strands-sentinel
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| OLLAMA_HOST | No | Host for Ollama (used when STRANDS_SENTINEL_MODEL_PROVIDER is not set). | |
| GOOGLE_API_KEY | No | API key for Google (used when STRANDS_SENTINEL_MODEL_PROVIDER is not set). | |
| OPENAI_API_KEY | No | API key for OpenAI (used when STRANDS_SENTINEL_MODEL_PROVIDER is not set). | |
| ANTHROPIC_API_KEY | No | API key for Anthropic (used when STRANDS_SENTINEL_MODEL_PROVIDER is not set). | |
| STRANDS_SENTINEL_MODEL_PROVIDER | No | Model provider to use. If not set, inferred from ANTHROPIC_API_KEY, OPENAI_API_KEY, GOOGLE_API_KEY, or OLLAMA_HOST, defaulting to Bedrock. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| sentinel_audit_workspaceA | Run the full sentinel sweep (AST invariants and secret scan) over a workspace path. |
| sentinel_check_ast_invariantsB | Scan a file or directory for Power of 10 AST safety invariant violations. |
| sentinel_scan_for_secretsB | Scan a file or directory for hardcoded secrets using deterministic patterns and entropy. |
| sentinel_run_test_suiteB | Run the test suite for a repository. Pass command="" to auto-detect pytest/cargo test/make test. |
| sentinel_generate_remediation_patchA | Return structured remediation guidance for a violation previously reported by an audit tool. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 5 tools
The tools are mostly distinct, but sentinel_audit_workspace overlaps with sentinel_check_ast_invariants and sentinel_scan_for_secrets since it runs both checks in one sweep. The descriptions clarify that the audit tool is a combined execution, but an agent might be unsure whether to call the aggregate or individual scanners.
All tool names follow the consistent pattern sentinel_<verb>_<noun> (audit_workspace, check_ast_invariants, scan_for_secrets, run_test_suite, generate_remediation_patch). The verbs are clear and snake_case is used uniformly.
Five tools is well-scoped for a security/quality sentinel server. Each tool covers a distinct operation without bloat, and the count feels appropriate for the stated purpose.
The surface covers auditing, AST invariant checks, secret scanning, test execution, and remediation guidance. A minor gap is the lack of a dedicated tool to list or query prior violations (though audit results presumably include them), and remediation only provides guidance rather than applying fixes.