Skip to main content
Glama
Pawangunjkar

Artifact Registry MCP Server

by Pawangunjkar

artifact_upload_binary

Upload local build artifacts or archives to Nexus or Artifactory with checksum verification, publishing JARs, wheels, and tarballs to a target repository after confirmation.

Instructions

Upload a local build artifact/archive to Nexus or Artifactory with checksum verification.

⚠️ CONFIRMATION-GATED MUTATING TOOL: Requires confirm=true to execute.

Computes local SHA256/SHA1/MD5 checksums, uploads the binary to the destination repository, and immediately verifies the remote checksum match.

Purpose: Publish build archives, JARs, wheels, or tarballs to the registry. When to Use: In Workflow 1 after jenkins-mcp or github-mcp build completes. Behavior: MUTATING. Writes binary to registry storage. Side Effects: Consumes registry storage space.

Args: repository: Destination repository (e.g. 'maven-releases', 'libs-snapshot-local') local_file_path: Absolute or relative path to the local file to upload target_path: Destination path in the repository (e.g. 'com/corp/auth/1.0.0/auth-1.0.0.jar') maven_coords: Optional dict of Maven coordinates {'groupId': '...', 'artifactId': '...', 'version': '...', 'packaging': 'jar'} confirm: Must be True to execute upload (default: False) session_name: Session to use (default: 'default')

Input Schema

NameRequiredDescriptionDefault
confirmNo
repositoryYes
target_pathYes
maven_coordsNo
session_nameNodefault
local_file_pathYes

Output Schema

NameRequiredDescriptionDefault
resultYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.0.0

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden, and it does substantial work: declares MUTATING, confirmation-gated via confirm=true, describes the local checksum computation plus immediate remote verification, and names the side effect (registry storage consumption). It omits auth/session prerequisites and, importantly, what happens if the target path already exists (overwrite vs. fail).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The warning and confirmation gate are front-loaded where they matter most, and the labeled sections (Purpose/When to Use/Behavior/Side Effects/Args) make it skimmable. There is mild redundancy — the mutation risk is stated in the header block, again in 'Behavior', and again in 'Side Effects'.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be explained, and the description covers the mutation risk, confirmation gate, and checksum flow. Gaps remain around overwrite semantics, required credentials/session state, and failure behavior for a write tool with no annotations to fall back on.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must compensate fully and it does: every one of the six parameters is documented with concrete examples, including repository values ('maven-releases', 'libs-snapshot-local'), a realistic target_path, the exact maven_coords keys, and defaults for confirm and session_name. This adds meaning the bare schema titles cannot.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource — upload a local build artifact/archive to Nexus or Artifactory — plus the differentiator (checksum computation and remote verification). This clearly separates it from siblings like artifact_search_binaries and artifact_verify_checksum_integrity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

"When to Use: In Workflow 1 after jenkins-mcp or github-mcp build completes" gives concrete triggering context, and the confirmation gate is stated up front. It stops short of naming explicit alternatives or when-not-to-use conditions (e.g. use artifact_promote_release instead when the artifact is already in the registry).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.