WORKS Public Verifier
Server Details
Independent static verification for exact immutable public GitHub commits.
- Status
- Healthy
- Last Tested
- Transport
- Streamable HTTP
- URL
- Repository
- DYZCODE/works-plugins
- GitHub Stars
- 0
- Server Listing
- io.github.DYZCODE/works-public
Glama MCP Gateway
Connect through Glama MCP Gateway for full control over tool access and complete visibility into every call.
Full call logging
Every tool call is logged with complete inputs and outputs, so you can debug issues and audit what your agents are doing.
Tool access control
Enable or disable individual tools per connector, so you decide what your agents can and cannot do.
Managed credentials
Glama handles OAuth flows, token storage, and automatic rotation, so credentials never expire on your clients.
Usage analytics
See which tools your agents call, how often, and when, so you can understand usage patterns and catch anomalies.
Tool Definition Quality
Average 4.6/5 across 3 of 3 tools scored.
Each tool has a clearly distinct role: works_public_eligibility is a preflight check, works_public_contract_lint resolves the contract digest, and works_verify_public_repository performs the actual verification. The descriptions explicitly specify the intended order and conditions, so an agent can easily select the right tool.
All tool names share the 'works_' prefix, but the pattern is inconsistent: two use 'public' as a scope modifier (works_public_eligibility, works_public_contract_lint), while the third places 'public' after the verb (works_verify_public_repository). Additionally, 'eligibility' is a noun, 'contract_lint' can be read as noun_verb, and 'verify_public_repository' is verb_noun, creating mixed conventions.
With only 3 tools, the server is tightly scoped to its purpose: preflight eligibility, contract resolution, and final verification. Each tool is necessary and non-redundant, making the count well-suited for the domain.
The tools cover the full workflow from eligibility check through final verification, and the descriptions provide clear guidance on when to stop. A minor gap is the lack of an explicit tool to list supported static claims, but this can be inferred from the contract_lint and verify tools, so the overall surface is functional.
Available Tools
3 toolsworks_public_contract_lintInspect public WORKS contractARead-onlyIdempotentInspect
After a task is already known to have a public GitHub repository, an exact lowercase 40-character commit SHA, and a matching supported static claim, return the pinned contract digest and scope. Do not call for mutable or abbreviated refs, local or private repositories, runtime, builds, tests, deployments, or broad production-readiness claims.
| Name | Required | Description | Default |
|---|---|---|---|
| contract | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| id | Yes | |
| title | Yes | |
| trust | Yes | |
| valid | Yes | |
| digest | Yes | |
| execution | Yes | |
| description | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, covering the safety profile. The description adds some context about the return value ('pinned contract digest and scope') and the strict input requirements, but does not disclose additional behavioral traits such as side effects, rate limits, or failure modes. With annotations present, this is adequate but not exceptional.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with a clear front-loaded action and concise exclusions. Every word adds value, avoiding redundancy or filler. It is well-structured for quick parsing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has an output schema (so return values are documented) and annotations cover safety, the description is quite complete. It clearly states prerequisites and exclusions. However, the lack of parameter explanation is a minor gap that prevents a perfect score, as the agent must infer the meaning of 'contract' from enums alone.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has only one parameter 'contract' with an enum but no descriptions, and schema description coverage is 0%. The tool description does not explain what 'contract' means or how to choose between 'node-package' and 'env-safety'. The phrase 'matching supported static claim' hints at the concept, but the description fails to compensate for the lack of schema documentation, leaving the agent without clear parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'return the pinned contract digest and scope' given a public repository, exact commit SHA, and supported static claim. It also differentiates from siblings by explicitly listing what it does not handle ('runtime, builds, tests, deployments'), distinguishing it from other tools like eligibility or verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit preconditions ('After a task is already known to have a public GitHub repository, an exact lowercase 40-character commit SHA, and a matching supported static claim') and explicit exclusions ('Do not call for mutable or abbreviated refs, local or private repositories, runtime, builds, tests, deployments, or broad production-readiness claims'). This gives clear when-to-use and when-not-to-use guidance, even without naming sibling tools directly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
works_public_eligibilityCheck WORKS verification eligibilityARead-onlyIdempotentInspect
Fast deterministic preflight for tool-only clients. Call this before any other WORKS tool when eligibility is uncertain, especially for mutable or abbreviated refs, local or private repositories, and build, test, runtime, deployment, or production claims. It does not download a repository or persist data. If eligible is false, stop without calling verification.
| Name | Required | Description | Default |
|---|---|---|---|
| claim | Yes | Use static-evidence for generic signed or static repository evidence; it maps conservatively to node-package. Never use it for build, tests, runtime, deployment, or production claims. | |
| reference | No | Reference exactly as supplied; never expand a branch, tag, or short SHA. | |
| source_kind | Yes | Classify where the requested source lives. | |
| repository_url | No | Exact repository URL supplied by the user, if any. | |
| repository_visibility | Yes | Use public only when the request identifies a public repository. |
Output Schema
| Name | Required | Description |
|---|---|---|
| reason | Yes | |
| report | Yes | |
| contract | Yes | |
| eligible | Yes | |
| next_tool | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, but the description adds crucial behavior: it is 'fast deterministic', 'does not download a repository or persist data', and instructs to halt on false eligibility. These go beyond the annotations and give the agent concrete expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four short sentences, each with clear purpose: nature of tool, when to call, side-effect guarantee, and stop condition. Front-loaded with 'Fast deterministic preflight' and no redundant words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers purpose, usage context, side effects, and control flow. Since an output schema exists, it doesn't need to explain return values. The guidance is sufficient for an agent to decide when to invoke and what to do with a false result.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents all parameters, including enums for claim, source_kind, and repository_visibility. The description adds contextual guidance about which parameter values matter (e.g., abbreviated refs, private repos) but does not add syntax or format details, so it stays at the baseline for high coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description identifies the tool as a 'preflight' eligibility check and states it should be called before any other WORKS tool, clearly distinguishing it from the sibling verification and lint tools. It names the specific resources (mutable/abbreviated refs, local/private repositories, claim types) it handles.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs when to use this tool: before any other WORKS tool when eligibility is uncertain, with specific scenarios listed (mutable/abbreviated refs, local/private repos, build/test/runtime/deployment/production claims). Also provides a clear stop condition: 'If eligible is false, stop without calling verification.'
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
works_verify_public_repositoryVerify immutable public repositoryARead-onlyIdempotentInspect
Use only after works_public_eligibility returns eligible. Download that immutable public GitHub snapshot, run the selected pinned static contract without executing repository commands, and return a signed receipt. Return the report field verbatim and stop.
| Name | Required | Description | Default |
|---|---|---|---|
| contract | Yes | ||
| commit_sha | Yes | ||
| repository_url | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| trust | Yes | |
| report | Yes | |
| source | Yes | |
| status | Yes | |
| receipt | Yes | |
| contract | Yes | |
| outcomes | Yes | |
| limitations | Yes |
Tool Definition Quality
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the tool read-only, idempotent, and non-destructive. The description adds significant behavioral context: it downloads a snapshot, runs a static contract without executing repository commands, and returns a signed receipt. It also instructs to return the report field verbatim and stop, which is valuable beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the prerequisite, then the action, then the output directive. Every sentence serves a purpose, with no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the full workflow: precondition (eligibility), operation (download, run static contract), safety constraint (no commands), and output behavior (signed receipt, return report verbatim). Since an output schema exists, return-value details are not needed. It also references the sibling tool appropriately, providing complete contextual guidance.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage, the description compensates by mapping 'selected pinned static contract' to the contract parameter and 'immutable public GitHub snapshot' to repository URL and commit SHA. It does not explicitly explain each parameter or enum value, but the schema itself provides the enum and patterns, and the description gives enough context to understand their roles.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool verifies an immutable public repository by downloading a snapshot and running a static contract. It distinguishes itself from siblings by explicitly requiring a prior eligibility check and by focusing on verification rather than linting or eligibility.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly instructs to use only after works_public_eligibility returns eligible, establishing a clear prerequisite and ordering with a sibling tool. It also specifies the execution mode (without executing repository commands) and the output behavior (return report verbatim and stop).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Claim this connector by publishing a /.well-known/glama.json file on your server's domain with the following structure:
{
"$schema": "https://glama.ai/mcp/schemas/connector.json",
"maintainers": [{ "email": "your-email@example.com" }]
}The email address must match the email associated with your Glama account. Once published, Glama will automatically detect and verify the file within a few minutes.
Control your server's listing on Glama, including description and metadata
Access analytics and receive server usage reports
Get monitoring and health status updates for your server
Feature your server to boost visibility and reach more users
For users:
Full audit trail – every tool call is logged with inputs and outputs for compliance and debugging
Granular tool control – enable or disable individual tools per connector to limit what your AI agents can do
Centralized credential management – store and rotate API keys and OAuth tokens in one place
Change alerts – get notified when a connector changes its schema, adds or removes tools, or updates tool definitions, so nothing breaks silently
For server owners:
Proven adoption – public usage metrics on your listing show real-world traction and build trust with prospective users
Tool-level analytics – see which tools are being used most, helping you prioritize development and documentation
Direct user feedback – users can report issues and suggest improvements through the listing, giving you a channel you would not have otherwise
The connector status is unhealthy when Glama is unable to successfully connect to the server. This can happen for several reasons:
The server is experiencing an outage
The URL of the server is wrong
Credentials required to access the server are missing or invalid
If you are the owner of this MCP connector and would like to make modifications to the listing, including providing test credentials for accessing the server, please contact support@glama.ai.
Discussions
No comments yet. Be the first to start the discussion!
Related MCP Servers
- Flicense-qualityAmaintenanceClones and inspects public GitHub repositories to extract evidence like manifests, dependencies, and version hints, and can run allow-listed repos in isolated Docker containers for reproducible verification.
- AlicenseAqualityAmaintenanceProvides index-free, read-only, multi-repo Git evidence for MCP agents, enabling prove-verify loops with git show.12141MIT
- Alicense-qualityBmaintenanceA local-first, auditable code review MCP server that freezes Git changes, creates immutable ReviewBundles, provides role-isolated contexts for correctness, security, architecture, and test reviewers, validates structured findings, and generates deterministic JSON/Markdown reports.8Apache 2.0

repo-doctorofficial
Alicense-qualityCmaintenanceMCP server that produces scored, evidence-cited audits of public GitHub repos via tools for fetching metadata, reading files, scanning git history, and checking hygiene.MIT
Your Connectors
Sign in to create a connector for this server.