Skip to main content
Glama

Snapforge Ship-Ready Check

Server Details

Free, read-only ship-readiness check for Replit, Lovable and Bolt apps.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Last Tested
Transport
Streamable HTTP · MCP 2025-06-18
URL

TDQS

A4.2/5.0

Scored across 2 tools

Disambiguation5/5

check_app performs the diagnostic scan while get_fix_prompt produces remediation text from an issue id — two clearly distinct phases with no overlap. An agent can unambiguously pick the right tool at each step.

Naming Consistency5/5

Both names use a consistent snake_case verb_noun pattern (check_app, get_fix_prompt) with no stylistic deviations. The convention is predictable and readable.

Tool Count3/5

Two tools is thin for a launch-check domain; the workflow of scan-then-fix is sensible, but there is no way to re-verify after fixes or list issues separately. Borderline minimal but each tool earns its place.

Completeness4/5

The pair covers the core lifecycle: detect problems (check_app) and generate a fix (get_fix_prompt). A re-check or structured issue-listing operation is missing, but the main agent workflow has no hard dead end.

Available Tools

2 tools
check_appShip-ready checkA
Read-only
Inspect

Run a passive, read-only launch check on the public URL of a live app the user owns or is authorized to test (built with Replit, Lovable or Bolt). Checks: reachable and fast, SEO title/meta, robots/sitemap, security headers, open CORS, and a dev banner left in production. Only reads what any visitor's browser already sees (homepage, response headers, robots.txt, sitemap.xml); never scans JavaScript bundles for secrets, never signs in, submits forms, writes data or reads databases. Refuse private/internal addresses.

ParametersJSON Schema
NameRequiredDescriptionDefault
urlYesPublic https URL of the app to check, e.g. https://yourapp.replit.app

Output Schema

ParametersJSON Schema
NameRequiredDescription
urlYes
noteNo
stackYes
summaryNo
findingsYes
reachableYes
free_auditYes
http_statusNo
response_msNo

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint and destructiveHint=false, but the description adds substantial context beyond them: exactly which surfaces are read (homepage, response headers, robots.txt, sitemap.xml) and an explicit refusal rule for private/internal addresses. That is the authorization and safety detail an agent needs before firing an open-world network call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action, then a tight enumeration of checks and limits; there is no filler. The second sentence is a long run-on of comma-separated negatives, which is dense but still scannable, so it falls just short of ideal structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described. With safety covered by annotations and the description supplying scope, authorization conditions, inspection surface, and explicit exclusions, an agent has everything needed to decide and invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the url parameter is already documented with format and an example, so the baseline would be 3. The description adds meaning by constraining the accepted value to a public URL of a live app and by stating that private/internal addresses must be refused, which is a semantic rule the schema does not encode.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('run a passive, read-only launch check on the public URL of a live app') and enumerates exactly which checks are performed (reachability/speed, SEO title/meta, robots/sitemap, security headers, CORS, dev banner). This enumeration makes it unmistakable versus the sibling get_fix_prompt, which by name implies remediation rather than inspection.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives clear context for use: a live app the user owns or is authorized to test, built with Replit/Lovable/Bolt, and explicitly excludes private/internal addresses. It also sets negative scope (never scans JS bundles, never signs in, submits forms, writes data or reads databases). It does not name get_fix_prompt as a follow-up alternative, so it stops short of full when/when-not routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_fix_promptGet fix promptA
Read-only
Inspect

Return a paste-ready prompt to fix a specific issue in the user's builder (Replit Agent, Lovable or Bolt). Use the issue id from check_app.

ParametersJSON Schema
NameRequiredDescriptionDefault
issueYes
builderNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
issueYes
builderYes
fix_promptYes

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description adds genuinely useful context that the output is a paste-ready prompt intended for the user's chosen builder rather than executable code, but says nothing about prompt length, builder-specific differences, or error behavior for an invalid issue id.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler, with the core purpose front-loaded and the argument-sourcing instruction immediately after. Every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so the description need not explain the returned structure, and the tool is a simple read-only prompt generator. The only residual gap is behavior for an unrecognized issue id or omitted builder, which is minor for this complexity level.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% for two parameters, so the description carries the burden. It meaningfully links the required 'issue' argument back to check_app's output, but the optional 'builder' parameter is only implied by the parenthetical list of builder names rather than explained (e.g., behavior when omitted).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (return) and concrete artifact (a paste-ready fix prompt) scoped to a specific issue, and names the target builders (Replit Agent, Lovable, Bolt). It is clearly distinguishable from the sibling check_app, which detects issues rather than producing fix text.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly sets up the workflow dependency: 'Use the issue id from check_app,' which tells the agent this tool is invoked after issue detection and how to source the argument. It stops short of stating when NOT to use it or what to do if no issue has been identified, so it is clear context without exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 2 tool updates
    • First observedcheck_app
    • First observedget_fix_prompt

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI coding assistants to scan an iOS, Android, Flutter, React Native or Expo project for App Store and Google Play rejection risks, returning deterministic findings that cite the guideline section, link to the official Apple or Google page and explain how to fix each problem. Nothing leaves the machine and no AI is used in the checks.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Local-first security check for AI coding agents — finds hardcoded secrets, exposed .env files, git-history leaks and vulnerable dependencies (OSV), entirely on your machine. Ask your agent "is this safe to ship?" and get a Launch Readiness score with a fix for every finding.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI coding assistants to run static analysis on GitHub repositories, raw code snippets, or local directories to detect cloud cost leaks in Terraform/AWS configs, PostgreSQL migration table-lock hazards, and OWASP/Next.js API security gaps. Each finding returns structured severity, line-level detail, and drop-in fixes.
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources