Echo RunPod
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Echo RunPodlist my active RunPod pods"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Echo RunPod
Governed RunPod control plane for ECHO OMEGA PRIME. Version 1.1.1.
One canonical policy source. Thin entry points for Grok, Codex, Echo agents, and ChatGPT-via-Nexus.
Default
Observe and prepare. Do not spend unless the Commander approved a manifest or a bounded full lane is in force. Echo Nexus mutations require confirm: EXECUTE.
Related MCP server: gov-mcp
ChatGPT / MCP
Dedicated resource (do not request echo.write):
live scopes:
echo.searchecho.fetchecho.invoke.readecho.sdk.invokenever:
echo.write,echo.read,echo.runpod.*secret:
vault://runpod/api-keythenRUNPOD_API_KEY
echo.sdk.invoke keeps mutation tools mutating (readOnlyHint: false). They still require confirm: EXECUTE plus an approved manifest or bounded full lane.
Install
See skills/echo-runpod/references/install-verify.md.
Test
PYTHONPATH=. python -m unittest discover -s tests -vUpstream
runpod/runpod-plugins-official v1.1.2
b669407688056642d09d2049df5432cb78ae33f0runpod/runpod-mcp
51d6fd9a0ff16a4eeb7d508972aeb5502f514939
Secrets
vault://runpod/api-key then RUNPOD_API_KEY. Never commit keys.
Available Tools
4 toolsinvoke_sdk_capEcho SDK InvokeADestructive
Invoke an Echo SDK capability by exact capability ID with params. Risky caps require confirm='SDK_INVOKE_APPROVED' unless ECHO_MCP_ALLOW_RISKY_SDK=1. Supports idempotency_key + gate retry/backoff.
| Name | Required | Description | Default |
|---|---|---|---|
| params | No | ||
| reason | No | ||
| confirm | No | ||
| payload | No | ||
| capability | Yes | ||
| idempotency_key | No | Optional key for safe retries of mutating invokes. |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare this as non-read-only and destructive, but the description adds valuable behavioral context: risky invocations require an approval token or env override, and idempotency_key plus retry/backoff are supported. It still leaves undefined what risky means and what side effects occur.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three short, front-loaded sentences with no filler. Purpose, gating requirements, and retry support are each communicated efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a destructive six-parameter tool with nested objects, the description covers the key approval and retry mechanics, and an output schema exists. However, with very low schema description coverage, it should do more to explain reason, payload, and params semantics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 17%, so the description must compensate. It gives some meaning for capability, confirm, and idempotency_key, but it does not explain reason, payload, or the shape and semantics of params, leaving most parameters without meaningful guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: invoking an Echo SDK capability by exact capability ID with params. It is clear what the tool does, but it does not explicitly differentiate itself from the sibling tools search, write, and read.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives an important usage condition for risky capabilities: confirm='SDK_INVOKE_APPROVED' unless ECHO_MCP_ALLOW_RISKY_SDK=1. However, it does not say when to use this tool versus alternatives such as search, write, or read, nor does it define what counts as a risky capability.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
readEcho ReadCRead-only
Read a local file/directory or read one exact SDK capability record (includes registration_state).
| Name | Required | Description | Default |
|---|---|---|---|
| id | No | ||
| path | No | ||
| target | No | file | |
| max_bytes | No | ||
| capability | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, openWorldHint=false and destructiveHint=false, so the safety profile is covered by structured data. The description adds that an SDK capability read returns registration_state, which is useful content context, but it says nothing about max_bytes truncation behavior or what a directory read returns.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single front-loaded sentence with no padding, though the dual-purpose phrasing ('or read one exact SDK capability record') is dense and slightly ambiguous about which parameters select which mode.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be described. However, for a 5-parameter tool with 0% schema coverage and no usage guidance, the description leaves the parameter disambiguation and truncation behavior unexplained, which is not enough for an agent to call it reliably.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across 5 parameters, so the description carries the burden and largely fails. It hints that 'path' serves file/directory reads and that 'id'/'capability'/'target=sdk_cap' serve capability reads, but it never explains the id-vs-capability distinction, the target enum default, or what max_bytes (default 262144) truncates.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb (read) and two distinct resources: a local file/directory and a single SDK capability record. This differentiates it from the sibling invoke_sdk_cap (an action, not a read) and implicitly from search, though it never explicitly contrasts with search or write.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use guidance or exclusion. The phrase 'one exact SDK capability record' hints at exact-match lookup versus search, but the agent is left to infer that routing decision on its own.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
searchEcho SearchARead-only
Search local files/directories and/or Echo SDK capability registry (mcp__claude_ai_EchoOmegaPrime__search). target=files|sdk_caps|both. For red/unregistered grounding: target=sdk_caps, query='red unregistered', optional health=red|unknown|unregistered, check_ids for exact registration probes.
| Name | Required | Description | Default |
|---|---|---|---|
| root | No | ||
| query | Yes | ||
| health | No | ||
| target | No | both | |
| cap_ids | No | Alias of check_ids. | |
| pattern | No | * | |
| check_ids | No | Exact capability IDs to probe for registration state. | |
| max_results | No | Maximum total final results across all selected targets. | |
| include_content | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds the scope of what is searched (local FS plus registry) and the registration-probe behavior, but says nothing about result ordering, limits interaction, or cost of a 'both' search.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three compact sentences, front-loaded with the core action and immediately followed by the mode enumeration and the special-case recipe. The only waste is the redundant self-referential tool identifier in parentheses.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With 9 parameters, only 33% schema coverage, and two distinct search domains, the description covers the primary usage path adequately and an output schema exists so return values need not be explained. It still leaves the file-search parameters (root, pattern, include_content) and the interaction between targets and max_results unexplained for a tool of this complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 33%, so the description must compensate, and it does explain target, health, query, and check_ids semantics beyond the raw enum values. However root, pattern, include_content, max_results, and cap_ids receive no treatment in the description, leaving roughly half the surface undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb (Search) and two concrete resources: local files/directories and the Echo SDK capability registry, with the target modes enumerated. It is clearly distinguishable from siblings like read, write, and invoke_sdk_cap, though the parenthetical repeating the tool's own name (mcp__claude_ai_EchoOmegaPrime__search) is confusing noise rather than clarification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives an explicit routing rule: use target=sdk_caps with query='red unregistered' for red/unregistered grounding, and check_ids for exact registration probes. That is real when-to-use guidance for one scenario, but it never states when to prefer files vs both, nor when to reach for read or invoke_sdk_cap instead.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
writeEcho WriteADestructive
Write or append UTF-8 text to a local file path. Idempotent via idempotency_key (or content-hash for overwrite). No delete operation is exposed.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | overwrite | |
| path | Yes | ||
| content | Yes | ||
| create_dirs | No | ||
| idempotency_key | No | Optional key for safe retries; same key returns stored result without re-writing. |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and readOnlyHint=false, so the safety profile is covered. The description adds genuinely new behavior: idempotency via idempotency_key, content-hash idempotency for overwrite, and the absence of any delete path, clarifying what the destructive hint does and does not mean.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences with zero filler; the core action is front-loaded and the idempotency/scope caveats follow. Every clause carries information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need no explanation, and annotations cover the safety profile. The description rounds this out with idempotency and delete-scope notes, though it could say more about whether overwrite destroys prior content or what permissions are required.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is only 20% (only idempotency_key is documented), so the description must compensate. It does add real meaning for mode (overwrite vs append) and idempotency_key, but leaves path, content, and create_dirs to be inferred from their names alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource pair ("Write or append UTF-8 text to a local file path") with scope qualifiers (UTF-8, local path). The mutating verb inherently separates it from the `read` sibling, and the append/overwrite modes are named.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides one useful boundary ("No delete operation is exposed") and hints at retry semantics, but never says when to choose append vs overwrite or when to prefer this over the `read`/`search` siblings. Usage is implied rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v1.1.1- First observed
invoke_sdk_cap - First observed
read - First observed
search - First observed
write
TDQS
Scored across 4 tools
search (query-based discovery) vs read (fetch an exact path/ID) vs write vs invoke_sdk_cap are largely distinct actions, and descriptions clarify the file-vs-SDK-capability duality. However, search and read both span files and SDK capabilities, creating mild overlap an agent could occasionally confuse when deciding whether to look up or fetch a record.
Three tools use terse single verbs (search, read, write) while one uses a fuller verb_noun form (invoke_sdk_cap); all are lowercase snake_case and verb-first. The pattern is readable and mostly consistent, with the one longer name being the only deviation.
Four tools is compact but each earns its place: discovery, read, write, and remote capability invocation cover the core surface of a file+SDK server. It is on the thin side but defensible for the focused scope.
The set exposes read, write/append (idempotent overwrite), search, and SDK invocation, but no delete or directory/list mutation is offered despite the file-oriented surface. Missing delete and any explicit listing/management operation is a notable gap agents will hit when housekeeping files.
Maintenance
Related MCP Connectors
Control plane for autonomous software labor. Agents claim objectives over MCP with audit trail.
Governed MCP: agent audit, provenance, deterministic checks, and receipt-backed FragGate execution.
MCP-first control plane for ProAgentStore agents and private instances.
Hosted MCP memory and agent control plane for durable conversations, jobs, and operations.
Related MCP Servers
- FlicenseAqualityBmaintenanceGovernance/control plane for MCP-enabled coding-agent workflows with validation, findings, approvals, budgets, and proof bundles.5510-
- AlicenseNot gradedqualityBmaintenanceAn MCP server that enforces runtime governance on AI agent actions — file access, command execution, delegation chains, and permission escalation.MIT

Infraveil MCP serverofficial
AlicenseAqualityBmaintenanceA hardened, self-hosted MCP server that lets AI agents query and govern an Infraveil control plane in-loop, reading state and filing deploy/remediation requests that require human approval.7AGPL 3.0- FlicenseBqualityAmaintenanceDeterministic MCP control plane for native Codex subagents, providing durable state, policy gates, budgets, artifacts, evidence workflow, and recovery for Sol/Terra/Luna hierarchical agent threads.241-