with concrete examples (CLAUDE.md, AGENTS.md, system prompt) and the exact scope of checks (12 named safeguards). An agent knows precisely what this does without inspecting anything else.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Clear context for when to use it - on a rules file for an unattended agent - and it tells the caller exactly what to supply ('Pass the file's text'). There are no sibling tools to differentiate against and no explicit when-not-to-use, which keeps it just short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
- First observed
lint_rules_file
Related MCP Connectors
Static linter for CLAUDE.md-style agent constitution files: 10 operational-guardrail checks.
Static linter for CLAUDE.md-style agent constitution files: 10 operational-guardrail checks.
Research-backed lint + generation for agent context files (CLAUDE.md, AGENTS.md) + prompt enhancer.
Lets coding agents check their own code for leaked secrets, risky dependencies and AI-code mistakes
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceChecks AGENTS.md and CLAUDE.md against a repository's actual file tree and package.json, reporting missing referenced paths and scripts so agent instructions stay accurate. Returns deterministic findings with file, line, and exact source text through a single tool.MIT

meok-agents-md-lint-mcpofficial
AlicenseNot gradedqualityDmaintenanceValidates AGENTS.md files against the cross-vendor coding-agent spec, detecting security smells and consistency issues.MITagent-guardprivate
AlicenseAqualityCmaintenanceSafety checks an agent runs before it acts — flags malicious packages, destructive shell commands, secret leaks, and web-backend holes before execution.8MIT- AlicenseAqualityBmaintenanceSecurity co-pilot for AI agents. Scans for vulnerabilities like prompt injection, infinite loops, and token bombing in AI Agents, audits MCP servers, verifies AGENTS.md governance, and generates EU AI Act compliance reports.10160 npm3Apache 2.0
Glama MCP Gateway
Add one secure layer between your agents and this server.