Skip to main content
Glama

MCP Endpoint Lint - handshake, tool schemas, JSON-RPC errors

Who is calling? (no arguments)

whoami
Read-onlyIdempotent

Takes no arguments. Safe to call. Deterministic. Touches no third party. Classifies the request you just sent: the user-agent you claim, the address you came from, the class this host's own instrument books you as, whether we have seen you here before and what you fetched, and what this server would do with a URL from you — the guard that decides which hosts it will and will not fetch, and the rate limit your call is counted against. Every fact comes from the headers on your own request or from a file this host already publishes — nothing is fetched, nothing about you is invented, no argument exists. Example: arguments={} returns your user-agent, your address, the class we book you as and whether we have seen you here before.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnly, idempotent, and non-destructive annotations, the description adds meaningful detail: no third-party touch, no fetching, no invented data, and facts sourced only from request headers or a file this host publishes. This materially improves an agent's trust and expectations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the essential safety and determinism facts, then elaborates on what is classified. It is somewhat verbose in the middle, but each sentence adds a distinct behavioral or output-related detail, so little is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Without an output schema, the description does a good job enumerating the categories of returned information: user-agent, address, assigned class, prior-visit status, fetch-guard decision, and rate limit. It does not specify exact response keys or data types, so an agent would still need to discover the precise response shape by calling it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With zero parameters, the schema alone is nearly empty, but the description explicitly says 'Takes no arguments' and gives the example arguments={}. This fully clarifies the parameter contract and even explains why no arguments exist.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific purpose: classify the current request and report caller identity, class, rate-limit, and fetch-guard behavior. It clearly distinguishes this from the sibling report/list tools by centering on zero-argument request introspection.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context for when to call it: it is safe, deterministic, makes no external fetches, and explains the request just sent. It does not explicitly list when to choose an alternative or when not to call it, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.9/5.0
Disambiguation5/5

Each tool has a clearly distinct role: the four check tools target separate protocol aspects, score_card is explicitly the aggregate runner, example is a fixture demo, and whoami is self-inspection. Even where score_card composes the other checks, descriptions make the relationship unambiguous.

Naming Consistency3/5

Names are all lowercase and underscore-separated, but the pattern is mixed: discovery_report, handshake_report, and tools_list_report share a report suffix, while error_conformance, score_card, example, and whoami do not follow it. The names are readable and descriptive, but not fully predictable.

Tool Count5/5

Seven tools is well-scoped for an endpoint linter: four specialized checks, one aggregate score, one demo helper, and one identity/rate-limit introspection tool. Each tool earns its place and the count supports both granular investigation and high-level monitoring.

Completeness5/5

The tool surface covers the stated domain end to end: pre-handshake discovery, initialize/handshake behavior, tools/list schema validation, and JSON-RPC error conformance, plus an aggregate score_card. No obvious dead ends or missing operations exist within the server's declared purpose.

Resources