notifications_scan
Refresh alerts; may notify configured channels
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| connection_context | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| message | No | ||
| retryable | No | ||
| support_ref | No |
Refresh alerts; may notify configured channels
| Name | Required | Description | Default |
|---|---|---|---|
| connection_context | No |
| Name | Required | Description | Default |
|---|---|---|---|
| message | No | ||
| retryable | No | ||
| support_ref | No |
Changes observed during successful MCP inspections.
Output schema / else / then / properties / categoryAdded value: +{
+ "type": "string"
+}Output schema / else / then / properties / expectedAdded value: +{
+ "type": "boolean"
+}Output schema / else / then / properties / failure_kindAdded value: +{
+ "type": "string"
+}Output schema / else / then / properties / responsibility_hintAdded value: +{
+ "type": "string"
+}Output schema / else / then / properties / routeAdded value: +{
+ "type": "string"
+}Output schema / else / then / properties / user_visibleAdded value: +{
+ "type": "boolean"
+}Input schema / properties / connection_contextAdded value: +{
+ "pattern": "^mctx_v1_[0-9a-f]{64}$",
+ "type": "string"
+}Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and openWorldHint=true, so the safety profile is partly covered. The description adds one genuinely new behavioral fact beyond annotations — that this scan may trigger outbound notifications to configured channels — which is valuable context. It still doesn't disclose what 'destructive' means here, what state is refreshed, or whether notifications are guaranteed or conditional ('may' is left unqualified).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Eight words with no padding and the action is front-loaded, which is good. But the brevity comes at the cost of substance rather than from disciplined editing — the semicolon clause is hedged with 'may' and the core verb 'scan' is never defined, so the terseness reads as under-specification.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a destructive, open-world mutation with an undocumented parameter and a 0%-covered schema; the description covers none of the consequential details (what gets refreshed or lost, whether notifications are sent every time, permissions needed). The existence of an output schema excuses it from explaining return values, but the input and side-effect story remains incomplete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is one parameter (connection_context, a required-format token) with 0% schema description coverage, and the description says nothing about it. The description therefore fails to compensate for the coverage gap; an agent has no prose explanation of what connection_context is or how to obtain it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a verb-ish action on a resource ('Refresh alerts') plus a side effect ('may notify configured channels'), which goes beyond restating the name. However, 'scan' is never explained and the phrasing doesn't distinguish it from siblings like notifications_list, notifications_summary, or notifications_ack. The purpose is only loosely inferable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No when-to-use guidance is given at all, and there are four closely named siblings (notifications_list, notifications_ack, notifications_resolve, notifications_summary) that an agent must choose between. The description offers no condition, prerequisite, or exclusion to route the agent correctly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Add one secure layer between your agents and this server.