Skip to main content
Glama

scan_mcp_metadata

Create a free public report of MCP tool-description routing collisions.

Reads discovery metadata (initialize/tools/list) only; never calls target business
tools or spends funds. Use a public HTTP(S) URL without credentials, query or fragment.
Results use at most 12 tools and 24 generated cases, not a real-model evaluation.
The returned report is enriched with agent_plan candidate description-only edits and
a machine-readable rerun instruction. Candidate edits are not untouched-holdout proof.
Reports persist and are public by link. For an existing report use get_selection_report.
Set internal_test=true for owner/CI validation so it is excluded from public scans.
source is a self-reported referral bucket, not identity verification.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
sourceNoother
mcp_urlYes
internal_testNo

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault

No arguments

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond annotations, the description discloses that it never calls target business tools or spends funds, that reports persist and are public by link, and that internal_test excludes scans from public view. This adds substantial context beyond the readOnlyHint=false annotation, clarifying the actual side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose, then systematically covers constraints, output, and caveats. Each sentence adds value without redundancy; the length is appropriate given the tool's side effects and multiple usage nuances.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

It covers purpose, usage constraints, behavioral side effects, output highlights, and the alternative tool. Since an output schema exists, the description sufficiently equips an agent to call it correctly without needing more detail.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Despite 0% schema coverage, the description compensates by explaining each parameter: mcp_url must be a public URL without credentials/query/fragment, internal_test=true is for owner/CI validation and excludes from public scans, and source is a self-reported referral bucket. This fully covers parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Create a free public report') and the resource ('MCP tool-description routing collisions'), and immediately clarifies the scope by saying it only reads discovery metadata. It also differentiates from the sibling tool by pointing to get_selection_report for existing reports, making its purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly states when to use an alternative: 'For an existing report use get_selection_report.' It also provides specific usage constraints for the mcp_url parameter ('public HTTP(S) URL without credentials, query or fragment') and for internal_test ('owner/CI validation ... excluded from public scans'), giving clear when-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources