Skip to main content
Glama

Base64

by io.github.pipeworx-io

Scan Dependency

scan_dependency
Read-onlyIdempotent

Composite "should I add this npm package to my project" check in ONE call — fans out across deps.dev (license + advisories + version history) and bundlephobia (gzipped/minified bundle size, dependency count, ESM/tree-shake support). Use whenever an agent asks "is X safe / popular / small" or "what does adding lodash cost me". Returns a summary block (is_latest, license, published_at, advisory_count, bundle_kb_min, bundle_kb_gz, dependency_count, has_esm, tree_shakeable), per-advisory detail, links, and a list of recent alternative versions. NPM ecosystem only in v1; PyPI / Maven / Cargo / Go fall under deps.dev:version directly. Partial failures degrade gracefully — bundlephobia's first measurement on a new version can take 5-30s; sources_failed will list it if it times out, the rest still returns.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
packageYesnpm package name. Scoped packages (e.g. "@types/node") are accepted.
versionNoSpecific version to check (e.g., "18.3.1"). Defaults to the latest published version when omitted.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnly, idempotent, safe. The description adds behavioral details: composite fan-out, partial failure graceful degradation, and specific timing (5-30s for new bundlephobia measurements). No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Single paragraph but well-structured, starting with purpose, then sources, usage guidance, return format, limitations, and edge cases. Dense but clear; could benefit from slightly more formatting but still effective.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema, but description lists all return fields (summary block, details, links, alternatives) and explains partial failures. Both parameters are documented. Complete for an agent to understand tool behavior and output.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for package and version. The description adds context: version defaults to latest when omitted, scoped packages accepted, and explains how parameters are used in the composite call. Adds value beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description specifies the tool as a composite check for npm packages, clearly stating the verb 'scan' and resource 'dependency'. It distinguishes from siblings by focusing on npm ecosystem and listing return fields. No ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use: 'whenever an agent asks "is X safe / popular / small"'. Also provides a negative guideline: 'NPM ecosystem only in v1; PyPI / Maven / Cargo / Go fall under deps.dev:version directly', pointing to an alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Base64 toolsInspect
Try in Browser
RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.7/5.0
Disambiguation2/5

Several tool groups have unclear boundaries: ask_pipeworx and ask_pipeworx_beta are explicitly identical right now, polymarket_edges / polymarket_arbitrage / polymarket_edge_tracker / polymarket_fill_risk / polymarket_kalshi_spread / bet_research all push prediction-market opportunities and can be confused, and ai_visibility_check is nested inside scan_competitor_ai_presence. discover_tools and suggest_questions also overlap as tool-discovery entry points.

Naming Consistency3/5

Everything is snake_case and mostly descriptive, but conventions are mixed: verb-first names (resolve_entity, validate_claim, compare_entities, search_within) sit beside noun-first names (entity_profile, recent_changes, bet_research, polymarket_edges), and brand-prefixed tools (pipeworx_feedback, pipeworx_trending) have unprefixed functional siblings (list_subscriptions, recent_alerts). The two actual Base64 tools (base64_encode, base64_decode) don't match the dominant Pipeworx naming style at all.

Tool Count2/5

33 tools is heavy for any single server, and the mismatch is extreme: the server is named 'Base64' yet only 2 of 33 tools relate to encoding/decoding — the other 31 form a sprawling data-research platform. Even judged as a data platform, the count exceeds the comfortable range and includes near-duplicates (the ask_pipeworx family, the Polymarket family).

Completeness4/5

The factual-data surface is well covered: query, grounded lookup, deep research, entity profiling, comparison, claim verification, entity resolution, subscriptions (subscribe/list/unsubscribe/recent_alerts), memory (remember/recall/forget), feedback, and tool discovery all exist with no obvious dead ends. The Base64 encoding domain is also complete (encode/decode across four variants). Minor gaps exist (e.g., no way to update a profile or edit memory entries) but they're workable.

Resources