devflows-mcp
cibseven-devflows
Ejecuta tus flujos de trabajo de desarrollo como procesos BPMN en un motor CIB seven local, y condúcelos desde agentes de codificación de IA como Claude Code a través de un servidor MCP.
La versión 0.1.0 incluye un flujo de trabajo: el ritual de release de un repositorio. Ejecuta los controles de calidad, pregunta a un humano, crea la etiqueta, publica. Este repositorio produjo su propio v0.1.0 ejecutando ese proceso sobre sí mismo.
Por qué
Hacer un release es un proceso con una decisión humana en medio. Normalmente ese proceso vive en la cabeza de alguien y en el scrollback de una terminal. Nada registra que los controles se ejecutaron, que una persona lo aprobó o qué se publicó.
Un motor de procesos es exactamente la herramienta adecuada para ese tipo de problemas. CIB seven conserva el estado, conserva el historial y sabe esperar a un humano. Tu máquina sigue haciendo el trabajo, y un agente de IA puede iniciar una ejecución y observarla, pero no puede saltarse la aprobación, porque la aprobación es un paso del proceso, no una promesa en un prompt.
Related MCP server: jt-mcp-server
Arquitectura
flowchart LR
agent["Claude Code<br/>(any MCP client)"] -- stdio --> mcpserver["devflows-mcp"]
mcpserver -- REST --> engine["CIB seven engine<br/>Docker, H2, localhost:8080"]
human["You, in the web UI"] -- approve --> engine
engine -- fetchAndLock --> worker["devflows-worker"]
worker -- shell --> repo["your repository<br/>pytest, ruff, git, gh"]El motor nunca ejecuta un comando de shell y nunca toca tu repositorio. Reparte trabajo; el worker de tu máquina lo consulta y lo hace. Ese es el patrón estándar de Camunda 7 external task, y es lo que hace seguro dejar que un proceso maneje una máquina de desarrollo.
El proceso de release
flowchart LR
start((start)) --> gates["Run gates<br/><i>devflows.gates</i>"]
gates --> q1{Gates passed?}
q1 -- no --> failed((Gates failed))
q1 -- yes --> approve["Approve release<br/><i>user task</i>"]
approve --> q2{Approved?}
q2 -- stop --> rejected((Release rejected))
q2 -- ship --> tag["Tag<br/><i>devflows.tag</i>"]
tag --> publish["Publish<br/><i>devflows.publish</i>"]
publish --> released((Released))Los tres rectángulos con un nombre son external tasks. «Approve release» es una user task de BPMN, por lo que espera, sobrevive a un reinicio del motor y puede responderse en la interfaz web o mediante el approve_gate MCP tool.
dry_run=true ejecuta los controles de verdad y no cambia nada más: ni etiqueta, ni push, ni release.
Inicio rápido
docker compose -f engine/docker-compose.yml up -duv syncuv run pytest -m "not integration" && uv run ruff check .Despliega el proceso (una vez por motor):
curl -s -X POST http://localhost:8080/engine-rest/deployment/create -F "deployment-name=cibseven-devflows" -F "release.bpmn=@processes/release.bpmn"Inicia el worker y déjalo corriendo en su propia terminal:
uv run devflows-workerInicia un release en seco de este repositorio. Sustituye repo_path por la ruta absoluta de este repositorio. Usa barras normales incluso en Windows (C:/Users/tu/repos/cibseven-devflows): funcionan y te evitan luchar contra tu shell por el escapado de las contrabarras.
curl -s -X POST http://localhost:8080/engine-rest/process-definition/key/devflows-release/start -H "Content-Type: application/json" -d '{"variables":{"repo_path":{"value":"ABSOLUTE/PATH/TO/cibseven-devflows","type":"String"},"version":{"value":"0.2.0","type":"String"},"dry_run":{"value":true,"type":"Boolean"}}}'Después afrobaríntalo en http://localhost:8080/webapp/#/seven/auth/tasks con demo / demo: filtra por My Group Tasks, toma Approve release, marca approve y envía.
En la práctica inicias las ejecuciones a través del servidor MCP en lugar de con curl. Consulta docs/DEMO.md para ver el recorrido completo.
devflows.yaml
Cada repositorio describe su propio release en un devflows.yaml en su raíz:
gates:
- name: tests
run: uv run pytest -q
- name: lint
run: uv run ruff check .
tag:
format: "v{version}"
publish:
run: gh release create v{version} --generate-notesClave | Significado |
| Lista ordenada de controles de calidad. Cada uno necesita un |
| Cómo se construye el nombre de la etiqueta. |
| El comando de shell que publica el release. |
Las claves de nivel superior desconocidas se ignoran, así que una versión más reciente de devflows puede agregar pasos sin romper un archivo antiguo.
Las herramientas MCP
devflows-mcp habla MCP sobre stdio y funciona desde cualquier cliente MCP.
Tool | Argumentos | Devuelve |
| — | Si el motor responde, su versión y los nombres de todos sus motores. |
|
| ID del despliegue y las claves de las definiciones de proceso desplegadas. |
| — | Definiciones de procesos desplegados con clave, versión e ID. |
|
| ID de instancia de proceso y un enlace hacia él en la interfaz web. |
|
| Estado, actividad actual, tareas abiertas, el informe de los controles y todas las variables. |
|
| Los controles que el repositorio ejecutaría. No toca el motor. |
|
| Confirmación de que la tarea de aprobación se completó. |
Cada herramienta devuelve un diccionario con una bandera ok, y una cadena error cuando ok es false. Ninguna herramienta lanza excepciones, porque el llamador es un modelo de lenguaje que debe explicar el fallo a una persona.
Usarlo desde Claude Code
El directorio plugin/ es un plugin de Claude Code alrededor del mismo servidor:
plugin/.mcp.jsoniniciadevflows-mcpconuv run.plugin/skills/release-with-devflows/SKILL.mdle dice al agente cuándo usar el motor y en qué orden llamar a las herramientas, incluye la regla de que debe detenerse y preguntar antes de aprobar.plugin/commands/release.mdproporciona el comando/devflows:release <version> [--real].
Para conectar el servidor a cualquier otro cliente de MCP directamente:
{
"mcpServers": {
"cibseven-devflows": {
"command": "uv",
"args": ["run", "devflows-mcp"]
}
}
}Configuración
Variable | Default | Proporcionada por |
|
| worker, MCP server |
|
| worker |
|
| worker |
|
| worker |
| se encuentra junto al paquete | MCP server |
Seguridad
Dos cosas sobre este proyecto son deliberadas, y ambas asumen que se ejecuta en tu propia máquina:
El motor no tiene autenticación. La API REST en
localhost:8080acepta cualquier cosa que pueda alcanzarla. No expongas ese puerto a una red que no controles.El worker ejecuta comandos de shell. Provienen del
devflows.yamldel repositorio del que le pides un release, se ejecutan como tú, en ese repositorio, y son los mismos comandos que escribirías tú. Apunta solo a repositorios de confianza.
No hay servicio en la nube, ni telemetría, ni ninguna cuenta más allá de las credenciales de GitHub que gh ya posee.
Estructura del repositorio
Directorio | Contiene |
| Docker Compose para un motor local CIB seven 2.2.0 |
|
|
|
|
|
|
|
|
| El plugin de Claude Code |
| Pruebas unitarias, más |
| El script de demo y los documentos de diseño y de traza |
Requisitos
Docker Desktop para el motor.
Python 3.12 y uv.
gityghautentificado, para los pasos de tag y push.Camunda Modeler 5. (opcional, si quieres editar el diagrama BPMN). Abre
processes/release.bpmncomo diagrama de Camunda 7.
Licencia
Apache License 2.0. Consulta LICENSE.
Available Tools
11 toolsapprove_gateB
Approve or reject a waiting release. This is the human decision in the process.
| Name | Required | Description | Default |
|---|---|---|---|
| approve | Yes | ||
| comment | No | ||
| task_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description must carry the full burden of behavioral disclosure, and it falls short. It does not reveal what side effects approving or rejecting might have (e.g., triggering a deployment, sending notifications, or whether the action is reversible). The only extra behavioral hint is that this is the 'human decision,' which is thin. For a mutation tool affecting a release, significantly more transparency is expected.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately short and front-loaded with the action. The second sentence adds a modicum of context without unnecessary verbosity. However, the phrase 'in the process' is slightly vague and could be more informative without adding bulk, keeping it just shy of perfect conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Although the tool is relatively simple (3 flat parameters, no nested objects, and an output schema exists), the description omits any mention of prerequisites, side effects, or the consequence of choosing 'approve' versus 'reject.' For a tool that likely gates the rest of a pipeline, an agent would need more context to use it correctly, such as whether the release proceeds immediately or whether a comment is required in certain cases. It is adequate for very simple usages but not fully comprehensive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description should compensate by clarifying parameter usage, but it mentions none of the three parameters (task_id, approve, comment). While the parameter names are self-explanatory, the description adds no meaning beyond the schema, and this is a clear miss given the low coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Approve or reject') and the resource ('a waiting release'), which unambiguously identifies the tool's purpose. It adds a contextual clue ('the human decision in the process') that positions it as the manual approval step, distinguishing it from sibling tools like deploy_process or start_release, though it does not name them explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage when a release is waiting for approval, but it does not provide explicit guidance on when to choose this tool over its siblings, nor does it mention any prerequisites or conditions. The phrase 'in the process' hints at a pipeline context, but there's no explicit when-not-to-use or alternative routing, so this is only implicitly guided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
cancel_runB
Stop a running release. The reason is kept in the engine history.
| Name | Required | Description | Default |
|---|---|---|---|
| reason | No | cancelled through the devflows MCP server | |
| process_instance_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the burden is on the description to disclose side effects. It does reveal that the reason is stored in engine history, which is useful. However, it does not explain whether the cancellation is irreversible, what happens to the underlying process, how long the operation takes, or what error conditions may occur.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short, focused sentences: the first states the operating directly, and the second adds a meaningful side effect. Every word earns its place, and there is no filler or restatement of the tool name.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple cancellation tool with two parameters and an output schema, the description is adequate for basic invocation—it identifies the action and one key behavioral effect. However, it omits practical caveats such as whether the run must be active, whether cancellation can be undone, and what happens to related resources, making it not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 0% description coverage for its two parameters, and the description adds no extra parameter-level detail. 'process_instance_id' and 'reason' are named but never explained in context, so the agent receives no additional guidance beyond raw field names and the default value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a clear verb and object—'Stop a running release'—which makes the tool's action unambiguous and distinguishes it from sibling tools like start_release and retry_run. However, the description refers to a 'release' while the tool name says 'run', and it does not explicitly name any sibling to distinguish from, so it stops short of full clarity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool should be used when the agent needs to stop a running release, but it gives no explicit when-to-use or when-not-to-use guidance. It does not mention alternatives such as retry_run or conditions like 'only works on active runs', leaving the selection logic to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
deploy_processC
Deploy the release process to the engine. Deploying it twice is harmless.
| Name | Required | Description | Default |
|---|---|---|---|
| bpmn_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the burden of behavioral disclosure. It explicitly states that deploying twice is harmless, which is a useful idempotency trait. However, it does not disclose side effects, required permissions, or what 'deploying' entails beyond the name, leaving significant behavioral context unaddressed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no fluff. The primary action is stated first, followed by a single relevant caveat about idempotency. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Although an output schema exists, the description lacks key operational context for a deployment action: prerequisites, effects on existing processes, environment assumptions, and how the bpmn_path parameter influences the deployment. The idempotency note is the only behavioral extra.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has one parameter (bpmn_path) with 0% description coverage, and the description does not mention it at all. The optional nature and default null are not explained, leaving an agent without any understanding of why or how to use the parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Deploy' and names a resource ('the release process') and destination ('the engine'), making the core action clear. It does not explicitly distinguish itself from siblings like start_release, but the artifact named ('release process') differentiates it enough.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no mention of when to use this tool versus alternatives such as start_release or list_processes. The only usage hint is the idempotency note, which implies it can be run repeatedly, but no explicit when/when-not guidance is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
doctorC
Check whether a release can run: engine, process, decision, config.
| Name | Required | Description | Default |
|---|---|---|---|
| repo_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. 'Check' suggests a read-only diagnostic, but the description does not state whether it has side effects, whether it requires a release to be staged, what happens on failure, or how comprehensive its checks are.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no filler. Key information—'check whether release can run'—is front-loaded, and the scoped areas are listed compactly. It is appropriately terse, though cryptically so.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of several similar operational siblings, the description should say how this diagnostic differs and what the agent needs to provide (like repo_path). Because the description lacks usage context and side-effect transparency, it feels incomplete for safe tool selection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not mention repo_path at all. With a single optional parameter, the description needed to explain what the path refers to and how it affects the check, but it provides no parameter meaning beyond the bare schema title.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb and resource: 'Check whether a release can run', and indicates scope ('engine, process, decision, config'). This distinguishes it from operational siblings like start_release or cancel_run, though the domain-specific list is somewhat ambiguous without additional context.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance about when to use this tool versus alternatives such as start_release or get_run. The phrase 'whether a release can run' implies a pre-flight diagnostic, but this is left to inference rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
engine_statusA
Check that the local CIB seven engine is reachable and report its version.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the behavioral disclosure burden. It communicates a read-only check and version report, but does not explicitly state that no state is modified, nor does it mention error behavior or connectivity caveats.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, information-dense sentence covers the action, resource, and expected output without any filler words. It is well front-loaded and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given there are no parameters and an output schema exists, the description sufficiently covers what the agent needs to invoke this tool correctly. It would benefit from a brief note about whether any environment context is required, but for a simple status check this is minimally sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the schema leaves nothing unexplained. The description's reference to checking reachability and version provides enough semantic context for a parameterless invocation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies a specific verb ('check') and resource ('local CIB seven engine'), and states the additional output of reporting its version. This distinguishes it from sibling tools like deploy_process or approve_gate, which target different actions and resources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The purpose is clear enough to imply when this tool is appropriate: when an agent needs to verify engine reachability or discover its version. However, it does not explicitly state when not to use it or mention any alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_runB
Report the state, the current activity, the gate report and the variables of a run.
| Name | Required | Description | Default |
|---|---|---|---|
| process_instance_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It mentions what it reports (state, activity, gate report, variables) but does not disclose whether it is read-only, requires specific permissions, or what happens if the run does not exist. It also does not mention any side effects or performance implications. For a read-type tool, this is a partial disclosure but lacks depth.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that is concise and lists the key content of the report. However, it is slightly terse and could benefit from a bit more detail on the scope, but for a simple tool it is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given there are no annotations, the description must carry the full burden. It identifies the tool's purpose and output components but omits critical context such as whether this is a read-only operation, error conditions for missing/invalid process_instance_id, or when this tool should be used relative to siblings like 'list_processes' or 'engine_status'. An agent may not know if this requires a running process or if it returns historical data.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has zero description coverage; the parameter 'process_instance_id' has no description. The tool description implies this is the run identifier, but does not explain format, source, or how to obtain it. With only one parameter and no schema documentation, the description should at least provide guidance on what constitutes a valid process_instance_id; it does not.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reports the state, current activity, gate report, and variables of a run. This distinctly separates it from siblings like list_processes (listing) or start_release (starting), and it specifies a precise resource ('a run') with a clear action (report). The verb 'report' is specific and the content is enumerated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this tool is used to fetch details about a run, but it does not explicitly state when to use it versus alternatives. It doesn't mention that it's for a specific run identified by process_instance_id, nor does it exclude scenarios like checking engine status or listing gates. The usage is implied but not formally guided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_gatesB
List the gates a release of this repository would run. Does not touch the engine.
| Name | Required | Description | Default |
|---|---|---|---|
| repo_path | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With zero annotations provided, the description carries the full disclosure burden. It does disclose the single most important behavioral trait — that this tool has no effect on the engine state (read-only in effect), which is significant given the mutation-heavy sibling set. It does not go further (e.g., scope of repo_path, failure behavior), but the key side-effect signal is present.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, zero filler. The first identifies the resource and the non-executing nature; the second reinforces the no-side-effects constraint, which is load-bearing given the sibling mutations. Every word earns its place and the key constraint is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need no description, and the no-engine-touch disclosure covers risk context. The main completeness gap is the undefined repo_path parameter, which an agent needs to resolve before calling. For a list-style tool this is otherwise fairly complete, but the undocumented parameter keeps it from being fully self-sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% — the only parameter, repo_path, has just a title 'Repo Path' with no schema description. The tool description adds nothing about the parameter either: it never explains what repo_path should be (absolute path, existing repo on disk, branch/commit reference). For a single-parameter tool with zero schema coverage, the description should compensate but does not.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear verb 'List' and specific resource 'the gates a release of this repository would run.' The phrase 'would run' signals this is prospective inspection, not triggering a release. The closing 'Does not touch the engine' works with sibling names (engine_status, deploy_process, start_release) to differentiate it from engine-affecting tools, though no sibling is named explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Does not touch the engine' gives an implicit when-not: use this when you only want to inspect gates without side effects, rather than for the mutation siblings (start_release, deploy_process, approve_gate). But no explicit alternative is named and no clear 'use X instead when...' guidance is given. The context is implied rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_processesA
List the process definitions the engine currently knows about.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry behavioral disclosure. It is extremely minimal, implying a read-only operation but not explicitly stating so, nor mentioning any side effects, ordering, or snapshot semantics. For a simple list tool this might be acceptable, but it leaves ambiguity about whether results are live or cached.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence with zero wasted words. It conveys the core purpose in a clear, efficient manner appropriate for a trivial parameterless tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the zero parameters and an output schema, the description is minimally sufficient for a list operation. However, it lacks any hint at output ordering, pagination, or whether results reflect persisted or in-memory state, which could confuse an agent expecting a specific format or volume.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters and the input schema is empty, which raises the baseline. The description adds no parameter semantics because none are needed; it correctly implies the tool requires no arguments.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('list') and resource ('process definitions') and adds the scope ('the engine currently knows about'). This clearly distinguishes it from siblings like list_gates and engine_status, which operate on different resources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to prefer this tool over alternatives, nor any exclusions or prerequisites. The phrase 'currently knows about' implies a snapshot of engine state, but without explicit comparisons to list_gates or deploy_process, an agent may not know when this is the right choice.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_runsB
List the most recent release runs, newest first, with their state.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral transparency. It discloses useful behavior: results are 'newest first' and include 'state,' which implies a read-only listing operation. It does not mention pagination, authorization, or any further behavioral constraints, but for a simple list tool the disclosed ordering and payload content add real value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, tightly written sentence that front-loads the primary action and includes key details without filler. Every word contributes meaning, making it easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter listing tool with an output schema, the description covers the essential parts: resource, ordering, and result content. The main gap is that limit semantics are neither described nor compensated for to the schema, but this is a minor omission given the simplicity of the operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is only one parameter, limit, and schema description coverage is 0%. The description does not explain how limit behaves, such as whether it caps the maximum number of returned runs or what the default implies. The default value of 10 and the parameter name provide some meaning, but the description does not compensate for the missing parameter schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'List the most recent release runs, newest first, with their state.' This clearly communicates the core purpose and includes ordering and output scope. However, it does not explicitly contrast this tool with siblings such as get_run or list_processes, so differentiation must be inferred from names rather than stated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The usage context is implied: an agent would use this tool to see recent release runs and their states. There is no explicit guidance about when not to use it, nor any mention of alternatives like get_run for a single run, so the guidance is present only at a minimal level.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
retry_runC
Give a run that is stuck on an incident another attempt.
| Name | Required | Description | Default |
|---|---|---|---|
| process_instance_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It reveals the basic outcome—starting another attempt—but does not disclose side effects, whether the previous attempt is affected, permissions needed, or whether the operation is reversible. For a tool that mutates run state, this is a meaningful gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single short sentence with no wasted words. It is front-loaded with the core idea before the qualifier. It sacrifices richness for brevity, but as a pure structural matter it is concise and readable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given a single required parameter and an output schema, the tool is not highly complex, but a retry action has important ambient behavior. The description does not explain when retrying is allowed, what happens to the existing run, or whether it can be safely invoked. This leaves an agent without enough context to confidently invoke the tool in a nontrivial incident.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 0%, and the description never mentions process_instance_id. It only refers to 'a run,' which loosely implies the parameter identifies the run to retry, but there is no explicit mapping. Since the description must compensate for the schema's silence and does not, parameter semantics are weak.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear action—give a run another attempt—and qualifies the target as one 'stuck on an incident.' This distinguishes it from list/get/cancel operations at a basic level, though it does not name a sibling tool explicitly. The phrasing is slightly awkward but still conveys that this is a retry operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool ('a run that is stuck on an incident') but gives no explicit guidance about when not to use it, such as for runs that failed normally or are already canceled. It also does not mention alternatives like cancel_run or get_run. Context is present but chosen exclusions are not.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
start_releaseA
Start a release run for a repository.
Runs the gates, drafts release notes, then asks the policy whether a human
is needed. With dry_run true, which is the default, nothing is tagged or
published. approval_timeout is an ISO 8601 duration after which an
unanswered approval expires.
| Name | Required | Description | Default |
|---|---|---|---|
| dry_run | No | ||
| version | Yes | ||
| repo_path | Yes | ||
| approval_timeout | No | PT24H |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description provides useful behavioral detail: it runs gates, drafts release notes, asks policy whether a human is needed, and highlights that dry_run prevents tagging or publishing. It also explains the approval_timeout expiration. This gives the agent a realistic picture of side effects, though it could say more about what happens when dry_run is false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded: the main purpose is stated in the first sentence, followed by the essential behavioral and timing details. Every sentence earns its place without unnecessary bloat, though it could be slightly more structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that an output schema exists and the tool has siblings, the description covers the main workflow steps, dry-run safety, and timeout semantics. The main gap is not clearly explaining the exact behavior and requirements for non-dry-run releases, especially around tagging and publishing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has no parameter descriptions, so the description must compensate. It explicitly explains dry_run and approval_timeout meaning and the default behavior, but repo_path and version receive no specific explanation beyond the overall wording 'for a repository' and the word 'version'. This leaves room for confusion about exact argument formats or expectations.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Start a release run for a repository' and then outlines the key stages: run the gates, draft release notes, and ask the policy about human approval. It is specific and clearly distinguishable from siblings like list_gates and approve_gate, though it does not explicitly name any sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is the entry point for a release and that a human approval gate may be needed afterwards, but it does not explicitly explain when to use this tool instead of related ones such as retry_run, cancel_run, or approve_gate. The intended workflow context is inferable, but not stated directly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.2.0- Added
cancel_run - Added
doctor - Added
list_runs - Added
retry_run - Changed
start_release1 field changed- added
Input schema / properties / approval_timeoutAdded value: +{ + "default": "PT24H", + "title": "Approval Timeout", + "type": "string" +}
7 tool updates
v0.1.0- First observed
approve_gate - First observed
deploy_process - First observed
engine_status - First observed
get_run - First observed
list_gates - First observed
list_processes - First observed
start_release
TDQS
Scored across 11 tools
Each tool targets a distinct resource and action: engine health, process deployment/listing, release run lifecycle, gate approval, and diagnostics. There is no meaningful overlap or risk of selecting the wrong tool for a given intent.
Most tools follow a clear verb_noun pattern (deploy_process, list_processes, start_release, approve_gate, cancel_run). The deviations are minor: engine_status reverses the order and doctor is a bare noun, but the names remain intuitive and predictable.
Eleven tools is well-scoped for a release automation server. Each tool covers a distinct aspect of the release workflow without unnecessary bloat or noticeable duplication.
The tool surface covers the core release lifecycle well: checking the engine, deploying processes, starting runs, monitoring runs, approving gates, retrying, canceling, and running diagnostics. There is no explicit process update/delete, but that is a minor gap since the workflow does not clearly require it.
Maintenance
Related MCP Connectors
MCP server for your apps' tools and custom tools, plus hosted AI agents and approval-gated workflows
Human-in-the-loop for AI agents over MCP: durable approvals with a hosted review page & audit trail
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
Zero-setup MCP gateway securely connecting AI to your tools with authentication and workflows
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables AI coding environments to enforce engineering governance through MCP tools and resources for init, check, route, and review workflows.9 npm2MIT
- AlicenseNot gradedqualityCmaintenanceMCP server that equips AI agents with dev workflow tools including GitHub project management, conventional commits, visual regression testing, Jira/Confluence integration, and a persistent memory knowledge graph.46 npmMIT
- FlicenseNot gradedqualityDmaintenanceEnables AI agents and external systems to programmatically trigger and monitor Jenkins jobs, retrieve build status and logs via MCP standards.-
- AlicenseNot gradedqualityAmaintenanceExposes a governed, provenance-grounded autonomous delivery pipeline as an MCP server, enabling AI coding assistants like Claude Code or Codex to initiate requirements-to-PR workflows with human approval gates and full audit.504 PyPI13MIT