Skip to main content
Glama

Server Details

Free, read-only ship-readiness check for Replit, Lovable and Bolt apps.

If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
Status
Healthy
Uptime
100.0% over 22 days
Last Tested
Transport
Streamable HTTP · MCP 2025-06-18
URL
ChatGPT
–
Claude
–

TDQS

A4.2/5.0

Scored across 2 tools

Disambiguation5/5

check_app performs the diagnostic scan while get_fix_prompt produces remediation text from an issue id — two clearly distinct phases with no overlap. An agent can unambiguously pick the right tool at each step.

Naming Consistency5/5

Both names use a consistent snake_case verb_noun pattern (check_app, get_fix_prompt) with no stylistic deviations. The convention is predictable and readable.

Tool Count3/5

Two tools is thin for a launch-check domain; the workflow of scan-then-fix is sensible, but there is no way to re-verify after fixes or list issues separately. Borderline minimal but each tool earns its place.

Completeness4/5

The pair covers the core lifecycle: detect problems (check_app) and generate a fix (get_fix_prompt). A re-check or structured issue-listing operation is missing, but the main agent workflow has no hard dead end.

Available Tools

2 tools
check_appShip-ready checkA
Read-only
Inspect

Run a passive, read-only launch check on the public URL of a live app the user owns or is authorized to test (built with Replit, Lovable or Bolt). Checks: reachable and fast, SEO title/meta, robots/sitemap, security headers, open CORS, and a dev banner left in production. Only reads what any visitor's browser already sees (homepage, response headers, robots.txt, sitemap.xml); never scans JavaScript bundles for secrets, never signs in, submits forms, writes data or reads databases. Refuse private/internal addresses.

NameRequiredDescriptionDefault
urlYesPublic https URL of the app to check, e.g. https://yourapp.replit.app

Output Schema

NameRequiredDescription
urlYes
noteNo
stackYes
summaryNo
findingsYes
reachableYes
free_auditYes
http_statusNo
response_msNo

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint and destructiveHint=false, but the description adds substantial context beyond them: exactly which surfaces are read (homepage, response headers, robots.txt, sitemap.xml) and an explicit refusal rule for private/internal addresses. That is the authorization and safety detail an agent needs before firing an open-world network call.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action, then a tight enumeration of checks and limits; there is no filler. The second sentence is a long run-on of comma-separated negatives, which is dense but still scannable, so it falls just short of ideal structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described. With safety covered by annotations and the description supplying scope, authorization conditions, inspection surface, and explicit exclusions, an agent has everything needed to decide and invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the url parameter is already documented with format and an example, so the baseline would be 3. The description adds meaning by constraining the accepted value to a public URL of a live app and by stating that private/internal addresses must be refused, which is a semantic rule the schema does not encode.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('run a passive, read-only launch check on the public URL of a live app') and enumerates exactly which checks are performed (reachability/speed, SEO title/meta, robots/sitemap, security headers, CORS, dev banner). This enumeration makes it unmistakable versus the sibling get_fix_prompt, which by name implies remediation rather than inspection.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives clear context for use: a live app the user owns or is authorized to test, built with Replit/Lovable/Bolt, and explicitly excludes private/internal addresses. It also sets negative scope (never scans JS bundles, never signs in, submits forms, writes data or reads databases). It does not name get_fix_prompt as a follow-up alternative, so it stops short of full when/when-not routing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_fix_promptGet fix promptA
Read-only
Inspect

Return a paste-ready prompt to fix a specific issue in the user's builder (Replit Agent, Lovable or Bolt). Use the issue id from check_app.

NameRequiredDescriptionDefault
issueYes
builderNo

Output Schema

NameRequiredDescription
issueYes
builderYes
fix_promptYes

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, destructiveHint=false and openWorldHint=false, so the safety profile is covered. The description adds genuinely useful context that the output is a paste-ready prompt intended for the user's chosen builder rather than executable code, but says nothing about prompt length, builder-specific differences, or error behavior for an invalid issue id.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler, with the core purpose front-loaded and the argument-sourcing instruction immediately after. Every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so the description need not explain the returned structure, and the tool is a simple read-only prompt generator. The only residual gap is behavior for an unrecognized issue id or omitted builder, which is minor for this complexity level.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% for two parameters, so the description carries the burden. It meaningfully links the required 'issue' argument back to check_app's output, but the optional 'builder' parameter is only implied by the parenthetical list of builder names rather than explained (e.g., behavior when omitted).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (return) and concrete artifact (a paste-ready fix prompt) scoped to a specific issue, and names the target builders (Replit Agent, Lovable, Bolt). It is clearly distinguishable from the sibling check_app, which detects issues rather than producing fix text.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly sets up the workflow dependency: 'Use the issue id from check_app,' which tells the agent this tool is invoked after issue detection and how to source the argument. It stops short of stating when NOT to use it or what to do if no issue has been identified, so it is clear context without exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 2 tool updates
    • First observedcheck_app
    • First observedget_fix_prompt

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables read-only diagnosis of deployment failures across AWS, Vercel, Docker, CI/CD, and application stacks by correlating project files, logs, and provider evidence into ranked findings with safe recommendations and verification steps.
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    A free, read-only server that lets users diagnose production AI-agent risks: it flags over-privileged API keys from permission descriptions, scans code snippets for the signals that prevent duplicate execution, and explains guard patterns such as idempotency keys, approval gates, outboxes, and circuit breakers. It makes no network calls or writes, and rejects inputs that look like real secrets.
    3
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI coding assistants to scan an iOS, Android, Flutter, React Native or Expo project for App Store and Google Play rejection risks, returning deterministic findings that cite the guideline section, link to the official Apple or Google page and explain how to fix each problem. Nothing leaves the machine and no AI is used in the checks.
    9 npm
    MIT
Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources