Skip to main content
Glama

check_stack_drift

Read-onlyIdempotent

Read-only audit of a package.json, requirements.txt, or .mcp.json configuration string against 258 live AI Agent SDKs and MCP servers. Flags breaking major version deltas, unpinned @latest MCP servers, and outdated dependencies with exact pin commands. Requires no authentication and returns a structured JSON report.

Input Schema

NameRequiredDescriptionDefault
manifestYesRaw contents of .mcp.json, package.json, requirements.txt, or a newline-separated list of packages

Schema Changelog

Changes observed during successful MCP inspections.

  1. Changed1 schema field changed
    • addedInput schema / additionalProperties
      Added value: +false
  2. First observed

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover the safety profile (readOnlyHint, idempotentHint, destructiveHint=false), but the description adds useful context: no authentication is required, the registry scope is 258 live entries, and the tool returns a structured JSON report with actionable pin commands. It does not describe failure modes or how large manifests are handled, but it adds real behavioral value beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences with no filler, front-loading the read-only audit purpose before listing what it detects and the authentication/return characteristics. Every sentence contributes: purpose, detection scope, and operational traits.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter, read-only audit with no output schema, the description gives enough context to call it correctly and understand the general shape of the response (structured JSON with flags and pin commands). It could specify the report fields or how no-drift results are represented, but the essential context is present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There is a single required parameter with 100% schema description coverage, so the schema already explains that manifest accepts raw .mcp.json, package.json, requirements.txt, or a newline-separated package list. The description echoes the accepted formats but adds no syntax, validation, or formatting guidance beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb and resource: a read-only audit of a manifest string against a live registry of AI Agent SDKs and MCP servers. It also states what the audit detects (major version drift, unpinned @latest servers, outdated dependencies), which makes the tool's role distinct from the sibling list/get tools. It stops short of explicitly naming those siblings as alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by the phrase 'audit of a package.json, requirements.txt, or .mcp.json configuration string,' so an agent can infer this is the tool for checking a whole manifest. However, there is no explicit when-to-use or when-not-to-use guidance relative to get_package_stability, list_volatile_packages, or get_archived_mcp_replacements.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.