Skip to main content
Glama

Salesforce

by io.github.pipeworx-io

Scan Dependency

scan_dependency
Read-onlyIdempotent

Composite "should I add this npm package to my project" check in ONE call — fans out across deps.dev (license + advisories + version history) and bundlephobia (gzipped/minified bundle size, dependency count, ESM/tree-shake support). Use whenever an agent asks "is X safe / popular / small" or "what does adding lodash cost me". Returns a summary block (is_latest, license, published_at, advisory_count, bundle_kb_min, bundle_kb_gz, dependency_count, has_esm, tree_shakeable), per-advisory detail, links, and a list of recent alternative versions. NPM ecosystem only in v1; PyPI / Maven / Cargo / Go fall under deps.dev:version directly. Partial failures degrade gracefully — bundlephobia's first measurement on a new version can take 5-30s; sources_failed will list it if it times out, the rest still returns.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
packageYesnpm package name. Scoped packages (e.g. "@types/node") are accepted.
versionNoSpecific version to check (e.g., "18.3.1"). Defaults to the latest published version when omitted.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses key behaviors: fans out across two services, partial failures degrade gracefully, bundlephobia first measurement can take 5-30s, and the sources_failed list. Annotations already indicate safe read operability; description adds essential timing and fault-tolerance details.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the key benefit ('composite check in ONE call'), followed by concise details and limitations. Every sentence adds necessary context without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite no output schema, the description thoroughly specifies return fields (summary block, advisory detail, links, versions) and handles edge cases (partial failures, timing). This fully equips the agent to interpret results.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds value by providing examples (scoped packages like @types/node, version format like 18.3.1) and clarifies defaulting behavior, making parameter usage more intuitive for the agent.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: a composite check for npm packages using deps.dev and bundlephobia. It distinguishes itself from siblings by specifying the NPM ecosystem and the specific services used.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use: when an agent asks about safety, popularity, size, or cost of adding a package. Also notes NPM-only in v1 and mentions alternatives for other ecosystems, guiding correct invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Salesforce toolsInspect
Try in Browser
RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.7/5.0
Disambiguation2/5

The set mixes Salesforce CRUD tools with a large Pipeworx research and prediction-market platform, and several tools overlap heavily: ask_pipeworx vs ask_pipeworx_beta are functionally identical, grounded/validate_claim/deep_research cover similar lookup/verification territory, and the six polymarket/bet tools share edge-finding purposes with only subtle distinctions. An agent would need to read long descriptions carefully to pick the right one, so misselection risk is high.

Naming Consistency3/5

Salesforce tools follow a clear sf_verb_noun pattern, and the Pipeworx tools mostly use lowercase snake_case phrase names, but the conventions diverge: ask_pipeworx has no underscore, deep_research/entity_profile are noun phrases rather than verb-first, and the sf_* prefix is a separate naming family. It is still readable, but it is not a single predictable pattern.

Tool Count2/5

39 tools is well past the heavy threshold, and most belong to a broad data/research platform rather than the Salesforce scope implied by the server name; only 8 tools are actually Salesforce CRUD/query operations. The count feels bloated for a coherent assistant, even if individual features are useful.

Completeness4/5

The Salesforce subset is complete: create/get/update/delete/query/search/describe/list-object cover the record lifecycle with no dead ends. The broader Pipeworx ecosystem also has strong coverage, including routing, grounded verification, research, entity resolution, memory, and subscriptions, with only minor gaps such as no direct citation-fetch tool and no Salesforce upsert/bulk operations.

Resources