Skip to main content
Glama

MCP Endpoint Lint - handshake, tool schemas, JSON-RPC errors

Schema-validate every tool the endpoint advertises

tools_list_report
Read-onlyIdempotent

FIRST CALL, needs nothing: {"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"whoami","arguments":{}}} — Handshake, then tools/list, then check every tool it returns: a missing or empty description, a description too short to choose on, a missing inputSchema, an inputSchema that is not an object schema, JSON-Schema faults (an invalid type keyword, a required naming a property that is not in properties, a pattern that will not compile, an empty enum), names that break the character rule, and names that collide — exactly, or once case is ignored. Each finding names the tool and says what breaks. Makes 3 requests, 6 s timeout each. Example: url='https://mcp.example.com/mcp' — or {} for the built-in fixture, whose six tools carry one of each fault.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
urlYesThe MCP endpoint to lint — the URL you POST JSON-RPC to, e.g. https://mcp.example.com/mcp. Not stored anywhere. This server refuses its own publisher, IP literals and private names.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish readOnly/openWorld/idempotent/non-destructive, and the description adds substantial behavioral context beyond them: it makes exactly 3 requests with 6 s timeouts each, follows a whoami-then-tools/list-then-validate sequence, reports per-tool named findings, supports a built-in fixture mode, and (in the schema) refuses its own publisher, IP literals, and private names. No contradiction with the annotations exists.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but nearly every clause earns its place: workflow sequence, the full check list, request count, timeout, output form, and example. It is long and the inline JSON-RPC payload adds reading weight, but for a multi-category linter this level of detail is operationally necessary and the most critical information (workflow) is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having no output schema, the description covers the return value's nature ('Each finding names the tool and says what breaks'), network behavior, input options, URL restrictions, and privacy ('Not stored anywhere'). The main gap is the absence of an exact output JSON structure, and the {} fixture claim vs required-url inconsistency is unresolved; otherwise the definition is thorough for a single-param, read-only tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% (the url parameter is already documented), so the baseline is 3. The description adds a concrete example URL, the fixture alternative, and the '{}' shorthand for the built-in fixture. However, the '{}' suggestion conflicts with the schema's required:['url'] and additionalProperties:false, creating an ambiguity about which invocation is actually valid; that actively undermines the added guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The title and description name a specific verb-resource pair: schema-validate every tool an endpoint advertises via tools/list. The description enumerates the exact fault categories checked (empty descriptions, invalid inputSchema, JSON-Schema faults, name rule breaks, collisions), which sharply distinguishes it from siblings like handshake_report, discovery_report, and error_conformance. An agent can tell exactly what this tool produces without inspecting any sibling schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description conveys clear context: it is the tool to run when you need to lint the schema quality of an MCP endpoint's advertised tools, and it spells out the internal workflow (whoami handshake, tools/list, then validation) plus the fixture alternative for testing. However, it never names sibling tools or states explicit when-not-to-use conditions, so an agent must infer routing from the tool's purpose rather than being told.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources