serve
serve
You already ask your AI to make things. Now ask it to share them.
you: "serve me this"
Claude: → https://lively-bison-4821.servelink.ccThat's the product. You say a sentence, and the thing you just made has a real URL — one you can text to a friend, drop into a Slack thread, or put on a slide. It works the same whether you built a Next.js app or asked for a sales deck, because serve doesn't care what the thing is. It only cares that you want someone else to see it.
serve is a hosted service. Create an account, log in once, and your links
live at *.servelink.cc.
About this repository. This is the public listing and configuration home for serve: the MCP registry manifest, the Claude Code plugin manifest, and the user documentation. serve is a commercial hosted service and its implementation repository is private. Everything you need to use serve is here or on npm — there is no build step, and nothing here needs compiling.
A link can live in two places
Every serve link is either live from your machine or kept alive on ours.
Live from your machine. The link points at whatever is running on your computer right now. Change a heading and the person holding the link sees the new heading. Close your laptop and the link goes quiet. (Under the hood this is a tunnel; your agent opens it for you.)
Kept alive on ours. We hold a copy on serve's servers. Your laptop can be shut, asleep, or in a bag at the airport, and the link still opens.
You don't choose up front, and you're never stuck with the choice. "Serve this so my teammate can watch while I work on it" gives you the first one. "Keep it up so they can read it tomorrow" gives you the second. Same link, same URL, one sentence apart.
That switch is the part people don't expect. Everywhere else, "let someone see what's on my laptop" and "put this on the internet" are two different products with two different setups, and moving between them is a project. Here they're two ways of phrasing the same request.
Related MCP server: chatpipe-mcp
You never operate it — your agent does
serve's real interface isn't the terminal. It's MCP, the protocol AI agents already speak, which means making a link isn't a task you go and do. It's something you mention. Your agent creates the link, tells you the URL, puts a password on it if you ask, and takes it down when you're finished. There's a CLI too, and it's a good one, but it's there for the times you'd rather drive manually.
This is also why serve isn't only for developers. If you can get Claude to build you a dashboard, you can get Claude to hand you the link to it. The skill it takes to share the thing is the one you already used to make it.
Quick start
npm i -g @servelink/serve # npm is the primary channel
serve login # opens your browser to confirmThen tell your agent it exists. Anything that speaks MCP will do — Claude Code, Claude Desktop, Cursor, opencode:
{
"mcpServers": {
"serve": {
"command": "npx",
"args": ["-y", "@servelink/serve"]
}
}
}That's the whole setup. From here it's conversation: ask for a link, get a link.
If you installed globally with npm i -g, "command": "serve" with no args
works too and starts marginally faster.
Prefer Homebrew?
brew install servelink-swyftlabs/tap/serveOne account works across as many machines as you like.
Claude Code plugin
This repository is also a Claude Code plugin marketplace, so you can skip the JSON:
claude plugin marketplace add servelink-swyftlabs/serve-mcp
claude plugin install serve@servelinkOr point Claude Code at a local clone while you try it:
claude --plugin-dir ./serve-mcpThe plugin ships the MCP server configuration in .mcp.json and
nothing else — no hooks, no agents, no code that runs on your machine beyond the
serve client itself.
Things you can just ask for
None of these are commands. They're the kind of thing people actually say, and the agent works out the rest.
"Serve me this so I can check it on my phone."
"Put the deck somewhere my client can open it, and password-protect it."
"This link is going in an email, so make sure it still works next week."
"Take down everything I've got open."
"What am I sharing right now?"
From those, the agent decides whether the link should run from your machine or from ours, claims the subdomain, sets protection, and tells you what it did. If you've asked for something your plan doesn't cover, it says so rather than half-doing it.
What you get
Links you own for good. A link is yours from the moment you make it — never recycled, never evicted, never expired to free up room. Reconnect a week later and it's the same URL, so a tab someone left open still works.
Names you can read out loud. Every link gets something like
lively-bison-4821instead of a hash. On Pro you can ask for a specific one and getgoldenfish.servelink.cc.A password whenever you want one (Pro), on any link, lasting an hour or a month. Revoke it and the people already looking are out immediately.
Real applications, not just static files. Streaming responses, server-sent events, WebSockets, big downloads, and the fifteen-odd parallel requests a modern page fires the moment it loads.
It works from wherever you are. Your machine dials outward, so home NAT, office firewalls, and hotel WiFi are all fine. No inbound port, no router settings, nothing to ask IT for.
A free tier with actual numbers in it — 2 GB of transfer a month and 3 live links at once — rather than a meter that surprises you later.
Underneath, it's QUIC end to end with per-stream flow control and real backpressure, and WebSocket upgrades that only report success once your local server has genuinely accepted the connection.
Free vs Pro
Two words worth pinning down, because the plans are built on them. A link is a URL you own. A tunnel is a link that's live right now. You can own any number of links on either plan; what the plans limit is how many run at once and how much traffic they carry.
Free | Pro | |
Price | $0 | $9.99/month |
Links you own | Unlimited | Unlimited |
Live at the same time | 3 | 10 |
Largest single publish | 100 MB | 1 GB |
Total stored | 1 GB | 50 GB |
Transfer per month | 2 GB | 25 GB |
Views on a published link | Unlimited* | Unlimited* |
Password protection | — | Any link, any duration |
Pick your own subdomain | — | Yes |
Analytics | Opens | Opens, bytes, referrer, country |
Publishes per hour / day | 30 / 100 | 300 / 1,000 |
* No per-link view cap and no per-viewer bandwidth quota. If traffic across the whole service ever threatens the monthly infrastructure budget, serve may pause new requests until it resets. Reaching a limit never deletes anything — your links and everything in them stay yours.
How serve compares
Tunnel tools move bytes, and a few of them gate or meter those bytes. None of them put a conversation in front.
serve | ngrok free | Cloudflare Tunnel | Tailscale | |
Public HTTPS URL for anyone | Yes | Yes | Yes | Funnel only¹ |
Your agent drives it (MCP) | Yes | No | No | No |
Hosts as well as tunnels | Yes | No | No | No |
Stable subdomain, free | Yes | Paid | — | — |
Streaming responses, free | Yes | Paid | — | — |
Free tier with stated caps | Yes | Metered | Limited | — |
Behind NAT, no open port | Yes | Yes | Yes | Yes |
¹ Tailscale gives you a private mesh — your own devices reaching one another. Handing a URL to somebody outside it needs Funnel, a separate feature.
The rows undersell it, though. Everywhere else, "let someone see my laptop" and "host this properly" are two different products you'd choose between. Here they're one link and a setting, and the setting is a sentence.
Security, and one thing you should know
Your device is bound to your account.
serve loginruns an OAuth 2.0 device flow, and the relay only accepts links from a key that's already yours.Every request is signed. Your machine holds an Ed25519 key at
~/.serve/identity(mode 0600) that signs each registration and bind. A subdomain belongs to that key, so nobody else can claim it or knock a live tunnel offline — knowing your URL isn't enough.Revocation is fast. Revoke a device in the dashboard and new binds stop immediately; live tunnels drop as the revocation reaches the relay.
The relay terminates TLS. This is the one we'd rather you heard from us: because serve's relay presents the certificate for
*.servelink.cc, it can see tunneled traffic in plaintext. Don't tunnel production secrets or anything you'd rather we weren't technically able to see. Published (hosted) links are files you handed us on purpose, so the same applies to them by definition.QUIC-only, UDP 443, no fallback. If your network blocks outbound UDP, serve fails clearly instead of degrading.
serve doctortells you in one command.
Documentation
Getting started — the walkthrough, from install to your first link
CLI reference — every command, its flags, and config precedence
MCP tools — all seventeen, and what their results carry
Preview modes — production vs HMR, and how to read a WebSocket failure
Troubleshooting — or just run
serve doctor
Viewer → HTTPS → relay (QUIC edge, UDP 443)
│
▼
relay coordinator (hosted)
▲
│ QUIC streams (ALPN serve-tunnel/2)
│
your machine → localhost:PORTYour client registers with the hosted control plane and then dials out over UDP 443, which is why nothing needs an inbound port. Viewer requests and WebSockets map onto dedicated QUIC streams with end-to-end backpressure. Transport v2 is QUIC-only — no WebSocket fallback and no HTTP/2 downgrade — so a version mismatch fails loudly instead of quietly retrying.
What's in this repository
README.md what you're reading
server.json MCP registry manifest (cc.servelink/serve)
.claude-plugin/ Claude Code plugin + marketplace manifests
.mcp.json MCP server configuration the plugin installs
docs/ user documentation
LICENSE proprietary noticeNo product source. The serve client is distributed as a signed binary through
npm and Homebrew; the relay, account API and worker are hosted components.
Links
Website — servelink.cc
npm —
@servelink/serveHomebrew —
servelink-swyftlabs/tap/serveSupport — serve@servelink.cc
License
Proprietary — all rights reserved. See LICENSE. The documentation and manifests in this repository are published so that serve can be listed, installed and understood; that publication is not a grant of rights over the serve software or service.
Available Tools
17 toolsaccount_statusAccount statusARead-only
Account-level state: plan, entitlement, and how much of the storage, transfer and publish allowance is used. Use this to check what the account may do or whether it is near a limit. For the links themselves (labels, URLs, protection state), use links instead. Owned links are unlimited by count.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so the description does not need to restate safety. It adds behavioral context by clarifying that owned links are unlimited by count and that the tool reports allowance usage. This helps the agent interpret results and plan around limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences with no filler. The first sentence defines the resource content, the second gives a concrete use case, and the third prevents misuse by pointing to the `links` tool. Every sentence earns its place and the key information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, read-only account status tool with no output schema, the description names the relevant data categories: plan, entitlement, storage/transfer/publish allowance usage, and the 'unlimited owned links' caveat. There is no missing guidance an agent would need to select and invoke this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters and 100% schema coverage, so there is no parameter information the description must supply. The description's mention of plan, entitlements, and allowance usage aligns with what such a no-argument status tool would return, which is sufficient.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as a read-only account-level status resource, naming specific data: plan, entitlement, and usage of storage, transfer, and publish allowances. It also explicitly contrasts itself with the `links` tool, which covers link-level details. This lets the agent distinguish it from siblings without inspecting schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description states when to use the tool: to check what the account may do or whether it is near a limit. It also explicitly says to use `links` instead for link-specific details such as labels, URLs, and protection state. This provides clear routing guidance and excludes the main alternative.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_viewer_grantCreate viewer grantA
Create a single-use owner-browser bypass grant (Pro plan required) and return a bypass URL for the link. Use it to open a protected link in the browser without sharing the link's viewer credential; it is not a general viewer-sharing credential. The grant is valid for two minutes after creation and can be used once.
| Name | Required | Description | Default |
|---|---|---|---|
| label | Yes | Label of the link. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations, the description discloses single-use behavior, a two-minute validity window, the Pro plan requirement, and that the returned value is a bypass URL. No contradiction with readOnlyHint=false or idempotentHint=false.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, front-loaded with the core action and result, with every sentence adding either a constraint, a use case, or validity details. No filler or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter, no-output-schema tool, the description covers purpose, output type, constraints, validity, and exclusions. The only minimal gap is exact response formatting, which is not necessary for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for the single label parameter, so the schema already documents the parameter. The description adds no extra parameter-level meaning beyond the link context, which fits the baseline for fully covered schemas.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description opens with a specific verb and resource: create a single-use owner-browser bypass grant and return a bypass URL. It further differentiates the tool from a general viewer-sharing credential, so an agent can distinguish it from sibling tools without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives an explicit use case: open a protected link in the browser without sharing the viewer credential. It also states a clear when-not boundary: not a general viewer-sharing credential, which routes agents away from misuse even without naming a sibling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
doctorDiagnosticsARead-only
Run self-diagnostics when a link is unreachable or a call fails: config and identity fingerprint presence, account API health, relay health, and outbound UDP 443 (QUIC) reachability, each reported as a check result. The probes are best-effort and need no login; a UDP probe that sends but gets no reply is inconclusive, not proof of failure. For plan and quota, use account_status; for the account's link inventory, use links; for a single tunnel's state, use tunnel_status.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate readOnly and non-destructive, and the description reinforces this by explaining probes are best-effort and require no login. Also clarifies that a UDP send with no reply is inconclusive, not proof of failure, which is valuable behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences with no redundancy. Every clause adds useful information, and the key warning is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Fully covers purpose, when to use, alternative tools, behavioral expectations, and result interpretation. With no parameters or output schema, nothing essential is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so the baseline of 4 applies. The description needs no parameter detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states it runs self-diagnostics and lists specific checks (config/identity fingerprint, account API health, relay health, UDP 443 reachability). Explicitly differentiates from sibling tools by directing plan/quota to account_status, link inventory to links, and tunnel state to tunnel_status.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says when to use it ('when a link is unreachable or a call fails') and provides clear alternative tools for other needs, leaving no ambiguity about selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
linksList linksARead-only
Inventory of every owned link (label) for the account, one record each: kind, URL, live/stale markers, protection status, last bound/viewer activity, and quarantine window. Use this to see what is currently served or published, or to find a label to act on. Live-tunnel capacity (live/max) and storage, transfer and publish-rate usage come along as context. For plan, entitlement and quota headroom, use account_status instead. Owned links are unlimited by count.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| count | Yes | |
| links | Yes | |
| publish | No | |
| storage | No | |
| transfer | No | |
| max_tunnels | Yes | |
| live_tunnels | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, and the description is consistent with those. It adds useful behavioral context beyond the annotations: the output is one record per owned link, includes live/stale/protection/activity/quarantine fields, and carries live-tunnel capacity and usage as context. The note that owned links are unlimited by count is also helpful. It does not describe pagination or rate-limit behavior, but annotations already cover the safety profile.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four sentences, each earning its place: the first defines the inventory and record contents, the second gives usage intent, the third notes companion context data, and the fourth routes to a sibling and clarifies count limits. The key content is front-loaded, and there is no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, read-only list tool with an output schema present, the description is complete. It gives purpose, scope, record categories, companion usage context, an explicit alternative, and a count-limit clarification. Nothing an agent needs to select or call this tool correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are no parameters in the input schema, so the baseline is 4. The description does not need to explain parameter meaning because there is nothing to explain. It focuses instead on what the returned inventory contains, which is appropriate for a zero-parameter read-only list.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb-resource relationship: it inventories every owned link for the account, enumerates record contents (kind, URL, live/stale markers, protection status, activity, quarantine window), and clarifies what the tool is for (seeing what is served/published or finding a label to act on). It also distinguishes itself from account_status by explicitly routing quota/plan questions elsewhere.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit use cases: 'Use this to see what is currently served or published, or to find a label to act on.' It also names the alternative for plan/entitlement/quota questions: 'use account_status instead.' This provides clear when-to-use and when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_tunnelsList tunnelsARead-only
List all active tunnels in this manager with their ports, labels, public URLs, uptime, state, and last error. To inspect a single tunnel, use tunnel_status with its port or label.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so the safety profile is covered. The description adds valuable context beyond annotations by specifying the scope ('in this manager') and the exact fields returned, which is important since there is no output schema. It does not mention pagination or size limits, but for a simple list tool this is sufficient.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with zero filler. The core purpose is front-loaded in the first sentence, and the second sentence provides compact routing guidance to the sibling tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a no-parameter, no-output-schema list tool, the description covers what it lists, the fields returned, and the alternative for single-tunnel inspection. Combined with annotations that establish read-only behavior, nothing essential is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema is empty with zero parameters, so there is no parameter ambiguity to resolve. The baseline for 0 params is 4, and the description correctly avoids inventing parameter details that don't exist.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb (List), a resource (all active tunnels in this manager), and enumerates the returned fields (ports, labels, public URLs, uptime, state, last error). It also differentiates from the sibling tunnel_status by naming it explicitly for single-tunnel inspection.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives explicit when-to-use guidance: use list_tunnels to list all active tunnels, and use tunnel_status for a single tunnel. The alternative and condition are named directly, leaving no ambiguity about which sibling tool to choose.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
protect_linkProtect linkA
Enable capability token and readable secret protection on an owned link (Pro plan required). Returns the share URL (with #cap=...) and the human-readable secret code. If label is omitted, the first owned link returned by links is protected. If ttl is omitted, protection lasts 24 hours. Calling this on an already-protected link replaces the existing credentials, so previous share URLs stop working. To rotate credentials instead, use renew_link; to change only the duration, use update_ttl.
| Name | Required | Description | Default |
|---|---|---|---|
| ttl | No | Optional protection duration (e.g. 24h, 3d, 7d); defaults to 24 hours. | |
| label | No | Label of the link to protect (optional; defaults to the first owned link returned by links). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses important behavioral side effects not captured by annotations, such as replacing existing credentials and invalidating previous share URLs. It also mentions the Pro plan prerequisite, providing transparency beyond the basic annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-organized and concise, with each sentence contributing meaningful information about functionality, defaults, side effects, and alternatives. It avoids redundant fluff while covering all essential aspects.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (no output schema, simple parameters), the description is complete. It covers the return value (share URL with #cap= and secret code), side effects, prerequisites, defaults, and relationships to sibling tools, leaving no critical context missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides descriptions for both parameters (100% coverage). The description adds value by explaining default behaviors tied to omitted parameters (e.g., first owned link used when label is omitted, 24-hour default TTL), which are not fully specified in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: enabling capability token and readable secret protection on an owned link. It uses specific verbs and resource references, and distinguishes itself from similar tools like renew_link and update_ttl by mentioning them as alternatives.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit usage guidance is provided: it notes the Pro plan requirement, explains default behavior when labels or TTLs are omitted, and explicitly states when to use this tool versus renew_link (rotate credentials) or update_ttl (change duration).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
release_linkRelease linkADestructive
Release (free) an owned link by label. Fails with remote_link while the label still has a published artifact; unpublish it with stop_remote first. Returns confirmation and the account's usage.
| Name | Required | Description | Default |
|---|---|---|---|
| label | Yes | Label of the link to release. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations declaring destructive behavior, the description discloses the failure mode (remote_link), a prerequisite (unpublish with stop_remote), and the expected return ('confirmation and the account's usage'). This gives the agent concrete behavioral expectations without an output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tightly packed sentences with no filler. The core action is front-loaded, followed by the key error condition and the return value; every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool with no output schema, this description is complete: it specifies what to do, what can go wrong, how to recover, and what the response will contain. Nothing essential is missing for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With schema description coverage at 100% and only one parameter, the schema already fully documents label. The description reinforces that the operation is by label but adds no additional parameter-specific meaning, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Release (free)') with a clear resource ('an owned link by label') and distinguishes this operation from related link-management siblings by explaining the owned/remote distinction and the stop_remote prerequisite. This is enough for an agent to know what operation it is invoking.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives a clear conditional workflow: if releasing fails with remote_link while a published artifact exists, use stop_remote first. This is explicit context for when this tool is appropriate, though it does not name a direct alternative for permanent revocation such as revoke_link.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
renew_linkRenew link protectionA
Rotate the capability token and secret code for a link (Pro plan required): fresh credentials are minted and the countdown restarts, and the previous credentials stop working immediately. If ttl is omitted, protection defaults to 24 hours. For a duration-only change without rotating credentials, use update_ttl instead.
| Name | Required | Description | Default |
|---|---|---|---|
| ttl | No | Optional updated duration (e.g. 24h, 3d, 7d); defaults to 24 hours. | |
| label | Yes | Label of the link to renew. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds critical behavior beyond the annotations: fresh credentials are minted, the countdown restarts, and previous credentials stop working immediately. This helps the agent anticipate the irreversible invalidation of old credentials. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, no waste, and the primary action is front-loaded. The alternative tool is mentioned at the end with a clear conditional. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers prerequisites, ttl defaults, and the consequence of rotation. With no output schema, it could also state whether the new credentials are returned in the response, but this is a minor gap for an otherwise complete description.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so parameters are already well documented. The description adds meaning around ttl (defaults to 24 hours) and differentiates ttl-only changes as a separate tool, but label is not enhanced beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Rotate') and resource ('capability token and secret code') and clearly distinguishes this from the sibling update_ttl for duration-only changes. The Pro plan requirement further clarifies scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly tells the agent when not to use this tool ('For a duration-only change without rotating credentials, use update_ttl instead') and states the Pro plan prerequisite. The behavior is described in a way that makes the use case self-evident.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
revoke_linkRevoke link credentialsADestructive
Immediately revoke the active secret code and capability token for a link while keeping owner access intact. The link stays protected, so the old share URL and secret stop working; no new credentials are minted. To open the link to everyone instead, use unprotect_link; to mint fresh credentials, use renew_link.
| Name | Required | Description | Default |
|---|---|---|---|
| label | Yes | Label of the link whose credentials should be revoked. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only carry destructiveHint=true, but the description enriches the behavioral picture: 'keeping owner access intact', 'link stays protected', 'old share URL and secret stop working', and 'no new credentials are minted.' This clarifies the exact scope and permanent effect of the mutation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with no filler: the first states the immediate action and its limits, the second states the outcome, and the third lists alternatives. The most important information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter mutation tool with no output schema, the description fully covers behavior, consequences, exclusions, and sibling alternatives. Nothing an agent needs to correctly select and invoke this tool is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single label parameter is already fully documented in the input schema with 100% coverage. The description adds no new parameter-specific syntax, but none is needed; schema coverage carries the load, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action: 'Immediately revoke the active secret code and capability token for a link' — identifying the verb, object, and effect. It also distinguishes itself from siblings by naming unprotect_link and renew_link as alternatives for different outcomes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly tells the agent when to use alternatives: 'To open the link to everyone instead, use unprotect_link; to mint fresh credentials, use renew_link.' This directly maps conditions to the correct sibling tool, leaving no ambiguity.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
serveServe file / dir / port -> public linkAIdempotent
Publish a local resource to a public HTTPS URL. Pass path to serve a file or directory (auto-hosted, no separate server needed), or port to expose an already-running dev server. Set residency to "remote" to publish the path to serve's storage so the URL works with the machine off. Do NOT start your own static file server; pass exactly one of path or port. Returns the public url, label, and residency, with label_kind and status for live links (or version, size_bytes, and kind for remote publishes); served_path and protection fields appear when set; usage comes along as context.
| Name | Required | Description | Default |
|---|---|---|---|
| ttl | No | Optional duration for the link protection (e.g. 24h, 3d, 7d). | |
| name | No | Optional requested subdomain; an existing local link is reused if omitted. | |
| path | No | Local file or directory to serve via an auto-hosted static server (mutually exclusive with port). | |
| port | No | Local port of an already-running server to expose (mutually exclusive with path). | |
| protect | No | Optional boolean; if true, enables capability token and secret code protection on the link. | |
| replace | No | When residency is remote and a published artifact occupies the requested name, true replaces the existing published artifact at that name (Pro); false returns a residency_conflict you must resolve with the user. | |
| residency | No | Residency of the served link. "local" (default) serves from the agent's machine (a tunnel); "remote" publishes the path to serve's storage so the URL stays live with the machine off. |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| url | Yes | |
| kind | No | |
| port | No | |
| label | Yes | |
| usage | Yes | |
| status | No | |
| version | No | |
| protected | No | |
| residency | Yes | |
| share_url | No | |
| expires_at | No | |
| label_kind | No | |
| size_bytes | No | |
| served_path | No | |
| recycled_from | No | |
| suffixed_from | No | |
| readable_secret | No | |
| replaced_tunnel | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish non-read-only and non-destructive behavior, but the description adds substantial behavioral context: auto-hosted serving, remote storage persistence, replace and conflict semantics, and protection token behavior. It also explains response-shape variations without contradicting the schema or annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is information-dense but organized: purpose first, then mode selection, then safety constraints, then response behavior. A few return-field details are redundant with the output schema, but the text remains front-loaded and economical given the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with seven optional parameters, the description covers all key decision axes: path vs port, local vs remote residency, protection, replacement conflicts, and the caution against starting a separate static server. With an output schema present, nothing essential for correctly invoking the tool is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description enriches the schema by explaining that path implies auto-hosting, port implies a pre-existing server, and remote residency publishes to serve's storage. It also clarifies replace's conflict behavior, which adds real meaning beyond the property names.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The opening sentence clearly states a specific verb and resource: publish a local resource to a public HTTPS URL. It further distinguishes the three target modes (file, directory, port) and the expected output, so an agent can tell this apart from sibling tunnel-management tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives concrete selection rules: pass path for a file/directory, port for an already-running dev server, and residency 'remote' for persistence with the machine off. It also includes a strong when-not instruction: 'Do NOT start your own static file server; pass exactly one of path or port.' It stops short of naming sibling tools as alternatives, so it misses the top bar for 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
serve_fileServe file / directory -> public linkAIdempotent
Serve a local file or directory and get a public shareable URL. Pass the file or directory path to path to have it auto-hosted and tunneled. Use this when the user asks to share/serve a file, markdown document, image, or artifact. Set residency to "remote" to publish to serve's storage so the URL works with the machine off. Do not start your own static server. To expose an already-running dev server by port instead, use the serve tool.
| Name | Required | Description | Default |
|---|---|---|---|
| ttl | No | Optional duration for the link protection (e.g. 24h, 3d, 7d). | |
| name | No | Optional requested subdomain; an existing local link is reused if omitted. | |
| path | Yes | Local file or directory to serve via an auto-hosted static server. | |
| protect | No | Optional boolean; if true, enables capability token and secret code protection on the link. | |
| replace | No | When residency is remote and a published artifact occupies the requested name, true replaces the existing published artifact at that name (Pro); false returns a residency_conflict you must resolve with the user. | |
| residency | No | Residency of the served link. "local" (default) serves from the agent's machine (a tunnel); "remote" publishes the path to serve's storage so the URL stays live with the machine off. |
Output Schema
| Name | Required | Description |
|---|---|---|
| ok | Yes | |
| url | Yes | |
| kind | No | |
| port | No | |
| label | Yes | |
| usage | Yes | |
| status | No | |
| version | No | |
| protected | No | |
| residency | Yes | |
| share_url | No | |
| expires_at | No | |
| label_kind | No | |
| size_bytes | No | |
| served_path | No | |
| recycled_from | No | |
| suffixed_from | No | |
| readable_secret | No | |
| replaced_tunnel | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds useful behavioral context beyond the annotations: it explains the file is 'auto-hosted and tunneled,' and that remote residency publishes to serve's storage so the URL works with the machine off. This complements the idempotentHint and destructiveHint annotations without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured and front-loaded with the core purpose, then adds usage guidance and the key alternative. It is slightly redundant—'Pass the file or directory path to path to have it auto-hosted and tunneled' largely repeats the opening—but overall it is concise and scannable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 6 parameters, an output schema, and several related siblings, the description covers the core use case, the key residency distinction, and the most important alternative tool. It does not enumerate every parameter or output detail, but the schema and output schema already cover those.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds some high-level meaning for 'path' and 'residency' but mostly restates what the schema already says; it does not add detail for ttl, name, protect, or replace beyond their schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource: 'Serve a local file or directory and get a public shareable URL.' It clearly distinguishes itself from the sibling 'serve' tool by stating that the sibling handles already-running dev servers by port.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use guidance: 'Use this when the user asks to share/serve a file, markdown document, image, or artifact.' It also provides a concrete alternative: 'To expose an already-running dev server by port instead, use the serve tool.' It even warns against starting a separate static server.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
stop_all_tunnelsStop all tunnelsADestructive
Stop every active tunnel, revoking all public URLs. To stop a single tunnel, use stop_tunnel instead.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already include destructiveHint=true, so the baseline bar is lower. The description adds meaningful context by specifying that the action affects every active tunnel and revokes public URLs, which goes beyond a generic destructive label.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no wasted words. The primary scoping statement comes first, followed by a useful pointer to the sibling tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no parameters, no output schema, and a destructiveHint annotation, the description fully covers the essential context: what the tool does, its scope, and the alternative for a narrower operation. Nothing critical is missing for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With zero parameters, the schema is fully covered and the description cannot add parameter-level detail. The baseline of 4 is appropriate because there is nothing missing for the agent to understand about inputs.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a precise verb and resource ('Stop every active tunnel') and clarifies the consequence ('revoking all public URLs'). It also distinguishes itself from the sibling tool stop_tunnel by explicitly naming the single-tunnel alternative.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit usage guidance by saying when to use this tool (to stop every tunnel) and when to use the alternative ('To stop a single tunnel, use stop_tunnel instead'). This leaves no ambiguity about tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
stop_remoteStop remote (unpublish)ADestructiveIdempotent
Unpublish a remote link, deleting its stored artifact bytes immediately and returning the link to local residency. Use links to see published (remote) links. To stop a live tunnel, use stop_tunnel instead; this tool only removes published bytes.
| Name | Required | Description | Default |
|---|---|---|---|
| label | Yes | Label of the published (remote) link to unpublish. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate destructiveHint and non-readOnly, and the description adds specific context about what is destroyed ('deleting its stored artifact bytes') and the effect ('returning to local residency'). This enriches understanding beyond the bare destructive flag.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and well-structured, conveying the action, effect, and disambiguation in two sentences without unnecessary verbosity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has no output schema, but the description covers the action, scope, and relationship to sibling tools (e.g., stop_tunnel). This is sufficient for an agent to understand when and how to use it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter 'label' is fully described in the schema with the same text as in the description. The description adds no additional semantic detail beyond the schema, so a baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's action: unpublish a remote link, delete stored artifact bytes, and return to local residency. It also distinguishes from stop_tunnel, leaving no ambiguity about the tool's purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use and when-not-to-use guidance: 'Use links to see published (remote) links' and 'To stop a live tunnel, use stop_tunnel instead; this tool only removes published bytes.' This enables correct tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
stop_tunnelStop tunnelADestructiveIdempotent
Stop (tear down) the tunnel for a local port or link label, revoking its public URL. Idempotent. To change a live tunnel's port or label, stop it here and then call serve again with the new settings; there is no in-place reconfiguration.
| Name | Required | Description | Default |
|---|---|---|---|
| port | No | Local port of the tunnel to stop. | |
| label | No | Link label of the tunnel to stop (alternative to port). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already include idempotentHint and destructiveHint, so the bar for additional disclosure is lower. The description adds useful behavioral context by explaining the public URL is revoked and that there is no in-place reconfiguration, which is valuable beyond what annotations express. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences with no fluff: it front-loads the action, consequence, and idempotency, then adds a single practical usage note about reconfiguration. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter, no-output-schema tool with strong annotations, the description covers the action, idempotency, effect on the URL, and reconfiguration workflow. The only minor gap is that both parameters are optional in the schema, while the description implies at least one must be provided; a short note on what happens if neither is given would make it fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides full descriptions for both parameters (port and label) at 100% coverage. The description only restates the schema's 'alternative to port' concept through 'for a local port or link label', which adds little beyond the schema. Baseline 3 is appropriate since the schema carries the parameter documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Stop (tear down)') and resource ('the tunnel for a local port or link label'), along with the key consequence of revoking its public URL. It clearly distinguishes this from sibling tools like stop_all_tunnels or stop_remote by scoping to a single tunnel. The idempotent note adds further precision.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit context for when to use this tool: to reconfigure a live tunnel, stop it here and then call serve with new settings. It positions this tool as the stopping step and names serve as the follow-up alternative. It does not explicitly mention when to prefer stop_all_tunnels over this tool, but the usage instruction is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tunnel_statusTunnel statusARead-only
Return the status of a single tunnel identified by its local port or its link label, including public URL, uptime, state, and last error. To see every active tunnel at once, use list_tunnels instead.
| Name | Required | Description | Default |
|---|---|---|---|
| port | No | Local port of the tunnel to inspect. | |
| label | No | Link label of the tunnel to inspect (alternative to port). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false, so the safety profile is covered. The description adds useful behavioral context by naming the output details (public URL, uptime, state, last error) and clarifying this tool only inspects a single tunnel, not the entire set.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no filler. The primary function and output are front-loaded in the first sentence, and the sibling guidance is compactly placed in the second. Every word contributes value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only tool with complete schema coverage and annotations, the description covers the core operation, output fields, and sibling differentiation. However, it does not explicitly state that port or label must be provided, and the schema lists no required parameters, leaving a small ambiguity for an agent calling with no arguments.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with clear definitions for port and label, so the baseline is 3. The description adds the relationship that these are alternative identifiers ('local port or its link label'), but it does not provide material meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Return'), names the resource ('a single tunnel'), and specifies its identifier ('local port or its link label'). It also lists the returned data fields, making the tool's function unambiguous and distinct from list_tunnels.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The second sentence explicitly tells the agent when to prefer a sibling tool: 'To see every active tunnel at once, use list_tunnels instead.' This directly states the condition for using the alternative, which is exactly the kind of guidance needed for correct tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
unprotect_linkUnprotect linkADestructive
Clear protection on an owned link, returning it to public access. Use this to open up a protected link so anyone with the URL can view it. To keep the link protected but invalidate its current credentials, use revoke_link; to free the label entirely (and fail while a remote artifact is still published), use release_link. Requires ownership of the link.
| Name | Required | Description | Default |
|---|---|---|---|
| label | Yes | Label of the link to unprotect. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description adds the security-relevant consequence ('anyone with the URL can view it') and the ownership requirement. It aligns with destructiveHint=true by identifying the protection state as what is cleared, giving useful context beyond the structured annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, with the core action first, a concrete use case second, and alternative routing and prerequisites last. Every sentence earns its place and there is no padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter mutation with annotations already marking it destructive and non-read-only, the description covers operation, use case, alternatives, and ownership requirement. No critical operational context is missing for an agent to select and invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides 100% coverage for the single required 'label' parameter with a clear description. The tool description adds no significant parameter semantics beyond restating that the label identifies the link, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and object: 'Clear protection on an owned link, returning it to public access.' This fully states what the tool does and distinguishes it from the sibling revoke/release operations by naming what they do instead.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says when to use this tool ('Use this to open up a protected link so anyone with the URL can view it') and differentiates against revoke_link and release_link with concrete conditions. It also states the ownership prerequisite, leaving no ambiguity about selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_ttlUpdate link TTLA
Change the protection duration (TTL) of an already-protected link (Pro plan required) without rotating its credentials. The link must currently be protected with an unexpired credential; expired protection must be renewed first with renew_link. The expiration is recalculated from the new duration, not extended from the previous expiry.
| Name | Required | Description | Default |
|---|---|---|---|
| ttl | Yes | New TTL duration (e.g. 48h, 7d). | |
| label | Yes | Label of the link. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes beyond the basic annotations by explaining the precondition, the non-rotation of credentials, and the exact recalculation semantics (new duration, not extended from previous expiry).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded, conveying the core action first and then adding necessary constraints and preconditions in only three sentences.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simple two-parameter input and no output schema, the description fully covers the necessary context: prerequisites, behavior, and an explicit alternative for expired protection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% for both required parameters, and the parameter descriptions are clear. The main description adds context for TTL behavior but does not significantly expand on the parameter-level semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific action: changing the TTL of an already-protected link, and distinguishes it from related operations by noting it does not rotate credentials and that expired protection must be renewed first.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly states when to use this tool (for protected links with unexpired credentials) and when not to (expired protection should use renew_link). It also mentions the Pro plan requirement.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
v0.8.9- Changed
protect_link2 fields changed- changed
Input schema / properties / label / descriptionPrevious value: -"Label of the link to protect (optional; defaults to first active link)."New value: +"Label of the link to protect (optional; defaults to the first owned link returned by links)." - changed
Input schema / properties / ttl / descriptionPrevious value: -"Optional duration (e.g. 24h, 3d, 7d)."New value: +"Optional protection duration (e.g. 24h, 3d, 7d); defaults to 24 hours."
- Changed
renew_link1 field changed- changed
Input schema / properties / ttl / descriptionPrevious value: -"Optional updated duration (e.g. 24h, 3d, 7d)."New value: +"Optional updated duration (e.g. 24h, 3d, 7d); defaults to 24 hours."
3 tool updates
v0.8.8- Changed
links1 field changed- changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": false, + "properties": { + "count": { + "type": "integer" + }, + "links": { + "items": { + "additionalProperties": false, + "properties": { + "artifact_kind": { + "type": "string" + }, + "credential_state": { + "type": "string" + }, + "expires_at": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "label": { + "type": "string" + }, + "last_bound_at": { + "type": "string" + }, + "last_viewer_at": { + "type": "string" + }, + "live": { + "type": "boolean" + }, + "protected": { + "type": "boolean" + }, + "protection_version": { + "type": "integer" + }, + "published_at": { + "type": "string" + }, + "quarantine_until": { + "type": "string" + }, + "residency": { + "type": "string" + }, + "size_bytes": { + "type": "integer" + }, + "stale": { + "type": "boolean" + }, + "ttl_hours": { + "type": [ + "null", + "integer" + ] + }, + "url": { + "type": "string" + }, + "version": { + "type": "integer" + } + }, + "required": [ + "label", + "kind", + "url", + "live", + "residency", + "stale", + "protected" + ], + "type": "object" + }, + "type": [ + "null", + "array" + ] + }, + "live_tunnels": { + "type": "integer" + }, + "max_tunnels": { + "type": "integer" + }, + "ok": { + "type": "boolean" + }, + "publish": { + "additionalProperties": false, + "properties": { + "day_limit": { + "type": "integer" + }, + "day_used": { + "type": "integer" + }, + "hour_limit": { + "type": "integer" + }, + "hour_used": { + "type": "integer" + } + }, + "required": [ + "hour_used", + "hour_limit", + "day_used", + "day_limit" + ], + "type": "object" + }, + "storage": { + "additionalProperties": false, + "properties": { + "limit_bytes": { + "type": "integer" + }, + "used_bytes": { + "type": "integer" + } + }, + "required": [ + "used_bytes", + "limit_bytes" + ], + "type": "object" + }, + "transfer": { + "additionalProperties": false, + "properties": { + "limit_bytes": { + "type": "integer" + }, + "reset_at": { + "type": "string" + }, + "used_bytes": { + "type": "integer" + } + }, + "required": [ + "used_bytes", + "limit_bytes" + ], + "type": "object" + } + }, + "required": [ + "ok", + "links", + "count", + "live_tunnels", + "max_tunnels" + ], + "type": "object" +}
- Changed
serve2 fields changed- changed
Input schema / properties / replace / descriptionPrevious value: -"When residency is remote and a published artifact occupies the requested name, true replaces it (deletes the old artifact); false returns a residency_conflict you must resolve with the user."New value: +"When residency is remote and a published artifact occupies the requested name, true replaces the existing published artifact at that name (Pro); false returns a residency_conflict you must resolve with the user." - changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": false, + "properties": { + "expires_at": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "label": { + "type": "string" + }, + "label_kind": { + "type": "string" + }, + "ok": { + "type": "boolean" + }, + "port": { + "type": "integer" + }, + "protected": { + "type": "boolean" + }, + "readable_secret": { + "type": "string" + }, + "recycled_from": { + "type": "string" + }, + "replaced_tunnel": { + "type": "boolean" + }, + "residency": { + "type": "string" + }, + "served_path": { + "type": "string" + }, + "share_url": { + "type": "string" + }, + "size_bytes": { + "type": "integer" + }, + "status": { + "type": "string" + }, + "suffixed_from": { + "type": "string" + }, + "url": { + "type": "string" + }, + "usage": { + "additionalProperties": false, + "properties": { + "links": { + "additionalProperties": false, + "properties": { + "owned": { + "type": "integer" + } + }, + "required": [ + "owned" + ], + "type": "object" + }, + "plan": { + "type": "string" + }, + "publish": { + "additionalProperties": false, + "properties": { + "day_limit": { + "type": "integer" + }, + "day_used": { + "type": "integer" + }, + "hour_limit": { + "type": "integer" + }, + "hour_used": { + "type": "integer" + } + }, + "required": [ + "hour_used", + "hour_limit", + "day_used", + "day_limit" + ], + "type": "object" + }, + "storage": { + "additionalProperties": false, + "properties": { + "limit_bytes": { + "type": "integer" + }, + "used_bytes": { + "type": "integer" + } + }, + "required": [ + "used_bytes", + "limit_bytes" + ], + "type": "object" + }, + "transfer": { + "additionalProperties": false, + "properties": { + "limit_bytes": { + "type": "integer" + }, + "reset_at": { + "type": "string" + }, + "used_bytes": { + "type": "integer" + } + }, + "required": [ + "used_bytes", + "limit_bytes" + ], + "type": "object" + }, + "tunnels": { + "additionalProperties": false, + "properties": { + "live": { + "type": "integer" + }, + "max": { + "type": "integer" + } + }, + "required": [ + "live", + "max" + ], + "type": "object" + } + }, + "required": [ + "plan", + "links", + "tunnels" + ], + "type": "object" + }, + "version": { + "type": "string" + } + }, + "required": [ + "ok", + "url", + "label", + "residency", + "usage" + ], + "type": "object" +}
- Changed
serve_file2 fields changed- changed
Input schema / properties / replace / descriptionPrevious value: -"When residency is remote and a published artifact occupies the requested name, true replaces it (deletes the old artifact); false returns a residency_conflict you must resolve with the user."New value: +"When residency is remote and a published artifact occupies the requested name, true replaces the existing published artifact at that name (Pro); false returns a residency_conflict you must resolve with the user." - changed
Output schema / (root)Previous value: -nullNew value: +{ + "additionalProperties": false, + "properties": { + "expires_at": { + "type": "string" + }, + "kind": { + "type": "string" + }, + "label": { + "type": "string" + }, + "label_kind": { + "type": "string" + }, + "ok": { + "type": "boolean" + }, + "port": { + "type": "integer" + }, + "protected": { + "type": "boolean" + }, + "readable_secret": { + "type": "string" + }, + "recycled_from": { + "type": "string" + }, + "replaced_tunnel": { + "type": "boolean" + }, + "residency": { + "type": "string" + }, + "served_path": { + "type": "string" + }, + "share_url": { + "type": "string" + }, + "size_bytes": { + "type": "integer" + }, + "status": { + "type": "string" + }, + "suffixed_from": { + "type": "string" + }, + "url": { + "type": "string" + }, + "usage": { + "additionalProperties": false, + "properties": { + "links": { + "additionalProperties": false, + "properties": { + "owned": { + "type": "integer" + } + }, + "required": [ + "owned" + ], + "type": "object" + }, + "plan": { + "type": "string" + }, + "publish": { + "additionalProperties": false, + "properties": { + "day_limit": { + "type": "integer" + }, + "day_used": { + "type": "integer" + }, + "hour_limit": { + "type": "integer" + }, + "hour_used": { + "type": "integer" + } + }, + "required": [ + "hour_used", + "hour_limit", + "day_used", + "day_limit" + ], + "type": "object" + }, + "storage": { + "additionalProperties": false, + "properties": { + "limit_bytes": { + "type": "integer" + }, + "used_bytes": { + "type": "integer" + } + }, + "required": [ + "used_bytes", + "limit_bytes" + ], + "type": "object" + }, + "transfer": { + "additionalProperties": false, + "properties": { + "limit_bytes": { + "type": "integer" + }, + "reset_at": { + "type": "string" + }, + "used_bytes": { + "type": "integer" + } + }, + "required": [ + "used_bytes", + "limit_bytes" + ], + "type": "object" + }, + "tunnels": { + "additionalProperties": false, + "properties": { + "live": { + "type": "integer" + }, + "max": { + "type": "integer" + } + }, + "required": [ + "live", + "max" + ], + "type": "object" + } + }, + "required": [ + "plan", + "links", + "tunnels" + ], + "type": "object" + }, + "version": { + "type": "string" + } + }, + "required": [ + "ok", + "url", + "label", + "residency", + "usage" + ], + "type": "object" +}
17 tool updates
v0.8.6- First observed
account_status - First observed
create_viewer_grant - First observed
doctor - First observed
links - First observed
list_tunnels - First observed
protect_link - First observed
release_link - First observed
renew_link - First observed
revoke_link - First observed
serve - First observed
serve_file - First observed
stop_all_tunnels - First observed
stop_remote - First observed
stop_tunnel - First observed
tunnel_status - First observed
unprotect_link - First observed
update_ttl
TDQS
Scored across 17 tools
The toolset is mostly clear: serve, protect_link, renew_link, revoke_link, unprotect_link, stop_tunnel, and stop_remote each target distinct actions. However, serve and serve_file overlap heavily—both publish local files/directories to public URLs—creating real selection ambiguity without careful reading.
Most tools follow a clear verb_noun pattern like protect_link, renew_link, stop_tunnel, and update_ttl. Deviations such as bare serve, plural links, and noun doctor break the pattern slightly but are still readable and predictable overall.
17 tools cover serving, tunneling, remote publishing, protection, diagnostics, and account status, which is slightly heavy but mostly justified by the lifecycle operations. The redundant serve_file adds padding, but the overall count is within a reasonable scope.
The surface covers link lifecycle, protection rotation/revocation unprotection, tunnel management, remote publishing, account status, and diagnostics with no obvious dead ends. Cross-references between tools fill gaps, and core workflows like serve, protect, renew, revoke, stop, and release are all present.
Maintenance
Related MCP Connectors
- RunCabinOAuthcom.runcabin
Put websites online from chat - instant free HTTPS, real domains, zero DNS or API-key setup.
Get share links, publish and manage websites, artifacts and agents. No account needed.
Deploy HTML or dist/ to a live HTTPS URL. No account. Drop, MCP, or CLI.
Publish HTML, Markdown, PDF, or images as instant shareable links with expiry and passwords.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceA simple MCP server that allows accessing and executing shell commands on a VM machine through a web-based terminal interface, with automatic tunneling to make the VM accessible from anywhere.94 npm5MIT
- AlicenseAqualityCmaintenancePublish live web pages from AI coding agents. Instant shareable URLs for dashboards, landing pages, and reports with password protection.41MIT
- AlicenseAqualityBmaintenanceInstant web hosting for AI agents. Publish a live site in one call, no account needed.5MIT
- AlicenseAqualityDmaintenanceAgent-native hosting: your agent deploys any folder to a live URL in one command — no account, no dashboard, no CAPTCHA — and hands the human a link plus a plain-language summary. Full deploy lifecycle as MCP tools (deploy, verify, logs, inspect, rollback), production approval human-only; static sites and full Node.js apps, open source (Apache-2.0).13Apache 2.0