Skip to main content
Glama

@reachpad/mcp

reachpad を使うと、Claude、Codex、その他のコーディングエージェントが、永続的なワークスペースでフルスタックアプリを構築し、個別のデプロイなしでリンク共有できるようになります。ワークスペースとは、エージェント自身が操作するクラウド開発コンピュータです。リポジトリ、ファイルシステム、インストール済みの依存関係、ビルド状態がすべて呼び出し間で保持され、忘れてしまうような一時的なサンドボックスではありません。プロセスは例外です。後述します。

これは MCP サーバーです。Claude、ChatGPT、Cursor、OpenCode、または独自のエージェントが、環境を作成し、その中でコマンドを実行し、フォークし、後で戻ってくることができます。開発者がノートパソコンを開いたままにする必要はありません。

  • 永続化します。 一時停止するとディスクは封印され、次の呼び出しはその封印から起動し、ファイル、インストール、git 状態が再構築ではなくそのまま保持されます。プロセスは例外です。起動は常にコールドブートです。

  • フォークします。 準備された1つの状態からの20回の試行は、20回の再構築ではなく、それぞれデルタのコストです。環境はスナップショットチェーンであり、マシンではないからです。

  • シークレットを箱の外に保つことができます。 仲介された認証情報は、あなたの代わりに境界で呼び出され、その値は環境、ログ、ストアに入ることはありません。代わりに環境に書き込まれた認証情報は、設計上、そこで読み取り可能です。

  • エージェントに依存しません。 REST API が正規のものであり、このサーバー、SDK、CLI はその翻訳です。独自のエージェントを持ち込んでください。

API は製品の境界であり、Web UI ではありません: reachpad.dev。

インストール

npx -y @reachpad/mcp          # stdio, for a local client

Claude Code の場合:

claude mcp add reachpad -e REACHPAD_IDENTITY_CREDENTIAL=… -- npx -y @reachpad/mcp

Related MCP server: Uten Agent Terminal MCP

2つのトランスポート、1つの実装

npx @reachpad/mcp                                  # stdio
REACHPAD_MCP_HTTP_PORT=8722 npx @reachpad/mcp      # streamable http

stdio はローカルクライアントが話すもので、Streamable HTTP はリモートコネクタが話すものです。同じツール、同じ動作です。フォークではなく追加されています。1つのサーフェスの2つの実装は、そうやってドリフトするからです。

HTTP 側は GET に対して 405 を返します。ここにあるすべてのツールはリクエスト/レスポンスであり、仕様では、来ないトラフィックのために接続を開いたままにするのではなく、サーバーが開始するストリームを拒否することが許可されています。セッションはありません — 再起動で再構築できないものが呼び出し間で保持されることはありません。また、独自の認証情報を持ちません — HTTP リクエストを認証するものが reachpad を認証するものです。

設定

変数

意味

REACHPAD_ENDPOINT

あなたの reachpad ホスト。ループバック以外への平文 http:// は、ソケットが開く前に拒否されます。

REACHPAD_IDENTITY_CREDENTIAL

ユーザーごとの認証情報。1つのアカウントを指定し、他のアカウントのために動作することはできません。サーバーは、リクエストからではなく、認証情報自体のレコードから ID を取得します。

REACHPAD_API_KEY

オプションで、環境ごとにスコープされ、失効可能です。設定すると、run_command はそれを使用し、ID 交換を必要としません。

REACHPAD_MCP_HTTP_PORT

stdio の代わりに HTTP を提供します。

REACHPAD_MCP_HTTP_HOST

デフォルトは 127.0.0.1。このプロセスは、あなたの認証情報を持つコントロールプレーンにブリッジするため、ワールドにバインドすることは、TLS を終了するプロキシの背後で、意図的に行う決定です。

REACHPAD_MCP_HTTP_TOKEN

ベアラートークン。定数時間で比較されます。ない場合、ポートに到達できるすべての呼び出し元が認証され、サーバーは stderr にその旨を出力します。

REACHPAD_MCP_ALLOWED_ORIGINS

カンマ区切り。リストにない Origin を持つリクエストは拒否されます。ブラウザはそれを偽造できないため、DNS リバインディングを防ぎます。Origin がない場合は非ブラウザクライアントであり、許可されます。

複数の認証情報が設定されている場合、最も狭いものが優先され、拒否された認証情報がより広いものの下で再試行されることはありません — フォールバックは、誰も実行することを選択していない権限昇格になるからです。

ツール

ツール

機能

get_credit_balance()

残りのコンピュートクレジット。1クレジットで、標準環境を1分間実行できます。

create_environment(repo?, ref?, name?)

新しい環境。オプションで、リポジトリが $HOME/work にクローンされます。省略時は reachpad が表示名を生成します。

list_environments()

あなたの環境と、それぞれのフォーク数

get_environment(environment)

起動元: ヘッドスナップショット、ログ位置、フォークツリー

run_command(environment, argv, cwd?, env?, timeout_ms?)

1つのコマンド、その終了コード、出力。一時停止中の環境は、それを提供するために再開します。

checkpoint_environment(environment, name?)

最後に封印されたスナップショットからフォークします。元の環境は変更されません

expose_port(environment, port, check?)

ポートを Web に公開し、そこに到達するリンクを取得します。ポートごとに冪等です。

list_ports(environment)

この環境が開いているポートを、古い順に、リンク付きで表示します

revoke_port(environment, port)

1つのポートを閉じます。後で再度開くと、異なるリンクが発行されます。

delete_environment(environment)

アーカイブし、プランスロットを解放します。何も削除されません — スナップショットと履歴は残ります。

意図的にここにはありません: 環境内でエージェントを起動すること。これは reachpad のロードマップにあり、まだフリートにはありません。常に失敗するツールは、モデルのターンを消費し、残りを信頼しないように学習させるため、このサーバーは提供できないものを宣伝しません。

ポートリンクが何であるか、何でないか

誰かに渡す前に読む価値があります。URL からは何も発見できないからです:

  • リンクを持っている Reachpad にサインインしている人は誰でも開くことができます。 これはプライベート URL でも安全な URL でもありません。プレビューデプロイのように扱ってください。

  • リンクはアドレスであり、コピーではありません。 同じポートでアプリを再起動すると、同じリンクが新しいバージョンを提供します。

  • 実行中のプロセスは一時停止を生き延びません。 環境はファイルをそのままにしてコールドブートし、何も実行されていないため、一時停止後、そのポートで何かがリッスンするまでリンクはエラーで応答します。訪問者のリクエストは一時停止中の環境を起動しますが、その中の何かを再起動するわけではありません。

  • expose_port はその後ポートにダイヤルし、何も応答しなかった場合はその旨を伝えます。何も提供していないポートへのリンクは、機能しているリンクとまったく同じように見えるからです。check: false を渡すとスキップできます — ダイヤルは一時停止中の環境を再開します。

  • REACHPAD_API_KEY のみの場合、キーは --role owner である必要があります。 collaborator キーは拒否されます。リストはライブトークンを返し、トークンはケイパビリティだからです。

それが構築されているルール

これらは、ストリーミング exec API のナイーブなクライアントがモデルを誤解させる方法と、この API が代わりに行うことです。

  • 終了していないストリームは UNKNOWN であり、成功ではありません。 応答が終端イベントなしで終了した場合、ツールはその言葉でそう言います。これはゼロ終了ではなく、エージェントはその強さで非冪等コマンドを再試行してはなりません。

  • その期限はサーバーより緩いため、サーバー側の応答が常に競争に勝ちます。先に諦めるクライアントは「ビルドが完了しました」を「不明」に変え、数値は推測ではなくサーバーからミラーリングされます。

  • 拒否にはコードではなく救済策が含まれます。 プラン制限に達すると、制限、現在の数、および何をすべきかが得られます。数値はサーバーから来ます。クライアントにハードコードされた制限は、プランが変更された瞬間に嘘になるからです。

  • 結果はハンドルであり、ペイロードではありません。 出力は、ドロップされたバイト数が指定されてテールされます。ビルドログはメガバイトになる可能性があり、そのサイズの MCP 結果は呼び出し元のコンテキストウィンドウを破壊します。

  • 拒否は結果であり、トランスポートエラーではありません。モデルがそれを読んで行動できるようにするためです。未知の ツール だけがプロトコルエラーです。

テスト

node --test 'test/*.test.mjs'

ネットワークも認証情報もありません。プロトコルスイートは、出荷されたサーバーを子プロセスとして起動し、実際のソケット上のスタブコントロールプレーンに対して、その stdio 上で実際の JSON-RPC を話します。テスト対象のものは内部インポートではありません。1つのテストは、実際の reachpad に対して同じアークを実行し、エンドポイントが設定されていない場合はスキップします。

リポジトリ

このリポジトリがソースです。これは意図的に reachpad バックエンドから分離されています: このコードは公開されており、npm に公開され、そのリリースワークフローは公開権限を保持しています。これらはどれもコントロールプレーンと同じリポジトリに属しません。ここにあるものはバックエンドのソースを読むことができず、バックエンドのジョブがここにファイルをコピーすることもありません。

2つのサーバー定数が src/client.js にミラーリングされています — exec 猶予期間とデフォルトの exec タイムアウトです。ミラーリングされた定数は通常腐敗しますが、これは腐敗しません。バックエンド自身の CI がこの公開パッケージを取得し、それらが一致しない場合に失敗するからです。チェックは数値が変更される場所にあります。

Available Tools

7 tools
checkpoint_environmentFork environmentAInspect

Fork an environment from its last sealed snapshot into a new one. The original is untouched. This is how you try several approaches from one prepared state — the fork costs a delta, not a rebuild.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNoName for the fork.
environmentYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations (readOnlyHint=false, destructiveHint=false) only partially cover behavior; the description adds crucial detail that the original environment is untouched and explains the delta-based cost. This goes beyond the annotations by specifying what is not modified and the resource implication, enhancing transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two succinct sentences: the first states the core action, the second explains the purpose and cost. No redundant phrasing, perfectly front-loaded, and every sentence earns its place. Ideal conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple tool with 2 params, no output schema, and partial annotations, the description adequately covers functionality, usage context, and non-destructive behavior. It does not mention the return value, but that is not critical given the lack of an output schema and the simplicity of the operation. Overall, complete enough for an agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 50% (only 'name' has a description). The description does not add extra meaning to the 'environment' parameter beyond the implied source, and 'name' is already described as 'Name for the fork.' Since coverage is moderate, the description adds minimal value beyond what the schema already provides, so a baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the action (fork an environment from its last sealed snapshot into a new one) and differentiates from siblings by emphasizing the 'original is untouched' and the purpose of trying multiple approaches. The verb 'fork' is specific and the resource (environment) is explicit, with a clear scope (last sealed snapshot).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides clear context for use ('try several approaches from one prepared state') and hints at cost advantages ('costs a delta, not a rebuild'), but does not explicitly name alternative tools or state when not to use it. Still, the rationale is sufficiently clear for an agent to decide.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_environmentCreate environmentAInspect

Create a persistent development environment: a filesystem and processes that survive between calls. Optionally clone a git repository into it. Returns the environment id used by every other tool.

ParametersJSON Schema
NameRequiredDescriptionDefault
refNoOptional branch or tag to check out.
nameNoOptional display name. Reachpad generates one when omitted.
repoNoOptional git URL to clone into /work. Must be reachable without credentials unless the account has a mirror for it.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds meaningful behavioral context beyond the annotations: persistence across calls, optional git cloning, and the return value. This complements annotations like openWorldHint=true (cloning) and readOnlyHint=false (creation). It does not mention resource/credit implications or failure modes, but covers the core behavioral contract well.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the essential function, and no filler. It efficiently communicates persistence, optional cloning, and the return id—every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the essential facts for a creation tool with no output schema: what is created, persistence, optional repo cloning, and the return id. It does not discuss edge cases like clone failures, name conflicts, or costs, but given the moderate complexity and strong schema/annotations, it is sufficiently complete for an agent to invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all three parameters (ref, name, repo) are already documented structurally. The description's mention of optional repository cloning adds a small layer of meaning, but it does not enrich parameter semantics beyond what the schema provides, matching the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Create') and clearly identifies the resource ('persistent development environment') with defining traits: a filesystem and processes that survive between calls. It also distinguishes from siblings by noting the returned environment id is used by every other tool, making the tool's role as the foundational creation step unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use this tool by stating it returns the environment id used by every other tool, establishing it as the prerequisite step. However, it does not explicitly name alternatives or state when not to use it (e.g., prefer run_command for existing environments), so it falls short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

delete_environmentArchive environmentA
DestructiveIdempotent
Inspect

Archive an environment, freeing the plan slot it holds. Nothing is deleted: its snapshots and history survive, it simply stops counting as live and can no longer be used.

ParametersJSON Schema
NameRequiredDescriptionDefault
environmentYes

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description significantly expands on the annotations by explaining what happens: the environment is no longer usable, its plan slot is freed, and its snapshots and history survive. This adds valuable behavioral nuance beyond the destructiveHint=true and idempotentHint=true annotations, and it does not contradict them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences long, front-loaded with the main action, and every clause adds relevant meaning. There is no repetition, filler, or unnecessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple one-parameter tool with no output schema, the description covers the action, consequences, and non-destructive nature of data. However, it lacks guidance on how to specify the environment parameter and does not explicitly contrast it with related tools, leaving small but real gaps in completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The only parameter 'environment' has no schema description and the description gives no detail about what form it should take (name, ID, path, etc.). Since schema description coverage is 0%, the description was expected to compensate, but it only says 'an environment' without specifying how to identify it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the specific verb 'Archive' and clearly identifies the resource ('an environment') and the key consequence: freeing the plan slot it holds. It also distinguishes itself from the sibling delete/create tools by explicitly clarifying that nothing is deleted, which prevents confusion with the tool's name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool: when you want an environment to stop counting as live and free its plan slot, while preserving snapshots and history. It does not explicitly name alternatives or state when not to use it, but the context is clear enough for a simple one-parameter archiving operation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_credit_balanceGet compute-credit balanceA
Read-onlyIdempotent
Inspect

Show this account's remaining compute credits. One credit runs one standard environment for one minute; paused environments use no compute credits.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior. The description adds valuable context beyond annotations: the definition of a credit (one minute per standard environment) and that paused environments don't consume credits. This enriches understanding of the resource being measured without contradicting the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the core purpose and followed by a concise clarification of credit units. Every sentence adds essential information with no waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only, zero-parameter tool with rich annotations and no output schema, the description fully covers what the tool does, the resource it references, and the consumption model. This is sufficient for an agent to decide when to call it and what to expect.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the baseline is 4. The description doesn't need to elaborate on parameters but correctly implies that no inputs are required, making it clear the action is a simple balance query.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Show this account's remaining compute credits.' It uses a specific verb (show) and resource (compute credits), and the additional detail about credit usage distinguishes it from sibling tools like create_environment and run_command.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use this tool by explaining how credits are consumed, which helps an agent understand that checking balance is relevant when considering environment execution. It doesn't explicitly mention alternatives or exclusions, but since no sibling tool covers credits, the usage context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_environmentInspect environmentA
Read-onlyIdempotent
Inspect

What an environment resumes from: its head snapshot, how far its log had got, and its fork tree. Every start is a cold boot from the head snapshot: files survive, running processes do not.

ParametersJSON Schema
NameRequiredDescriptionDefault
environmentYes

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the read-only, idempotent, and non-destructive annotations, the description adds valuable behavioral context: running processes do not survive a cold boot while files do. This is exactly the kind of contextual insight that the annotations alone do not provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and well-structured: two sentences front-load the core output details and then add the essential cold-boot behavior. Every sentence earns its place without unnecessary restatement.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter, read-only inspection tool, the description is largely sufficient: it names the returned concepts and a key behavioral nuance, and the annotations cover safety and idempotency. It does not describe a concrete output format, but no output schema is present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema exposes one undocumented string parameter, 'environment', and schema description coverage is 0%. The description clarifies that the tool operates on an environment's resumption state, but it does not explain how to obtain or format the environment identifier, e.g. whether it is an ID or name from list_environments.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies what the tool returns: an environment's resumption state, including its head snapshot, log progress, and fork tree. This distinguishes it from siblings like list_environments, create_environment, and delete_environment, which perform different lifecycle operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit alternatives are listed, but the description provides clear operational context: every start is a cold boot from the head snapshot, so this tool helps you understand what state an environment will resume with. The absence of explicit when-not-to-use guidance prevents a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_environmentsList environmentsA
Read-onlyIdempotent
Inspect

List this account's environments, with how many forks each has.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already express readOnly, openWorld, idempotent, and non-destructive behavior. The description adds behavioral context by scoping to the current account and revealing that fork counts are included in the response. This goes beyond the annotations without contradicting them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence that is front-loaded with the verb 'List' and immediately identifies the resource and output. Every word adds value; there is no unnecessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that the tool has no parameters, no output schema, and strong annotations, this description fully covers the core invocation and expected result. An agent has enough information to correctly select and call this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so the baseline of 4 is appropriate. The description does not need to define parameter meanings because there are none to clarify.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the specific verb 'List' and states the exact resource ('this account's environments') plus a meaningful differentiator ('with how many forks each has'). This clearly distinguishes it from get_environment, which focuses on a singular environment.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use this tool—when you need an account-level summary of environments and their fork counts—but it does not explicitly say when to prefer this over get_environment or list other alternatives. It provides clear context but no exclusionary guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

run_commandRun a commandA
Destructive
Inspect

Run one command in an environment and get its exit code and output. Not a shell: pass argv as a list, and ask for a shell explicitly with ["/bin/sh","-lc","…"] if you want one. A paused environment resumes to serve this.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNo
envNo
argvYes
timeout_msNoGive up after this long. PASS IT. Clamped by the entitlement server-side, and without it the environment is allowed ten minutes — so a wedged environment costs you ten before you learn anything. Seconds to a couple of minutes suits most commands; raise it for builds.
environmentYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate openWorldHint=true and destructiveHint=true, but the description adds valuable behavioral context: it is not a shell, it returns exit code and output, and a paused environment resumes for it. These details go beyond the annotations and help the agent understand execution semantics.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the core purpose. Each sentence adds essential information without redundancy, making it highly concise and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 5 parameters with nested objects and no output schema, the description covers the primary behavior (command execution, exit code/output) and key usage notes (argv, shell). It lacks detailed parameter explanations but the schema covers timeout_ms, and the annotations cover safety aspects. This is reasonably complete for a command runner tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With schema description coverage at only 20%, the description should compensate. It adds meaning to the argv parameter (list form, explicit shell usage) and mentions environment behavior, but does not explain cwd, env, or environment beyond that. The timeout_ms parameter already has a schema description. This is adequate but not comprehensive.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states 'Run one command in an environment and get its exit code and output,' which clearly identifies the verb, resource, and outcome. It also distinguishes itself from a shell, clarifying its scope and differentiating it from sibling tools that manage environments.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear usage instructions: 'pass argv as a list, and ask for a shell explicitly with ["/bin/sh","-lc","…"] if you want one.' It also notes that a paused environment resumes to serve the command, giving practical context. However, it does not explicitly discuss when to use this versus alternatives, though siblings are not direct alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 7 tool updatesv0.1.0
    • First observedcheckpoint_environment
    • First observedcreate_environment
    • First observeddelete_environment
    • First observedget_credit_balance
    • First observedget_environment
    • First observedlist_environments
    • First observedrun_command

TDQS

A4.4/5.0

Scored across 7 tools

Disambiguation5/5

Each tool addresses a distinct concern: credit balance, environment lifecycle, and command execution are cleanly separated. Even checkpoint_environment is unambiguous because it explicitly forks an environment into a new one.

Naming Consistency5/5

All tools follow a consistent verb_noun pattern in snake_case, such as create_environment, list_environments, and delete_environment. Singular/plural usage is natural and predictable.

Tool Count5/5

Seven tools is well-scoped for managing persistent development environments: credit checking, creation, listing, inspection, command execution, forking, and deletion/archival. No tool feels redundant or out of place.

Completeness5/5

The environment lifecycle is covered end-to-end: create, read (list/get), fork/checkpoint, execute commands, and delete/archive. The credit balance tool fills the one supporting need for running environments, leaving no obvious dead ends.

Maintenance

ActivitySlowing
ResponsivenessUnresponsive

Related MCP Connectors

Related MCP Servers