Skip to main content
Glama
csvbox-io

csvbox-mcp-server

Official
by csvbox-io

csvbox-mcp-server

Ein universeller Model Context Protocol-Server (MCP) für CSVBox. Er stellt die CSVBox-Importer-Sheet-Verwaltung als MCP-Tools bereit, sodass du Importer aus jedem MCP-kompatiblen Client erstellen, ersetzen, patchen, generieren, validieren und aufsetzen kannst – Claude Desktop, Cursor, Windsurf, Roo Code, Cline, VS Code, ChatGPT MCP und mehr.

Läuft über stdio und funktioniert daher in jedem Client gleich.

Tools

Tool

Zweck

API-Aufruf

create_sheet

Ein CSVBox-Sheet erstellen

POST /1.1/sheet

update_sheet

Ein vorhandenes Sheet ersetzen

PUT /1.1/sheet/{key}

patch_sheet

Ein Sheet teilweise aktualisieren

PATCH /1.1/sheet/{key}

generate_sheet_json

NL-Prompt → vollständiges Sheet-JSON (über LLM)

keiner (ruft LLM auf)

create_importer_from_prompt

NL-Prompt → validieren → erstellen

POST /1.1/sheet (+ LLM)

generate_import_code

Integrationscode (vanilla-js/react/vue/angular)

keiner

generate_sheet_functions

NL-Prompt → virtuelle Spalten / Validierungsfunktionen / Datentransformationen (über LLM)

keiner (ruft LLM auf)

validate_schema

Lokale Schema-Validierung

keiner

CSVBox hat derzeit keine GET- oder LIST-Endpunkte, daher gibt es bewusst keine get_sheet- / list_sheet-Tools.

Außerdem stellt es zwei MCP-Prompts bereit:

Prompt

Zweck

create_csvbox_sheet

Die eigene LLM des Host-Clients ein vollständiges CSVBox-Sheet erstellen lassen (kein serverseitiger LLM-Schlüssel nötig).

csvbox_sheet_functions

Die eigene LLM des Host-Clients virtuelle Spalten, Validierungsfunktionen und Datentransformationen erstellen lassen (kein serverseitiger LLM-Schlüssel nötig).

Prompt → Sheet-Generierung

generate_sheet_json und create_importer_from_prompt nutzen eine LLM, um eine frei formulierte Anfrage in ein vollständiges CSVBox-Sheet umzuwandeln – title, sheet_columns, destinations, webhooks, security_settings und steps. Nur tatsächliche Datenfelder werden zu Spalten; Destinations, Webhooks, Domains, Regionen, Datei-Upload- und Schritt-Einstellungen werden in ihren jeweiligen Konfigurationsabschnitten platziert und niemals zu Spalten. Es gibt drei Stufen:

  1. Server-LLM – wenn ANTHROPIC_API_KEY oder OPENAI_API_KEY gesetzt ist, ruft der Server die LLM direkt auf. Funktioniert im MCP Inspector und headless.

  2. MCP-Prompt (create_csvbox_sheet) – wenn du keinen Server-Schlüssel hast, führen Host-Clients (Cursor, Claude Desktop, Cline) die Generierung mit ihrem eigenen Modell aus und rufen dann validate_schema und create_sheet auf. Kostenlos.

  3. Nichts konfiguriert – generate_sheet_json gibt einen strukturierten Fehler „kein LLM-Provider konfiguriert“ zurück, der auf den MCP-Prompt verweist, und create_importer_from_prompt ruft die CSVBox-API nicht auf. Es gibt keinen Regex-Fallback.

Kategorie-/Modul-Erweiterung

Der Generator läuft in einem von zwei Modi, die automatisch anhand des Prompts gewählt werden:

  • Extraktion (Standard) – der Prompt nennt konkrete Felder (z. B. „Spalten name, email, phone“). Nur diese werden zu Spalten; nichts wird erfunden.

  • Erweiterung – der Prompt nennt Geschäfts-Module / Kategorien als Liste (z. B. „Module für: Company Information, Suppliers, Payroll, Invoice“), fordert ein umfassendes/detailliertes Schema an oder fragt nach einer Spaltenanzahl („mindestens 100 Spalten“). Jedes genannte Modul wird in mehrere realistische, präfixierte, korrekt typisierte Spalten erweitert (z. B. Suppliers → supplier_id, supplier_name, supplier_gstin, supplier_email, …). Eine explizite Mindestanzahl wird eingehalten und jede column_name ist global eindeutig.

Datentypen und Validierungen werden aus den Feldnamen und etwaigen angeforderten Typen abgeleitet:

Angefordert / impliziert

Spalten-type

Validatoren

Dropdown / Status / Kategorie mit festen Optionen

list

values: [...] Kandidatenoptionen

Prozentsatz / Prozent

number

min_value: 0, max_value: 100

Positive Zahl (Menge, Anzahl, Bestand, Kosten, Alter)

number

min_value: 0

ID / Code / Referenznummer

text

—

E-Mail

email

—

Telefon / Mobil

phone_number

—

URL / Website

url

—

Preis / Kosten / Betrag / Gehalt

currency

—

Datumsfelder

date

format: "YYYY-MM-DD"

Boolean / is_* / aktiv

boolean

—

GST / GSTIN / Steuer-ID

regex

GSTIN-Muster

PIN-Code / Postleitzahl (Indien)

regex

^[1-9][0-9]{5}$

Große Schemas: Die Standardmodelle (claude-haiku-4-5, gpt-4o-mini) sind günstig, erzeugen aber spürbar bessere Schemas mit 100+ Spalten, wenn du über LLM_MODEL ein stärkeres Modell überschreibst (z. B. claude-sonnet-4-6). Das Ausgabelimit wird angehoben, um große Sheets zu fassen; wenn eine Anfrage dennoch zu groß ist, wird die Antwort als TRUNCATED markiert (ein eigenes Ergebnis, kein Parse-Fehler) und die CSVBox-API wird nicht aufgerufen – reduziere die Spaltenanzahl / Module oder verwende ein Modell mit größerem Ausgabebudget und versuche es erneut.

Related MCP server: mcp-tabular

Funktionssammlungen (virtuelle Spalten, Validierungsfunktionen, Datentransformationen)

Über die sechs Sheet-Eigenschaften hinaus akzeptiert die CSVBox-Sheet-API drei Sammlungen, deren Elemente einen js_code-String enthalten, den CSVBox während eines Imports ausführt:

Sammlung

Identifiziert durch

Max

js_code muss…

virtual_columns

column_name

20

den berechneten Zellwert zurückgeben

validation_functions

function_name

10

ein Array von Fehlerstrings zurückgeben ([] = gültig)

data_transforms

transform_name

10

das csvbox-Objekt mutieren und zurückgeben

Im js_code stellt das csvbox-Objekt row, column, virtual, user, import und environment bereit. Die beiden Zugriffe sind nicht austauschbar – eine virtuelle Spalte ist pro Zeile und verwendet csvbox.row.<name> (ein Skalar), während eine auf "column" bezogene Funktion die gesamte Spalte über csvbox.column.<name> (ein Array) sieht.

Gemeinsame optionale Felder: scope (column | row; nicht bei virtuellen Spalten), run_at (before_validation | after_validation; nur bei Datentransformationen), columns / dynamic_columns, active, dependencies und _delete (nur PATCH).

Erstellen

// generate_sheet_functions  (requires ANTHROPIC_API_KEY or OPENAI_API_KEY)
{
  "prompt": "add a virtual column joining first and last name, and check every email contains an @",
  "sheet": { "title": "Customers", "sheet_columns": [ ... ] }
}

Gibt { "virtual_columns": [...], "validation_functions": [...], "source": ..., "validation": {...} } zurück. Sammlungen, die die Anfrage nicht impliziert, werden weggelassen und niemals als leere Arrays zurückgegeben.

Dieses Tool ruft die CSVBox-API nicht auf. Lies den generierten js_code und wende ihn dann selbst mit patch_sheet an. Übergib sheet, damit das Modell echte Spaltennamen referenziert und der Validator diese Referenzen prüfen kann – CSVBox hat keinen Lese-Endpunkt, daher muss er inline angegeben werden. Ohne LLM-Schlüssel verwende stattdessen den csvbox_sheet_functions-MCP-Prompt.

PUT vs. PATCH – lies das, bevor du es anwendest

update_sheet (PUT)

patch_sheet (PATCH)

Gesendete Sammlung

maßgeblich – jedes vorhandene Element, das nicht genannt wird, wird gelöscht

zusammengeführt – nicht genannte Elemente bleiben unangetastet

"virtual_columns": []

löscht alle 20

No-op

Schlüssel weggelassen

unverändert

unverändert

_delete: true

nicht gültig

entfernt dieses Element (alle anderen Felder werden ignoriert)

Verwende patch_sheet, um generierte Funktionen anzuwenden. Validiere zuerst mit dem passenden Verb:

// validate_schema
{ "sheet": { "data_transforms": [ ... ] }, "mode": "patch" }

mode ist create (Standard), put oder patch. Es betrifft nur die Funktionssammlungen – unter put ist ein leeres Array ein harter Fehler statt einer Warnung, und _delete wird außerhalb von patch abgelehnt.

Abhängigkeiten

Ein Element kann bis zu 5 Drittanbieter-Skripte laden:

{ "url": "https://cdn.jsdelivr.net/npm/dayjs@1.11.10/dayjs.min.js",
  "globals": ["dayjs"],
  "integrity": "sha384-..." }

Nur cdn.jsdelivr.net, unpkg.com und cdnjs.cloudflare.com sind erlaubt; nur https, .js/.mjs-Pfad, keine Query-String, kein Fragment, keine Benutzerinfo und kein Port.

Sicherheit. Dieser Server führt js_code niemals aus – es ist hier ein undurchsichtiger String. Generiertes JavaScript ist ungeprüfte Modellausgabe, lies es also, bevor du es per PATCH in einen Live-Importer einspielst. Eine Abhängigkeit ohne integrity-Digest kann sich jederzeit bei deinen Kunden ändern; validate_schema warnt, wenn einer fehlt.

Ein vollständiges Payload-Beispiel findest du in docs/sheet-functions-example.json.

Installation

npm install @csvbox/mcp-server

Oder aus dem Quellcode bauen:

git clone <this-repo> csvbox-mcp-server
cd csvbox-mcp-server
npm install
npm run build

Das erzeugt dist/index.js – den Einstiegspunkt, den MCP-Clients starten.

Umgebungsvariablen

Kopiere .env.example nach .env und trage deine CSVBox-Zugangsdaten ein:

CSVBOX_API_KEY=your_api_key
CSVBOX_API_SECRET=your_api_secret

CSVBox-Zugangsdaten sind nur für die API-gestützten Tools erforderlich (create_sheet, update_sheet, patch_sheet, create_importer_from_prompt). validate_schema und generate_import_code funktionieren ohne jegliche Zugangsdaten.

Hinweis zum Auth-Header: Der Client sendet x-csvbox-api-key und x-csvbox-secret-api-key (passend zu den CSVBox-Referenz-Payloads). Diese sind als Konstanten in src/services/csvbox-api.ts definiert, falls dein Konto andere Header-Namen verwendet.

LLM-Provider (für Prompt → Sheet-Generierung)

generate_sheet_json und create_importer_from_prompt benötigen ein LLM. Setze eine der folgenden:

ANTHROPIC_API_KEY=sk-ant-...
OPENAI_API_KEY=sk-...

Der Provider wird automatisch erkannt:

Bedingung

Provider

Standardmodell

LLM_PROVIDER=anthropic (und sein Schlüssel gesetzt)

Anthropic

claude-haiku-4-5

LLM_PROVIDER=openai (und sein Schlüssel gesetzt)

OpenAI

gpt-4o-mini

ANTHROPIC_API_KEY gesetzt (kein LLM_PROVIDER)

Anthropic

claude-haiku-4-5

OPENAI_API_KEY gesetzt (kein LLM_PROVIDER)

OpenAI

gpt-4o-mini

kein Schlüssel gesetzt

keiner — Tools geben einen Fehler zurück, der auf den create_csvbox_sheet-MCP-Prompt verweist

—

LLM_PROVIDER legt fest, welcher Anbieter verwendet wird, wenn beide Schlüssel vorhanden sind; LLM_MODEL überschreibt das Modell für den gewählten Anbieter. Für große Kategorie-/Modul-Schemas (100+ Spalten) setzen Sie LLM_MODEL auf ein stärkeres Modell (z. B. claude-sonnet-4-6) — siehe Kategorie-/Modul-Erweiterung.

MCP Inspector: Setzen Sie den LLM-Schlüssel im Umgebungsvariablen-Bereich des Inspectors, um den Server-LLM-Pfad zu verwenden. Der Inspector hat keinen eigenen Host-LLM, kann also den create_csvbox_sheet-Prompt rendern, aber nicht ausführen — für den schlüssellosen Pfad verwenden Sie einen Client mit einem Modell (Cursor, Claude Desktop, Cline).

Lokale Ausführung

# After building:
npm start

# Or run the built file directly:
node dist/index.js

Der Server spricht MCP über stdio und protokolliert csvbox-mcp-server running on stdio auf stderr (stdout ist für das Protokoll reserviert).

Client-Konfiguration

Für eine veröffentlichte Installation verwenden Sie das npm-Paket mit npx. Setzen Sie CSVBOX_API_KEY / CSVBOX_API_SECRET im env-Block.

Hinweis: Das npm-Paket ist @csvbox/mcp-server und die ausführbare Datei ist csvbox-mcp-server.

Claude Desktop

Fügen Sie Folgendes zu Ihrer Claude-Desktop-MCP-Konfiguration hinzu:

{
  "mcpServers": {
    "csvbox": {
      "command": "npx",
      "args": [
        "-y",
        "--package=@csvbox/mcp-server",
        "csvbox-mcp-server"
      ],
      "env": {
        "CSVBOX_API_KEY": "your_api_key",
        "CSVBOX_API_SECRET": "your_api_secret"
      }
    }
  }
}

Cursor

Bearbeiten Sie ~/.cursor/mcp.json (global) oder .cursor/mcp.json (pro Projekt):

{
  "mcpServers": {
    "csvbox": {
      "command": "npx",
      "args": [
        "-y",
        "--package=@csvbox/mcp-server",
        "csvbox-mcp-server"
      ],
      "env": {
        "CSVBOX_API_KEY": "your_api_key",
        "CSVBOX_API_SECRET": "your_api_secret"
      }
    }
  }
}

Windsurf

Bearbeiten Sie ~/.codeium/windsurf/mcp_config.json:

{
  "mcpServers": {
    "csvbox": {
      "command": "npx",
      "args": [
        "-y",
        "--package=@csvbox/mcp-server",
        "csvbox-mcp-server"
      ],
      "env": {
        "CSVBOX_API_KEY": "your_api_key",
        "CSVBOX_API_SECRET": "your_api_secret"
      }
    }
  }
}

Roo Code

In den Roo-Code-MCP-Einstellungen (mcp_settings.json):

{
  "mcpServers": {
    "csvbox": {
      "command": "npx",
      "args": [
        "-y",
        "--package=@csvbox/mcp-server",
        "csvbox-mcp-server"
      ],
      "env": {
        "CSVBOX_API_KEY": "your_api_key",
        "CSVBOX_API_SECRET": "your_api_secret"
      }
    }
  }
}

Cline

In den Cline-MCP-Einstellungen (cline_mcp_settings.json):

{
  "mcpServers": {
    "csvbox": {
      "command": "npx",
      "args": [
        "-y",
        "--package=@csvbox/mcp-server",
        "csvbox-mcp-server"
      ],
      "env": {
        "CSVBOX_API_KEY": "your_api_key",
        "CSVBOX_API_SECRET": "your_api_secret"
      }
    }
  }
}

VS Code MCP

Fügen Sie zu .vscode/mcp.json (oder der globalen mcp.json) hinzu:

{
  "servers": {
    "csvbox": {
      "command": "npx",
      "args": [
        "-y",
        "--package=@csvbox/mcp-server",
        "csvbox-mcp-server"
      ],
      "env": {
        "CSVBOX_API_KEY": "your_api_key",
        "CSVBOX_API_SECRET": "your_api_secret"
      }
    }
  }
}

Beispiel-Tool-Aufrufe

Ein vollständiges Sheet aus einem Prompt generieren (LLM, kein CSVBox-API-Aufruf):

// generate_sheet_json  (requires ANTHROPIC_API_KEY or OPENAI_API_KEY)
{ "prompt": "Create employee importer with name, email, salary, joining date; destination as testapi; allow only xlsx files" }

Gibt { "sheet": { "title": ..., "sheet_columns": [...], "destinations": [...], "steps": {...} }, "source": "llm:anthropic:claude-haiku-4-5", "validation": { "valid": true, ... } } zurück. Datenfelder werden zu Spalten (salary → currency, joining date → date); das Ziel und die xlsx-Einstellung gehen in destinations / steps, nicht in Spalten. Ohne LLM-Schlüssel wird ein Fehler zurückgegeben, der auf den create_csvbox_sheet-Prompt verweist.

Ein Schema validieren, bevor es gesendet wird:

// validate_schema
{ "sheet": { "title": "Customers", "sheet_columns": [
  { "column_name": "email", "display_label": "Email", "type": "email" }
] } }

Gibt { "valid": true, "errors": [], "warnings": [ ... ] } zurück.

Ein Sheet erstellen:

// create_sheet
{ "sheet": { "title": "Customer Import", "sheet_columns": [
  { "column_name": "name", "display_label": "Name", "type": "text" },
  { "column_name": "email", "display_label": "Email", "type": "email" }
] } }

Generieren + Erstellen in einem Schritt:

// create_importer_from_prompt  (requires an LLM key + CSVBox credentials)
{ "prompt": "Create customer importer with name, email, phone; allow for example.com" }

Gibt { "generated_schema": { ... }, "source": ..., "validation": { ... }, "api_response": { ... } } zurück. Bricht ab, ohne die API aufzurufen, wenn kein LLM-Provider konfiguriert ist oder das generierte Schema die Validierung nicht besteht.

Ein Sheet ersetzen:

// update_sheet
{ "sheet_license_key": "abc123", "sheet": { "title": "Updated", "sheet_columns": [ ... ] } }

Zerstörend für jede Sammlung, die Sie senden — siehe PUT vs. PATCH.

Ein Sheet patchen:

// patch_sheet
{ "sheet_license_key": "abc123", "changes": { "title": "New Title" } }

Eine Funktion entfernen, ohne den Rest anzufassen:

// patch_sheet
{ "sheet_license_key": "abc123",
  "changes": { "virtual_columns": [ { "column_name": "full_name", "_delete": true } ] } }

Integrationscode generieren:

// generate_import_code
{ "framework": "react" }

Unterstützte Spaltentypen

text, number, email, date, time, boolean, regex, ip, url, credit_card, phone_number, currency, list, dependent_list, dynamic_list, dependent_dynamic_list, multiselect_list, multiselect_dynamic_list.

Entwicklung

npm run build   # compile TypeScript → dist/
npm start       # run the built server
npm run lint    # type-check without emitting
npm test        # compile and run the unit suite (alias: npm run test:unit)

Tests

npm test kompiliert src/tests/ und führt es mit dem integrierten Test-Runner von Node aus — kein Test-Framework, keine Mocking-Bibliothek.

Die Testsuite ist hermetisch. Sie kontaktiert nie einen externen Host, liest nie Ihre Umgebungsvariablen CSVBOX_API_* / ANTHROPIC_API_KEY / OPENAI_API_KEY und berührt nie ein echtes CSVBox-Konto, sodass sie identisch besteht, unabhängig davon, ob Sie Anmeldedaten konfiguriert haben. HTTP wird am axios-Adapter abgefangen; der LLM ist ein skriptgesteuerter Fake; der eine Test, der echte Request-Kodierung benötigt, startet einen kurzlebigen Listener auf 127.0.0.1 und schließt ihn danach wieder. Tests, die Umgebungsvariablen lesen, setzen explizit, was sie benötigen, und stellen die vorherigen Werte wieder her.

E2E-Tests

npm run test:e2e         # run the Playwright suite
npm run test:e2e:report  # open the HTML report from the last run

Die Specs liegen in e2e/, konfiguriert durch playwright.config.ts. Wie die Unit-Testsuite ist auch diese Suite hermetisch: Sie startet Mock-CSVBox- und LLM-Server auf Loopback (e2e/support/mock-csvbox-server.ts, e2e/support/mock-llm-server.ts) und steuert den echten gebauten Server (dist/index.js) über MCP Inspector mit gefälschten Anmeldedaten, die auf diese Mocks zeigen — sie kontaktiert nie ein echtes CSVBox-Konto oder einen echten LLM-Provider und liest nie Ihre .env. Eine separate Inspector-Instanz ohne Anmeldedaten deckt die Fehlerpfade für „fehlende Anmeldedaten“ ab. Erfordert zuerst npm run build (die test:e2e-webServer-Einträge bauen automatisch).

Einbetten des Servers

createServer() wird aus dem Einstiegsmodul exportiert. Es registriert jedes Tool und jeden Prompt und gibt den McpServer zurück, ohne einen Transport anzuhängen, sodass Sie ihn mit einem eigenen verbinden können:

import { createServer } from "@csvbox/mcp-server";

const server = createServer();
await server.connect(myTransport);

Das Importieren des Moduls startet nichts; der stdio-Server läuft nur, wenn dist/index.js direkt ausgeführt wird.

Lizenz

MIT

Available Tools

9 tools
create_importer_from_promptCreate Importer From PromptA

Generate a COMPLETE CSVBox sheet from a natural-language prompt via a configured LLM, validate it locally, then create it via POST /1.1/sheet. Returns { generated_schema, source, validation, api_response }. Aborts (no API call) if no LLM provider is configured or if validation fails. Requires ANTHROPIC_API_KEY or OPENAI_API_KEY plus CSVBox credentials.

NameRequiredDescriptionDefault
promptYesNatural-language description of the importer, e.g. "Create customer importer with columns name, email, phone; allow for example.com".

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It discloses the full sequence (generate, validate locally, create via POST), the return object, the abort condition (no LLM provider or validation failure), and the required credentials (ANTHROPIC_API_KEY or OPENAI_API_KEY plus CSVBox credentials). This is comprehensive and honest about side effects (it creates a sheet).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences deliver the purpose, flow, return value, abort conditions, and required credentials without waste. The main action is front-loaded, followed by essential caveats. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with one parameter, no output schema, and no annotations, the description covers the essential decision points: what it does, what it returns, when it aborts, and what credentials are needed. Missing is any detail on the validation failure behavior beyond aborting, and there is no example output or error handling guidance, but these are not critical for invoking the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the description for 'prompt' in the schema already explains it as a natural-language description of the importer. The tool description adds no extra detail about how the prompt is used, format expectations, or examples beyond what the schema provides. Baseline 3 is appropriate when schema fully documents the parameter.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Generate ... then create') and a clear resource (CSVBox sheet via POST /1.1/sheet). It is distinct from siblings like create_sheet (which likely creates without generation) and generate_sheet_json (which likely generates without creation). The flow is explicit and unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It clearly implies use when you have a natural-language prompt and want a complete, validated sheet. It notes that an LLM provider must be configured and that it aborts if not, which hints at alternative workflows, but it does not explicitly name alternatives or state when to prefer create_sheet or generate_sheet_json over this tool. The context is clear but exclusions are not explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_sheetCreate CSVBox SheetC

Create a new CSVBox sheet via POST /1.1/sheet. Input: { sheet }. Returns the API response.

NameRequiredDescriptionDefault
sheetYesThe full CSVBox sheet object to create.

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

There are no annotations, so the description bears full responsibility for disclosing behavior. It only states that it returns the API response, but gives no detail on side effects, error handling, idempotency, or what happens on duplicate creation. For a creation tool this is a significant gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is brief and front-loaded with the action, which is good. However, its brevity comes at the cost of essential context, so it is under-specified rather than appropriately concise. A few extra sentences clarifying behavior and usage would be justified.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has no output schema, so the description should clarify what the response contains, but it only says 'Returns the API response' without specifics. The nested 'sheet' object is intentionally open-ended, but the description doesn't hint at required fields or validation. Given the simplicity of the tool and sibling complexity, the description is incomplete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already provides full coverage of the sole parameter, describing the 'sheet' as 'The full CSVBox sheet object to create.' The tool description adds nothing beyond restating the parameter name and format. Since coverage is 100%, the description meets the baseline but adds no extra value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear action: creating a new CSVBox sheet via a POST request, and identifies the resource explicitly. It distinguishes from siblings like update_sheet and patch_sheet by indicating creation, though it doesn't explicitly call out the distinction. The purpose is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives such as update_sheet or patch_sheet. It does not mention any prerequisites, when creation is appropriate, or when another sibling might be better. An agent would have to infer usage from the tool name alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_import_codeGenerate CSVBox Integration CodeA

Generate complete CSVBox importer integration code for a framework (vanilla-js, react, vuejs2 [Vue 2], vuejs3 [Vue 3], angular [Angular 8-13], angular2 [Angular 14+]). Input: { framework }. Replace the license key placeholder with your sheet's license key.

NameRequiredDescriptionDefault
frameworkYesTarget framework: vanilla-js | react | vuejs2 (Vue 2) | vuejs3 (Vue 3) | angular (Angular 8-13) | angular2 (Angular 14+).

TDQS

A3.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It mentions replacing the license key placeholder, which is a useful note, but it does not state whether the tool has side effects, what the output format is, or any prerequisites. The agent is left guessing about the return value and if any state changes occur. This is a notable gap for a tool that generates code.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, information-dense sentence. It front-loads the main action, immediately lists the supported frameworks with version clarifications, and includes the only crucial auxiliary instruction (replacing the license key placeholder). There is zero redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter tool with no output schema, the description covers the essential information: what it does, the input, and a critical post-processing step. While it doesn't explicitly describe the return format, the term 'integration code' makes it obvious. Minor omission: it doesn't state whether the code is returned as a string, file, or other, but this is not critical for invoking the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the parameter `framework` is already fully documented via enum and description. The tool description merely repeats 'Input: { framework }' without adding new parameter-specific details. The license key placeholder note concerns the output, not the input, so it doesn't enhance parameter understanding. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear action ('generate complete CSVBox importer integration code'), a specific resource (CSVBox importer integration), and the parameter (framework). It lists all supported values, distinguishing it from sibling tools like generate_sheet_json or create_sheet. It is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description is self-contained and clearly implies when to use it: whenever you need integration code for a listed framework. It does not explicitly mention alternatives or exclusions, but the context is clear enough that an agent can infer appropriate usage without confusion.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_sheet_functionsGenerate CSVBox Sheet FunctionsA

Author CSVBox virtual_columns, validation_functions, and data_transforms from a natural-language prompt using a configured LLM. Does NOT call the CSVBox API — it returns JSON so you can REVIEW the generated JavaScript before applying it with patch_sheet. Collections the request does not imply are omitted, never returned as empty arrays. Returns { virtual_columns?, validation_functions?, data_transforms?, source, validation }. Requires ANTHROPIC_API_KEY or OPENAI_API_KEY; without one it returns an error pointing to the csvbox_sheet_functions MCP prompt. Input: { prompt, sheet? }.

NameRequiredDescriptionDefault
sheetNoThe existing sheet the functions will be applied to. Supplying it lets the model reference real column names and lets validation check those references. CSVBox exposes no read endpoint, so this must be passed inline.
promptYesNatural-language description of the functions to author, e.g. "add a virtual column joining first and last name, and validate that every email contains an @".

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the full burden. It discloses that the tool does not call the API, omits unmentioned collections rather than returning empty arrays, returns a specific JSON shape, requires ANTHROPIC_API_KEY or OPENAI_API_KEY, and names the error fallback. This is unusually transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but every sentence earns its place: purpose, non-API behavior, output contract, authentication requirement, error handling, and input shape. The structure front-loads the main purpose before moving to constraints and fallbacks.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Even though there is no output schema, the description provides the return contract, omission behavior, auth prerequisites, and the downstream patch_sheet step. With only two parameters and one required, nothing essential is left for the agent to infer.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both parameters well. The description only restates the input shape as '{ prompt, sheet? }' and adds no new meaning beyond what the schema's per-parameter descriptions provide. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Uses a specific verb and resource ('Author CSVBox virtual_columns, validation_functions, and data_transforms') and clearly states it returns reviewable JSON rather than calling the CSVBox API. This distinguishes it from patch_sheet, create_sheet, and generate_import_code even before reading schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Establishes a clear workflow: generate functions, review the returned JSON, then apply with patch_sheet. It also says the tool does not call the API and warns about missing API keys, but it does not explicitly contrast itself with generation siblings like generate_sheet_json or generate_import_code.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

generate_sheet_jsonGenerate CSVBox Sheet JSONA

Generate a COMPLETE CSVBox sheet (title, sheet_columns, destinations, webhooks, security_settings, steps) from a natural-language prompt using a configured LLM. Does NOT call the CSVBox API. Returns { sheet, source, validation }. Requires ANTHROPIC_API_KEY or OPENAI_API_KEY; without one it returns an error pointing to the create_csvbox_sheet MCP prompt. Input: { prompt }.

NameRequiredDescriptionDefault
promptYesNatural-language description of the importer, e.g. "Create employee importer with columns name, email, salary, joining date; destination as testapi; allow only xlsx files".

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It discloses several key behaviors: no API call, key requirements, error fallback, and the return shape { sheet, source, validation }. However, it does not describe whether the call is synchronous, how long it may take, token/rate-limit considerations, or the meaning of the returned 'source' and 'validation' fields — moderate disclosure but not rich.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, all load-bearing: the exclusions ('Does NOT call...') and key requirement ('Requires ANTHROPIC_API_KEY...') are front-loaded before the input spec. The use of ALL-CAPS for emphasis is a minor stylistic distraction, but overall it is compact with no wasted sentences.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-input-parameter tool with no output schema and no annotations, the description covers the essentials: what it returns, its prerequisites, a common failure mode, and what the prompt parameter expects. The only notable gap is the absence of a minimal output/JSON example structure, which would help the agent gauge the result format.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The single parameter prompt is fully documented in the schema (100% coverage, with a concrete example). The description adds only 'natural-language prompt' context, which marginally reinforces but does not extend the schema. Baseline 3 is appropriate where the schema already carries the parameter meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb+resource ('Generate a COMPLETE CSVBox sheet') and enumerates the exact fields produced (title, sheet_columns, destinations, webhooks, security_settings, steps). It distinguishes itself from the API-calling siblings by explicitly stating 'Does NOT call the CSVBox API,' which is the key differentiator among the sibling list.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description states the enabling condition (ANTHROPIC_API_KEY or OPENAI_API_KEY required) and the failure behavior when absent (returns an error pointing to create_csvbox_sheet). It clearly implies this tool generates JSON only and is the predecessor to an API-calling tool, though it doesn't name an explicit 'when not to use' sibling or a direct comparison to create_importer_from_prompt.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

patch_sheetPatch CSVBox SheetA

Partially update a CSVBox sheet via PATCH /1.1/sheet/{sheet_license_key}. Sends only the changes object. Input: { sheet_license_key, changes }. Returns the API response. PATCH MERGES: only the items you list are touched and nothing is deleted implicitly, so an empty array is a no-op. Items in virtual_columns, validation_functions and data_transforms are matched by column_name / function_name / transform_name respectively — an unmatched name creates a new item. To remove one, send it with _delete: true; every other field on a _delete item is ignored, including js_code. This is the safe verb for applying generated functions. Run validate_schema with mode 'patch' first.

NameRequiredDescriptionDefault
changesYesOnly the partial changes to apply to the sheet.
sheet_license_keyYesThe license key of the sheet to patch.

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden and discloses substantial behavior: PATCH merges, only listed items are touched, empty array is a no-op, matching by names with unmatched creating new items, _delete: true for removal, and that other fields on a _delete item are ignored. It also mentions the return is 'the API response.' This exceeds typical descriptions, though it omits error handling or permission nuances.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but each sentence earns its place: purpose, input/output, merge semantics, matching rules, deletion, and usage advice. It's front-loaded with the purpose, and while it's longer than average, the complexity of the operation justifies the length. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (nested objects, merge behavior, deletion), the description covers all critical aspects: how partial updates work, how to target items, how to delete, and the prerequisite validation step. It returns the API response but doesn't detail error cases, which is acceptable without an output schema. The description is sufficient for an agent to call correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds significant meaning to the 'changes' object by explaining the internal structure (virtual_columns, validation_functions, data_transforms), how items are matched by names, and the _delete flag semantics. This goes well beyond the schema's minimal 'Only the partial changes to apply to the sheet.'

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Partially update'), resource ('CSVBox sheet'), and the HTTP method (PATCH /1.1/sheet/{sheet_license_key}'). It clearly differentiates from sibling tools like update_sheet by emphasizing 'partial' and 'PATCH', and from create_sheet by 'update'. The purpose is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides clear context: 'This is the safe verb for applying generated functions' and instructs to 'Run validate_schema with mode patch first.' While it doesn't explicitly name update_sheet as an alternative, the 'partial' vs full update distinction and the 'safe verb' guidance effectively imply when to prefer this tool over others.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

submit_fileSubmit File via CSVBox REST File APIA

Submit a file for import via POST /1.1/file. Provide exactly one of public_file_url (JSON submission) or file_base64 + file_name (multipart direct upload — file_base64 is decoded server-side and sent to CSVBox as true binary multipart content, never as a base64 string). Input: { sheet_license_key, public_file_url? | (file_base64?, file_name?), file_sheet_name?, user?, options?, dynamic_columns? }. Returns the API response.

NameRequiredDescriptionDefault
userNoCustom user reference object attached to the import.
optionsNoImport options: has_header (0/1), max_rows, auto_map.
file_nameNoFile name for the direct upload. Required with file_base64.
file_base64NoBase64-encoded file content for direct upload. This is an MCP-transport-only encoding: the server decodes it into raw bytes and sends CSVBox a true multipart/form-data 'file' part, never a base64 string. Mutually exclusive with public_file_url. Requires file_name. Prefer public_file_url for large files.
dynamic_columnsNoDynamic column definitions with validators.
file_sheet_nameNoWorksheet name to import, for multi-tab files.
public_file_urlNoPublic URL of the file to import. Mutually exclusive with file_base64.
sheet_license_keyYesThe license key of the sheet to import into.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and discloses key behavior: it explains the server-side decoding of file_base64 into true binary multipart content, the alternative JSON path, and that it returns the API response. It does not mention authentication or side effects, but the mutation is implied by 'submit for import' and the transport detail goes beyond basic expectations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no filler. It front-loads the endpoint and the primary decision (which submission mode), then presents the full input structure compactly. Every clause contributes information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 8 parameters, nested objects, and two mutually exclusive alternatives, the description is thorough: it maps the parameter combos, explains the encoding nuance, and notes the return value. It omits authentication prerequisites and error handling, but those are commonly left to the API docs and the schema already covers required fields.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, but the description adds real value beyond the schema by showing the exact input structure with alternatives and grouping, clarifying the mutual exclusivity already hinted in properties, and adding the file-size preference. This is more than the baseline 3 would require.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (submit a file for import), the resource (via POST /1.1/file), and the two distinct submission modes (JSON vs multipart). It distinguishes this tool from siblings like create_sheet or generate_import_code by focusing on the file submission action.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly lays out the mutually exclusive parameter combinations ('Provide exactly one of...') and even adds a practical preference ('Prefer public_file_url for large files'). It does not explicitly contrast with sibling tools, but the sibling set is clearly different in function, so this gap is minor.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

update_sheetUpdate (Replace) CSVBox SheetA

Replace an existing CSVBox sheet via PUT /1.1/sheet/{sheet_license_key}. Input: { sheet_license_key, sheet }. Returns the API response. DESTRUCTIVE: PUT is authoritative for every collection it sends — items listed are created or updated in place, and any existing item the array does not name is DELETED. This applies to virtual_columns, validation_functions and data_transforms: sending an empty array DELETES ALL of that collection's items, while OMITTING the key leaves them untouched. _delete is not valid here; use patch_sheet to remove a single item. Run validate_schema with mode 'put' first to catch a destructive body.

NameRequiredDescriptionDefault
sheetYesThe full replacement CSVBox sheet object.
sheet_license_keyYesThe license key of the sheet to replace.

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden — and it excels. It discloses the destructive PUT semantics (unnamed items are DELETED), which collections are affected (virtual_columns, validation_functions, data_transforms), the critical empty-array-deletes vs omit-preserves distinction, and invalidates `_delete`. The safety warnings cover all dangerous behavior an agent needs to avoid.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long, but every sentence earns its place for a destructive operation — the PUT-authoritative semantics, collection scope, and empty-vs-omit warning are all essential safety information. Core purpose is front-loaded before the behavioral warnings. Slightly verbose, justified by the risk profile.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive mutation with zero annotations and no output schema, this is complete. It covers what gets destroyed, the collection semantics, the invalid `_delete`, and pre-validates via validate_schema. Return value is minimally stated ('Returns the API response'), which is acceptable given no output schema exists. Nothing an agent needs to call this safely is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so both parameters (sheet_license_key, sheet) are already documented inline, warranting baseline 3. The description adds some value by clarifying the destructive behavior of collections inside the `sheet` object, but it doesn't add syntax or format details beyond the schema's 'full replacement CSVBox sheet object'.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Replace'), resource ('an existing CSVBox sheet'), and HTTP method (PUT /1.1/sheet/{sheet_license_key}'). The title reinforces the replace-vs-patch distinction, and the description names patch_sheet for partial updates, making it distinguishable from siblings without opening schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly routes to alternatives with conditions: 'use patch_sheet to remove a single item', declares `_delete` is not valid here, and instructs 'Run validate_schema with mode put first'. This gives clear when-to/when-not guidance and names the safety pre-check, which is ideal for a destructive tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

validate_schemaValidate CSVBox SchemaA

Validate a CSVBox sheet schema locally (no API call). Requires a non-empty title; sheet_columns is optional (absent passes, empty yields a warning). When columns are present, checks for missing column_name/display_label/type, unsupported types, duplicate names, duplicate positions, and invalid dependent column references. Also checks virtual_columns, validation_functions, and data_transforms: per-sheet caps, duplicate and colliding names, missing or oversized js_code, scope/run_at enums, column references against sheet_columns, and dependency URLs (https, allowed CDN hosts, .js/.mjs, integrity digest). Pass mode ('create' | 'put' | 'patch', default 'create') so empty-array and _delete rules match the verb you are about to use. Returns { valid, errors, warnings }.

NameRequiredDescriptionDefault
modeNoWhich write verb this payload is headed for. "create" (default) for POST, "put" for a full replace, "patch" for a partial update. Affects only the function collections: an empty array is an error under "put" (it deletes every item); `_delete` is fully valid under "patch", redundant (warning only) under "put", and an error under "create".
sheetYesThe CSVBox sheet object to validate.

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It thoroughly describes what the tool does: it performs a local validation, enumerates all the checks (missing fields, duplicates, types, references, dependency rules), explains the mode-dependent behavior (empty array vs _delete), and states the return shape { valid, errors, warnings }. This is exceptionally transparent and leaves no ambiguity about side effects or limitations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, information-dense paragraph that front-loads the core purpose and then systematically covers prerequisites, specific checks, mode handling, and return format. Every sentence adds value; there is no filler or repetition. The structure is logical and allows an agent to quickly grasp the tool's behavior.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (many validation rules), the minimal schema, and absence of annotations, the description is remarkably complete. It covers all relevant inputs (sheet, mode), the exact validation logic, the behavior under different modes, and the output structure. There is no critical information missing for an agent to call this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Although the schema descriptions cover both parameters, the tool description adds significant meaning. For 'mode', it explains the impact of each enum value on validation rules, which the schema description only partially hints at. For 'sheet', since the schema only says 'object', the description is the sole source of truth for what the sheet object should contain (sheet_columns, virtual_columns, validation_functions, data_transforms). This goes well beyond the schema's generic definition.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Validate a CSVBox sheet schema locally (no API call).' This clearly distinguishes it from sibling tools like create_sheet or update_sheet, which perform mutations. The phrase 'no API call' further separates it from any network-dependent tool. The purpose is unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly conveys when to use this tool: before an API call to validate the schema against the intended write verb, as shown by the mode parameter explanation ('Pass mode... so empty-array and _delete rules match the verb you are about to use'). However, it does not explicitly name alternative tools or state 'use this instead of X,' so it stops short of full exclusion guidance. The context is adequate for an agent to infer usage.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 9 tool updatesv1.0.1
    • First observedcreate_importer_from_prompt
    • First observedcreate_sheet
    • First observedgenerate_import_code
    • First observedgenerate_sheet_functions
    • First observedgenerate_sheet_json
    • First observedpatch_sheet
    • First observedsubmit_file
    • First observedupdate_sheet
    • First observedvalidate_schema

TDQS

A3.7/5.0

Scored across 9 tools

Disambiguation4/5

Tools are mostly distinct: create/update/patch/validate/submit/generate each target different actions. The three 'generate_' tools produce different outputs (sheet JSON, code, functions), but 'create_importer_from_prompt' and 'generate_sheet_json' both involve prompt-based sheet generation, with the former actually creating while the latter only returns JSON, which could cause minor confusion.

Naming Consistency4/5

Most names follow a verb_noun pattern (create_sheet, update_sheet, patch_sheet, validate_schema, submit_file, generate_sheet_json, generate_import_code, generate_sheet_functions). The exception is 'create_importer_from_prompt', which uses 'importer' instead of the more consistent 'sheet' and breaks the pattern slightly.

Tool Count5/5

With 9 tools, the surface is well-scoped for a CSV import integration server. Each tool covers a distinct aspect (schema creation, modification, validation, file submission, and generation helpers) without redundancy, and the count fits comfortably in the ideal range.

Completeness3/5

The set covers create, update (PUT/PATCH), validation, and file submission, but lacks read operations (e.g., get_sheet, list_sheets) and explicit sheet deletion. While patch supports _delete, there is no direct delete_sheet tool. This creates a gap for agents that need to inspect or manage existing sheets outside of updates.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • F
    license
    A
    quality
    D
    maintenance
    Enables comprehensive CSV file management including creating, editing, analyzing, and transforming CSV data anywhere in the filesystem. Provides statistical analysis, data validation, filtering, and grouping capabilities through MCP protocol over stdio transport.
    15
    -
  • A
    license
    B
    quality
    D
    maintenance
    Enables SQL querying over CSV and Excel files using DuckDB, providing tools to load files, inspect schemas, and run read-only queries via MCP.
    5
    MIT