Skip to main content
Glama
Majrooo

majrooo-mcp-devkit

by Majrooo

majrooo-mcp-devkit — MCP DevKit: Safe Commands + Refactoring Tools

Version License Tests Node.js

Repository Access: PUBLIC
Version: 0.1.0 · Tests: 269 passing · License: GPL-3.0-or-later

MCP server that provides safe command execution and code refactoring tools for Cline/Claude Desktop.

Tools

run_safe_command

Execute a shell command restricted to the active project root. Dangerous commands and writes outside the active root are automatically blocked. This is the default tool — always use this first.

Parameter

Type

Default

Description

command

string

Command to execute

cwd

string

primary root

Working directory (must be inside MCP_PROJECT_ROOT / MCP_EXTRA_ROOTS)

maxLines

number

200

Max output lines before truncation

timeoutMs

number

60000

Command timeout (1000–600000 ms) — raise for long jest/build runs

run_destructive_command

Execute a potentially dangerous command with explicit user confirmation. Only use when run_safe_command blocked the command and the user explicitly agreed after being informed of the specific risk.

Parameter

Type

Default

Description

command

string

Command to execute

confirm

boolean

false

Acknowledge the risk (required for dangerous commands)

cwd

string

primary root

Working directory (must be inside MCP_PROJECT_ROOT / MCP_EXTRA_ROOTS)

maxLines

number

200

Max output lines before truncation

timeoutMs

number

60000

Command timeout (1000–600000 ms)

read_log_slice

Read a portion of a previously saved log file. Use this instead of re-running a command with higher maxLines. Files are read directly via Node.js (not through the shell), so it also works for truncated logs in os.tmpdir().

Parameter

Type

Default

Description

logPath

string

Path to the log file

startLine

number

0

Starting line (0-based)

lineCount

number

100

Number of lines to read

list_allowed_roots

Return the registered roots configuration: the primary project (MCP_PROJECT_ROOT), all allowed roots (MCP_EXTRA_ROOTS, including globs), the concrete existing project directories under them (usable as cwd), and whether MCP_BLOCK_CROSS_ROOT_READS is enabled. Projects with a friendly name are returned as { path, name } — in that case you can also use the name as cwd. Call this before working in any non-primary project to discover the exact cwd value to use. Runs no commands — it only reads configuration and lists directories.

No parameters.

resolve_cwd

Verify whether a path (or a friendly project name from MCP_PROJECT_NAMES) is inside the allowed roots and get the exact cwd to use for commands. Pass the path you want to work in (e.g. your workspace folder) instead of guessing.

On success returns { ok: true, cwd, matchedRoot, exists, name? }; on failure { ok: false, error, roots }. exists tells whether the resolved directory actually exists on disk (relative cwd values are resolved against the primary project). Runs no commands — it only validates configuration.

Parameter

Type

Description

path

string

Path to verify (absolute, e.g. the project workspace folder)

run_command_grep

Execute a command and return only lines matching a pattern (case-insensitive regex). Use instead of run_safe_command when you only care about specific lines (e.g., errors in build output). This is the replacement for Unix grep on Windows — filtering happens in-process, so grep/head/tail are not needed.

Parameter

Type

Description

command

string

Command to execute

pattern

string

Regex pattern to filter lines (case-insensitive)

cwd

string

Working directory (default: primary root)

timeoutMs

number

60000

universal_find_references

Find all occurrences of a symbol across a workspace. Returns structured output with file, line, column, context, and optional role annotations. Use this before any refactoring session to understand what will break when a symbol is renamed or moved.

Parameter

Type

Default

Description

symbol

string

Symbol to search for (word-boundary match)

cwd

string

primary root

Workspace root to search

fileExtensions

string[]

common source extensions

Restrict to these extensions

excludePatterns

string[]

.git, node_modules, target, ...

Directories to skip

contextLines

number

1

Lines of context around each match

language

string

— (disabled)

Optional: "rust", "typescript", "python", or "cpp" — enables role detection (declaration/import/usage)

extract_code_block

Read the full text of a function, struct, class, or method from a file. Returns precise line range + content. Includes leading annotations (#[derive], @decorator, /// doc comments). String/comment-aware bracket matching prevents false depth counts from braces inside strings or comments.

Parameter

Type

Default

Description

file

string

Source file path (must resolve inside allowed root)

symbol

string

Symbol name to extract

contextLines

number

0

Extra lines before/after the block

split_file_by_declarations

Split a large file into multiple smaller files based on top-level declarations. Optionally generates a combining file (mod.rs / index.ts / __init__.py). Use dryRun: true (default) to preview the layout before writing.

Parameter

Type

Default

Description

file

string

Source file to split

grouping

object[]

[{ module, symbols }] — module groupings

targetDir

string

dirname(file)

Where new files are written

language

string

auto-detect

"rust", "typescript", "python", "cpp"

generateIndex

boolean

true

Create combining file

dryRun

boolean

true

Preview only — write nothing

overwrite

boolean

false

Allow overwriting existing targets

cwd

string

primary root

Working dir for resolving relative file paths

batch_apply_edits

Apply multiple file edits atomically with rollback on failure. Validates all edits first — if any search string is not found or matches multiple times (without replaceAll), NO files are modified.

Parameter

Type

Default

Description

edits

object[]

[{ file, search, replace, description?, replaceAll? }]

dryRun

boolean

true

Preview all changes without writing

generate_module_skeleton

Generate a new module file with extracted symbols from a source file. Returns error with unknownSymbols list if any symbols are not found.

Parameter

Type

Default

Description

modulePath

string

Target file path

symbols

string[]

Symbol names to include

sourceFile

string

Original file to extract from

language

string

auto-detect

"rust", "typescript", "python"

dryRun

boolean

true

Preview only

overwrite

boolean

false

Allow overwriting existing file

cwd

string

primary root

Working dir for resolving relative file paths

verify_refactor_safety

Semantic diff between old and new code. Catches accidental deletions before compilation. Checks: function count, signatures, export count, imports, comment ratio. Intentionally conservative — renames appear as errors requiring explicit confirmation.

Parameter

Type

Default

Description

before

string

Original code text

after

string

New code text

language

string

auto-detect

"rust", "typescript", "python", "cpp"

report_tool_feedback

Report a bug, improvement, or feature request about any MCP tool. Writes structured feedback to .mcp/FEEDBACK.md (project-specific, gitignored). Entries are idempotent — duplicate reports are skipped.

Parameter

Type

Default

Description

type

string

"bug", "improvement", or "feature_request"

tool

string

Name of the MCP tool this feedback is about

title

string

Short summary (1 line)

description

string

Detailed description

reproduction

string

Steps to reproduce (optional)

expected

string

What you expected (optional)

suggestion

string

Suggested fix or improvement (optional)

list_feedback

List feedback entries from .mcp/FEEDBACK.md. Optionally filter by type, tool name, or status. Use this to check existing feedback before creating new entries.

Parameter

Type

Default

Description

type

string

Filter: "bug", "improvement", or "feature_request"

tool

string

Filter by tool name

status

string

Filter: "open" or "closed"

close_feedback

Close an existing feedback entry by ID — sets status to "closed" and optionally adds resolution text. Use this to mark feedback items as resolved after fixing them.

Parameter

Type

Default

Description

id

string

The feedback entry ID to close (from list_feedback output)

resolution

string

Resolution note explaining how the issue was addressed (optional)

list_tools

List all available MCP tools with descriptions. Use this to discover tools before starting a task. Filterable by category.

Parameter

Type

Default

Description

category

string

Filter: "command", "refactoring", or "feedback"

help_tool

Get detailed help for a specific MCP tool — parameters, types, defaults, and description.

Parameter

Type

Default

Description

tool

string

Tool name to get help for

Related MCP server: MCP Workspace Server

Configuration

The server supports one instance, many projects. Projects are selected per command via the cwd parameter; the active project also acts as the "lockbox" for write/read checks.

Env var

Description

MCP_PROJECT_ROOT

Primary project root (default cwd when omitted). If unset, the server's own directory is used (derived from the module location, not process.cwd()).

MCP_EXTRA_ROOTS

Additional roots, semicolon separated.

MCP_PROJECT_NAMES

Friendly names for projects, semicolon separated path=name pairs (see below).

MCP_BLOCK_CROSS_ROOT_READS

1 or true → opt-in best-effort blocking of obvious reads outside the active root.

Entry forms supported in both variables:

  • Plain path D:\W\TS\majrooo-mcp-devkit → prefix: the directory itself and everything below it are allowed. Registering D:\W covers all projects under it.

  • Glob D:\W\TS\* (*, **, ?) → any path matching the pattern (and its subtree) is allowed.

Example — one instance, many projects, with friendly names:

{
  "mcpServers": {
    "majrooo-mcp-devkit": {
      "command": "node",
      "args": ["D:\\W\\TS\\majrooo-mcp-devkit\\build\\index.js"],
      "env": {
        "MCP_PROJECT_ROOT": "D:\\W\\TS\\majrooo-mcp-devkit",
        "MCP_EXTRA_ROOTS": "D:\\W;D:\\python",
        "MCP_PROJECT_NAMES": "D:\\W\\TS\\cb=ZbaľSa;D:\\W\\TS\\nase-zasoby=Naše zásoby"
      }
    }
  }
}

MCP_PROJECT_NAMES maps a real project path to a readable name. This is useful when the folder name had to be shortened (e.g. Gradle path-length limits) or the project was renamed. The name can be used directly as cwd (e.g. "cwd": "ZbaľSa"), and list_allowed_roots will show such projects as { "path": "D:\\W\\TS\\cb", "name": "ZbaľSa" }.

Switching projects is done via the cwd parameter, never via cd in the command. cd .., cd ~, cd C:\..., and Windows cd /d D:\... are always rejected.

Running tests / long commands (the anti-freeze workflow)

Never run test suites (jest/npm test), typecheck or builds through the Cline built-in terminal — it has no timeout and can freeze the whole window. Use the MCP tools instead:

  1. Always pass the project's cwd (or friendly name, e.g. "cwd": "ZbaľSa").

  2. To filter output (e.g. jest summary), use run_command_grep — filtering happens in-process, so cmd /c "... | findstr ... & echo DONE" is not needed and discouraged:

{
  "tool": "run_command_grep",
  "cwd": "ZbaľSa",
  "command": "npx jest src/app/__tests__/catalog.test.tsx 2>&1",
  "pattern": "Tests:|Test Suites:|FAIL|PASS|✕",
  "timeoutMs": 180000
}
  1. For full output use run_safe_command with a small maxLines — the full output is saved to a temp log for read_log_slice:

{
  "tool": "run_safe_command",
  "cwd": "ZbaľSa",
  "command": "npm run typecheck 2>&1",
  "maxLines": 100,
  "timeoutMs": 180000
}
  1. If a run exceeds 10 minutes, run it in the background, redirect to a log file, and poll the log via run_command_grep — do not watch live terminal output.

Typical workflow

  1. Call list_allowed_roots to see the primary root, the allowed roots (including globs), and the concrete projects under them.

  2. If you need to confirm a specific path, call resolve_cwd with your workspace folder — it returns the exact cwd to use and the matched root.

  3. If the task targets a project other than the primary one, pass the resolved path as cwd on every command (run_safe_command, run_destructive_command, run_command_grep).

  4. Otherwise, omit cwd — commands run in the primary root.

Safety Mechanisms

Layer

Description

Registered roots

MCP_PROJECT_ROOT / MCP_EXTRA_ROOTS define the allowed project registry (prefix or glob). cwd must match one of them.

Directory restriction

Commands execute with cwd set to the resolved project root. cd .., cd ~, absolute-path cd, and Windows cd /d are rejected.

Dangerous pattern detection

Regex blacklist blocks destructive commands (rm -rf, format, shutdown, git push --force, fork bombs, pipe-to-shell, etc.).

Write-target check

Best-effort detection of writes outside the active root (>, >>, 2>, copy, move, mkdir, tee, curl -o, ...). Writing from project A into project B is blocked even if B is registered — pick B via cwd instead.

Cross-root read check (opt-in)

MCP_BLOCK_CROSS_ROOT_READS=1 blocks obvious reads outside the active root (type/cat/Get-Content/git -C/Node/Python path reads...). Best-effort heuristic.

Explicit confirmation

run_destructive_command requires confirm: true for dangerous commands.

Missing destructive target

A confirmed destructive command (rmdir/del/erase/Remove-Item) whose target does not exist in the active cwd is rejected with a "set the cwd parameter" message (reason missing_destructive_target) instead of a raw The system cannot find the file specified.

Buffer & timeout limits

50 MB max output, 60-second timeout.

Output truncation

Long outputs are saved to os.tmpdir() for later inspection via read_log_slice.

Audit log

All executions logged to os.tmpdir()/mcp-command-audit.log (rotated to .old once it exceeds 5 MB).

Limitations

The dangerous-pattern blacklist and the write/read target checks are best-effort layers, not security guarantees. Shell features (variables, command substitution, encoding) can bypass them. For production isolation use Docker/VM sandboxing.

Windows Notes

  • Commands run through cmd.exe. Unix-only tools (grep, head, tail, ...) do not exist — the server returns a friendly error with alternatives instead of a raw "not recognized" blob.

  • Use run_command_grep instead of grep, and read_log_slice or PowerShell (Get-Content out.log -TotalCount 30) instead of head.

  • Long-running processes (dev server, watch mode) exceed the 60s timeout — use the built-in terminal for those.

Output normalization

On Windows the server automatically prefixes commands with chcp 65001 > NUL && so the child process emits UTF-8 instead of the legacy OEM codepage (which would otherwise decode into U+FFFD replacement characters, e.g. around thousands separators in dir output). ANSI color codes from tools like vitest/jest are stripped as a fallback (NO_COLOR=1 / FORCE_COLOR=0 are also injected into the environment), and read_log_slice cleans ANSI codes defensively when reading older logs.

Redirected output reporting

When a command redirects its output into a file (npm test > test.log 2>&1, >> out.log, 2> err.log, ...), the response reports where the output went and shows the tail of the written file instead of an empty response or a bare Command failed: .... On failure the response also includes the exit code (or timeout/signal) and the captured stdout/stderr. Discard targets (NUL, /dev/null), wildcard patterns and fd-duplication tokens (2>&1, >&-) are skipped; very large files are read only from the end.

Agent Behavior Rules

The .clinerules file in the project root defines how AI agents should use these tools:

  1. Always try run_safe_command first — never start with run_destructive_command.

  2. run_destructive_command only after explicit user confirmation in the current conversation — general consent ("do what you need") is not sufficient.

  3. Never bypass directory_escape rejections — no chaining, absolute paths, or cwd tricks. Use the cwd parameter to pick a registered project.

  4. Prefer run_command_grep / read_log_slice over increasing maxLines for long output, and instead of Unix grep/head/tail.

  5. Use the built-in terminal only for quick interactive checks (e.g., git status). Large-output commands (npm install, build, tests) must go through run_safe_command.

  6. Run tests before reporting task as complete.

License

This project is licensed under the GNU General Public License v3.0 or later - see the LICENSE file for details.

Development

npm run build    # Compile TypeScript
npm test         # Run unit tests
npm run test:watch  # Watch mode

The server communicates over STDIO using the Model Context Protocol.

Available Tools

17 tools
batch_apply_editsA

Apply multiple file edits atomically with rollback on failure. Validates all edits first — if any search string is not found, NO files are modified. Use dryRun: true (default) to preview changes.

ParametersJSON Schema
NameRequiredDescriptionDefault
editsYesList of edits to apply
dryRunNoPreview all changes without writing (default: true)

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It reveals atomicity, all-or-nothing validation (if any search string is not found, NO files are modified), rollback on failure, and the default dryRun preview mode. These are non-obvious safety behaviors beyond what the schema alone would imply.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences, with the core purpose and safety guarantee front-loaded, followed by a concrete usage recommendation. Every sentence adds new information—no repetition of schema details, no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a batch mutation tool with no output schema, the description covers the key constraints: atomicity, rollback, validation, and dryRun preview. It lacks an explicit statement of the return value or error shape, which an agent would need to interpret results, but given the schema's completeness and the concise behavioral summary, the overall context is solid.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already documents all parameters with 100% coverage, so the baseline is 3. The description adds meaningful context by explaining the effect of validation on all edits and the default behavior of dryRun, enriching the semantics of the 'edits' and 'dryRun' parameters beyond their schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb ('Apply') and resource ('multiple file edits'), and adds the distinctive qualifiers 'atomically' and 'with rollback on failure'. This clearly distinguishes the tool from sibling command-execution tools by emphasizing batch file mutation behavior.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description recommends using dryRun: true to preview changes, which is concrete operational guidance. However, it does not explicitly state when to prefer this tool over alternatives like run_safe_command or verify_refactor_safety, nor any exclusions. The usage context is implied—batch, validated edits—rather than compared against siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

close_feedbackA

Close an existing feedback entry by ID — sets status to "closed" and optionally adds resolution text. Use this to mark feedback items as resolved after fixing them.

ParametersJSON Schema
NameRequiredDescriptionDefault
idYesThe feedback entry ID to close (from list_feedback output)
resolutionNoResolution note explaining how the issue was addressed

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the transparency burden. It clearly discloses that the operation changes status to 'closed' and optionally adds resolution text. However, it doesn't mention whether the action is reversible, whether existing resolution text is overwritten, or what the operation returns, which would be useful for a mutating tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two concise sentences with no filler. The primary action and effect are front-loaded, and the usage guidance follows naturally. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple two-parameter mutation with full schema coverage and no nested objects, the description plus schema is nearly complete. It explains the state change and the optional resolution field. The only minor gap is the lack of return-value or success-indication information, but the tool's simplicity minimizes that need.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both 'id' and 'resolution' adequately. The description adds no new parameter-level meaning beyond restating that resolution text is optional, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb, 'close', a specific resource, 'feedback entry', and the concrete outcome, 'sets status to closed'. It also distinguishes this from the sibling list_feedback (reading) and report_tool_feedback (creating/opening feedback) by focusing on resolving existing entries.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says when to use the tool: 'Use this to mark feedback items as resolved after fixing them.' It doesn't explicitly mention when not to use it or name alternatives, but the guidance is clear enough for an agent to select it appropriately for closing/resolving feedback.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

extract_code_blockA

Read the full text of a function, struct, class, or method from a file. Returns precise line range + content. Includes leading annotations (#[derive], @decorator, /// doc comments). String/comment-aware bracket matching prevents false depth counts from braces inside strings or comments.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNoWorking directory for resolving relative file paths (default: primary project root)
fileYesSource file path (absolute or relative to cwd)
symbolYesSymbol name to extract
contextLinesNoExtra lines before/after the block (default: 0)

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the transparency burden and does well by disclosing that it returns line ranges and content, includes leading annotations, and uses string/comment-aware bracket matching. 'Read' also indicates a non-mutating operation. It does not discuss error cases, but this is not a critical gap for a read tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded. The first sentence states purpose; subsequent sentences add distinct value about return format, annotation inclusion, and brace-matching robustness. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is sufficient for a read-only extraction tool with a well-formed schema: it names the target constructs, output shape, and a key edge-case behavior. It stops short of describing output JSON structure or error handling, but no output schema is promised and the essentials are present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds useful context about what the tool extracts but does not explain parameter syntax or behavior beyond what the schema already covers.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb ('Read'), the resource ('function, struct, class, or method from a file'), and the return behavior ('precise line range + content'). It is recognizable as distinct from siblings like split_file_by_declarations, though it does not explicitly name or contrast them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The intended use is implied: extract the full text of a named code construct. However, the description gives no explicit guidance on when to prefer this over closely related siblings such as split_file_by_declarations or universal_find_references, and it does not state exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_module_skeletonA

Generate a new module file with correct imports, declarations and visibility. Reads the source file, extracts the specified symbols, and writes them to the target module path. Returns error with unknownSymbols list if any symbols are not found.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNoWorking dir for resolving relative file paths (default: primary project root)
dryRunNoPreview only (default: true)
symbolsYesSymbol names to include
languageNoLanguage (auto-detected)
overwriteNoAllow overwriting existing file (default: false)
modulePathYesTarget file path (e.g. src/ai/data.rs)
sourceFileYesOriginal file to extract symbols from

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the behavioral disclosure burden and does it well: it states that the tool reads the source file, extracts symbols, writes to the target module path, and returns an error with an unknownSymbols list on failure. It does not mention dry-run behavior or overwrite semantics, but those are documented in the schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences with no filler. The first sentence states the primary purpose, the second explains the operational flow, and the third covers a key error behavior. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has 7 parameters, no output schema, and no annotations, but the schema is thorough and the description explains the workflow and error behavior. The main gaps are the lack of a success return description and no explicit mention of dryRun/overwrite implications, though those defaults are present in the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description reinforces how the core parameters relate—sourceFile, symbols, and modulePath—but does not add new semantic detail beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Generate a new module file with correct imports, declarations and visibility.' It clearly distinguishes this from generic extraction or editing tools by describing the module-skeleton generation workflow. The subsequent sentences add concrete scope: reading a source file, extracting specified symbols, and writing to a target path.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context for when this tool is appropriate: when a new module file needs to be generated from symbols in an existing source file. However, it does not explicitly mention alternatives or exclusions, such as when to prefer split_file_by_declarations or extract_code_block instead.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

help_toolA

Get detailed help for a specific MCP tool — parameters, types, defaults, description.

ParametersJSON Schema
NameRequiredDescriptionDefault
toolYesTool name to get help for

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden of disclosing behavior. It goes beyond a generic 'help' promise by specifying exactly what the returned help includes: parameters, types, defaults, and description. It does not mention error behavior for unknown tool names, but for a simple read-only lookup that is a minor omission.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One well-structured sentence containing only essential information. It front-loads the action and resource, then lists the delivered content. No filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple one-parameter, no-output-schema meta tool, the description covers the parameter and the expected returned content. It is slightly incomplete in that it does not mention how unknown tools are handled or whether help includes examples, but these are edge cases for a straightforward lookup tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema fully documents the single required parameter with a clear description ('Tool name to get help for'). The description reinforces this by saying 'specific MCP tool,' but adds no extra meaning or constraints beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb ('Get'), the resource ('detailed help for a specific MCP tool'), and the expected content ('parameters, types, defaults, description'). The word 'specific' distinguishes it from list_tools, which presumably enumerates tools rather than providing per-tool help.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied: if you need details about one existing MCP tool, this is the tool to call. However, it does not explicitly mention when to use list_tools instead, nor does it state that this tool is for looking up tool schemas rather than executing or managing tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_allowed_rootsA

Returns the allowed-roots configuration of this MCP server: the primary project (MCP_PROJECT_ROOT), all registered roots (MCP_EXTRA_ROOTS, including globs), the existing projects under them (the list of directories you can use as "cwd") and whether MCP_BLOCK_CROSS_ROOT_READS is enabled. Use THIS tool whenever you need to find out whether — and with which "cwd" parameter — you can run a command in another project. It runs no commands — it only reads the configuration and lists directories. A project with a friendly name is shown as { path, name } and you can pass its "name" as "cwd".

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden of behavioral disclosure. It clearly states the tool reads configuration only, lists directories, does not execute commands, and describes the output shape ({ path, name }). It also explains how the output relates to the cwd parameter, which is valuable non-obvious behavior. Minor omission: no mention of error conditions or permission requirements, but for a read-only listing tool this is adequate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but every sentence earns its place: the first defines the return payload, the second gives an explicit when-to-use directive, the third clarifies side-effect-free behavior, and the fourth explains the name-to-cwd mapping. No filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema and no annotations, the description fully compensates by listing the returned fields, explaining the cwd implication, and clarifying the read-only nature. For a zero-parameter informational tool, nothing essential is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are zero parameters, so the schema provides full coverage. The description adds useful usage semantics about passing a project's 'name' as 'cwd' elsewhere, which goes beyond what an empty schema could convey. Baseline 4 for zero parameters is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Returns') and resource ('allowed-roots configuration') and enumerates exactly what is included: primary project, extra roots, globs, existing directories, and cross-root read status. It clearly differentiates itself from sibling tools by noting it runs no commands and only reads configuration and lists directories.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit guidance: 'Use THIS tool whenever you need to find out whether — and with which cwd parameter — you can run a command in another project.' It also implicitly excludes command execution by stating 'It runs no commands.' However, it does not name specific alternative tools, relying on context from sibling names rather than explicit contrast.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_feedbackA

List feedback entries from .mcp/FEEDBACK.md. Optionally filter by type, tool name, or status. Use this to check existing feedback before creating new entries, or to review reported issues.

ParametersJSON Schema
NameRequiredDescriptionDefault
toolNoFilter by tool name
typeNoFilter by feedback type
statusNoFilter by status

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

There are no annotations, so the description carries the burden of behavioral disclosure. It names the source file and explains filtering behavior, and 'List' reasonably implies a read-only operation. However, it does not state what happens if the file is missing, whether output is formatted, or any other behavioral caveats.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a compact two sentences with no filler. It front-loads the main action and resource, then adds filter options and usage context. Every sentence serves a clear purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple optional-filter list tool, the description covers the core resource, filter capabilities, and intended use cases. There is no output schema, but the description does not need to detail return values extensively for such a straightforward listing operation. Minor gaps remain around output format and edge cases, but overall the tool is well described.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already provides full descriptions for all three parameters and even includes enums for type and status. The description only restates that filters exist, which adds little beyond the schema. Baseline 3 is appropriate because schema coverage is 100%.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the verb ('List'), the specific resource ('.mcp/FEEDBACK.md'), and the available filtering dimensions. It is unambiguous and distinct from sibling tools like close_feedback and report_tool_feedback.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use the tool: 'to check existing feedback before creating new entries, or to review reported issues.' It does not explicitly contrast it with alternatives, but the use cases are clear enough for an agent to select it appropriately.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_toolsA

List all available MCP tools with descriptions. Use this to discover available tools before starting a task.

ParametersJSON Schema
NameRequiredDescriptionDefault
categoryNoFilter by category

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description itself must convey the tool's behavior. The verb 'list' strongly implies a read-only, non-destructive operation, which is helpful. However, the description doesn't clarify the optional category filter or how results are affected by it, leaving some behavioral ambiguity about whether 'all tools' is always returned.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two short sentences with no wasted words. The primary function appears first, and the usage guidance is immediate and actionable. It earns its place entirely.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple listing tool with one optional parameter and no output schema, the description is adequate for an agent to understand purpose and timing. It could mention that results can be filtered by category, but the schema already captures that, so nothing critical is missing for a low-complexity tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already fully documents the single optional category parameter with an enum and description, so schema coverage is 100%. The description adds no additional parameter-level meaning beyond encouraging tool discovery, which is acceptable but not additive.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear action and resource: 'List all available MCP tools with descriptions.' This makes the tool's core purpose obvious. However, it does not differentiate itself from the sibling help_tool, so an agent might not know which discovery tool to prefer.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives concrete usage context: 'Use this to discover available tools before starting a task.' This tells the agent when to invoke it. It does not explicitly mention alternatives or when not to use it, so it falls just short of the highest bar.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

read_log_sliceA

Reads a slice of a log file by the given line range. Use this tool instead of re-running the same command with a higher maxLines when you already have the log path saved from a previous run_safe_command / run_destructive_command response. NOTE: the file is read directly via Node.js (not through the shell), so it also works for logs in os.tmpdir().

ParametersJSON Schema
NameRequiredDescriptionDefault
logPathYesPath to the log file
lineCountNoNumber of lines to read (default: 100)
startLineNoStarting line (0-based, default: 0)

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the behavioral disclosure burden. It goes beyond a simple read statement by noting that the file is read directly via Node.js rather than through the shell, and that it works for logs in os.tmpdir(). This adds meaningful implementation behavior not present in the schema. It does not describe edge cases like missing files or invalid ranges, but for a read-only slice tool this is reasonably transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three short sentences with no filler. The core purpose is front-loaded, followed by a clear usage guideline and a valuable technical note. Every sentence contributes to helping the agent decide when and how to use the tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a low-complexity tool with three parameters fully documented in the schema, the description is complete enough. It covers what the tool does, when to use it, and an important implementation caveat. The absence of an output schema is not a major gap because the description's 'reads a slice' makes the expected output reasonably clear, though an explicit mention of the return format would make it fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description's 'line range' wording loosely aligns with startLine and lineCount, but it does not add detailed parameter semantics beyond what the schema already provides. The file-path context from previous command responses is useful, though not a direct explanation of the parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Reads a slice of a log file by the given line range.' It clearly distinguishes itself from re-running a command, and the tool name is reinforced without being tautological. An agent can immediately understand what the tool does and why it exists.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says when to use the tool: when a log path is already saved from a previous run_safe_command or run_destructive_command response. It also tells the agent to use this instead of re-running the same command with a higher maxLines, giving a clear alternative and preventing unnecessary shell execution.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

report_tool_feedbackA

Report a bug, improvement, or feature request about any MCP tool in this server. Writes structured feedback to .mcp/FEEDBACK.md (project-specific, gitignored). Use this when a tool produces unexpected results, crashes, or when you need a new capability. Entries are idempotent — duplicate reports are skipped.

ParametersJSON Schema
NameRequiredDescriptionDefault
toolYesName of the MCP tool this feedback is about
typeYesType of feedback
titleYesShort summary (1 line)
expectedNoWhat you expected to happen
suggestionNoYour suggestion for a fix or improvement
descriptionYesDetailed description of the issue or request
reproductionNoSteps to reproduce the issue

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full behavioral burden and does so well. It discloses the side effect of writing to .mcp/FEEDBACK.md, notes that the file is project-specific and gitignored, and explains idempotency by stating duplicate reports are skipped.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three compact sentences with no filler. It front-loads the core purpose, then explains the destination, usage triggers, and idempotency behavior, all in an efficient and easily scannable structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is largely complete for a feedback-submission tool: it covers purpose, when to use, file destination, and idempotency. However, since there is no output schema, it could briefly mention what happens on success, but this is a minor gap given the tool's simplicity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so every parameter is already documented in the input schema. The tool description adds little parameter-level detail, but it does not need to because the schema fully covers field meanings.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Report a bug, improvement, or feature request about any MCP tool in this server.' This clearly identifies the tool's purpose and scope, making it easy to distinguish from sibling tools like list_feedback or close_feedback.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use the tool: 'Use this when a tool produces unexpected results, crashes, or when you need a new capability.' It provides clear triggering conditions, though it does not explicitly mention when not to use it or contrast it with alternative feedback-related tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

resolve_cwdA

Verifies whether the given path (or a friendly project name) is inside the allowed roots of this MCP server and returns the exact "cwd" to use for running commands. Use this tool when you need to find out whether — and with which "cwd" — you can work in a specific project (e.g. your workspace folder). On success: { ok: true, cwd, matchedRoot, name? }; on failure: { ok: false, error, roots }. Runs no commands — it only validates the configuration.

ParametersJSON Schema
NameRequiredDescriptionDefault
pathYesPath or friendly project name to verify

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations present, the description discloses the core safety/behavioral trait: it performs no commands and only validates configuration. It also details both success and failure return shapes, including fields like matchedRoot and roots.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences carry the purpose, usage trigger, return contract, and no-command safety note without redundancy. The most important information is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter validation tool with no output schema, the description is complete: it explains input flexibility, output shape, failure data, and the absence of side effects. Nothing necessary for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the schema already documents path as a string to verify. The description adds meaning by clarifying that path may also be a friendly project name and by explaining how the parameter affects the return value (matchedRoot, cwd).

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific action—verifying whether a path or friendly project name is inside the server's allowed roots—and identifies the concrete output: the exact cwd to use. This clearly separates it from command-running siblings like run_safe_command and list_allowed_roots.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says to use this tool when you need to find out whether and with which cwd you can work in a project. It also states the negative condition: it runs no commands and only validates configuration, signaling when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

run_command_grepA

Runs a command and returns only lines matching the given pattern (case-insensitive regex). Use instead of run_safe_command when you know in advance that the output will be long and you only care about a specific pattern (e.g. searching for 'error' in build output, finding a specific test in test runner output). The command runs in the directory given by the cwd parameter and is subject to the same safety checks as run_safe_command. This is the replacement for Unix 'grep' on Windows — filtering happens in-process, so grep/head/tail are not needed. LIMITATION: The matches themselves can be too long — if you need more control, use run_safe_command first and then read_log_slice on the saved log file. Instead of Unix patterns like 'cmd /c ... | findstr ... & echo DONE' use THIS tool with a pattern — it filters in-process. If the task targets a project other than the primary one (MCP_PROJECT_ROOT), always pass the "cwd" parameter. Get the list of allowed roots via the "list_allowed_roots" tool.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNoThe directory in which the command will be run (must be inside MCP_PROJECT_ROOT / MCP_EXTRA_ROOTS). Default: the primary project (MCP_PROJECT_ROOT).
commandYesCommand to execute
patternYesPattern (regular expression) to filter lines
timeoutMsNoTimeout in milliseconds (1,000 – 600,000, default 60,000). You can extend it for longer tests/builds, e.g. 180,000 for jest.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it discloses case-insensitive regex, in-process filtering, safety-check parity with run_safe_command, and a limitation about overly long matches. Minor behavioral details like stderr handling or exit code preservation are not mentioned, but the core behavior is transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is informative but somewhat repetitive: the Unix grep replacement point is made twice, and the 'filters in-process' detail appears in adjacent sentences. It is not excessively long, but the redundancy and run-on structure prevent it from being tightly concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 4 parameters, no output schema, and no annotations, the description provides enough context to invoke the tool correctly: purpose, alternatives, limitation, cwd handling, and safety checks. It does not detail return format or error behavior, but these are not critical for a line-filtering command tool with this level of explanatory depth.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds extra meaning by explaining the cwd parameter's behavior ('always pass the cwd parameter' for non-primary projects) and emphasizes that the pattern is case-insensitive, which the schema does not state. This adds value beyond the schema definitions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description starts with a specific verb-resource pair: 'Runs a command and returns only lines matching the given pattern (case-insensitive regex).' It clearly distinguishes this tool from run_safe_command and positions it as a replacement for Unix grep, so an agent can tell exactly what it does.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use this tool over run_safe_command ('when you know in advance that the output will be long and you only care about a specific pattern') and names alternatives for cases requiring more control (run_safe_command + read_log_slice). It also gives concrete examples like searching for 'error' in build output.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

run_destructive_commandA

Use ONLY when run_safe_command rejected the command AND the user explicitly confirmed in the chat that they want to run it despite the risk. NEVER set confirm:true automatically in reaction to a rejection from run_safe_command. First restate the risk to the user in your own words (exactly what the command will do and what it could break) and wait for their explicit 'yes' or 'I confirm' in the next message. If the user is not present in the conversation (e.g. an automated run without a human), do not use this tool at all. EXAMPLE: If the user says 'do it' for a general task and you then hit a dangerous rejection, that is not sufficient confirmation — you must explain the specific risk and get a new explicit confirmation. If the task targets a project other than the primary one (MCP_PROJECT_ROOT), always pass the "cwd" parameter. Get the list of allowed roots via the "list_allowed_roots" tool.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNoThe directory in which the command will be run (must be inside MCP_PROJECT_ROOT / MCP_EXTRA_ROOTS). Default: the primary project (MCP_PROJECT_ROOT).
commandYesThe command to execute (runs in the directory given by the cwd parameter)
confirmNoConfirmation that you are aware of the risk (required for dangerous commands)
maxLinesNoMaximum number of output lines (default: 200)
timeoutMsNoTimeout in milliseconds (1,000 – 600,000, default 60,000). You can extend it for longer tests/builds, e.g. 180,000 for jest.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

There are no annotations, so the description carries the full burden of behavioral disclosure. It states that the command is risky, may break things, requires restating the risk in the agent's own words, requires a fresh explicit confirmation in the next message, and must not be used when no human is present. This is thorough transparency for a destructive operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long, but every sentence earns its place by adding a safety constraint or workflow step. The example clarifies what does NOT count as sufficient confirmation, and the core precondition is front-loaded. It could be slightly more polished, but the length is justified for a destructive tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a high-complexity, high-stakes tool with no output schema and no annotations, yet the description covers all essential context: the exact precondition, the human-confirmation protocol, the automated-run exclusion, the cwd routing rule, and the list_allowed_roots lookup. An agent has everything needed to decide when and how to invoke it safely.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already documents all 5 parameters with 100% coverage, so the baseline is 3. The description adds meaningful usage-level semantics: when to pass cwd (target project other than primary) and how to get allowed roots via list_allowed_roots. It also clarifies that confirm:true must not be set automatically in reaction to rejection, which goes beyond the schema's generic confirmation description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly positions this as the dangerous fallback to run_safe_command: it runs commands that were rejected as risky, but only after explicit user confirmation. It distinguishes itself from the sibling run_safe_command through the rejection+confirmation precondition, even though it never uses a simple 'runs a command' verb phrase.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The usage condition is explicit and complete: use only after run_safe_command rejected the command AND the user explicitly confirmed in chat. It also gives when-not-to-use (automated runs without a human), warns against setting confirm:true automatically, and points to alternatives like list_allowed_roots for cwd validation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

run_safe_commandA

Executes a safe command inside the project folder. This is the default command execution tool — use it whenever you are not sure whether a command is dangerous. Commands outside the project or that look dangerous are rejected automatically. If the tool returns isError:true with a rejection message (dangerous or directory_escape), DO NOT try to bypass it by rewriting the command or immediately switching to run_destructive_command without asking the user first. For dangerous operations use run_destructive_command with confirm:true. NOTE: 60s limit (optionally extend via timeoutMs) — not suitable for dev servers / watch mode. Run test suites (jest/npm test), typecheck and builds through this tool or run_command_grep, NOT through the built-in terminal. If the task targets a project other than the primary one (MCP_PROJECT_ROOT), always pass the "cwd" parameter. Get the list of allowed roots via the "list_allowed_roots" tool.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNoThe directory in which the command will be run (must be inside MCP_PROJECT_ROOT / MCP_EXTRA_ROOTS). Default: the primary project (MCP_PROJECT_ROOT).
commandYesThe command to execute (runs in the directory given by the cwd parameter)
maxLinesNoMaximum number of output lines (default: 200)
timeoutMsNoTimeout in milliseconds (1,000 – 600,000, default 60,000). You can extend it for longer tests/builds, e.g. 180,000 for jest.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations are absent, so the description carries the full behavioral burden — and it delivers. It discloses automatic rejection of dangerous commands and directory escapes, the exact error signature (isError:true with rejection messages like dangerous or directory_escape), a 60s timeout with extendability, and unsuitability for dev servers/watch mode. This far exceeds what annotations alone would provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long (8 sentences), but every sentence earns its place: purpose, default-use rule, safety rejection, anti-bypass protocol, destructive alternative, timeout caveat, test-suite routing, and cwd guidance. It is front-loaded with the core purpose and organized from general to specific. Slightly dense, but remarkably efficient for the volume of safety-critical information conveyed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and no annotations, the description must fully equip an agent to invoke the tool correctly. It covers the safety model, rejection behavior, timeout constraints, exclusions (dev servers), cwd semantics, and points to sibling tools (list_allowed_roots, run_destructive_command, run_command_grep) for complementary operations. Nothing essential for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds meaningful usage context beyond the schema: it instructs agents to always pass 'cwd' when targeting a non-primary project and gives a concrete timeout example ('e.g. 180,000 for jest'). This extra operational guidance justifies a 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence states a specific verb and resource: 'Executes a safe command inside the project folder.' It explicitly differentiates itself from siblings by naming run_destructive_command for dangerous operations and run_command_grep for grep-style execution, so an agent can immediately tell which tool is which.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says 'use it whenever you are not sure whether a command is dangerous,' names run_destructive_command as the alternative for dangerous operations, and even tells the agent NOT to bypass rejections by switching tools without user consent. It also directs test suites, typechecks, and builds to this tool or run_command_grep rather than the built-in terminal. This is exemplary when-to-use vs when-not-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

split_file_by_declarationsA

Split a large file into multiple smaller files based on top-level declarations. Optionally generates a combining file (mod.rs / index.ts / init.py). Use dryRun: true (default) to preview the layout before writing.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNoWorking dir for resolving relative file paths (default: primary project root)
fileYesSource file to split
dryRunNoPreview only — write nothing (default: true)
groupingYesModule groupings
languageNoLanguage (auto-detected from extension)
overwriteNoAllow overwriting existing target files (default: false)
targetDirNoWhere new files are written (default: dirname of file)
generateIndexNoCreate combining file (default: true)

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the safety burden. It does this by warning that non-dry-run execution writes files and noting the optional combining-file side effect. It does not detail overwrite or authorization behavior, but the schema covers overwrite.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with the purpose front-loaded and the dryRun guidance as the only additional operational detail. Every sentence earns its place, and no schema information is redundantly repeated.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the full schema coverage, the description is sufficient for selecting and safely invoking the tool: it states the action, mentions the optional combining file, and highlights the safe preview default. It omits explicit return/output details, but no output schema exists and 'preview the layout' gives a reasonable expectation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds only a small amount of extra context, such as combining-file extension examples and the top-level-declaration basis, but does not provide meaningful per-parameter semantics beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Split a large file into multiple smaller files based on top-level declarations.' This clearly states what the tool does and distinguishes it from siblings like generate_module_skeleton or verify_refactor_safety, which are not about splitting an existing file.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear usage context (large file with top-level declarations) and an explicit operational recommendation: 'Use dryRun: true (default) to preview the layout before writing.' It does not name alternatives or state when not to use it, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

universal_find_referencesA

Find all occurrences of a symbol across a workspace. Structured output with file, line, column, context. Optional language-aware mode (rust/typescript/python/cpp) adds role annotations: declaration, import, or usage. Use this tool BEFORE any refactoring session to understand what will break when a symbol is renamed or moved.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNoWorkspace root to search (default: primary project root)
symbolYesSymbol to search for (word-boundary match)
languageNoOptional language-aware mode for role detection
contextLinesNoLines of context around each match (default: 1)
fileExtensionsNoRestrict to these extensions (default: common source extensions)
excludePatternsNoDirectories to skip (default: .git, node_modules, target, build, dist, __pycache__)

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full behavioral burden. It discloses output structure (file, line, column, context), optional mode behavior, and role annotations such as declaration, import, or usage. While it does not explicitly state the tool is read-only or mention limits, the 'find' semantics and output-focused description make the behavior reasonably transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four short sentences cover action, output, optional mode, and usage context without redundancy. The most important information is front-loaded, and every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool without an output schema, the description adequately conveys the shape of results and the workflow context. It could be more explicit about edge cases such as no matches, result limits, or behavior with non-source files, but the core information an agent needs is present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds value by explaining that the language parameter produces role annotations and by describing the output context, going beyond the schema's terse 'role detection' phrasing. It does not need to restate parameters already well documented in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('Find all occurrences of a symbol across a workspace') with a clear resource and scope. It further distinguishes itself from likely alternatives like run_command_grep by emphasizing structured output and optional language-aware role annotations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit when-to-use directive: 'Use this tool BEFORE any refactoring session to understand what will break when a symbol is renamed or moved.' It does not explicitly name alternatives or state when not to use it, but the placement in the refactoring workflow is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

verify_refactor_safetyA

Semantic diff between old and new code. Catches accidental deletions before compilation. Checks: function count, signatures, export count, imports, comment ratio. Intentionally conservative — renames appear as errors requiring explicit confirmation.

ParametersJSON Schema
NameRequiredDescriptionDefault
afterYesNew code text
beforeYesOriginal code text
languageNoLanguage (auto-detected from content)

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden, and it discloses important behavior: it is intentionally conservative, treats renames as errors, and checks specific code properties. It does not explicitly state whether the tool modifies code or what its failure/return behavior is, so not a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded: it states the core purpose, then gives a concise bullet-like list of checks, and ends with an important behavioral caveat. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has no output schema, so the agent is left without a described return shape or success/failure criteria beyond 'renames appear as errors.' The analysis scope is clear, but output semantics are a notable gap for an agent deciding how to act on the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the schema already explains before/after text and language auto-detection. The description adds context about why the inputs matter, but it does not add significant parameter-level semantics beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific purpose: perform a semantic diff between old and new code and catch accidental deletions before compilation. It lists concrete checks (function count, signatures, exports, imports, comment ratio), which clearly distinguishes it from execution-oriented siblings like run_safe_command and run_destructive_command.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly indicates the usage context: verify a refactor before compilation. It does not explicitly name alternatives or state when not to use the tool, but the workflow cue is clear and actionable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 17 tool updatesv0.1.0
    • First observedbatch_apply_edits
    • First observedclose_feedback
    • First observedextract_code_block
    • First observedgenerate_module_skeleton
    • First observedhelp_tool
    • First observedlist_allowed_roots
    • First observedlist_feedback
    • First observedlist_tools
    • First observedread_log_slice
    • First observedreport_tool_feedback
    • First observedresolve_cwd
    • First observedrun_command_grep
    • First observedrun_destructive_command
    • First observedrun_safe_command
    • First observedsplit_file_by_declarations
    • First observeduniversal_find_references
    • First observedverify_refactor_safety

TDQS

A4/5.0

Scored across 17 tools

Disambiguation4/5

Most tools have clearly distinct roles: command execution is split into safe/destructive/grep variants with explicit trigger conditions, and feedback tools form a recognizable lifecycle. The only mild overlap is between list_allowed_roots and resolve_cwd, both of which answer 'can I work in this project?', though their inputs/outputs differ enough to avoid real confusion.

Naming Consistency4/5

The set is predominantly verb-first snake_case (close_feedback, list_tools, run_safe_command, extract_code_block). It loses a point for exceptions like universal_find_references and batch_apply_edits, which do not follow the same verb_noun pattern, though they remain readable.

Tool Count3/5

17 tools places this server in the heavy 16-25 range, and it bundles several distinct concerns (command execution, project-root resolution, refactoring, feedback, meta helpers) into one namespace. Each tool has a purpose, but the set would feel more appropriately scoped if split into smaller servers or trimmed.

Completeness4/5

The refactoring workflow is well covered: find references, extract code, edit atomically, split/generate modules, and verify safety. Minor gaps exist—no dedicated rename operation and no long-running/process-watch tool—but agents can work around them with the provided tools.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    C
    maintenance
    Provides secure, sandboxed file system access for AI assistants to read, write, and manage project files with controlled command execution capabilities, all confined to a designated workspace directory.
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    Enables safe execution of terminal commands across different shells (bash, cmd, PowerShell) with configurable timeouts, working directories, and resource limits for command-line operations through AI assistants.
    -
  • A
    license
    A
    quality
    F
    maintenance
    Enables AI assistants to execute terminal commands on a host machine with configurable, granular permission controls and safety protections. It features multiple security modes, including allowlists and manual approval, to ensure safe command execution within specified directories.
    6
    Apache 2.0

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Majrooo/majrooo-mcp-devkit'

If you have feedback or need assistance with the MCP directory API, please join our Discord server