Skip to main content
Glama

MCP SSH Server

A fork of mixelpixx/SSH-MCP by Chris Stockslager, used under the MIT license. Most of this codebase is his original work — see Credits and Attribution and NOTICE.md.

A Model Context Protocol (MCP) server that provides comprehensive SSH and serial console access to remote servers and network devices. Enables AI tools like Claude Desktop to securely manage Linux servers, network switches, and infrastructure devices through both network SSH connections and direct USB-to-Serial console access.

Features

Core SSH Capabilities

  • SSH connection management with password or key-based authentication

  • Remote command execution with timeout handling

  • File upload and download via SFTP

  • Directory listing and file operations

  • Secure connection handling

Network Device Management

  • USB-to-Serial Console Access - Direct console connections via FTDI and other USB adapters

  • Network Switch Management - Full support for Cisco IOS/IOS-XE and Aruba switches

  • Device Discovery - Automatic detection of switch types and capabilities

  • Configuration Management - Backup, restore, and automated configuration

  • Network Diagnostics - Built-in ping, traceroute, and connectivity testing

  • Console-to-SSH Transition - Automated SSH setup via console connection

  • Firmware Management - Upload, verify, install, and rollback switch firmware

Server Management

  • Ubuntu server management tools (Nginx, SSL, packages, firewall)

  • Compatible with Claude Desktop, VS Code, and other MCP-compatible clients

Related MCP server: SSH MCP Server

Real-World Production Testing

This tool has been extensively tested in production network environments:

  • Network Discovery - Successfully discovered previously unknown fluttering ports on production switches that were causing intermittent connectivity issues

  • Zero Downtime - Managed multiple switches in live production networks without causing any network disruptions or outages

  • Time Savings - Automated SSH configuration reduced switch setup time from 15-20 minutes to under 2 minutes

  • Reliability - Zero incidents during production deployments across multiple network devices

  • USB-to-Serial Compatibility - Tested with FTDI FT232R/FT232H, Prolific PL2303, Silicon Labs CP2102/CP2104, and CH340 adapters

  • Switch Compatibility - Validated on Cisco Catalyst 2960/3560/3750 and Aruba 2530/2930 series switches

The tool has proven itself reliable enough for production network management tasks without requiring a separate lab environment for testing.

Prerequisites

  • Node.js 18 or higher

  • npm or yarn

  • Compatible with Windows, macOS, and Linux

Installation

  1. Clone the repository:

    git clone https://github.com/yourusername/mcp-ssh-server.git
    cd mcp-ssh-server
  2. Install dependencies:

    npm install
  3. Build the project:

    npm run build
  4. Install globally (optional):

    npm install -g .

Configuration

Claude Desktop Configuration

  1. Open Claude Desktop

  2. Go to Settings > Developer (or press Ctrl+Shift+D)

  3. Edit the MCP configuration

  4. Add the following configuration:

{
  "mcpServers": {
    "ssh-server": {
      "command": "node",
      "args": ["/path/to/mcp-ssh-server/build/index.js"],
      "env": {
        "NODE_NO_WARNINGS": "1"
      }
    }
  }
}

Important: Replace /path/to/mcp-ssh-server/build/index.js with the absolute path to your built index.js file.

VS Code Configuration (if using MCP extension)

Create or edit .vscode/mcp.json in your workspace:

{
  "mcpServers": {
    "ssh-server": {
      "command": "node",
      "args": ["/path/to/mcp-ssh-server/build/index.js"]
    }
  }
}

Available Tools

Core SSH Tools

ssh_connect

Establish an SSH connection to a remote server.

Parameters:

  • host (required) - Hostname or IP address

  • username (required) - SSH username

  • password (optional) - SSH password

  • privateKeyPath (optional) - Path to private key file

  • passphrase (optional) - Passphrase for private key

  • port (optional) - SSH port (default: 22)

  • connectionId (optional) - Unique identifier for this connection

Returns:

  • success - Boolean indicating success

  • connectionId - ID to use for subsequent commands

  • message - Connection status message

Example:

Connect to my server at example.com using username 'admin' and password authentication

ssh_exec

Execute a command on the remote server.

Parameters:

  • connectionId (required) - ID from ssh_connect

  • command (required) - Command to execute

  • cwd (optional) - Working directory

  • timeout (optional) - Command timeout in milliseconds (default: 60000)

Returns:

  • code - Exit code

  • signal - Signal that terminated the process (if any)

  • stdout - Standard output

  • stderr - Standard error

Example:

Run "ls -la /var/www/html" on the server

ssh_upload_file

Upload a file to the remote server.

Parameters:

  • connectionId (required) - ID from ssh_connect

  • localPath (required) - Local file path

  • remotePath (required) - Remote destination path

Returns:

  • success - Boolean indicating success

  • message - Upload status message

ssh_download_file

Download a file from the remote server.

Parameters:

  • connectionId (required) - ID from ssh_connect

  • remotePath (required) - Remote file path

  • localPath (required) - Local destination path

Returns:

  • success - Boolean indicating success

  • message - Download status message

ssh_list_files

List files in a directory on the remote server.

Parameters:

  • connectionId (required) - ID from ssh_connect

  • remotePath (required) - Directory path to list

Returns:

  • files - Array of file objects with properties:

    • filename - File name

    • isDirectory - Boolean indicating if it's a directory

    • size - File size

    • lastModified - Last modification time

ssh_disconnect

Close an SSH connection.

Parameters:

  • connectionId (required) - ID from ssh_connect

Returns:

  • success - Boolean indicating success

  • message - Disconnection status message

Usage Examples with Claude

  1. Connect to your server:

    Please connect to my VPS at example.com using username 'admin' and my SSH key at ~/.ssh/id_rsa
  2. Check server status:

    Run the command "systemctl status nginx" to check web server status
  3. Upload a website file:

    Upload my local file ~/websites/index.html to /var/www/html/index.html on the server
  4. List website files:

    Show me all files in the /var/www/html directory
  5. Download a backup:

    Download the file /var/backups/website-backup.tar.gz to my local Downloads folder
  6. Disconnect when done:

    Please disconnect from the SSH session

Network Switch Management Tools

switch_discover_device

Discover and identify network switch device type and capabilities.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • enablePassword (optional) - Enable password for privileged mode

switch_show_interfaces

Show interface status and configuration on network switch.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • interfaceType (optional) - Type of interfaces to show

  • enablePassword (optional) - Enable password for privileged mode

switch_show_vlans

Show VLAN configuration and status on network switch.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • enablePassword (optional) - Enable password for privileged mode

switch_backup_config

Backup switch configuration (running or startup config).

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • configType (optional) - Type of configuration to backup

  • enablePassword (optional) - Enable password for privileged mode

switch_network_diagnostics

Run network diagnostics from switch (ping, traceroute).

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • target (required) - Target IP address or hostname

  • diagnosticType (optional) - Type of diagnostic to run

  • enablePassword (optional) - Enable password for privileged mode

switch_show_mac_table

Show MAC address table on network switch.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • vlan (optional) - Specific VLAN to show MAC addresses for

  • enablePassword (optional) - Enable password for privileged mode

USB-to-Serial Console Tools

These tools enable direct console access to network devices using USB-to-Serial adapters. This is essential for initial device setup, emergency access when network connectivity is lost, or when SSH has not yet been configured.

Supported USB-to-Serial Adapters:

  • FTDI FT232R/FT232H (recommended - most reliable)

  • Prolific PL2303 (widely compatible)

  • Silicon Labs CP2102/CP2104 (good performance)

  • CH340/CH341 chipsets (budget-friendly option)

All adapters work with standard Cisco/Aruba console cables (RJ45 to DB9 or direct USB).

serial_list_ports

List available USB-to-Serial ports on the system. Automatically detects FTDI, Prolific, Silicon Labs, and CH340 adapters.

Example:

Show me all available serial ports

serial_connect

Connect to a network device via USB-to-Serial console port.

Parameters:

  • port (required) - Serial port name (e.g., COM3 on Windows, /dev/ttyUSB0 on Linux)

  • baudRate (optional) - Baud rate (default: 9600 for most switches)

  • connectionId (optional) - Unique identifier for connection

  • deviceType (optional) - Device type for optimal settings (cisco, aruba, generic)

Example:

Connect to my Cisco switch console on COM3

serial_send_command

Send a command to network device via serial connection.

Parameters:

  • connectionId (required) - ID of an active serial connection

  • command (required) - Command to send to device

  • waitForResponse (optional) - Wait for device response

  • timeout (optional) - Response timeout in milliseconds

Example:

Send "show version" command to the console connection

serial_discover_device

Discover device type and capabilities via serial connection. Automatically identifies Cisco IOS, Cisco IOS-XE, Aruba, and generic devices.

Parameters:

  • connectionId (required) - ID of an active serial connection

Example:

Discover what type of device is connected

serial_list_connections

List all active serial connections.

serial_disconnect

Disconnect from a serial port.

Parameters:

  • connectionId (required) - ID of an active serial connection

Ubuntu Website Management Tools

The following Ubuntu server management tools are available:

  • ubuntu_nginx_control - Web server control (start, stop, restart, status, reload, check-config)

  • ubuntu_update_packages - System package updates with security-only option

  • ubuntu_ssl_certificate - SSL certificate management using Let's Encrypt (issue, renew, status, list)

  • ubuntu_website_deployment - Website deployment with automatic backup and restore

  • ubuntu_ufw_firewall - Firewall (UFW) management (enable, disable, allow, deny, delete)

SSH Setup & Automation Tools

These tools automate the process of configuring SSH access on network switches via console connection, enabling a smooth transition from console-only to SSH-based management.

switch_generate_ssh_config

Generate SSH configuration template for a network switch based on device type and security level.

Parameters:

  • deviceType (optional) - Device type: cisco, aruba (auto-detected if not specified)

  • securityLevel (optional) - Security level: basic, secure (default: basic)

  • hostname (required) - Switch hostname

  • ip_address (required) - Management IP address

  • subnet_mask (optional) - Subnet mask (default: 255.255.255.0)

  • gateway (required) - Default gateway

  • username (required) - SSH username

  • password (required) - SSH password

switch_apply_ssh_config

Apply SSH configuration to a switch via an active serial console connection.

Parameters:

  • serialConnectionId (required) - ID of an active serial connection

  • deviceType (optional) - Device type: cisco, aruba

  • hostname (required) - Switch hostname

  • ip_address (required) - Management IP address

  • gateway (required) - Default gateway

  • username (required) - SSH username

  • password (required) - SSH password

  • confirmApply (required) - Must be true to proceed

switch_verify_ssh_status

Check the current SSH configuration status on a switch via serial connection.

Parameters:

  • serialConnectionId (required) - ID of an active serial connection

switch_test_ssh_connection

Test SSH connectivity to a newly configured switch.

Parameters:

  • ip_address (required) - Switch IP address

  • username (required) - SSH username

  • password (required) - SSH password

  • port (optional) - SSH port (default: 22)

switch_complete_ssh_setup

Complete end-to-end SSH setup workflow via console connection. This automates the entire process of configuring SSH on a switch.

Parameters:

  • serialConnectionId (required) - ID of an active serial connection

  • hostname (required) - Switch hostname

  • ip_address (required) - Management IP address

  • gateway (required) - Default gateway

  • username (required) - SSH username

  • password (required) - SSH password

  • confirmSetup (required) - Must be true to proceed

Console-to-SSH Transition Tools

console_to_ssh_transition

Complete automated workflow to transition a network switch from console-only access to SSH management. This is the recommended tool for initial switch setup.

Parameters:

  • port (required) - Serial port (e.g., COM3, /dev/ttyUSB0)

  • hostname (required) - Switch hostname

  • ip_address (required) - Management IP address

  • gateway (required) - Default gateway

  • username (required) - SSH username

  • password (required) - SSH password

  • deviceType (optional) - Device type: cisco, aruba (auto-detected if not specified)

  • confirmTransition (required) - Must be true to proceed

Example:

Set up SSH on my Cisco switch connected to COM3 with hostname "switch-core-01", IP 192.168.1.10, gateway 192.168.1.1, username "admin"

quick_ssh_check

Quick check of SSH status on a switch via serial connection without making any changes.

Parameters:

  • port (required) - Serial port

  • baudRate (optional) - Baud rate (default: 9600)

  • enablePassword (optional) - Enable password if required

Firmware Management Tools

These tools provide comprehensive firmware management capabilities for network switches, including version checking, firmware upload, verification, installation, and rollback preparation.

switch_check_firmware

Check the current firmware version and system information on a network switch.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • enablePassword (optional) - Enable password for privileged mode

Returns:

  • Current firmware version

  • Boot version

  • Device model and serial number

  • System uptime

  • Full version output

switch_check_storage

Verify available storage space on the switch before firmware upload.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • enablePassword (optional) - Enable password for privileged mode

Returns:

  • Flash storage information

  • Available space

  • File system details

switch_upload_firmware

Upload a firmware file to the network switch via SFTP. Supports large firmware files with 30-minute timeout.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • localFirmwarePath (required) - Local path to firmware file

  • remotePath (optional) - Remote path on switch (default: flash:/filename)

  • enablePassword (optional) - Enable password for privileged mode

Example:

Upload firmware file ~/downloads/c2960-lanbasek9-mz.150-2.SE11.bin to the switch

switch_verify_firmware

Verify the integrity of an uploaded firmware file on the switch using MD5 checksums.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • firmwarePath (required) - Path to firmware file on switch

  • enablePassword (optional) - Enable password for privileged mode

Returns:

  • Verification status

  • MD5 checksum results

  • File information

switch_install_firmware

Install firmware on the switch and optionally reboot to apply the update.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • firmwarePath (required) - Path to firmware file on switch

  • enablePassword (optional) - Enable password for privileged mode

  • autoReboot (optional) - Automatically reboot after installation (default: false)

Important: This modifies the boot configuration. Test in a lab environment first!

Example:

Install firmware flash:/c2960-lanbasek9-mz.150-2.SE11.bin and reboot the switch

switch_prepare_rollback

Prepare information needed for firmware rollback in case of issues with new firmware.

Parameters:

  • connectionId (required) - ID of an active SSH connection

  • enablePassword (optional) - Enable password for privileged mode

Returns:

  • Current boot configuration

  • Available firmware images

  • Rollback instructions

USB-to-Serial Console Setup

Hardware Requirements

USB-to-Serial Adapters:

  • FTDI-based adapters (FT232R, FT232H) - Best choice for reliability

  • Prolific PL2303 - Widely available and compatible

  • Silicon Labs CP2102/CP2104 - Good performance and stability

  • CH340/CH341 - Budget option, works well on most systems

Console Cables:

  • Cisco console cable (RJ45 to DB9 or USB)

  • Aruba/HP console cable (RJ45 to DB9 or USB)

  • Universal console cables work with most devices

Driver Installation

Windows:

  • FTDI drivers: Usually auto-installed, or download from ftdichip.com

  • Prolific drivers: Available from prolific.com.tw

  • Silicon Labs drivers: Download from silabs.com

  • CH340 drivers: Usually included in Windows 10/11, or download separately

macOS:

  • FTDI adapters: Usually work out-of-the-box

  • Other adapters: May require driver installation from manufacturer

Linux:

  • Most adapters work immediately with kernel drivers

  • FTDI, Silicon Labs, CH340: Built into kernel

  • Check dmesg after plugging in adapter to verify detection

Quick Start with Console

  1. Connect USB-to-Serial adapter to your computer

  2. Connect console cable from adapter to switch console port

  3. List available ports: "Show me available serial ports"

  4. Connect to port: "Connect to COM3 for Cisco switch"

  5. Send commands or run automated setup

Security Notes

  • Store SSH private keys securely

  • Use key-based authentication when possible

  • Limit SSH access to specific IP addresses

  • Keep your server updated

  • Use strong passwords or passphrases (minimum 8 characters)

  • Secure physical access to console ports and USB-to-Serial adapters

  • Consider setting up environment variables in a .env file for sensitive information

Troubleshooting

Server won't start

  • Check that Node.js is installed: node --version

  • Verify all dependencies are installed: npm install

  • Rebuild the project: npm run build

Connection issues

  • Verify SSH server is running on the target

  • Check firewall settings

  • Confirm credentials are correct

  • Test SSH connection manually first

Claude Desktop integration

  • Ensure the path in configuration is absolute

  • Restart Claude Desktop after configuration changes

  • Check Developer Console for error messages

Development

To modify or extend the server:

  1. Edit source files in src/

  2. Rebuild: npm run build

  3. Test your changes

  4. Restart Claude Desktop or VS Code to pick up changes

Running in Development Mode

For quick testing during development:

npm run dev

Contributing

Contributions for additional tools and features are welcome. Please feel free to submit pull requests or open issues for enhancements and bug fixes.

Credits and Attribution

This project is a fork of mixelpixx/SSH-MCP by Chris Stockslager (@mixelpixx), used and redistributed under its MIT license. The core MCP server, SSH/SFTP tooling, USB-to-Serial console support, network switch management, and the accompanying guides are his original work.

Upstream additionally received a contribution from Frank Fiegel (@punkpeye).

The upstream project is deprecated; its author's successor is SSH-Connect, a Rust rewrite.

This fork adds SSH config (~/.ssh/config) host-alias resolution, a command guard layer, and a refactor of the core SSH tools. Full upstream commit history is preserved here, so git log and git blame show exactly which code came from where.

See NOTICE.md for the complete provenance record.

License

MIT License — see LICENSE.

Copyright (c) 2025-2026 Chris Stockslager (mixelpixx) — original work Copyright (c) 2026 Mihir Bhadak — modifications in this fork

Available Tools

13 tools
ssh_connectA

Connect to a remote server via SSH. Pass profile or host with a Host alias from ~/.ssh/config, or provide host/username/key directly.

ParametersJSON Schema
NameRequiredDescriptionDefault
hostNoHostname, IP, or Host alias from ~/.ssh/config
portNoSSH port (default: 22)
profileNoHost alias from ~/.ssh/config (e.g. Beta, Main, Cron). Case-insensitive.
passwordNoSSH password (if not using key-based authentication)
usernameNoSSH username
passphraseNoPassphrase for private key (if needed)
connectionIdNoUnique identifier for this connection (defaults to profile name or ssh-<timestamp>)
privateKeyPathNoPath to private key file (if using key-based authentication)

TDQS

A3.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description is the sole source of behavioral info. It describes authentication options but omits side effects (creating a persistent connection), failure conditions (unreachable host, bad credentials), or return value (connectionId). This significant gap is not covered elsewhere.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The two-sentence description is tight: first sentence states purpose, second covers principal usage patterns. No redundant text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the 8-parameter schema and no output schema, the description only partially captures the tool's behavior. It doesn't explain the return value (connectionId defaulting), when the connection is established (e.g., persistent session), or how to use it with sibling tools. The rich schema descriptions compensate for parameter semantics, but behavioral completeness is lacking.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 100% coverage, so the baseline is 3. The description adds a key clarification: you can pass either a profile or a Host alias, or provide host/username/key directly, which helps disambiguate which parameters to use together. This adds value beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool connects to a remote server via SSH and specifies the supported ways to specify the target (profile, host alias, or direct host/username/key). This distinguishes it from sibling tools like ssh_exec, ssh_list_connections, and file transfer tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains how to provide connection information (via profile, host alias, or direct host/username/key) but does not explicitly discuss when to use this tool versus alternatives such as ssh_exec (which requires an existing connection) or ssh_list_connections. The usage is implied by the tool name and sibling context but not stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_disconnectB

Close an SSH connection

ParametersJSON Schema
NameRequiredDescriptionDefault
connectionIdYesID of an active SSH connection

TDQS

B3.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must fully disclose behavior. It states the action but does not mention consequences like terminating active sessions, idempotency, or permission requirements, which is a gap for a state-changing operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single concise sentence with no unnecessary words. It is perfectly sized for a simple tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with one parameter and no output schema, the description is largely sufficient. However, the lack of annotations and behavioral context about what happens when disconnecting (e.g., killing active processes) leaves minor ambiguity, making it adequate but not exemplary.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema fully documents the single parameter connectionId with a clear description, and schema description coverage is 100%. The tool description adds no additional meaning beyond what the schema already provides, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'Close' and resource 'SSH connection', making the action unambiguous. It clearly distinguishes from sibling tools like ssh_connect and ssh_list_connections.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not provide any guidance on when to use this tool, such as after completing operations or when needing to terminate a connection. It offers no exclusions or alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_download_fileB

Download a file from the remote server to a local path

ParametersJSON Schema
NameRequiredDescriptionDefault
localPathYesPath where the file should be saved locally
remotePathYesPath to the file on the remote server
connectionIdYesID of an active SSH connection

TDQS

B3.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It only states the basic operation and provides no details about overwrite behavior, permission requirements, binary safety, or connection prerequisites. Significant behavioral gaps remain.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, clear sentence with no wasted words. It is front-loaded with the core action and resource.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a simple tool but lacks behavioral details such as overwrite handling, connection requirement, and success/failure indicators. No output schema or annotations exist, so the description should provide more context to be fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so each parameter is documented. The description adds no extra parameter context beyond the schema, which serves as the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific action (download) with source (remote server) and destination (local path). It distinguishes itself from siblings like ssh_upload_file (opposite direction) and ssh_read_file (reading vs transferring).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies the tool is for copying files from remote to local, but it does not explicitly state when to prefer this over ssh_read_file or other alternatives. Context is clear but no exclusions or alternative references are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_execA

Execute a read-only or safe command on the remote server. Destructive commands are blocked (rm, mv, chmod, systemctl, kill, firewall tools, SQL DROP/DELETE/ALTER/TRUNCATE, and similar). Use ssh_read_file to read files instead of cat.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNoWorking directory for the command
commandYesCommand to execute
timeoutNoCommand timeout in milliseconds
connectionIdYesID of an active SSH connection

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Since no annotations are provided, the description carries the full burden of behavioral disclosure. It discloses that destructive commands are blocked with examples, which is key safety behavior. However, it does not specify what happens when a blocked command is attempted (e.g., error returned) or whether the command output is returned. This is a minor gap given the absence of annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise, two sentences long, and front-loaded with the primary purpose. Every sentence earns its place: the first defines the scope, the second lists blocked commands and provides an alternative for file reads. No redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has no output schema, so the description should ideally explain what is returned (e.g., stdout/stderr, exit code). It does not. While it covers safety and usage, it omits return-value behavior, which is a notable gap for a command execution tool. The completeness is adequate but not thorough.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, with each parameter having a description in the input schema. The description adds no new parameter-specific semantics beyond what the schema already provides. The mention of 'Use ssh_read_file to read files instead of cat' relates to command usage but not to parameter details, so the score remains at the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Execute a read-only or safe command on the remote server.' It distinguishes itself from siblings by explicitly mentioning ssh_read_file for reading files and provides a concrete list of blocked commands, making the purpose specific and unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit usage context: it is for safe commands, destructive commands are blocked, and it names an alternative tool (ssh_read_file) with the directive 'Use ssh_read_file to read files instead of cat.' This clearly tells the agent when to use this tool versus a sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_list_connectionsA

List active SSH connections and Host entries from ~/.ssh/config. Call this when the user mentions a server by name (e.g. "beta server") to find the right connectionId.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden of behavioral disclosure. It does reveal that the tool reads from ~/.ssh/config and lists both active connections and Host entries, which is useful context. However, it does not explicitly state whether the operation is read-only, how 'active' is determined, or what happens if the config file is missing. This is adequate but not rich.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is exactly two sentences, front-loaded with the primary action, and provides a practical usage example. Every word earns its place; there is no fluff or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (no parameters, no annotations, no output schema), the description is fairly complete. It explains what the tool lists, the source, and when to invoke it. The mention of 'find the right connectionId' hints at the output's purpose. It could additionally describe the output format, but for this simple tool, the coverage is strong.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the baseline for this dimension is 4 per the rubric. The description adds no parameter explanation because none is needed. It does provide context about what the output is used for (finding the right connectionId), which indirectly clarifies the purpose of any returned data.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'List active SSH connections and Host entries from ~/.ssh/config'. It uses a specific verb ('List'), identifies the resource (SSH connections and Host entries), and provides the source file. This distinguishes it from sibling tools like ssh_connect or ssh_exec, which perform actions rather than listing.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly tells when to use the tool: 'Call this when the user mentions a server by name (e.g. "beta server") to find the right connectionId.' This is clear contextual guidance, though it does not mention when not to use it or name alternatives. Since the task is simple and the trigger condition is well-defined, this is sufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_list_filesB

List files in a directory on the remote server

ParametersJSON Schema
NameRequiredDescriptionDefault
remotePathYesPath to the directory on the remote server
connectionIdYesID of an active SSH connection

TDQS

B3.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must carry the behavioral disclosure burden. It only states the action without revealing details like whether it lists recursively, includes file metadata, or how errors are handled. For a read operation, this is a notable gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, tightly-worded sentence. It is concise, front-loaded, and free of unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no annotations and no output schema, the description should disclose what the tool returns (e.g., list of filenames, full paths, metadata) and any limitations. It does not. For a simple tool it is usable, but it leaves meaningful gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage, so baseline is 3. The description does not add meaning beyond the schema—both remotePath and connectionId are adequately defined in the schema already.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'List files in a directory on the remote server' with a specific verb and resource. It distinguishes itself from siblings like ssh_read_file and ssh_download_file by focusing on listing directory contents.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage (when you need to list remote directory contents) but does not explicitly mention alternatives or exclusions. Since there are sibling tools, more explicit guidance would be better, but the basic context is present.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_read_fileA

Read and return the contents of a file on a remote server. Use this when the user asks to explain, analyze, review, or show a file from a server. Requires an active SSH connection.

ParametersJSON Schema
NameRequiredDescriptionDefault
maxBytesNoMaximum bytes to read (default: 1048576)
remotePathYesAbsolute path to the file on the remote server
connectionIdYesHost alias from ~/.ssh/config (e.g. "Beta") or an active connection ID

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses the read-only nature implicitly and the active connection requirement, but it doesn't mention potential truncation due to maxBytes, permission errors, or what happens if the file is missing. This is a minimal but not comprehensive disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise: two sentences that front-load the purpose and immediately provide usage context. Every word earns its place with no fluff or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple 3-parameter read tool with no output schema, the description covers purpose, usage, and a prerequisite. It omits return-format details and error behavior, but given the tool's simplicity and full schema coverage, it is sufficiently complete for an agent to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds no additional parameter-level detail beyond what the schema already provides, so no extra credit is warranted.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Read and return the contents of a file on a remote server.' It uses a specific verb and resource, and differentiates from siblings by explicitly mentioning use cases like 'explain, analyze, review, or show a file' versus downloading.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides explicit guidance with 'Use this when the user asks to explain, analyze, review, or show a file from a server' and notes a prerequisite ('Requires an active SSH connection'). However, it doesn't explicitly mention alternatives or when not to use it, which would earn a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ssh_upload_fileB

Upload a file to the remote server

ParametersJSON Schema
NameRequiredDescriptionDefault
localPathYesPath to the local file
remotePathYesPath where the file should be saved on the remote server
connectionIdYesID of an active SSH connection

TDQS

B3.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It does not state whether the upload overwrites existing files, requires an active connection, or has any side effects on the remote server. The description is too terse to convey these important behaviors.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no wasted words. It is appropriately front-loaded, stating the core action immediately, and is easily parsed by an agent.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple file upload tool with fully described parameters, the description is minimally viable. However, it lacks behavioral context such as overwrite policy, required connection state, and any error conditions, which could affect an agent's invocation. The absence of an output schema means description should clarify return values, but it does not.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides 100% coverage with clear descriptions for all three parameters (localPath, remotePath, connectionId). The description adds no additional parameter semantics beyond what the schema already states, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Upload'), the object ('a file'), and the destination ('remote server'), which is specific and distinguishes this tool from siblings like ssh_download_file and ssh_read_file. The verb-resource pairing is unambiguous and matches the tool's name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives such as ssh_download_file or ssh_exec. It also does not mention prerequisites like having an active SSH connection, though the schema hints at this via connectionId.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ubuntu_nginx_controlC

Control Nginx web server on Ubuntu

ParametersJSON Schema
NameRequiredDescriptionDefault
sudoNoWhether to run the command with sudo (default: true)
actionYesAction to perform (start, stop, restart, status, reload, check-config)
connectionIdYesID of an active SSH connection

TDQS

C2.4/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of disclosing behavioral traits. It only states 'Control Nginx web server on Ubuntu' without mentioning that actions like start, stop, or reload mutate system state, that sudo is likely involved, or what the output/return value looks like. This is inadequate for a service-control tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single short sentence with no wasted words, and the key resource ('Nginx') is front-loaded. However, it is so sparse that it sacrifices informative value, though that is not purely a conciseness issue. It could benefit from listing the actions, but as written it is structurally efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and no annotations, the description does not explain the operational context: it doesn't mention that it uses an SSH connection, that some actions are destructive, or how results are returned. Given the sibling tools, an agent might infer the domain, but the description alone is insufficient for confident invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%: each parameter is described, including the allowed actions for the 'action' parameter. The tool description adds no extra semantic meaning beyond what the schema already provides, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the vague verb 'Control' but identifies a specific resource: 'Nginx web server on Ubuntu'. It doesn't enumerate the specific operations (start, stop, reload, etc.), making the purpose broad. It is distinguishable from sibling tools like ssh_exec because it targets Nginx specifically, but the verb lacks precision.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives such as ssh_exec or other ubuntu_* tools. There is no mention of prerequisites (e.g., Nginx installed, active SSH connection) or scenarios where this tool is preferred. Usage is only implied by the tool's name and the presence of sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ubuntu_ssl_certificateC

Manage SSL certificates using Let's Encrypt on Ubuntu

ParametersJSON Schema
NameRequiredDescriptionDefault
sudoNoWhether to run the command with sudo (default: true)
emailNoEmail address for Let's Encrypt notifications (required for issue)
actionYesAction to perform (issue, renew, status, list)
domainNoDomain name for the certificate (required for issue and renew)
webrootNoWeb root path for domain verification (default: /var/www/html)
connectionIdYesID of an active SSH connection

TDQS

C2.6/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must disclose behavioral traits. It doesn't mention that this tool modifies the server's certificate store, requires root/sudo, or makes network requests to Let's Encrypt. The vague verb 'Manage' gives no safety or side-effect information.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one short sentence, making it concise and front-loaded. However, it is so generic that it borders on under-specification, repeating the tool's name without meaningful value. It earns a middle score for brevity but lacks substance.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema and no annotations, the description is the only narrative source for expected behavior. It doesn't explain return values, error conditions, or effects on the system. The schema helps with parameters, but the description is insufficient for a tool that can issue and renew certificates.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema documents all six parameters with descriptions (100% coverage), so parameter semantics are already provided programmatically. The description adds no additional meaning beyond what the schema contains.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description identifies the resource (Let's Encrypt SSL certificates on Ubuntu) and implies management operations, but the verb 'Manage' is broad and doesn't specify concrete actions like issue, renew, status, or list. It is clear enough to distinguish from sibling tools (which handle SSH, nginx, firewall), but lacks precision for a high score.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool instead of alternatives like ubuntu_nginx_control or ssh_exec. It doesn't mention prerequisites (e.g., domain DNS pointing to server, HTTP server running for webroot validation) or exclude any cases.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ubuntu_ufw_firewallC

Manage Ubuntu Uncomplicated Firewall (UFW)

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoSource IP address or network
portNoPort number or service name (e.g., 80, 443, ssh, http)
sudoNoWhether to run the command with sudo (default: true)
actionYesAction to perform (enable, disable, status, allow, deny, delete, reset)
protocolNoProtocol (tcp, udp)
connectionIdYesID of an active SSH connection

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations to rely on, the description fails to disclose important behavioral traits: actions are mutating and high-risk (e.g., deny could lock out the SSH session), sudo may be required (though a sudo parameter exists), and firewall state changes persist. The word 'manage' does not convey the potential for disruption.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no filler. It efficiently communicates the tool's general purpose, though it is minimal. It earns its place without being verbose, but could be slightly more informative without sacrificing concision.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (multiple actions, unclear safety implications, no output schema, no annotations), the description is far from complete. It lacks guidance on rule syntax, what 'delete' or 'reset' entails, and any warnings. The schema covers parameters but not operational context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description adds no parameter meaning, but the schema provides comprehensive descriptions for all 6 properties (100% coverage). The action field enumerates possible values, and port/protocol descriptions are clear, so the description's lack of parameter detail is not a major gap.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the resource (Ubuntu UFW) and a managing action. It distinguishes from siblings like ssh_exec or nginx_control, though 'manage' is somewhat broad. The schema's action parameter grounds the specific operations, making the purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives like ssh_exec, nor does it note prerequisites such as an active SSH connection (connectionId required). It neither mentions when to use it nor when not to, leaving the agent without decision context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ubuntu_update_packagesC

Update system packages on Ubuntu

ParametersJSON Schema
NameRequiredDescriptionDefault
sudoNoWhether to run the command with sudo (default: true)
upgradeNoWhether to upgrade packages after update (default: true)
autoremoveNoWhether to remove unused packages after update (default: false)
connectionIdYesID of an active SSH connection
securityOnlyNoWhether to update only security packages (default: false)

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure. It states 'update system packages' but does not explain that this likely runs apt-get update/upgrade, may require sudo, or could modify the system and reboot services. Side effects are undisclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no wasted words. However, it is extremely brief and omits useful context that could be included without bloating the text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 5 parameters, no output schema, and no annotations, the description is under-specified. It does not explain what 'update' entails, the role of connectionId, or what the tool returns (e.g., command output). The schema provides parameter details, but overall context is lacking.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides descriptions for 100% of the 5 parameters, including sudo, upgrade, autoremove, connectionId, and securityOnly. The description adds no additional parameter semantics beyond what the schema already conveys, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear action ('Update') and resource ('system packages') with a platform qualifier ('on Ubuntu'). It distinguishes itself from sibling tools like nginx_control or ssh_exec, though it relies on the name for full distinction.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided about when to use this tool versus alternatives such as ssh_exec for running apt commands manually. There is no mention of prerequisites, context, or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ubuntu_website_deploymentC

Deploy website files and create backups on Ubuntu

ParametersJSON Schema
NameRequiredDescriptionDefault
sudoNoWhether to run the command with sudo (default: true)
actionYesAction to perform (deploy, backup, restore)
localPathNoLocal path to the website files for deployment
backupPathNoPath to store backups (default: /var/backups/websites)
remotePathNoRemote path where the website is located (default: /var/www/html)
connectionIdYesID of an active SSH connection
createBackupNoWhether to create a backup before deployment (default: true)

TDQS

C2.4/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

There are no annotations, so the description carries full responsibility for disclosing behavioral traits. It fails to mention that the tool may overwrite remote files, run with sudo, require an active connection, or that 'restore' modifies existing site state. It also does not explain the backup behavior or implications of the 'createBackup' default. This is a significant transparency gap for a tool with mutating actions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no fluff, but it is under-specified for a tool with 7 parameters and 3 distinct actions. It is concise in the sense of being short, but it omits required function details, so it is not appropriately sized for the tool's complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (7 parameters, 3 actions, no output schema, no annotations), the description is severely incomplete. It only mentions deploy and backup, omits restore, connection requirements, default paths, and behavior. An agent would have to rely on parameter descriptions alone to understand how to use this tool effectively.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so every parameter already has a description. The tool description adds minimal extra meaning by mentioning 'deploy' and 'backups', which loosely maps to the action and createBackup parameters, but it does not clarify the meaning of 'restore' or the roles of path parameters. Baseline 3 is appropriate because the schema already does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear verb and resource: 'Deploy website files and create backups on Ubuntu'. This differentiates it from generic SSH file tools, though it omits the 'restore' action available in the schema. The name and description together make the tool's primary purpose evident.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given for when to use this tool vs. alternatives like ssh_upload_file, ssh_exec, or other ubuntu_* tools. There are no prerequisites mentioned (e.g., active SSH connection) or exclusions, leaving the agent to infer usage from the name alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 13 tool updatesv1.0.0
    • First observedssh_connect
    • First observedssh_disconnect
    • First observedssh_download_file
    • First observedssh_exec
    • First observedssh_list_connections
    • First observedssh_list_files
    • First observedssh_read_file
    • First observedssh_upload_file
    • First observedubuntu_nginx_control
    • First observedubuntu_ssl_certificate
    • First observedubuntu_ufw_firewall
    • First observedubuntu_update_packages
    • First observedubuntu_website_deployment

TDQS

B3.2/5.0

Scored across 13 tools

Disambiguation5/5

Each tool targets a distinct operation: connection management, file transfer, file reading, command execution, and specific Ubuntu admin tasks. The descriptions clearly differentiate between reading a file and executing a command, and between downloading and reading.

Naming Consistency2/5

General SSH tools follow a consistent ssh_verb_noun pattern (e.g., ssh_list_files, ssh_upload_file), but Ubuntu tools mix patterns: some are noun_verb (ubuntu_nginx_control) and others are noun phrases without a verb (ubuntu_ssl_certificate, ubuntu_website_deployment). This creates two inconsistent naming conventions within the same server.

Tool Count5/5

13 tools is well within the ideal range, covering both core SSH operations and a reasonable set of Ubuntu server management tasks without being overwhelming.

Completeness4/5

The SSH operations cover connect/disconnect, file transfer, file listing/reading, and safe command execution, which is quite complete. The Ubuntu tools cover common web server management tasks (Nginx, SSL, deployment, firewall, updates), though a few extras like user management or service restart could be missing but are not critical gaps.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    D
    maintenance
    Enables secure SSH connections to multiple remote servers with support for command execution, file transfers (SFTP), directory listing, and both password and key-based authentication.
    7
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Enables remote server management through SSH and SFTP, supporting command execution, file transfers, and interactive shell sessions. It allows for multiple concurrent connections using either password or SSH key authentication.
    11
    9 npm
    4
    MIT
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables remote shell control of Linux and network devices via SSH/Telnet, with session management and file transfer capabilities.
    -
  • F
    license
    Not graded
    quality
    C
    maintenance
    Enables remote server management via SSH, including command execution, file transfer (SFTP), and interactive shell sessions, with support for multiple hosts.
    -