Skip to main content
Glama

Govinfo

by io.github.pipeworx-io

Scan Dependency

scan_dependency
Read-onlyIdempotent

Composite "should I add this npm package to my project" check in ONE call — fans out across deps.dev (license + advisories + version history) and bundlephobia (gzipped/minified bundle size, dependency count, ESM/tree-shake support). Use whenever an agent asks "is X safe / popular / small" or "what does adding lodash cost me". Returns a summary block (is_latest, license, published_at, advisory_count, bundle_kb_min, bundle_kb_gz, dependency_count, has_esm, tree_shakeable), per-advisory detail, links, and a list of recent alternative versions. NPM ecosystem only in v1; PyPI / Maven / Cargo / Go fall under deps.dev:version directly. Partial failures degrade gracefully — bundlephobia's first measurement on a new version can take 5-30s; sources_failed will list it if it times out, the rest still returns.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
packageYesnpm package name. Scoped packages (e.g. "@types/node") are accepted.
versionNoSpecific version to check (e.g., "18.3.1"). Defaults to the latest published version when omitted.

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. Added

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnly/idempotent hints, the description discloses partial failure behavior, potential 5-30s latency on first measurement, and the sources_failed field. These are valuable behavioral details not present in annotations, helping the agent anticipate timeouts and degraded responses.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single dense paragraph front-loads the purpose, then covers when-to-use, return contents, ecosystem scope, and failure modes. Every sentence contributes a distinct piece of information; no filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite the lack of an output schema, the description enumerates the summary block fields, per-advisory details, links, alternative versions, and failure handling. It fully covers the tool's behavior, constraints (NPM only in v1), and partial-success semantics, making it self-sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with clear descriptions for both 'package' (npm package name, scoped packages accepted) and 'version' (defaults to latest). The description adds high-level context (composite check, data sources) but does not add new meaning to individual parameters beyond schema, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a composite check for 'should I add this npm package to my project' with specific verbs ('check', 'fans out') and resources (deps.dev, bundlephobia). It distinguishes itself from siblings like get_package and search_packages by detailing the combined sources and returned summary fields.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly provides when to use: whenever an agent asks 'is X safe / popular / small' or 'what does adding lodash cost me'. It also gives an alternative for non-NPM ecosystems: 'PyPI / Maven / Cargo / Go fall under deps.dev:version directly', making the guidance actionable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Govinfo toolsInspect
Try in Browser
RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.8/5.0
Disambiguation2/5

Many tools have heavily overlapping purposes: ask_pipeworx, ask_pipeworx_beta, ask_pipeworx_grounded, deep_research, discover_tools, and suggest_questions all serve lookup/discovery in similar ways, and the five polymarket_* tools plus bet_research blur together. The six genuinely GovInfo-specific tools are distinct, but an agent would struggle to pick between the numerous meta and market tools, especially when the server is supposed to be about government information.

Naming Consistency3/5

Most tools follow a readable verb_noun pattern (list_collections, search_packages, get_granule, resolve_entity), but there are deviations: domain-prefixed nouns like polymarket_arbitrage, noun-ish names like pipeworx_trending, and verb phrases like ask_pipeworx_beta or generate_llms_txt. Overall it is mixed yet still navigable, not chaotic.

Tool Count2/5

36 tools is excessive for a server named Govinfo: only about six tools (list_collections, search_packages, get_package, list_granules, get_granule, search_within) actually serve that domain, while the remaining ~30 are Pipeworx meta-tools, prediction-market helpers, memory utilities, and AI-visibility checks. The count is bloated relative to the apparent scope and dilutes the server's identity.

Completeness3/5

The core GovInfo workflow is present — list collections, search packages, fetch package metadata, list and fetch granules, and semantically search within fetched text. However, there is no tool that directly downloads or returns the full text/PDF/XML content of a package or granule; agents only get links, so a full-document workflow requires an external fetch. The unrelated tools do not fill that gap and instead distract from the domain.

Resources