Skip to main content
Glama

MCP Endpoint Lint - handshake, tool schemas, JSON-RPC errors

What a client looks for before it dials

discovery_report
Read-onlyIdempotent

FIRST CALL, needs nothing: {"name":"whoami","arguments":{}} — GET the documents an MCP client reads BEFORE the handshake and report what each one answered: /.well-known/oauth-protected-resource in BOTH forms — the root form everyone publishes and the RFC 9728 §3.1 insertion form a spec-following client actually requests for a resource served under a path — /.well-known/oauth-authorization-server, /.well-known/mcp, /.well-known/mcp.json, /mcp.json and /llms.txt. Each result carries the status, the verdict (served, missing, gated, soft-404 — a 200 carrying an HTML error page — or invalid JSON) and what a client does with that document. Makes one GET per document, 6 s each. Example: host='mcp.example.com' or host='https://mcp.example.com/mcp' (a path turns on the RFC 9728 insertion-form check) — or {} for the built-in fixture.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
hostYesA hostname, or the full endpoint URL. Give the full URL when your endpoint is served under a path: that is what the RFC 9728 §3.1 insertion form is derived from.

TDQS

A3.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare readOnly/idempotent/non-destructive, and the description adds rich behavioral detail beyond that: one GET per document with a 6-second timeout, multiple verdict classifications including soft-404, and the RFC 9728 §3.1 insertion-form behavior triggered by a path. No contradiction with annotations exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one long, dense run-on that mixes operational guidance, endpoint lists, verdict definitions, and timing details. The unexplained 'FIRST CALL...whoami' snippet is confusing and does not belong in a tool description. The content is valuable but poorly structured and hard to parse quickly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description does explain what each result contains (status, verdict, and client action), which is essential. It also covers the network behavior and both well-known URL forms. However, the fixture/schema mismatch and the unclear whoami instruction create gaps that could prevent correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already documents the host parameter with 100% coverage, and the description usefully adds that a path enables the RFC 9728 insertion-form check. However, the instruction 'or {} for the built-in fixture' directly contradicts the schema's required host property, which could lead an agent to make an invalid call. This conflicting guidance outweighs the useful path detail.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a precise, observable task: GET the well-known documents an MCP client reads before the handshake and report each one's status, verdict, and client action. It clearly distinguishes from the handshake_report sibling by scoping to pre-handshake discovery documents. The opening whoami snippet is noisy, but the core purpose is unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage by saying 'FIRST CALL' and by giving concrete host/path examples, so an agent can infer when to use it. However, it never explicitly contrasts it with siblings like handshake_report or states when not to use it. There is no direct alternative-selection guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.9/5.0
Disambiguation5/5

Each tool has a clearly distinct role: the four check tools target separate protocol aspects, score_card is explicitly the aggregate runner, example is a fixture demo, and whoami is self-inspection. Even where score_card composes the other checks, descriptions make the relationship unambiguous.

Naming Consistency3/5

Names are all lowercase and underscore-separated, but the pattern is mixed: discovery_report, handshake_report, and tools_list_report share a report suffix, while error_conformance, score_card, example, and whoami do not follow it. The names are readable and descriptive, but not fully predictable.

Tool Count5/5

Seven tools is well-scoped for an endpoint linter: four specialized checks, one aggregate score, one demo helper, and one identity/rate-limit introspection tool. Each tool earns its place and the count supports both granular investigation and high-level monitoring.

Completeness5/5

The tool surface covers the stated domain end to end: pre-handshake discovery, initialize/handshake behavior, tools/list schema validation, and JSON-RPC error conformance, plus an aggregate score_card. No obvious dead ends or missing operations exist within the server's declared purpose.

Resources