Skip to main content
Glama

Echo RunPod

Governed RunPod control plane for ECHO OMEGA PRIME. Version 1.1.1.

One canonical policy source. Thin entry points for Grok, Codex, Echo agents, and ChatGPT-via-Nexus.

Default

Observe and prepare. Do not spend unless the Commander approved a manifest or a bounded full lane is in force. Echo Nexus mutations require confirm: EXECUTE.

Related MCP server: gov-mcp

ChatGPT / MCP

Dedicated resource (do not request echo.write):

echo.sdk.invoke keeps mutation tools mutating (readOnlyHint: false). They still require confirm: EXECUTE plus an approved manifest or bounded full lane.

Install

See skills/echo-runpod/references/install-verify.md.

Test

PYTHONPATH=. python -m unittest discover -s tests -v

Upstream

  • runpod/runpod-plugins-official v1.1.2 b669407688056642d09d2049df5432cb78ae33f0

  • runpod/runpod-mcp 51d6fd9a0ff16a4eeb7d508972aeb5502f514939

Secrets

vault://runpod/api-key then RUNPOD_API_KEY. Never commit keys.

Available Tools

4 tools
invoke_sdk_capEcho SDK InvokeA
Destructive

Invoke an Echo SDK capability by exact capability ID with params. Risky caps require confirm='SDK_INVOKE_APPROVED' unless ECHO_MCP_ALLOW_RISKY_SDK=1. Supports idempotency_key + gate retry/backoff.

ParametersJSON Schema
NameRequiredDescriptionDefault
paramsNo
reasonNo
confirmNo
payloadNo
capabilityYes
idempotency_keyNoOptional key for safe retries of mutating invokes.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare this as non-read-only and destructive, but the description adds valuable behavioral context: risky invocations require an approval token or env override, and idempotency_key plus retry/backoff are supported. It still leaves undefined what risky means and what side effects occur.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three short, front-loaded sentences with no filler. Purpose, gating requirements, and retry support are each communicated efficiently.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive six-parameter tool with nested objects, the description covers the key approval and retry mechanics, and an output schema exists. However, with very low schema description coverage, it should do more to explain reason, payload, and params semantics.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 17%, so the description must compensate. It gives some meaning for capability, confirm, and idempotency_key, but it does not explain reason, payload, or the shape and semantics of params, leaving most parameters without meaningful guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: invoking an Echo SDK capability by exact capability ID with params. It is clear what the tool does, but it does not explicitly differentiate itself from the sibling tools search, write, and read.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an important usage condition for risky capabilities: confirm='SDK_INVOKE_APPROVED' unless ECHO_MCP_ALLOW_RISKY_SDK=1. However, it does not say when to use this tool versus alternatives such as search, write, or read, nor does it define what counts as a risky capability.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

readEcho ReadC
Read-only

Read a local file/directory or read one exact SDK capability record (includes registration_state).

ParametersJSON Schema
NameRequiredDescriptionDefault
idNo
pathNo
targetNofile
max_bytesNo
capabilityNo

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=false and destructiveHint=false, so the safety profile is covered by structured data. The description adds that an SDK capability read returns registration_state, which is useful content context, but it says nothing about max_bytes truncation behavior or what a directory read returns.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence with no padding, though the dual-purpose phrasing ('or read one exact SDK capability record') is dense and slightly ambiguous about which parameters select which mode.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described. However, for a 5-parameter tool with 0% schema coverage and no usage guidance, the description leaves the parameter disambiguation and truncation behavior unexplained, which is not enough for an agent to call it reliably.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% across 5 parameters, so the description carries the burden and largely fails. It hints that 'path' serves file/directory reads and that 'id'/'capability'/'target=sdk_cap' serve capability reads, but it never explains the id-vs-capability distinction, the target enum default, or what max_bytes (default 262144) truncates.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb (read) and two distinct resources: a local file/directory and a single SDK capability record. This differentiates it from the sibling invoke_sdk_cap (an action, not a read) and implicitly from search, though it never explicitly contrasts with search or write.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when-to-use guidance or exclusion. The phrase 'one exact SDK capability record' hints at exact-match lookup versus search, but the agent is left to infer that routing decision on its own.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

writeEcho WriteA
Destructive

Write or append UTF-8 text to a local file path. Idempotent via idempotency_key (or content-hash for overwrite). No delete operation is exposed.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNooverwrite
pathYes
contentYes
create_dirsNo
idempotency_keyNoOptional key for safe retries; same key returns stored result without re-writing.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and readOnlyHint=false, so the safety profile is covered. The description adds genuinely new behavior: idempotency via idempotency_key, content-hash idempotency for overwrite, and the absence of any delete path, clarifying what the destructive hint does and does not mean.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences with zero filler; the core action is front-loaded and the idempotency/scope caveats follow. Every clause carries information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need no explanation, and annotations cover the safety profile. The description rounds this out with idempotency and delete-scope notes, though it could say more about whether overwrite destroys prior content or what permissions are required.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 20% (only idempotency_key is documented), so the description must compensate. It does add real meaning for mode (overwrite vs append) and idempotency_key, but leaves path, content, and create_dirs to be inferred from their names alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource pair ("Write or append UTF-8 text to a local file path") with scope qualifiers (UTF-8, local path). The mutating verb inherently separates it from the `read` sibling, and the append/overwrite modes are named.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides one useful boundary ("No delete operation is exposed") and hints at retry semantics, but never says when to choose append vs overwrite or when to prefer this over the `read`/`search` siblings. Usage is implied rather than stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updatesv1.1.1
    • First observedinvoke_sdk_cap
    • First observedread
    • First observedsearch
    • First observedwrite

TDQS

B3.4/5.0

Scored across 4 tools

Disambiguation4/5

search (query-based discovery) vs read (fetch an exact path/ID) vs write vs invoke_sdk_cap are largely distinct actions, and descriptions clarify the file-vs-SDK-capability duality. However, search and read both span files and SDK capabilities, creating mild overlap an agent could occasionally confuse when deciding whether to look up or fetch a record.

Naming Consistency4/5

Three tools use terse single verbs (search, read, write) while one uses a fuller verb_noun form (invoke_sdk_cap); all are lowercase snake_case and verb-first. The pattern is readable and mostly consistent, with the one longer name being the only deviation.

Tool Count4/5

Four tools is compact but each earns its place: discovery, read, write, and remote capability invocation cover the core surface of a file+SDK server. It is on the thin side but defensible for the focused scope.

Completeness3/5

The set exposes read, write/append (idempotent overwrite), search, and SDK invocation, but no delete or directory/list mutation is offered despite the file-oriented surface. Missing delete and any explicit listing/management operation is a notable gap agents will hit when housekeeping files.

Maintenance

ActivitySlowing
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers