Skip to main content
Glama
Sign In
Sandbox MCP

Sandbox MCP

by AbhiteshPundir
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

Read Sandbox File

read_sandbox_file

Investigate failures by reading files from the sandbox workspace: inspect source, config, or logs directly instead of guessing from stack traces.

Instructions

Read a file from inside the sandbox as text.

USE THIS to investigate a failure -- read the source, the config, a log -- without guessing from stack traces. Paths are workspace-relative and cannot escape it; this tool cannot read the developer's machine.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "experiment_id": "<experiment_id>",
      "path": "<path>"
    },
    "name": "read_sandbox_file"
  }
}

Input Schema

NameRequiredDescriptionDefault
pathYesWorkspace-relative path, e.g. 'src/index.js'.
experiment_idYesThe experiment to read from.

Output Schema

NameRequiredDescriptionDefault
resultYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.0

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. It discloses key behavioral traits: paths are workspace-relative, cannot escape the sandbox, and the tool returns text content. This goes beyond the schema and helps the agent understand safety boundaries, though it does not cover error behavior or binary file handling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two tight sentences with no filler. It front-loads the core action, then immediately provides the primary use case and critical constraints. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple two-parameter read tool with an output schema available, the description is complete. It explains what the tool does, when to use it, and the key security boundary. No critical invocation details are missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds meaning to the 'path' parameter by specifying that paths are workspace-relative and cannot escape the sandbox, which is not fully apparent from the schema alone. The 'experiment_id' parameter is not elaborated beyond the schema, but the added path context is valuable.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description starts with a specific verb and resource: 'Read a file from inside the sandbox as text.' It also distinguishes from siblings by stating that paths cannot escape the sandbox and that the tool cannot read the developer's machine, making its scope unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit guidance: 'USE THIS to investigate a failure' and suggests reading source, config, or logs rather than guessing from stack traces. It also notes a limitation (cannot read the developer's machine), but it does not explicitly name alternative tools or when-not-to-use conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools