Skip to main content
Glama
Sign In
Fida

Fida

by ajipurn
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Rust
Local

fida_shell

Run commands through a policy that gates execution and redacts secrets from output, keeping credentials hidden from AI agents.

Instructions

Run a command through Fida policy (commands.run). Use this instead of native shell execution or non-Fida MCP shell tools so the policy can gate the command. Stdout/stderr are returned with secrets redacted.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "command": "<command>"
    },
    "name": "fida_shell"
  }
}

Input Schema

NameRequiredDescriptionDefault
cwdNoWorking directory; defaults to the workspace root.
commandYesCommand line; split on whitespace into argv.

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv0.1.6

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description must disclose behaviors. It reveals that stdout/stderr are returned with secrets redacted, which is useful. However, it omits other important behaviors like error handling, exit codes, policy blocking details, or permission requirements. The description adds some value but is not comprehensive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three concise sentences with no wasted words. The first sentence states the core function, the second provides usage guidance, and the third describes output. Information is front-loaded and efficiently structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple tool with only two parameters and no output schema, the description covers the main purpose, usage context, and return format (stdout/stderr with redacted secrets). It is missing details on error behavior and exit codes, but these are less critical. Overall, it provides sufficient context for an agent to use the tool effectively.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already explains both parameters (command and cwd). The description does not add any additional semantic information about the parameters beyond what the schema provides, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the tool runs a command through Fida policy and distinguishes it from native shell or non-Fida MCP tools. The verb 'run' and resource 'command through Fida policy' are specific, and it differentiates from the sibling fida_read.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly tells when to use this tool (instead of native shell or non-Fida MCP shell tools) and why (so policy can gate the command). Provides clear guidance on alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server

Other Tools