devflows-mcp
cibseven-devflows
ローカルの CIB seven エンジン上で開発者ワークフローを BPMN プロセスとして実行し、MCP サーバーを介して Claude Code などの AI コーディングエージェントから操作します。
バージョン 0.1.0 には、リポジトリのリリース儀式という 1 つのワークフローが含まれています。品質ゲートを実行し、人間に確認し、タグを付け、公開します。このリポジトリ自体が、そのプロセスを自分自身に対して実行して v0.1.0 を切り出しました。
なぜ
リリースを切ることは、その途中に人間の判断が入るプロセスです。通常、そのプロセスは誰かの頭の中とターミナルのスクロールバックの中に存在します。ゲートが実行されたこと、人が承認したこと、何が公開されたかを記録するものはありません。
プロセスエンジンは、まさにそのような形の問題に適したツールです。CIB seven は状態を保持し、履歴を保持し、人間を待つ方法を知っています。あなたのマシンは依然として作業を行い、AI エージェントは実行を開始して監視できますが、承認をスキップすることはできません。承認はプロセス内のステップであり、プロンプト内の約束ではないからです。
Related MCP server: jt-mcp-server
アーキテクチャ
flowchart LR
agent["Claude Code<br/>(any MCP client)"] -- stdio --> mcpserver["devflows-mcp"]
mcpserver -- REST --> engine["CIB seven engine<br/>Docker, H2, localhost:8080"]
human["You, in the web UI"] -- approve --> engine
engine -- fetchAndLock --> worker["devflows-worker"]
worker -- shell --> repo["your repository<br/>pytest, ruff, git, gh"]エンジンはシェルコマンドを実行せず、リポジトリに触れることもありません。作業を配布するだけで、あなたのマシン上のワーカーがそれをポーリングして実行します。これは標準的な Camunda 7 外部タスクパターンであり、プロセスが開発者マシンを駆動することを安全にする理由です。
リリースプロセス
flowchart LR
start((start)) --> gates["Run gates<br/><i>devflows.gates</i>"]
gates --> q1{Gates passed?}
q1 -- no --> failed((Gates failed))
q1 -- yes --> approve["Approve release<br/><i>user task</i>"]
approve --> q2{Approved?}
q2 -- stop --> rejected((Release rejected))
q2 -- ship --> tag["Tag<br/><i>devflows.tag</i>"]
tag --> publish["Publish<br/><i>devflows.publish</i>"]
publish --> released((Released))トピック名を持つ 3 つの長方形は外部タスクです。「リリースを承認」は BPMN ユーザータスクであり、待機し、エンジンの再起動後も存続し、Web UI または approve_gate MCP ツールのいずれかで回答できます。
dry_run=true はゲートを実際に実行しますが、それ以外は何も変更しません。タグもプッシュもリリースも行いません。
クイックスタート
docker compose -f engine/docker-compose.yml up -duv syncuv run pytest -m "not integration" && uv run ruff check .プロセスをデプロイします(エンジンごとに 1 回):
curl -s -X POST http://localhost:8080/engine-rest/deployment/create -F "deployment-name=cibseven-devflows" -F "release.bpmn=@processes/release.bpmn"ワーカーを起動し、専用のターミナルで実行し続けます:
uv run devflows-workerこのリポジトリのドライリリースを開始します。repo_path をこのリポジトリの絶対パスに置き換えてください。Windows でもスラッシュを使用してください(C:/Users/you/repos/cibseven-devflows)。これらは機能し、バックスラッシュのエスケープと戦う手間を省きます。
curl -s -X POST http://localhost:8080/engine-rest/process-definition/key/devflows-release/start -H "Content-Type: application/json" -d '{"variables":{"repo_path":{"value":"ABSOLUTE/PATH/TO/cibseven-devflows","type":"String"},"version":{"value":"0.2.0","type":"String"},"dry_run":{"value":true,"type":"Boolean"}}}'次に、http://localhost:8080/webapp/#/seven/auth/tasks で demo / demo として承認します。マイグループタスクでフィルタリングし、リリースを承認をクレームし、承認にチェックを入れて送信します。
実際には、curl ではなく MCP サーバーを介して実行を開始します。完全なウォークスルーについては docs/DEMO.md を参照してください。
devflows.yaml
各リポジトリは、ルートにある devflows.yaml で独自のリリースを記述します:
gates:
- name: tests
run: uv run pytest -q
- name: lint
run: uv run ruff check .
tag:
format: "v{version}"
publish:
run: gh release create v{version} --generate-notesキー | 意味 |
| 品質ゲートの順序付きリスト。各ゲートには |
| タグ名の構築方法。 |
| リリースを公開するシェルコマンド。 |
未知のトップレベルキーは無視されるため、新しいバージョンの devflows が古いファイルを壊さずにステップを追加できます。
MCP ツール
devflows-mcp は stdio 上で MCP を話し、任意の MCP クライアントから動作します。
ツール | 引数 | 戻り値 |
| — | エンジンが応答するかどうか、そのバージョン、エンジン名 |
|
| デプロイメント ID とデプロイされたプロセス定義キー |
| — | デプロイされたプロセス定義(キー、バージョン、ID) |
|
| プロセスインスタンス ID と Web UI でのリンク |
|
| 状態、現在のアクティビティ、未完了タスク、ゲートレポート、すべての変数 |
|
| そのリポジトリが実行するゲート。エンジンには触れません |
|
| 承認タスクが完了したことの確認 |
すべてのツールは ok フラグを持つ辞書を返し、ok が false の場合は error 文字列を返します。呼び出し元は失敗を人に説明する必要がある言語モデルであるため、どのツールも例外を発生させません。
Claude Code から使用する
plugin/ は同じサーバーを中心とした Claude Code プラグインです:
plugin/.mcp.jsonはuv runでdevflows-mcpを起動します。plugin/skills/release-with-devflows/SKILL.mdは、エージェントにエンジンをいつ使用するか、ツールをどの順序で呼び出すかを指示します。承認前に停止して確認するというルールも含まれます。plugin/commands/release.mdは/devflows:release <version> [--real]を提供します。
サーバーを他の MCP クライアントに直接接続するには:
{
"mcpServers": {
"cibseven-devflows": {
"command": "uv",
"args": ["run", "devflows-mcp"]
}
}
}設定
変数 | デフォルト | 使用箇所 |
|
| ワーカー、MCP サーバー |
|
| ワーカー |
|
| ワーカー |
|
| ワーカー |
| パッケージの隣にあるもの | MCP サーバー |
セキュリティ
このプロジェクトには意図的な点が 2 つあり、どちらも自分のマシンで実行することを前提としています:
エンジンには認証がありません。
localhost:8080の REST API は、到達できるものなら何でも受け入れます。そのポートを制御できないネットワークに公開しないでください。ワーカーはシェルコマンドを実行します。 それらは、リリースを依頼したリポジトリの
devflows.yamlから来て、あなたとして、そのリポジトリ内で実行され、あなたが入力するのと同じコマンドです。信頼できるリポジトリのみを対象にしてください。
クラウドサービス、テレメトリ、gh がすでに持っている GitHub 資格情報以外のアカウントはありません。
リポジトリ構成
ディレクトリ | 内容 |
| ローカル CIB seven 2.2.0 エンジン用の Docker Compose |
|
|
|
|
|
|
|
|
| Claude Code プラグイン |
| 単体テスト、およびライブエンジンが必要な |
| デモスクリプト、設計および計画ドキュメント |
要件
Docker Desktop(エンジン用)
Python 3.12 と uv
git、およびタグと公開ステップ用に認証済みのghBPMN 図を編集する場合は Camunda Modeler 5.x(オプション)。
processes/release.bpmnを Camunda 7 図として開きます。
ライセンス
Apache License 2.0。LICENSE を参照してください。
Available Tools
11 toolsapprove_gateB
Approve or reject a waiting release. This is the human decision in the process.
| Name | Required | Description | Default |
|---|---|---|---|
| approve | Yes | ||
| comment | No | ||
| task_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description must carry the full burden of behavioral disclosure, and it falls short. It does not reveal what side effects approving or rejecting might have (e.g., triggering a deployment, sending notifications, or whether the action is reversible). The only extra behavioral hint is that this is the 'human decision,' which is thin. For a mutation tool affecting a release, significantly more transparency is expected.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately short and front-loaded with the action. The second sentence adds a modicum of context without unnecessary verbosity. However, the phrase 'in the process' is slightly vague and could be more informative without adding bulk, keeping it just shy of perfect conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Although the tool is relatively simple (3 flat parameters, no nested objects, and an output schema exists), the description omits any mention of prerequisites, side effects, or the consequence of choosing 'approve' versus 'reject.' For a tool that likely gates the rest of a pipeline, an agent would need more context to use it correctly, such as whether the release proceeds immediately or whether a comment is required in certain cases. It is adequate for very simple usages but not fully comprehensive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description should compensate by clarifying parameter usage, but it mentions none of the three parameters (task_id, approve, comment). While the parameter names are self-explanatory, the description adds no meaning beyond the schema, and this is a clear miss given the low coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Approve or reject') and the resource ('a waiting release'), which unambiguously identifies the tool's purpose. It adds a contextual clue ('the human decision in the process') that positions it as the manual approval step, distinguishing it from sibling tools like deploy_process or start_release, though it does not name them explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage when a release is waiting for approval, but it does not provide explicit guidance on when to choose this tool over its siblings, nor does it mention any prerequisites or conditions. The phrase 'in the process' hints at a pipeline context, but there's no explicit when-not-to-use or alternative routing, so this is only implicitly guided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
cancel_runB
Stop a running release. The reason is kept in the engine history.
| Name | Required | Description | Default |
|---|---|---|---|
| reason | No | cancelled through the devflows MCP server | |
| process_instance_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the burden is on the description to disclose side effects. It does reveal that the reason is stored in engine history, which is useful. However, it does not explain whether the cancellation is irreversible, what happens to the underlying process, how long the operation takes, or what error conditions may occur.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short, focused sentences: the first states the operating directly, and the second adds a meaningful side effect. Every word earns its place, and there is no filler or restatement of the tool name.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple cancellation tool with two parameters and an output schema, the description is adequate for basic invocation—it identifies the action and one key behavioral effect. However, it omits practical caveats such as whether the run must be active, whether cancellation can be undone, and what happens to related resources, making it not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 0% description coverage for its two parameters, and the description adds no extra parameter-level detail. 'process_instance_id' and 'reason' are named but never explained in context, so the agent receives no additional guidance beyond raw field names and the default value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a clear verb and object—'Stop a running release'—which makes the tool's action unambiguous and distinguishes it from sibling tools like start_release and retry_run. However, the description refers to a 'release' while the tool name says 'run', and it does not explicitly name any sibling to distinguish from, so it stops short of full clarity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool should be used when the agent needs to stop a running release, but it gives no explicit when-to-use or when-not-to-use guidance. It does not mention alternatives such as retry_run or conditions like 'only works on active runs', leaving the selection logic to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
deploy_processC
Deploy the release process to the engine. Deploying it twice is harmless.
| Name | Required | Description | Default |
|---|---|---|---|
| bpmn_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the burden of behavioral disclosure. It explicitly states that deploying twice is harmless, which is a useful idempotency trait. However, it does not disclose side effects, required permissions, or what 'deploying' entails beyond the name, leaving significant behavioral context unaddressed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no fluff. The primary action is stated first, followed by a single relevant caveat about idempotency. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Although an output schema exists, the description lacks key operational context for a deployment action: prerequisites, effects on existing processes, environment assumptions, and how the bpmn_path parameter influences the deployment. The idempotency note is the only behavioral extra.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has one parameter (bpmn_path) with 0% description coverage, and the description does not mention it at all. The optional nature and default null are not explained, leaving an agent without any understanding of why or how to use the parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb 'Deploy' and names a resource ('the release process') and destination ('the engine'), making the core action clear. It does not explicitly distinguish itself from siblings like start_release, but the artifact named ('release process') differentiates it enough.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no mention of when to use this tool versus alternatives such as start_release or list_processes. The only usage hint is the idempotency note, which implies it can be run repeatedly, but no explicit when/when-not guidance is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
doctorC
Check whether a release can run: engine, process, decision, config.
| Name | Required | Description | Default |
|---|---|---|---|
| repo_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. 'Check' suggests a read-only diagnostic, but the description does not state whether it has side effects, whether it requires a release to be staged, what happens on failure, or how comprehensive its checks are.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no filler. Key information—'check whether release can run'—is front-loaded, and the scoped areas are listed compactly. It is appropriately terse, though cryptically so.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of several similar operational siblings, the description should say how this diagnostic differs and what the agent needs to provide (like repo_path). Because the description lacks usage context and side-effect transparency, it feels incomplete for safe tool selection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description does not mention repo_path at all. With a single optional parameter, the description needed to explain what the path refers to and how it affects the check, but it provides no parameter meaning beyond the bare schema title.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear verb and resource: 'Check whether a release can run', and indicates scope ('engine, process, decision, config'). This distinguishes it from operational siblings like start_release or cancel_run, though the domain-specific list is somewhat ambiguous without additional context.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance about when to use this tool versus alternatives such as start_release or get_run. The phrase 'whether a release can run' implies a pre-flight diagnostic, but this is left to inference rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
engine_statusA
Check that the local CIB seven engine is reachable and report its version.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the behavioral disclosure burden. It communicates a read-only check and version report, but does not explicitly state that no state is modified, nor does it mention error behavior or connectivity caveats.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, information-dense sentence covers the action, resource, and expected output without any filler words. It is well front-loaded and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given there are no parameters and an output schema exists, the description sufficiently covers what the agent needs to invoke this tool correctly. It would benefit from a brief note about whether any environment context is required, but for a simple status check this is minimally sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the schema leaves nothing unexplained. The description's reference to checking reachability and version provides enough semantic context for a parameterless invocation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies a specific verb ('check') and resource ('local CIB seven engine'), and states the additional output of reporting its version. This distinguishes it from sibling tools like deploy_process or approve_gate, which target different actions and resources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The purpose is clear enough to imply when this tool is appropriate: when an agent needs to verify engine reachability or discover its version. However, it does not explicitly state when not to use it or mention any alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_runB
Report the state, the current activity, the gate report and the variables of a run.
| Name | Required | Description | Default |
|---|---|---|---|
| process_instance_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It mentions what it reports (state, activity, gate report, variables) but does not disclose whether it is read-only, requires specific permissions, or what happens if the run does not exist. It also does not mention any side effects or performance implications. For a read-type tool, this is a partial disclosure but lacks depth.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that is concise and lists the key content of the report. However, it is slightly terse and could benefit from a bit more detail on the scope, but for a simple tool it is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given there are no annotations, the description must carry the full burden. It identifies the tool's purpose and output components but omits critical context such as whether this is a read-only operation, error conditions for missing/invalid process_instance_id, or when this tool should be used relative to siblings like 'list_processes' or 'engine_status'. An agent may not know if this requires a running process or if it returns historical data.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has zero description coverage; the parameter 'process_instance_id' has no description. The tool description implies this is the run identifier, but does not explain format, source, or how to obtain it. With only one parameter and no schema documentation, the description should at least provide guidance on what constitutes a valid process_instance_id; it does not.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reports the state, current activity, gate report, and variables of a run. This distinctly separates it from siblings like list_processes (listing) or start_release (starting), and it specifies a precise resource ('a run') with a clear action (report). The verb 'report' is specific and the content is enumerated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this tool is used to fetch details about a run, but it does not explicitly state when to use it versus alternatives. It doesn't mention that it's for a specific run identified by process_instance_id, nor does it exclude scenarios like checking engine status or listing gates. The usage is implied but not formally guided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_gatesB
List the gates a release of this repository would run. Does not touch the engine.
| Name | Required | Description | Default |
|---|---|---|---|
| repo_path | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With zero annotations provided, the description carries the full disclosure burden. It does disclose the single most important behavioral trait — that this tool has no effect on the engine state (read-only in effect), which is significant given the mutation-heavy sibling set. It does not go further (e.g., scope of repo_path, failure behavior), but the key side-effect signal is present.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, zero filler. The first identifies the resource and the non-executing nature; the second reinforces the no-side-effects constraint, which is load-bearing given the sibling mutations. Every word earns its place and the key constraint is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need no description, and the no-engine-touch disclosure covers risk context. The main completeness gap is the undefined repo_path parameter, which an agent needs to resolve before calling. For a list-style tool this is otherwise fairly complete, but the undocumented parameter keeps it from being fully self-sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% — the only parameter, repo_path, has just a title 'Repo Path' with no schema description. The tool description adds nothing about the parameter either: it never explains what repo_path should be (absolute path, existing repo on disk, branch/commit reference). For a single-parameter tool with zero schema coverage, the description should compensate but does not.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear verb 'List' and specific resource 'the gates a release of this repository would run.' The phrase 'would run' signals this is prospective inspection, not triggering a release. The closing 'Does not touch the engine' works with sibling names (engine_status, deploy_process, start_release) to differentiate it from engine-affecting tools, though no sibling is named explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Does not touch the engine' gives an implicit when-not: use this when you only want to inspect gates without side effects, rather than for the mutation siblings (start_release, deploy_process, approve_gate). But no explicit alternative is named and no clear 'use X instead when...' guidance is given. The context is implied rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_processesA
List the process definitions the engine currently knows about.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry behavioral disclosure. It is extremely minimal, implying a read-only operation but not explicitly stating so, nor mentioning any side effects, ordering, or snapshot semantics. For a simple list tool this might be acceptable, but it leaves ambiguity about whether results are live or cached.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence with zero wasted words. It conveys the core purpose in a clear, efficient manner appropriate for a trivial parameterless tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the zero parameters and an output schema, the description is minimally sufficient for a list operation. However, it lacks any hint at output ordering, pagination, or whether results reflect persisted or in-memory state, which could confuse an agent expecting a specific format or volume.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters and the input schema is empty, which raises the baseline. The description adds no parameter semantics because none are needed; it correctly implies the tool requires no arguments.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('list') and resource ('process definitions') and adds the scope ('the engine currently knows about'). This clearly distinguishes it from siblings like list_gates and engine_status, which operate on different resources.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to prefer this tool over alternatives, nor any exclusions or prerequisites. The phrase 'currently knows about' implies a snapshot of engine state, but without explicit comparisons to list_gates or deploy_process, an agent may not know when this is the right choice.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_runsB
List the most recent release runs, newest first, with their state.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral transparency. It discloses useful behavior: results are 'newest first' and include 'state,' which implies a read-only listing operation. It does not mention pagination, authorization, or any further behavioral constraints, but for a simple list tool the disclosed ordering and payload content add real value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, tightly written sentence that front-loads the primary action and includes key details without filler. Every word contributes meaning, making it easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter listing tool with an output schema, the description covers the essential parts: resource, ordering, and result content. The main gap is that limit semantics are neither described nor compensated for to the schema, but this is a minor omission given the simplicity of the operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There is only one parameter, limit, and schema description coverage is 0%. The description does not explain how limit behaves, such as whether it caps the maximum number of returned runs or what the default implies. The default value of 10 and the parameter name provide some meaning, but the description does not compensate for the missing parameter schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'List the most recent release runs, newest first, with their state.' This clearly communicates the core purpose and includes ordering and output scope. However, it does not explicitly contrast this tool with siblings such as get_run or list_processes, so differentiation must be inferred from names rather than stated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The usage context is implied: an agent would use this tool to see recent release runs and their states. There is no explicit guidance about when not to use it, nor any mention of alternatives like get_run for a single run, so the guidance is present only at a minimal level.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
retry_runC
Give a run that is stuck on an incident another attempt.
| Name | Required | Description | Default |
|---|---|---|---|
| process_instance_id | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It reveals the basic outcome—starting another attempt—but does not disclose side effects, whether the previous attempt is affected, permissions needed, or whether the operation is reversible. For a tool that mutates run state, this is a meaningful gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single short sentence with no wasted words. It is front-loaded with the core idea before the qualifier. It sacrifices richness for brevity, but as a pure structural matter it is concise and readable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given a single required parameter and an output schema, the tool is not highly complex, but a retry action has important ambient behavior. The description does not explain when retrying is allowed, what happens to the existing run, or whether it can be safely invoked. This leaves an agent without enough context to confidently invoke the tool in a nontrivial incident.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description coverage is 0%, and the description never mentions process_instance_id. It only refers to 'a run,' which loosely implies the parameter identifies the run to retry, but there is no explicit mapping. Since the description must compensate for the schema's silence and does not, parameter semantics are weak.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a clear action—give a run another attempt—and qualifies the target as one 'stuck on an incident.' This distinguishes it from list/get/cancel operations at a basic level, though it does not name a sibling tool explicitly. The phrasing is slightly awkward but still conveys that this is a retry operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool ('a run that is stuck on an incident') but gives no explicit guidance about when not to use it, such as for runs that failed normally or are already canceled. It also does not mention alternatives like cancel_run or get_run. Context is present but chosen exclusions are not.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
start_releaseA
Start a release run for a repository.
Runs the gates, drafts release notes, then asks the policy whether a human
is needed. With dry_run true, which is the default, nothing is tagged or
published. approval_timeout is an ISO 8601 duration after which an
unanswered approval expires.
| Name | Required | Description | Default |
|---|---|---|---|
| dry_run | No | ||
| version | Yes | ||
| repo_path | Yes | ||
| approval_timeout | No | PT24H |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations present, the description provides useful behavioral detail: it runs gates, drafts release notes, asks policy whether a human is needed, and highlights that dry_run prevents tagging or publishing. It also explains the approval_timeout expiration. This gives the agent a realistic picture of side effects, though it could say more about what happens when dry_run is false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded: the main purpose is stated in the first sentence, followed by the essential behavioral and timing details. Every sentence earns its place without unnecessary bloat, though it could be slightly more structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that an output schema exists and the tool has siblings, the description covers the main workflow steps, dry-run safety, and timeout semantics. The main gap is not clearly explaining the exact behavior and requirements for non-dry-run releases, especially around tagging and publishing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has no parameter descriptions, so the description must compensate. It explicitly explains dry_run and approval_timeout meaning and the default behavior, but repo_path and version receive no specific explanation beyond the overall wording 'for a repository' and the word 'version'. This leaves room for confusion about exact argument formats or expectations.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Start a release run for a repository' and then outlines the key stages: run the gates, draft release notes, and ask the policy about human approval. It is specific and clearly distinguishable from siblings like list_gates and approve_gate, though it does not explicitly name any sibling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this is the entry point for a release and that a human approval gate may be needed afterwards, but it does not explicitly explain when to use this tool instead of related ones such as retry_run, cancel_run, or approve_gate. The intended workflow context is inferable, but not stated directly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.2.0- Added
cancel_run - Added
doctor - Added
list_runs - Added
retry_run - Changed
start_release1 field changed- added
Input schema / properties / approval_timeoutAdded value: +{ + "default": "PT24H", + "title": "Approval Timeout", + "type": "string" +}
7 tool updates
v0.1.0- First observed
approve_gate - First observed
deploy_process - First observed
engine_status - First observed
get_run - First observed
list_gates - First observed
list_processes - First observed
start_release
TDQS
Scored across 11 tools
Each tool targets a distinct resource and action: engine health, process deployment/listing, release run lifecycle, gate approval, and diagnostics. There is no meaningful overlap or risk of selecting the wrong tool for a given intent.
Most tools follow a clear verb_noun pattern (deploy_process, list_processes, start_release, approve_gate, cancel_run). The deviations are minor: engine_status reverses the order and doctor is a bare noun, but the names remain intuitive and predictable.
Eleven tools is well-scoped for a release automation server. Each tool covers a distinct aspect of the release workflow without unnecessary bloat or noticeable duplication.
The tool surface covers the core release lifecycle well: checking the engine, deploying processes, starting runs, monitoring runs, approving gates, retrying, canceling, and running diagnostics. There is no explicit process update/delete, but that is a minor gap since the workflow does not clearly require it.
Maintenance
Related MCP Connectors
MCP server for your apps' tools and custom tools, plus hosted AI agents and approval-gated workflows
Human-in-the-loop for AI agents over MCP: durable approvals with a hosted review page & audit trail
MCP server for secureFlows: token-free URL builders and integration-linting tools for AI agents.
Zero-setup MCP gateway securely connecting AI to your tools with authentication and workflows
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceEnables AI coding environments to enforce engineering governance through MCP tools and resources for init, check, route, and review workflows.9 npm2MIT
- AlicenseNot gradedqualityCmaintenanceMCP server that equips AI agents with dev workflow tools including GitHub project management, conventional commits, visual regression testing, Jira/Confluence integration, and a persistent memory knowledge graph.46 npmMIT
- FlicenseNot gradedqualityDmaintenanceEnables AI agents and external systems to programmatically trigger and monitor Jenkins jobs, retrieve build status and logs via MCP standards.-
- AlicenseNot gradedqualityAmaintenanceExposes a governed, provenance-grounded autonomous delivery pipeline as an MCP server, enabling AI coding assistants like Claude Code or Codex to initiate requirements-to-PR workflows with human approval gates and full audit.504 PyPI13MIT