mcp-metsuke-crunchtools
OfficialMetsuke is a stateful, SQLite-backed catalog MCP server that stores report definitions and their gathered outputs, firing scheduled or on-demand gathers and letting agents read cited findings back for compiling reports.
Manage definitions —
upsert_definitioncreates/updates a report (gather prompt, owner agent, cron schedule, timezone, source config);list_reportslists them all;get_specreturns one's prompt + source config for the gatherer.Fire gathers —
trigger_reportfires a gather immediately (dispatches the Trentina alert callback); the built-in scheduler also fires each report when its cron comes due under SSE/streamable-http transports.Save findings —
save_outputpersists a run's payload (each finding ideally carrying its ownsource_url), completing the exact in-flight run viarun_id, or an ad-hoc direct save.Read findings —
get_outputreturns the freshest (or a given day's) output for compiling;get_sweepreads a swept run's pre-gathered records (index or paged sections).Browse history cheaply —
list_outputsreturns one lightweight metadata row per saved gather withfinding_count, no payloads.Prune —
delete_outputremoves one output by id;prune_outputsbulk-prunes by keep-last-N or before-date.Sweep configs — definitions can declare deterministic pre-gather steps using the
slack_waiting,gmail_waiting,calendar_day,feed_entries, andjira_issuescollectors (option-validated at upsert time), so the gathering LLM only selects, phrases, and delivers.Run lifecycle — durable second-granularity
run_ids, a provisional row before the callback so no fire is lost, and a per-report concurrency lock with TTL that self-heals dead gatherers.Operate flexibly — env vars for DB path, alert/gateway URLs and tokens (with secret-file variants), sweep timeout, scheduler poll/enable, and pull-owners; local-first SQLite (WAL), no external services, deployable via uvx, pip, or container, over stdio/SSE/streamable-http.
Gathers inbox threads via the [gmail](/mcp/servers/integrations/gmail)_waiting sweep collector — pulls messages within a reporting window from a configured mailbox/backend, applies ownership analysis to surface only threads where the ball is in the user's court, drops automated mail and bare calendar notices while keeping invitations, and records each thread with a Gmail deep link for citation.
Gathers recent feed entries via the feed_entries sweep collector, reading a configurable set of feed categories (with per-category limits and a widened lookback after weekends) and storing the entries as compact, citable findings for the gatherer to select and phrase.
Gathers Slack DMs and @-mentions via the slack_waiting sweep collector — reads up to three pages per thread or DM, drops answered conversations, marks the rest waiting or acknowledged (reaction-only), flags unverified/long threads, and separates new in-window asks from still-open ones, with a configurable workspace URL.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@mcp-metsuke-crunchtoolspull the freshest output for the 'weekly vuln scan' report"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
mcp-metsuke-crunchtools
Stateful reports catalog MCP server. Metsuke (目付 — the Sengoku intelligence officer who gathered field reports and compiled them for the daimyō) is the durable, cross-agent home for report definitions and their gathered outputs.
An autonomous gatherer reads a definition, sweeps the configured sources, and writes findings — each carrying its own source URL. A compiler later reads the freshest output to draft a fully cited report. This replaces ad-hoc, run-scoped research caches with a real, queryable store.
Features
Definitions + outputs — separate what-to-gather from what-was-gathered
Built-in scheduler — Metsuke fires each definition's gather when its cron schedule comes due, or on demand via
trigger_report— no external timerRun lifecycle — every fire opens a durable run with a second-granularity
run_id: a provisional row is recorded before the callback (a fire is never lost), and a per-report concurrency lock keeps two gathers from racingCited findings — payloads carry per-finding source URLs for one-click checking
Re-homeable gathering —
owner_agentmakes the gatherer identity data, not codeLocal-first — plain SQLite (WAL), no external services, no per-seat fees
Three transports — stdio, SSE, streamable-http
Related MCP server: Argon Memory
Install
uvx (recommended)
uvx mcp-metsuke-crunchtoolspip
pip install mcp-metsuke-crunchtoolsContainer
podman run --rm -v ~/.local/share/mcp-metsuke:/data:Z \
quay.io/crunchtools/mcp-metsuke \
--transport streamable-http --host 0.0.0.0 --port 8009Claude Code Integration
claude mcp add mcp-metsuke-crunchtools -- uvx mcp-metsuke-crunchtoolsTools (10)
Definitions (4)
Tool | Description |
| List all report definitions in the catalog, each with its next scheduled fire time. |
| Return the gather prompt + source config for one definition. |
| Create or update a definition (name, prompt, owner, cron schedule, timezone, sources). |
| Fire a report gather right now, without waiting for its schedule. For a swept definition it returns at once with |
Outputs (6)
Tool | Description |
| Complete a run by persisting its gathered findings (pass the |
| Read the freshest output (or a specific day's) for compiling a report. |
| Browse the run history — metadata + |
| Delete one saved output by id. |
| Bulk-prune a report's outputs — keep the N newest, or drop those before a date. |
| Read a swept run's pre-gathered records: the index, or one page of one section. |
Environment Variables
Variable | Default | Description |
|
| SQLite database path |
| (none) | Path whose contents override |
| (none) | Base URL of the Trentina gateway; the scheduler POSTs gather callbacks to |
| (none) | Alert token identifying the reports profile; enables the scheduler when set with |
| (none) | Path whose contents override |
| (none) | Comma-separated owners that collect their own runs: their reports are opened and swept on schedule but get no callback. Also enables the scheduler |
| (none) | Trentina gateway MCP endpoint for the sweep profile, e.g. |
| (none) | Bearer token for that profile; |
|
| Upper bound on one run's sweep |
|
| How often the scheduler checks for due reports |
| (auto) | Force the scheduler on/off; defaults to on when the callback is configured |
|
| How long an in-flight run holds the per-report lock before it is expired (self-heals a dead gatherer) |
The scheduler runs only under the sse and streamable-http transports (the long-lived production processes), never under stdio.
Data Model
report_definitions —
name(PK),gather_prompt,owner_agent,schedule(cron),timezone(IANA),source_config(JSON),last_fired_at,updated_atreport_outputs (one row per run) —
id,report_name(FK),run_id(second-granularity identity),trigger(scheduled/manual/direct),gathered_at,finished_at,window_start/window_end,payload(JSON findings with source URLs),status(gathering/ready/compiled/failed),gatherer_run_ref,detail. A partial unique index on(report_name) WHERE status='gathering'is the per-report concurrency lock.
MCP Registry
io.github.crunchtools/metsuke
License
AGPL-3.0-or-later
Sweeps
A definition can opt into a deterministic pre-gather by adding sweep to its
source_config:
{"sweep": {"timezone": "America/New_York", "window_hour": 6, "steps": [
{"section": "slack", "collector": "slack_waiting",
"options": {"user_id": "U9VN3S1ST", "handle": "smccarty"}},
{"section": "work_email", "collector": "gmail_waiting",
"options": {"backend": "gw-work", "account": "smccarty@redhat.com"}},
{"section": "calendar", "collector": "calendar_day",
"options": {"backend": "gw-work", "account": "smccarty@redhat.com"}},
{"section": "rss", "collector": "feed_entries",
"options": {"categories": {"1": 20, "5": 20}}}]}}On fire, Metsuke runs each step in order through the Trentina gateway (as its
own read-only profile), stores the results on the run, then dispatches the
callback with sweep_status. The gatherer reads records with get_sweep
instead of calling the sources, so the gathering LLM only selects, phrases and
delivers. A failing step is recorded and the sweep continues. Results Trentina
flags are stored as metadata only, with their text withheld.
Collector | What it produces |
| Direct asks over a lookback: an @-mention, or a DM message that reads as a question or request (DM chatter and Slack system notices are not asks). Threads are read as threads; DMs and top-level channel mentions are read from channel history (one conversation per channel). Each is read for up to three pages (longer or partly unreadable ones are marked |
| Inbox threads in the window (or |
| The report day's meetings, pending invites over a lookahead, and hard overlaps |
| Recent entries per feed category (read or unread), with a longer window after a weekend |
| Issues matching each named JQL query, with |
Collector options
Every step is {"section": "<name>", "collector": "<collector>", "options": {...}}.
Section names are [a-z0-9_-], unique, up to 12 steps. Top-level timezone
(IANA, default America/New_York) and window_hour (0-23, default 6) set the
window: from that hour on the previous weekday until the run.
Collector | Option | Required | Default | Bounds |
|
| yes | 2-32 chars | |
| yes | 1-64 chars | ||
|
| ≤64 chars | ||
|
| ≤64 chars | ||
| none | 1-64 chars; in group DMs and channels, a question or request that addresses the user by this name is an ask | ||
| 7 | 1-30 | ||
| 40 | 1-100 | ||
|
| ≤200 chars | ||
|
| yes | e.g. | |
| yes | the mailbox address | ||
|
| ≤500 chars, appended to | ||
| 60 | 1-200 | ||
| 1200 | 0-4000 (0 = no body) | ||
| Gmail | ≤200 chars, or null | ||
| report window | 1-30, search the last N days instead | ||
| 0 | 0-168, drop threads active more recently | ||
|
| ≤20 From-header substrings (1-100 chars, case-insensitive) | ||
|
| yes | ||
| yes | |||
|
| IANA zone | ||
| 3 | 0-14 (pending invites) | ||
|
| yes | 1-12 entries of | |
|
| |||
| 1 | 1-30 | ||
| 3 | 1-30 (Mondays and weekend runs) | ||
|
| yes | 1-6 of | |
|
| ≤64 chars; needs | ||
|
| ≤200 chars, prefixed to the issue key | ||
| 800 | 0-2000 (0 = no form detail line) |
Collectors are code in sweep/collectors.py, not configuration: a definition
can only pick and parameterize them. A bad spec is rejected at
upsert_definition time.
Available Tools
10 toolsdelete_output_toolDelete Output ToolA
Delete one saved report output by id.
Returns the deleted output's metadata (with deleted=True). Find ids with list_outputs_tool. Raises if no output carries that id.
| Name | Required | Description | Default |
|---|---|---|---|
| output_id | Yes | The id of the output to delete (from list_outputs_tool) |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It does disclose the error case ('raises if no output carries that id') and that the response echoes the deleted object with deleted=True, but for a destructive operation it says nothing about irreversibility, permissions, or whether deletion is soft or hard.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the action and scope, then return behavior, then id discovery, then the failure case. No filler and nothing buried.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so the return-value sentence is supplementary rather than required, and the id source and error behavior are covered. The remaining gap is behavioral: nothing tells the agent whether a delete is recoverable, which matters for an irreversible mutation with no annotations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Only one parameter exists and schema description coverage is 100%, with the schema already noting the id comes from list_outputs_tool. The description repeats that source but adds no new syntax, format, or range meaning, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (delete) and resource (saved report output) with explicit scope ('one ... by id'), which cleanly separates it from the bulk-deleting sibling prune_outputs_tool. It also names list_outputs_tool as the id source, so an agent can distinguish it from the get/save output tools without opening a schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives clear operational context: ids come from list_outputs_tool, and the tool deletes exactly one output. However it never states when to prefer this over the sibling prune_outputs_tool, nor any prerequisite or exclusion, so the alternative-selection guidance is incomplete.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_output_toolGet Output ToolARead-only
Read a gathered report output for compiling a report.
Returns the most recent output by default, or the latest output gathered on a specific date when gathered_date is given.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | The report definition name | |
| gathered_date | No | Optional YYYY-MM-DD to fetch that day's output instead |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
readOnlyHint=true already tells the agent this is a safe read. The description adds genuinely useful behavior: default returns the most recent output, and gathered_date scopes to a specific day. It stops short of describing error behavior when no output exists or pagination/format details, but with annotations covering the safety profile this is adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the core action and then the retrieval-mode distinction. No filler, though 'for compiling a report' is slightly redundant with the noun 'report output'.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be explained, and both parameters are fully documented in the schema. The only gap is guidance on alternatives among the many sibling output/report tools.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both parameters carry their own descriptions, including the YYYY-MM-DD format hint. The description restates the date-filtering semantics but adds no syntax or edge-case meaning beyond the schema, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (read) and resource (gathered report output) clearly, and the report-definition name parameter anchors it. It distinguishes reasonably from save_output_tool and list_outputs_tool, though it doesn't explicitly name siblings or contrast scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage ('for compiling a report') and clarifies default vs. date-specific retrieval, but never says when to pick this over list_outputs_tool or get_spec_tool. No exclusions or prerequisites are given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_spec_toolGet Spec ToolARead-only
Return the gather spec (prompt + source config) for a report definition.
This is what the autonomous gatherer calls on callback to learn what to collect for the named report.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | The report definition name (e.g. "core-platform-status") |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so safety is covered. The description contributes useful context that the payload is a prompt plus source config consumed by an automated gatherer on callback, but says nothing about staleness, permissions, or failure behavior for a missing report name.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with the primary action front-loaded and no filler; every clause (what is returned, who calls it and when) earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With an output schema present, return values need not be spelled out, and the description explains the tool's role in the callback workflow. It is nearly complete for a one-param read tool, with only the lack of sibling differentiation as a residual gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single 'name' parameter is documented with an example, so the schema carries the burden. The description only reinforces that the spec is keyed by the named report, adding no format or naming-convention detail beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Return the gather spec') and unpacks the return value into its two components (prompt + source config), which is more than the name conveys. It does not explicitly differentiate itself from lookalike getters such as get_sweep_tool or get_output_tool, so it falls short of a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The second sentence gives a real usage context: it is what the autonomous gatherer calls on callback for a named report. However, it offers no when-not guidance and never contrasts itself with the sibling getters, leaving the agent to infer the boundary.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_sweep_toolGet Sweep ToolARead-only
Read the pre-gathered sweep for a run.
Swept reports are gathered by Metsuke before the gatherer is called: fixed source calls, reply-state checks and noise filters run in code, and the results are stored on the run as sections of compact records. Call with no section for the index (window, overall status, per-section record counts and errors), then page through each section you need.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | 1-based page of records within the section | |
| run_id | No | The run from the callback (preferred) | |
| section | No | A section name from the index; omit for the index itself | |
| page_size | No | Records per page (max 50) | |
| report_name | No | Alternatively, use this report's newest swept run |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations only declare readOnlyHint, so the description usefully adds that sweeps are pre-gathered before the gatherer runs and that data is stored as sections of compact records, including what the index contains. It omits auth/permission needs and any rate or size caveats beyond the schema's page_size max.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loads the core action in the first sentence and follows with just enough mechanism and call-order detail. The gatherer/Metsuke framing is somewhat jargon-heavy but earns its place by explaining where the data comes from.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With an output schema present, return values need not be documented, yet the description still tells the agent what the index yields and how to page. Read-only, no required params, and 100% schema coverage make this nearly self-sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description reinforces the section/index relationship and pagination flow, but the run_id-vs-report_name selection and page defaults are left to the schema, adding little beyond it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: read the pre-gathered sweep for a run. The concept is clearly distinct from the listed siblings (output/report/definition tools), though it never explicitly names an alternative to contrast against, so it falls just short of 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives concrete call-order guidance: call with no section to get the index, then page through each section needed. That is clear usage context, but there are no explicit when-not conditions or named alternatives for choosing between run_id and report_name.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_outputs_toolList Outputs ToolARead-only
List saved report outputs (the run history), newest first.
Returns one lightweight row per saved gather — id, report_name, gathered_at, reporting window, status, and a finding_count — but NOT the payloads, so the full history stays cheap to browse. Use get_output_tool to pull one run's findings, and delete_output_tool / prune_outputs_tool to prune.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max rows to return, newest first (default 50, max 500) | |
| report_name | No | Optional report to filter to; None lists across all reports |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, so safety is covered. The description goes further by describing the shape of results (one lightweight row per gather: id, report_name, gathered_at, window, status, finding_count) and, importantly, that payloads are NOT returned, which explains why the call is cheap. It does not discuss limits/pagination behavior beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences, front-loaded with the core action and ordering, followed by the return shape and the routing alternatives. Every sentence earns its place with no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Output schema exists so return fields need no full enumeration, and annotations cover the read-only profile. The description completes the picture by explaining payload omission and sibling routing, leaving nothing an agent needs to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with both limit and report_name fully documented including defaults and max. The description adds no parameter detail, so the schema does the heavy lifting — baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (List) and resource (saved report outputs / run history) plus ordering (newest first). It clearly distinguishes itself from get_output_tool (single run) and delete/prune_outputs_tool (pruning), so an agent can route without opening schemas.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly names the alternatives and the conditions that select them: use get_output_tool to pull one run's findings, delete_output_tool/prune_outputs_tool to prune. The browse-vs-fetch tradeoff is spelled out rather than implied.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_reports_toolList Reports ToolARead-only
List all report definitions in the catalog.
Returns each definition with its gather prompt, owner agent, schedule, source config, and last-updated time.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
readOnlyHint=true already tells the agent this is a safe read. The description adds the returned field set, which is mildly useful, but discloses nothing about pagination, ordering, rate limits, or result size. With annotations covering the safety profile, a 3 is appropriate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the core action and followed by the return detail. No filler sentences, though the return-field enumeration is somewhat redundant given an output schema exists.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter list tool with readOnlyHint and an output schema already present, the description covers what an agent needs to select and call it. The only minor gap is absent guidance on empty results or result-size behavior, which the output schema does not address.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so the schema baseline is 4. Description adds no param info because there is none to add, and that is correct here.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('List all report definitions in the catalog') and enumerates the returned fields. It is clearly distinguishable from siblings like list_outputs_tool or get_spec_tool, though it never explicitly names that distinction.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The scoping phrase 'all report definitions in the catalog' implies a browse/list use case, but there is no explicit when-to-use, when-not-to-use, or alternative routing guidance versus siblings such as list_outputs_tool or get_spec_tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
prune_outputs_toolPrune Outputs ToolA
Bulk-prune a report's saved outputs. Returns the count and ids deleted.
Give exactly one criterion: keep_last retains the N most recent outputs and deletes the rest (keep_last=0 deletes them all); before_date deletes every output gathered strictly before that date.
| Name | Required | Description | Default |
|---|---|---|---|
| keep_last | No | Retain this many newest outputs, delete older ones | |
| before_date | No | Delete outputs gathered before this date (YYYY-MM-DD) | |
| report_name | Yes | The report whose outputs to prune |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden. It discloses that outputs are deleted, that keep_last=0 deletes all, and that it returns count and ids, but it does not state whether deletion is irreversible or what permissions are required.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short and front-loaded: purpose and return value first, then criterion semantics. Every sentence adds useful information without repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The schema fully documents parameters, an output schema exists, and the description explains the pruning criteria and return summary. The main remaining gap is behavioral safety context such as irreversibility and permissions, which matters because no annotations are provided.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds important meaning beyond the schema. It clarifies the exactly-one-criterion constraint and explains the special keep_last=0 case and the strict 'before' behavior of before_date.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: bulk-prune a report's saved outputs. The word 'bulk' helps distinguish it from a single-output deletion tool, though it does not explicitly name delete_output_tool as the alternative.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It clearly instructs that exactly one criterion must be given and explains how to choose between keep_last and before_date. It does not explicitly compare this tool with delete_output_tool or list_outputs_tool, but the usage context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
save_output_toolSave Output ToolA
Persist a gathered report output, completing the run that opened it.
The gatherer writes findings here after sweeping the sources. Each finding in payload should carry its own source URL so the compiler can cite it. Pass the run_id Metsuke handed you in the fire callback so this completes that exact in-flight run (one row per fire). Omit run_id for an ad-hoc direct save; Metsuke stamps a fresh run identity either way.
| Name | Required | Description | Default |
|---|---|---|---|
| run_id | No | The run to complete (from the fire callback); None = direct save | |
| status | No | One of "gathering", "ready", "compiled", "failed" (default: "ready") | ready |
| payload | Yes | List of findings. Each needs a non-empty summary and should carry its source_url; see Finding for the other allowed keys | |
| window_end | No | End of the reporting window (ISO date/datetime) | |
| report_name | Yes | The report definition this output belongs to | |
| window_start | No | Start of the reporting window (ISO date/datetime) | |
| gatherer_run_ref | No | Opaque reference to the gatherer run that produced this |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are supplied, so the description carries the full behavioral burden, and it discharges most of it: it discloses run-completion semantics, the one-row-per-fire cardinality, and that Metsuke stamps a run identity even on ad-hoc saves. It does not cover failure behavior or what happens when run_id refers to an already-completed run.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four short sentences, front-loaded with the primary effect (persist and complete the run), then the payload convention, then the run_id branch. Every sentence adds operational information; nothing is padding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with no annotations, the description covers the essentials, and an output schema exists so return values need no explanation. The main residual gap is error/edge-case behavior (invalid run_id, duplicate fires), which a writer would still want stated.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3, but the description adds real meaning: it explains where run_id comes from (the fire callback), what omitting it does, and that payload findings should each carry source_url so the compiler can cite them.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Persist a gathered report output') and adds the consequential nuance that it 'completes the run that opened it.' This distinguishes it from read-side siblings like get_output_tool and list_outputs_tool, which cannot complete a run.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly covers the two invocation modes: pass run_id from the fire callback to complete an in-flight run, or omit it for an ad-hoc direct save. It also states the triggering context ('after sweeping the sources'). It stops short of naming sibling tools (e.g. upsert_definition_tool, get_output_tool) as alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
trigger_report_toolTrigger Report ToolA
Fire a report gather right now, without waiting for its schedule.
Dispatches the same callback the scheduler uses: Metsuke POSTs the trigger to the Trentina alert endpoint, which forwards it to the owning gatherer. Requires the callback to be configured (TRENTINA_ALERT_URL + METSUKE_ALERT_TOKEN), unless the owner is a pull owner (METSUKE_PULL_OWNERS): then the run is opened and left for the owner.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | The report definition name to fire (e.g. "core-platform-status") |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does so well: it discloses the dispatch mechanism (POST to Trentina alert endpoint forwarded to the owning gatherer), required env config (TRENTINA_ALERT_URL + METSUKE_ALERT_TOKEN), and the pull-owner branch behavior (run opened and left for owner). These are real side-effect and prerequisite details beyond the schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The core purpose is front-loaded in the first sentence and the follow-up detail (mechanism, prerequisites, pull-owner case) is genuinely useful rather than filler. Slightly dense but every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be explained, and the description covers purpose, prerequisites, and the alternate pull-owner execution path. An agent has everything needed to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single 'name' param is already documented with an example, so the schema does the heavy lifting. The description adds no syntax or semantics beyond it, making 3 the appropriate baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Fire a report gather') and the distinguishing condition ('right now, without waiting for its schedule'), which separates it from scheduling/spec/definition siblings like upsert_definition_tool and get_sweep_tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'right now, without waiting for its schedule' clause clearly situates when to use it versus the normal scheduled path, and it states the configuration prerequisite. It stops short of naming a sibling alternative, so not a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
upsert_definition_toolUpsert Definition ToolB
Create or update a report definition.
The owner_agent field makes the gatherer identity data, not code, so gathering can be re-homed to another agent without a rebuild. The schedule is a live cron expression: Metsuke's built-in scheduler fires the report when it comes due, in the given timezone.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Unique report name (e.g. "core-platform-status") | |
| schedule | No | Cron expression for when to fire (e.g. "0 6 * * 5"); None = manual only | |
| timezone | No | IANA timezone the schedule runs in (default: "UTC") | UTC |
| owner_agent | No | Which agent gathers this report (default: "kagetora") | kagetora |
| gather_prompt | Yes | The instruction the gatherer runs to collect findings | |
| source_config | No | Which sources to sweep, as a JSON object |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full disclosure burden. It does add real behavioral context beyond the schema: owner_agent is data not code (so gathering can be re-homed without a rebuild) and schedule is a live cron that the built-in scheduler acts on. It is silent on the mutation semantics that matter most for an upsert — whether an existing definition is merged or overwritten, and what a name collision does.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tight sentences with the action front-loaded and no filler. The owner_agent rationale sentence is longer than strictly necessary but does earn its place by justifying the field's design.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists so return values need no explanation, and the schema fully covers parameters. But for a 6-parameter mutation tool with zero annotations, the description omits the upsert contract: whether omitted optional fields (schedule=None, owner_agent="kagetora", timezone="UTC") reset existing values or are preserved on update.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all six parameters, establishing a baseline of 3. The description adds nuance for owner_agent (re-homing without rebuild) and schedule (live cron, scheduler-driven), but says nothing about name, gather_prompt, or source_config beyond what the schema states.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
"Create or update a report definition" gives a specific verb pair and resource, which is unambiguous. However it never distinguishes the definition-level write from the sibling trigger_report_tool (which fires a report) or list_reports_tool, leaving that distinction to be inferred from the name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is only implied by "Create or update" — the description never states when to reach for this tool versus trigger_report_tool (fire now) or the listing tools. The cron/scheduler sentence explains one field's behavior rather than routing the agent to this tool over an alternative.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
7 tool updates
v1.1.0- Added
delete_output_tool - Added
get_sweep_tool - Added
list_outputs_tool - Added
prune_outputs_tool - Changed
save_output_tool8 fields changed- changed
Input schema / properties / payload / descriptionPrevious value: -"List of finding objects, each ideally carrying a source URL"New value: +"List of findings. Each needs a non-empty summary and should\ncarry its source_url; see Finding for the other allowed keys" - changed
Input schema / properties / payload / items / additionalPropertiesPrevious value: -trueNew value: +false - added
Input schema / properties / payload / items / descriptionAdded value: +"One gathered finding.\n\nThe fields are declared, not left as a free-form dict, because a model\ncalling the tool fills in what the schema names: with a bare ``object``\nitem, strict tool-calling models emitted ``{}`` for every finding (RT #1505).\n``summary`` is the one field every report uses and the one a finding is\nworthless without. The rest are the keys the live reports use; a report\nthat needs one more adds it here.\n\nExample::\n\n {\"summary\": \"Fedora 45 Beta shipped with Podman 6.\",\n \"source_url\": \"https://fedoramagazine.org/...\",\n \"section\": \"rss-news-roundup\", \"theme\": \"RHEL/Linux\"}" - added
Input schema / properties / payload / items / propertiesAdded value: +{ + "actors": { + "anyOf": [ + { + "items": { + "maxLength": 200, + "type": "string" + }, + "maxItems": 2000, + "type": "array" + }, + { + "type": "null" + } + ], + "default": null, + "description": "People or teams involved, by name." + }, + "category": { + "anyOf": [ + { + "maxLength": 200, + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "Source category, e.g. the feed category the item came from." + }, + "date": { + "anyOf": [ + { + "maxLength": 200, + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "When it happened, ISO date (YYYY-MM-DD)." + }, + "outcome_ref": { + "anyOf": [ + { + "maxLength": 2000, + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "Tracker key this finding advances, e.g. a Jira issue key." + }, + "section": { + "anyOf": [ + { + "maxLength": 200, + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "Report section this belongs in, as named by the report's gather prompt." + }, + "source_type": { + "anyOf": [ + { + "maxLength": 200, + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "Kind of source, e.g. 'jira', 'slack', 'email', 'rss', 'web'." + }, + "source_url": { + "anyOf": [ + { + "maxLength": 2000, + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "Clickable link to the evidence; null when no source exists." + }, + "summary": { + "description": "One or two sentences stating the finding itself.", + "maxLength": 2000, + "minLength": 1, + "type": "string" + }, + "theme": { + "anyOf": [ + { + "maxLength": 200, + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "Grouping within a section, e.g. 'Security' or 'AI/Agentic'." + }, + "title": { + "anyOf": [ + { + "maxLength": 2000, + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "Headline of the source item, when it has one." + } +} - added
Input schema / properties / payload / items / requiredAdded value: +[ + "summary" +] - added
Input schema / properties / run_idAdded value: +{ + "anyOf": [ + { + "type": "string" + }, + { + "type": "null" + } + ], + "default": null, + "description": "The run to complete (from the fire callback); None = direct save" +} - changed
Input schema / properties / status / descriptionPrevious value: -"One of \"gathering\", \"ready\", \"compiled\" (default: \"ready\")"New value: +"One of \"gathering\", \"ready\", \"compiled\", \"failed\" (default: \"ready\")" - changed
Input schema / properties / status / enumPrevious value: -[ - "gathering", - "ready", - "compiled" -]New value: +[ + "gathering", + "ready", + "compiled", + "failed" +]
- Added
trigger_report_tool - Changed
upsert_definition_tool2 fields changed- changed
Input schema / properties / schedule / descriptionPrevious value: -"Descriptive cron/time metadata (the actual firing is external)"New value: +"Cron expression for when to fire (e.g. \"0 6 * * 5\"); None = manual only" - added
Input schema / properties / timezoneAdded value: +{ + "default": "UTC", + "description": "IANA timezone the schedule runs in (default: \"UTC\")", + "type": "string" +}
5 tool updates
v0.2.0- First observed
get_output_tool - First observed
get_spec_tool - First observed
list_reports_tool - First observed
save_output_tool - First observed
upsert_definition_tool
TDQS
Scored across 10 tools
Most tools target clearly distinct resources (definitions, outputs, runs, sweeps) with a clean verb split (list/get/save/delete/prune). The only mild overlap is get_output_tool vs get_sweep_tool, since both retrieve gathered data, but the descriptions distinguish compiled findings from pre-gathered sweep sections well.
Every tool follows the same verb_noun_tool pattern (list_reports_tool, get_output_tool, upsert_definition_tool, prune_outputs_tool), with consistent snake_case and singular/plural conventions (list uses plural, get/upsert use singular). No mixed styles.
Ten tools is well-scoped for a report-gathering management server, covering the full lifecycle of definitions, outputs, triggering, and sweeps without redundancy. Each tool earns its place with a distinct role.
Outputs have full lifecycle coverage (save, get, list, delete, prune) and definitions support list/get_spec/upsert, but there is no delete_definition_tool, leaving a gap in definition management. Agents can work around it, but the surface is not fully closed.
Maintenance
Related MCP Connectors
Shared memory for your AI agents. Every fact shows its source, and stale facts get replaced.
1A public commons for agents to search and share reusable findings and open research questions.
Shared persistent memory for AI agents to read, verify, continue, and connect knowledge.
One place for every AI agent's pages and docs: versioned links to share, search and update.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceEnables ChatGPT agents to store and retrieve reports in MongoDB Atlas, acting as a bridge between ChatGPT scheduled agents and a persistent database.-
- AlicenseNot gradedqualityAmaintenanceEnables MCP agents to maintain durable, evidence-aware project knowledge, retrieve precise excerpts on demand, and track decisions, conflicts, and revisions across sessions.1Apache 2.0
- AlicenseNot gradedqualityAmaintenanceProvides persistent, searchable memory across coding projects and machines, letting agents record and retrieve projects, reusable assets, sessions, decisions, commits, and handoffs via MCP.19 PyPI2Apache 2.0
- AlicenseNot gradedqualityBmaintenanceEnables AI clients to locally store and share tasks, work activities, long-term memory, knowledge, and people information, while allowing users to review saved content and generate briefings or reports through a web UI.MIT