Skip to main content
Glama
dmc5179

Red Hat Security Data API MCP Server

by dmc5179

search_csaf

Find Red Hat security advisories by filtering on date, severity, CVE, package, Bugzilla ID, or RHSA ID. Returns a paginated list of CSAF advisory summaries.

Instructions

Search Red Hat CSAF advisory documents by date, severity, CVE, package, Bugzilla ID, or RHSA ID. Returns a paginated list of advisory summaries.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
bugNoComma-separated Bugzilla IDs (e.g. 1326598,1084875)
cveNoComma-separated CVE IDs (e.g. CVE-2024-0001,CVE-2024-0002)
pageNoPage number (default: 1)
afterNoReturn CSAF documents after this date (ISO 8601, e.g. 2024-01-01)
beforeNoReturn CSAF documents before this date (ISO 8601, e.g. 2024-03-01)
packageNoPackage name to filter by (e.g. kernel, thunderbird)
per_pageNoResults per page (default: 1000)
rhsa_idsNoComma-separated RHSA IDs (e.g. RHSA-2024:1234,RHSA-2024:5678)
severityNoSeverity level: low, moderate, important, or critical
created_days_agoNoReturn CSAF documents created within this many days
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of disclosure. It adds value by stating results are paginated summaries, but omits behavioral details like how multiple filters are combined (AND/OR), default sort order, rate limits, or maximum page size. It's not misleading, just incomplete.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two efficiently structured sentences front-load the verb and resource, enumerate the filter dimensions, and state the return type. Every clause earns its place with zero redundancy. This is an exemplary model of concise tool documentation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that all 10 parameters are thoroughly documented in the schema and the description covers the key runtime behavior (paginated summaries), the combination is quite complete for a search tool. Minor omissions like default result ordering or behavior with no filters prevent a perfect score, but the description is strong enough for an agent to use it effectively.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema fully documents all 10 parameters. The description adds context about the paginated, summary output but no new parameter semantics beyond what the schema already provides. Per the rubric, high schema coverage yields a baseline of 3, which is appropriate here.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Search') with a well-defined resource ('Red Hat CSAF advisory documents') and enumerates concrete filter dimensions (date, severity, CVE, package, Bugzilla ID, RHSA ID). It distinguishes itself from siblings like 'search_cves' and 'get_csaf_details' by focusing on CSAF documents and returning 'a paginated list of advisory summaries.'

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly positions this as the search/filter entry point for CSAF advisories and indicates the output is summaries, implicitly distinguishing it from detail-fetching siblings like 'get_csaf_details.' However, it does not explicitly name alternative tools or provide when-not-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/dmc5179/redhat-security-data-api-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server