Skip to main content
Glama

scalix_computer_exec

Destructive

Run a command inside a persistent Linux machine and wait for it to finish. Returns exit code, stdout and stderr. The machine must be running.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
idYesMachine id from scalix_computer_create or scalix_computer_list
cwdNoWorking directory inside the machine
envNoEnvironment variables for this command only
argsNoArguments, e.g. ["-lc", "npm test"]
commandYesProgram to run, e.g. bash
timeout_msNoGive up after this many milliseconds, 1000-600000 (default 120000)

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. Added

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false, so the description's addition of 'persistent' and 'wait for it to finish' adds behavioral context about state persistence and synchronous execution. It also discloses the return format (exit code, stdout, stderr). While it doesn't describe permission levels or side effects beyond the command's own effects, the annotation covers destructiveness. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the main action. Every sentence provides necessary information: what the tool does, what it returns, and a crucial prerequisite. There is no redundancy or filler, making it highly concise and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex tool with 6 parameters and no output schema, the description covers the essential behavioral contract: execution, waiting, and return values. It omits details about the exact return structure (e.g., JSON fields) and failure modes like timeouts, but the timeout parameter is documented in the schema. It is adequate for an agent to select and invoke the tool correctly, though not exhaustive.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with each parameter (id, command, cwd, env, args, timeout_ms) having a clear description. The tool description does not add extra meaning beyond the schema, and only reinforces that the machine must be running. Given the schema already fully documents the parameters, a baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Run'), identifies the resource ('a persistent Linux machine'), and states the core behavior ('wait for it to finish'). It also lists the return values (exit code, stdout, stderr), which distinguishes it from sibling tools like scalix_computer_read_file or scalix_computer_write_file. The purpose is unambiguous and differentiates from machine lifecycle tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context: it runs commands on a persistent Linux machine, waits for completion, and returns output. The critical prerequisite 'The machine must be running' implicitly tells the agent to check scalix_computer_list or start the machine first. However, it does not explicitly mention alternatives or when not to use it, hence not a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A3.6/5.0
Disambiguation4/5

Tools are grouped by service prefix and generally target distinct resources/actions. A few execution surfaces could be confused (sandbox_run vs computer_exec vs fn_invoke; build_create vs fn_deploy vs run_deploy), and storage_list is overloaded for both buckets and objects, but descriptions clarify the boundaries well.

Naming Consistency4/5

The scalix_ prefix plus snake_case is used throughout, and most tools follow <service>_<verb>_<noun>. Minor deviations like scalix_search, scalix_status, and scalix_usage omit a service-domain qualifier, but the overall pattern is predictable and easy to navigate.

Tool Count2/5

53 tools is a very large surface. While the server covers a broad multi-service cloud platform, the count falls well beyond the 25+ threshold and will likely feel overwhelming; many service areas could reasonably be split into separate servers or trimmed.

Completeness2/5

Several service lifecycles have obvious gaps: the KV store has get/list/set but no delete, storage has upload/download/list but no delete for objects or buckets, functions have deploy/list/invoke but no delete/update, and cron has create but no list/delete. These missing operations create dead ends for agents managing common resources.