Skip to main content
Glama

Server Quality Checklist

83%
Profile completionA complete profile improves this server's visibility in search results.
  • Latest release: v1.0.0

  • Disambiguation5/5

    Each tool has a clearly distinct purpose: cost estimation, scoring, comprehensive report, audit trail, tool listing, and framework applicability. No functional overlap.

    Naming Consistency4/5

    Names follow a predominantly descriptive snake_case pattern. 'which_frameworks_apply' deviates from the verb-noun structure but remains understandable. Overall consistent.

    Tool Count4/5

    With 6 tools, the set is well-scoped for a governance analysis server. It covers core assessment needs without being bloated.

    Completeness4/5

    The tool surface covers essential governance assessment tasks: cost, scoring, comprehensive report, audit history, framework selection, and tool discovery. Minor gap in lacking update/action tools, but the set is read-only by design.

  • Average 4.3/5 across 6 of 6 tools scored.

    See the Tool Scores section below for per-tool breakdowns.

    • 3 of 21 community issues answered or closed in the last 6 months
    • 29 commits in the last 12 weeks
    • Last stable release on
    • No critical vulnerability alerts
    • No high-severity vulnerability alerts
    • No code scanning findings
    • CI is failing
  • This repository is licensed under MIT License.

  • This repository includes a README.md file.

  • No tool usage detected in the last 30 days. Usage tracking helps demonstrate server value.

    Tip: use the "Try in Browser" feature on the server page to seed initial usage.

  • This repository includes a glama.json configuration file.

  • This server has been verified by its author.

  • Add related servers to improve discoverability.

How to sync the server with GitHub?

Servers are automatically synced at least once per day, but you can also sync manually at any time to instantly update the server profile.

To manually sync the server, click the "Sync Server" button in the MCP server admin interface.

How is the quality score calculated?

The overall quality score combines two components: Tool Definition Quality (70%) and Server Coherence (30%).

Tool Definition Quality measures how well each tool describes itself to AI agents. Every tool is scored 1–5 across six dimensions: Purpose Clarity (25%), Usage Guidelines (20%), Behavioral Transparency (20%), Parameter Semantics (15%), Conciseness & Structure (10%), and Contextual Completeness (10%). The server-level definition quality score is calculated as 60% mean TDQS + 40% minimum TDQS, so a single poorly described tool pulls the score down.

Server Coherence evaluates how well the tools work together as a set, scoring four dimensions equally: Disambiguation (can agents tell tools apart?), Naming Consistency, Tool Count Appropriateness, and Completeness (are there gaps in the tool surface?).

Tiers are derived from the overall score: A (≥3.5), B (≥3.0), C (≥2.0), D (≥1.0), F (<1.0). B and above is considered passing.

Tool Scores

  • Behavior5/5

    Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

    With no annotations provided, the description fully covers behavioral traits: read-only, stateless, idempotent, rate limits (free and pro), authentication requirements, error handling, data privacy, and safe retryability. This is comprehensive and prevents misuse.

    Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

    Conciseness4/5

    Is the description appropriately sized, front-loaded, and free of redundancy?

    The description is well-structured with clear sections and front-loaded purpose. However, the 'Behavioral Transparency' section repeats some content from 'Behavior,' making it slightly redundant. Overall efficient but not maximally concise.

    Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

    Completeness4/5

    Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

    Given the presence of an output schema, the description does not need to detail return structure. It covers rate limits, authentication, and error handling. However, it omits a high-level summary of typical audit trail contents (e.g., check names, timestamps), which could aid quick understanding.

    Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

    Parameters2/5

    Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

    The 'Args' section adds no meaningful detail beyond the schema, using vague phrases like 'The limit to analyze or process.' With schema description coverage at 0%, the description should compensate, but it does not clarify data types, constraints, or typical values.

    Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

    Purpose4/5

    Does the description clearly state what the tool does and how it differs from similar tools?

    The description clearly states the tool's purpose: 'Get timestamped audit trail of all governance checks performed.' This is a specific verb+resource combination. While it distinguishes itself from sibling tools like compliance_score_engine by focusing on raw audit data, it does not explicitly contrast with alternatives.

    Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

    Usage Guidelines4/5

    Does the description explain when to use this tool, when not to, or what alternatives exist?

    The description includes dedicated 'When to use' and 'When NOT to use' sections, guiding agents toward compliance auditing and away from legal advice substitution. It provides clear context but does not compare this tool to specific siblings.

    Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

  • Behavior5/5

    Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

    Detailed 'Behavioral Transparency' section covers side effects, authentication, rate limits, error handling, idempotency, and data privacy. Exceeds requirements, especially with no annotations provided.

    Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

    Conciseness4/5

    Is the description appropriately sized, front-loaded, and free of redundancy?

    Well-structured with sections (purpose, behavior, when to use, args, transparency). Front-loaded with key info. Some redundancy in args section, but overall each part adds value.

    Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

    Completeness4/5

    Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

    Covers behavior, usage, and transparency thoroughly. Missing specifics about output format despite an output schema being present. Parameter descriptions are weak, but overall context is rich.

    Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

    Parameters2/5

    Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

    Schema has 0% description coverage. The 'Args' section merely repeats parameter names with generic phrases like 'The systems count to analyze or process', adding no real semantics. Does not explain valid values or formats beyond defaults.

    Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

    Purpose5/5

    Does the description clearly state what the tool does and how it differs from similar tools?

    Clearly states the tool estimates compliance costs and compares DIY vs consulting vs MEOK. Distinguishes itself from siblings like 'compliance_score_engine' by focusing on cost comparison.

    Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

    Usage Guidelines4/5

    Does the description explain when to use this tool, when not to, or what alternatives exist?

    Explicitly states when to use (assess, audit, verify) and when NOT to use (not legal advice). Could improve by naming alternative sibling tools for specific tasks, but provides clear context otherwise.

    Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

  • Behavior5/5

    Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

    Since no annotations are provided, the description carries full burden. It comprehensively covers read-only, stateless, idempotent behavior, rate limits (free/pro tiers), authentication requirements, error handling, and data privacy. This fully informs the agent of the tool's behavioral traits.

    Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

    Conciseness3/5

    Is the description appropriately sized, front-loaded, and free of redundancy?

    The description is lengthy and contains redundancy (Behavior and Behavioral Transparency sections overlap). The Args section includes non-existent parameters. While front-loaded with purpose, it could be more streamlined and accurate.

    Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

    Completeness3/5

    Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

    Given the complexity (3 params, output schema present), the description covers purpose, usage, behavior, and most parameter semantics. However, parameter inaccuracies and lack of output structure explanation (though output schema exists) reduce completeness. It is adequate but not fully comprehensive.

    Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

    Parameters2/5

    Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

    The schema description coverage is 0%, so the description must compensate. While it describes 'system_description' and 'frameworks', it erroneously lists additional parameters 'nist' and 'iso_42001' that do not exist in the schema, causing confusion. The api_key description is vague. Overall, the description adds partial value but with significant inaccuracies.

    Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

    Purpose5/5

    Does the description clearly state what the tool does and how it differs from similar tools?

    The description clearly states the tool calculates compliance percentage per framework, with explicit use cases like gap analysis and readiness checks. It distinguishes itself from siblings (e.g., compliance_cost_estimator, which_frameworks_apply) by specifying its unique function.

    Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

    Usage Guidelines5/5

    Does the description explain when to use this tool, when not to, or what alternatives exist?

    The description includes a dedicated 'When to use' section listing appropriate scenarios (e.g., compliance assessment, audit, verification) and a 'When NOT to use' section clarifying it is not a substitute for legal advice. This provides clear guidance on appropriate and inappropriate tool usage.

    Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

  • Behavior5/5

    Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

    No annotations are provided, so the description carries full burden. It includes a dedicated 'Behavioral Transparency' section detailing side effects (read-only, no modifications), authentication (none for basic, API key for pro), rate limits (10/day free, unlimited pro), error handling (structured errors), idempotency, and data privacy. This is comprehensive and adds significant value beyond typical disclosure.

    Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

    Conciseness4/5

    Is the description appropriately sized, front-loaded, and free of redundancy?

    The description is well-structured with clear sections (overview, behavioral, when to use/not, args, behavioral transparency). It is front-loaded with the main purpose. Some redundancy exists (e.g., read-only stated twice), but overall it is concise and organized.

    Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

    Completeness4/5

    Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

    Given the tool's complexity (multi-framework report) and 5 parameters, the description covers authentication, rate limits, error handling, and idempotency. It does not detail the output structure, but an output schema exists. Parameter descriptions are weak, which slightly reduces completeness. Still, sufficient for an agent to judge usage.

    Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

    Parameters3/5

    Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

    Schema description coverage is 0%, so the description must compensate. It includes an 'Args' section with one-line descriptions for each parameter. However, some descriptions are identical (e.g., system_name and system_description), and there are typos (e.g., 'us' and 'uk' entries have extra quotes). The api_key description is misleading. While it adds some meaning, the quality is uneven, warranting a 3.

    Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

    Purpose5/5

    Does the description clearly state what the tool does and how it differs from similar tools?

    The description clearly states the tool generates a comprehensive multi-framework governance report covering EU AI Act, NIST, ISO 42001, GDPR, and crosswalk analysis. It uses a specific verb (generate) and resource (report), and is well-differentiated from sibling tools like compliance_score_engine or which_frameworks_apply.

    Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

    Usage Guidelines4/5

    Does the description explain when to use this tool, when not to, or what alternatives exist?

    Provides explicit 'When to use' and 'When NOT to use' sections, covering gap analysis, readiness checks, and compliance documentation. It clearly states not to use as substitute for legal counsel. However, it does not explicitly mention sibling tools as alternatives, which would further aid selection.

    Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

  • Behavior5/5

    Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

    With no annotations provided, the description fully covers behavioral traits: read-only, stateless, idempotent, rate limits (10/day free, unlimited pro), authentication (none for basic, API key for pro), error handling (structured errors), and data privacy (no storage/logging).

    Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

    Conciseness3/5

    Is the description appropriately sized, front-loaded, and free of redundancy?

    Well-organized with sections (Behavior, When to use, Args, Behavioral Transparency), but contains redundancy (e.g., 'read-only' repeated twice) and verbose lists. Could be shortened by 30-40% without losing key details.

    Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

    Completeness5/5

    Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

    Given no annotations and 4 params (1 required), the description thoroughly covers behavior, limitations, authentication, rate limits, error handling, idempotency, and privacy. Output schema exists, so return values need no explanation. Highly complete for the tool's complexity.

    Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

    Parameters3/5

    Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

    Schema has 0% parameter descriptions. The 'Args' section adds brief descriptions for all 4 parameters (country, industry, ai_use_case, api_key), but they are generic (e.g., 'The country to analyze or process') and lack details on valid values or format. Partially compensates but not highly informative.

    Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

    Purpose5/5

    Does the description clearly state what the tool does and how it differs from similar tools?

    The description clearly states the tool determines applicable AI governance frameworks based on country, industry, and use case. It distinguishes itself from sibling tools like compliance_cost_estimator and full_governance_report by focusing on framework identification.

    Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

    Usage Guidelines5/5

    Does the description explain when to use this tool, when not to, or what alternatives exist?

    Explicit 'When to use' and 'When NOT to use' sections provide clear guidance on appropriate usage for compliance assessment and warn against replacing legal counsel. Also specifies rate limits and authentication requirements.

    Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

  • Behavior5/5

    Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

    Without annotations, the description fully covers behavioral traits: read-only, stateless, idempotent, no side effects, authentication requirements, rate limits, error handling, and data privacy. Every relevant aspect is disclosed, compensating for the lack of annotations.

    Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

    Conciseness4/5

    Is the description appropriately sized, front-loaded, and free of redundancy?

    The description is well-structured with clear sections, but some redundancy exists (e.g., 'Behavior' and 'Behavioral Transparency' overlap). It is front-loaded with the core purpose, but could be slightly more concise without losing information.

    Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

    Completeness5/5

    Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

    Given the simple input schema and presence of an output schema, the description covers all necessary context: what the tool does, when to use it, behavioral properties, and error handling. No essential information is missing for an agent to understand and invoke the tool correctly.

    Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

    Parameters3/5

    Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

    The input schema has 1 parameter (api_key) with 0% description coverage in the schema itself. The description adds a one-line 'Args' entry but only restates the parameter name and type without enhancing understanding. More detail on expected format or usage context would improve this dimension.

    Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

    Purpose5/5

    Does the description clearly state what the tool does and how it differs from similar tools?

    The description clearly states 'List all 62 governance tools available in this engine,' specifying the verb (list), the resource (governance tools), and the scope (all 62). It distinguishes itself from sibling tools by focusing on enumeration rather than analysis or reporting.

    Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

    Usage Guidelines5/5

    Does the description explain when to use this tool, when not to, or what alternatives exist?

    Explicit 'When to use' and 'When NOT to use' sections provide clear guidance: use for compliance assessment, gap analysis, and documentation; do not use as a substitute for legal advice. This helps the agent decide when to invoke this tool over alternatives.

    Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

GitHub Badge

Glama performs regular codebase and documentation scans to:

  • Confirm that the MCP server is working as expected.
  • Confirm that there are no obvious security issues.
  • Evaluate tool definition quality.

Our badge communicates server capabilities, safety, and installation instructions.

Card Badge

meok-governance-engine-mcp MCP server

Copy to your README.md:

Score Badge

meok-governance-engine-mcp MCP server

Copy to your README.md:

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/CSOAI-ORG/meok-governance-engine-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server