check_protocol
HTTP version and TLS negotiation. Runs the same code the tool page runs. Scope: check.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Full URL including scheme. |
HTTP version and TLS negotiation. Runs the same code the tool page runs. Scope: check.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Full URL including scheme. |
Changes observed during successful MCP inspections.
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are supplied, so the description carries the full disclosure burden. 'Runs the same code the tool page runs' is meaningless to an agent, and nothing is said about whether the call is read-only, whether it makes outbound connections that could be slow or blocked, or what the response contains (negotiated version, cipher, fallback behavior).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is short, but two of the three fragments ('Runs the same code the tool page runs' and 'Scope: check.') convey no actionable information. The one useful clause is front-loaded, which is the only structural strength.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no annotations and no output schema, the description is the sole source of behavioral information, and it does not say what the tool returns or how results are shaped. For a checker in a crowded sibling family, this leaves the agent without enough to call it confidently or interpret the result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and there is a single parameter whose schema already says 'Full URL including scheme.' The description adds no meaning beyond that, so the baseline score of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The phrase 'HTTP version and TLS negotiation' names the resource domain, but the description never states a verb or that it reports the negotiated protocol for a given URL. It also fails to distinguish itself from close siblings like check_ssl, check_http, and check_http_status, leaving the agent to guess which one to pick.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no when-to-use guidance at all. Given a sibling list containing check_ssl (certificates), check_http (headers), and check_http_status, the description should say when protocol negotiation checking is the right call, but it offers nothing beyond 'Scope: check.'
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Add one secure layer between your agents and this server.