Skip to main content
Glama

rag-kb — Lokaler Agent-Gedächtnisdienst + Multi-Agent-Kollaborationssystem

License: Apache-2.0 Glama MCP score English | Deutsch

Dieses Repository enthält zwei Subsysteme (ROADMAP):

Subsystem

Kurzbeschreibung

Status

kb

Lokaler, vollständig kostenloser Agent-Gedächtnis- und Wissensdienst (Kernprodukt, Hauptentwicklungslinie)

v1.0.1 produktionsreif

agent-orchestra

Taskübergreifendes Multi-Agent-Kollaborationssystem auf Basis des gemeinsamen kb-Taskboards (❄️ Wartungsmodus, eigenes Gerüst)

B1-B3 eingefroren

Open-Source-Lizenz: Apache-2.0 (inklusive Patentlizenz, kommerziell nutzbar).

kb — Local-First-Agent-Gedächtnis- und Wissensdienst

Windows-Einzelprozess-Dauerbetrieb (python -m kb serve), Doppelprotokoll REST + MCP; stellt Claude Code / Cursor / TraeWork / selbst erstellten Agents das Schreiben von Erinnerungen, das Aufnehmen von Dokumenten und Webseiten, hybride Suche (Vektor + BM25/RRF-Fusion) und RAG-Fragenbeantwortung bereit.

Ohne LLM sind Zugriff und Suche vollständig nutzbar – das Schreiben von Erinnerungen, die Dokumentaufnahme und die hybride Suche hängen von keinem großen Modell ab; nach Konfiguration von lokalem Ollama oder Cloud-API wird die /ask-Fragenbeantwortung automatisch aktiviert.

Related MCP server: mnemostack

Kernfunktionen

  • Dauerbetrieb im Einzelprozess: Ein python -m kb serve bietet gleichzeitig REST-API- und MCP-Endpunkte, ohne zusätzliche Komponenten

  • Hybride Suche: BGE-M3-Vektorsuche + BM25-Keywordsuche, RRF-Fusions-Ranking, chinesische Segmentierung freundlich

    • Optionale Neubewertung: KB_RERANK_ENABLED=true aktiviert bge-reranker-v2-m3-Cross-Encoder-Reranking (standardmäßig aus)

    • Optionaler dritter Pfad: KB_SPARSE_ENABLED=true aktiviert den dritten BGE-M3-Sparse-Vektor-Pfad (standardmäßig aus, bei Fehlern automatischer Fallback auf zwei Pfade)

  • Erinnerungsverwaltung: Schreiben / Aktualisieren / Löschen / Auflisten, unterstützt Filterung nach namespace, tags, type

  • Multi-Client-/Projektisolierung (v2): Isolationsschlüssel = (client, project), Identität wird von der Umgebung getragen, nicht von der KI selbst angegeben – client wird automatisch aus MCP clientInfo erkannt (auf Framework-Ebene vertrauenswürdig), project wird von Verbindung/Verzeichnis getragen (Standard = Standard-Bucket dieses Clients); persönliche Erinnerungen sind nur für diesen Client + dieses Projekt sichtbar (Lesen/Ändern/Löschen durch andere wird abgelehnt), geteiltes Dokument-/Webseitenwissen ist für alle Clients sichtbar; Primärschlüssel werden serverseitig generiert

  • Zugriffs-Audit: Jeder Schreib-/Lese-/Änderungs-/Lösch-/Such-/Fragevorgang wird als JSON in logs/agent-audit/<客户端>__<项目>.log geschrieben (nach client+project getrennte Dateien); Benutzer können abfragen: REST GET /api/v1/audit?client=<客户端>[&project=<项目>] oder CLI kb audit --client <客户端>

  • Wissensaufnahme: Lokale Dokumente (txt/md/pdf/docx usw.) per Upload oder Pfadimport, Webseiteninhalte werden extrahiert und aufgenommen

  • Verzeichnisüberwachung: Neu hinzugefügte oder gelöschte Dateien im angegebenen Verzeichnis werden automatisch aufgenommen/bereinigt (KB_WATCH_DIR)

  • CLI-Werkzeuge: kb add/search/stats/ask/eval/forget/dedup – direkt im Terminal Schreiben, Suchen, Statistiken und RAG-Fragenbeantwortung ausführen

  • Datenschutz-Guardrail: Sensible namespaces erzwingen lokale Antworten ohne Datenabfluss ins Internet; /ask intelligentes Routing (lokal zuerst, schwierige Fragen optional in die Cloud)

  • Offline verfügbar: Modelle und Daten liegen vollständig lokal; ohne Netzwerk sind Zugriff und Suche voll funktionsfähig

Schnellstart (Windows / Linux / macOS)

Windows PowerShell:

# 1. 创建并激活虚拟环境
python -m venv venv
.\venv\Scripts\Activate.ps1

# 2. 安装依赖
pip install -r requirements.txt

# 3. 启动服务(默认监听 http://127.0.0.1:8000)
python -m kb serve

Linux / macOS:

# 1. 创建并激活虚拟环境
python3 -m venv venv
source venv/bin/activate

# 2. 安装依赖
pip install -r requirements.txt

# 3. 启动服务
python -m kb serve

Wichtig: Der Befehl kb wird nur in der virtuellen Umgebung installiert. In jedem neuen Terminal muss zuerst die virtuelle Umgebung aktiviert werden (Windows .\venv\Scripts\Activate.ps1, Linux/macOS source venv/bin/activate), sonst erscheint die Meldung kb:未找到命令. Mit python -m kb <子命令> lässt sich die Aktivierung umgehen.

Alternative Schnellinstallation (ohne virtuelle Umgebung, Python 3.10+): pip install --user -r requirements.txt und dann mit python -m kb serve ausführen; es wird jedoch empfohlen, bevorzugt venv zur Isolierung der Abhängigkeiten zu verwenden.

Gesundheitscheck nach dem Start:

curl http://127.0.0.1:8000/api/v1/healthz

Beim ersten Start wird das lokale Embedding-Modell geladen (standardmäßig BAAI/bge-m3, ca. 2 GB, muss vorab heruntergeladen und zwischengespeichert werden); wenn kein LLM konfiguriert ist, startet der Dienst wie gewohnt; /ask liefert 503 und Konfigurationshinweise zurück.

LLM ist standardmäßig deaktiviert (KB_LLM_MODE=off): Der Dienststart erkennt/lädt/ruft kein großes Modell auf, null VRAM, null Kosten, rein offline; Erinnerungen schreiben, Dokumentaufnahme und hybride Suche sind vollständig nutzbar. Wenn RAG-Fragenbeantwortung (/ask) benötigt wird, konfigurieren Sie wie unten ein lokales oder Cloud-LLM.

LLM konfigurieren (optional, für die /ask-Fragenbeantwortung erforderlich)

KB_LLM_MODE ist standardmäßig off (wird nicht geladen und nicht aufgerufen); vier Stufen:

Stufe

Verhalten

off (Standard)

LLM wird überhaupt nicht geladen/aufgerufen; Erinnerungszugriff und Suche vollständig nutzbar

local

Nur lokales Ollama (vollständig offline, Datenschutz ohne Abfluss nach außen)

auto

Lokal bevorzugt, Cloud-Fallback: Wenn lokales Ollama verfügbar ist, wird lokal verwendet; wenn kein lokales, aber ein Cloud-Schlüssel vorhanden ist, in die Cloud

cloud

Alles über die Cloud (lokal nur Komprimierung und Datenschutzisolierung)

Lokales LLM (Ollama):

# 1. 安装并启动 Ollama(Windows 从开始菜单/托盘启动,不要从 AI 沙箱终端拉起)
# 2. 拉取一个适合你电脑的模型(按显存/内存选择,如 qwen3:4b 约 3.2GB、
#    qwen3:1.7b 约 1.8GB;国内可用魔搭加速,拉完 ollama cp 改成短名)
ollama pull <你的模型名>
# 3. 在 .env 配置后重启服务:
#    KB_LLM_MODE=local            # 仅本地
#    KB_LLM_MODEL=<你的模型名>    # 以 `ollama list` 输出的名称为准
#    KB_OLLAMA_BASE_URL=http://localhost:11434

Cloud-LLM (beliebiger OpenAI-kompatibler Anbieter, nicht an DeepSeek gebunden): DeepSeek / OpenAI / 通义千问 / 硅基流动 / Moonshot usw. sind möglich, allgemein drei Schlüssel:

# .env
KB_LLM_MODE=auto                 # 本地优先、云端降级;或 cloud 全云端
KB_LLM_API_KEY=sk-xxx            # 服务商 API Key
KB_LLM_BASE_URL=https://api.deepseek.com   # 换成你所用服务商的 OpenAI 兼容端点
KB_LLM_CLOUD_MODEL=deepseek-v4-flash       # 云端模型名

Überprüfung: Das Feld llm von GET /api/v1/healthz – local/cloud bedeutet, das LLM ist bereit, disabled bedeutet nicht aktiviert.

Häufige Probleme: Download des Embedding-Modells schlägt fehl

  • Bei direkter Verbindung aus dem chinesischen Festland zu huggingface.co kommt es zu Zeitüberschreitungen. HF-Mirror setzen und neu starten:

    export HF_ENDPOINT=https://hf-mirror.com   # 或写入 ~/.bashrc 永久生效
    python -m kb serve

    Das Modell wird automatisch vom Mirror heruntergeladen und in ~/.cache/huggingface/hub/ zwischengespeichert; danach kann es auch ohne Netzwerk offline geladen werden.

  • Modell ist lokal zwischengespeichert, aber kein externes Netzwerk: kb verwendet Offline-First (zuerst lokalen Cache treffen, nur bei Fehlschlag online gehen); solange das Cache-Verzeichnis vollständig ist, läuft es vollständig offline.

Agents an kb anbinden (clientunabhängig)

Übergeben Sie die Integrationsspezifikation von kb an den KI-Client (TraeWork / Claude Code / Cursor / selbst erstellte Agents), damit diese wissen, wie sie Erinnerungen lesen und schreiben, nach welcher Identitätskonvention sie vorgehen und wie sie das Audit abfragen. Zwei Wege, wählen Sie einen davon:

  1. Skill (empfohlen, kann automatisch ausgelöst werden) – optionaler, unabhängiger Schritt: Das skills/kb-memory/SKILL.md im Repository ist ein clientunabhängiger Skill im offenen Anthropic-Format. Nach der Installation im Benutzer-Skills-Verzeichnis des von Ihnen verwendeten Clients wird der Skill in jeder Projektsitzung dieses Clients beim Lesen/Schreiben von Erinnerungen / RAG-Fragenbeantwortung / Audit-Abfragen automatisch erkannt und ausgelöst. Installation = einfach das Verzeichnis skills/kb-memory dorthin kopieren (es gibt ein Skript, manuelles Kopieren ist ebenfalls möglich, keine Abhängigkeiten erforderlich); Aktualisierung (erneutes Überschreiben), Deinstallation sowie Nutzungshinweise nach der Installation finden Sie in scripts/README.md.

    Das Nichtinstallieren beeinträchtigt den kb-Dienst nicht: Der Skill ist nur eine „Prompt-Verpackung“ für KI-Clients und hat nichts mit Installation und Start des Dienstes zu tun – überspringen Sie diesen Schritt, der Dienst läuft normal weiter; Sie können jederzeit über die reinen Text-Prompts aus Methode 2 anbinden; die Skill-Installation ist einmalig, bei Bedarf und unabhängig ausführbar; sie wird nicht automatisch mit kb serve ausgelöst und schreibt keine Dateien außerhalb der Verzeichnisse Ihres Clients.

  2. Reiner-Text-Prompt (Fallback, universell für jeden Client): Den gesamten Abschnitt aus docs/AGENT_PROMPT.md kopieren und dem Agent einfügen; keine Skill-Mechanik nötig.

Sind .trae-cn/skills / .claude/skills / .cursor/skills ein von allen Clients anerkannter „Standard“? – Nein. Diese sind lediglich die benutzerbezogenen Konventionsverzeichnisse der jeweiligen Clients: SKILL.md selbst ist ein einheitliches offenes Anthropic-Format, aber „in welches Verzeichnis installiert wird und ob automatisch ausgelöst wird“, entscheidet jeder Client selbst; der Unterstützungsgrad ist unterschiedlich:

Client

Benutzerbezogenes Skills-Verzeichnis

Automatisches Laden

TraeWork

~/.trae-cn/skills/

Automatische Erkennung

Claude Code

~/.claude/skills/

Von höheren Versionen unterstützt

Cursor

~/.cursor/skills/

Wird schrittweise übernommen

Andere / selbst erstellte Agents

Keine einheitliche Konvention

Muss manuell geladen werden oder nicht unterstützt

Es gibt kein einheitliches Verzeichnis, dem „alle Clients folgen“; wenn Ihr Client Skills nicht unterstützt, gibt es immer Methode 2 als Fallback (AGENT_PROMPT.md einfügen, reiner Text für jeden Client nutzbar). Installationsmethode, Verzeichnisunterschiede und Lademechanismen der Clients sowie gegenseitige Referenzbeziehungen: Details finden Sie in scripts/README.md (hier nicht wiederholt).

MCP-Einbindung

MCP-Endpunkt (streamable HTTP): http://127.0.0.1:8000/mcp/

Claude Code: Dieses Repository enthält bereits ein projektweites .mcp.json; beim Start von Claude Code in diesem Verzeichnis wird es automatisch eingebunden; es kann auch global hinzugefügt werden:

claude mcp add --transport http kb http://127.0.0.1:8000/mcp/

Cursor / TraeWork und andere MCP-fähige Clients: Fügen Sie in der MCP-Konfiguration folgendes JSON hinzu (Cursor in ~/.cursor/mcp.json oder Projekt-.cursor/mcp.json; TraeWork unter Einstellungen MCP-Server hinzufügen):

{
  "mcpServers": {
    "kb": {
      "type": "http",
      "url": "http://127.0.0.1:8000/mcp/"
    }
  }
}

Nach der Einbindung verfügbare MCP-Tools: write_memory / search_memory / read_memory / update_memory / delete_memory / add_document / add_webpage / ask_kb.

Nach Aktivierung der KB_API_KEY-Authentifizierung müssen MCP-Clients in der Verbindungskonfiguration headers hinzufügen (Authorization: Bearer <key>); die .mcp.json-Vorlage im Repository enthält keinen echten Schlüssel (JSON unterstützt keine Kommentare); die Konfiguration finden Sie in USER_GUIDE §5.2.

REST-Endpunkte im Überblick

Methode

Pfad

Beschreibung

POST

/api/v1/memories

Erinnerung schreiben {content, tags?, source?, namespace?}

GET

/api/v1/memories

Erinnerungsliste, unterstützt Filterung nach type/tag/source/q/limit/offset

GET

/api/v1/memories/{id}

Einzelne Erinnerung lesen

PATCH

/api/v1/memories/{id}

Inhalt oder Tags aktualisieren

DELETE

/api/v1/memories/{id}

Einzelne Erinnerung löschen

POST

/api/v1/search

Hybride Suche {query, top_k?, mode?, type?, tag?}, mode: hybrid/vector/keyword

POST

/api/v1/documents

Dokumentaufnahme: multipart-Feld file oder JSON {"path": "本地路径"}

GET

/api/v1/documents

Liste der aufgenommenen Dokumente (nach source aggregiert)

DELETE

/api/v1/documents/{source}

Alle Datensätze dieses Dokuments nach source löschen

POST

/api/v1/ingest/web

Webseitenaufnahme {url}, Text extrahieren, segmentieren und aufnehmen

POST

/api/v1/ask

RAG-Fragenbeantwortung {question}; ohne konfiguriertes LLM 503 zurückgeben

GET

/api/v1/healthz

Gesundheitscheck und Dienststatistiken

GET

/api/v1/governance/stats

Statistiken zur Erinnerungs-Governance: total_count/avg_access_count/stale_90d_count (nur lesen)

GET

/api/v1/governance/config

Governance-Konfiguration: Schalter und Parameter für Abklingen + Frische (nur lesen)

POST

/api/v1/memories → 409

Nach Aktivieren der semantischen Deduplizierung (KB_DEDUP_ENABLED=true) gibt ein Schreibvorgang bei Treffer eines Duplikats 409 zurück: {"error":"DUPLICATE","duplicate_of":"<已有记录id>","similarity":<相似度>} (kein Schreiben)

Erinnerungs-Governance (Deduplizierung/Abklingen/Frische) ist standardmäßig deaktiviert, null Verhaltensänderungen; Verwendung siehe USER_GUIDE §3.5.

Beispiel:

# 写入一条记忆
curl -X POST http://127.0.0.1:8000/api/v1/memories `
  -H "Content-Type: application/json" `
  -d '{"content": "用户偏好深色主题", "tags": ["偏好"]}'

# 混合检索
curl -X POST http://127.0.0.1:8000/api/v1/search `
  -H "Content-Type: application/json" `
  -d '{"query": "用户界面偏好", "top_k": 5}'

# RAG 问答(需配置 LLM)
curl -X POST http://127.0.0.1:8000/api/v1/ask `
  -H "Content-Type: application/json" `
  -d '{"question": "用户喜欢什么主题?"}'

Konfigurationsparameter im Überblick

Alle Konfigurationen werden über Umgebungsvariablen mit KB_-Präfix oder über die Datei .env bereitgestellt; die vollständigen Schlüsselnamen finden Sie in .env.example (nach dem Kopieren in .env ausfüllen; .env ist durch gitignore abgedeckt, echte Schlüssel nur auf dem lokalen Rechner aufbewahren, auf keinen Fall einchecken).

Konfiguration

Standardwert

Beschreibung

KB_LLM_MODE

off

LLM-Modus: off (Standard, lädt/ruft kein LLM, null VRAM null Kosten) / local (nur lokales Ollama) / auto (lokal bevorzugt, Cloud-Fallback) / cloud

KB_DEVICE

leer

Gerät für das Embedding-Modell: leer=automatische Erkennung, explizit cpu / cuda setzbar

KB_WATCH_DIR

data

Im serve-Modus überwachtes Verzeichnis; Dateiänderungen werden automatisch aufgenommen; leere Zeichenkette oder . = nicht starten

KB_DATA_DIR

kb_data

Wurzelverzeichnis der Laufzeitdaten (ChromaDB, Laufzeitstatus usw.)

KB_API_HOST / KB_API_PORT

127.0.0.1 / 8000

Listening-Adresse für REST und MCP

KB_EMBED_MODEL

BAAI/bge-m3

Embedding-Modell

KB_LLM_MODEL

leer

Lokaler Ollama-Modellname (Standard leer=nicht konfiguriert; bei KB_LLM_MODE=local/auto muss ein Modell passend zum eigenen Rechner gewählt werden, maßgeblich ist ollama list)

KB_OLLAMA_BASE_URL

http://localhost:11434

Ollama-Endpunkt

KB_LLM_API_KEY / KB_LLM_BASE_URL / KB_LLM_CLOUD_MODEL

leer

Cloud-LLM (optional): beliebiger OpenAI-kompatible Anbieter (DeepSeek / OpenAI / 通义 / 硅基流动 usw.), nur in die lokale .env eintragen

KB_CHUNK_SIZE / KB_CHUNK_OVERLAP

500 / 100

Parameter für Dokeumentsegmentierung

KB_SENSITIVE_NAMESPACES

leer

Kommagetrennte sensible namespaces; bei Treffer wird lokale Antwort erzwungen, ohne Datenabfluss ins Internet

KB_API_KEY

leer

leer=keine Authentifizierung (lokale Schleife ohne Reibung); nicht leer=Bearer/X-API-Key-Authentifizierung aktiviert; orchestra-Clients senden automatisch den Header X-API-Key

KB_RERANK_ENABLED / KB_RERANK_MODEL / KB_RERANK_TOP_N

false / BAAI/bge-reranker-v2-m3 / 20

Feinranking der Suche (A3.5): fusierte Kandidaten werden per CrossEncoder neu bewertet, standardmäßig aus

KB_SPARSE_ENABLED

false

Dritter Sparse-Pfad (A3.5): BGE-M3-Sparse-Vektoren + invertierter Index nehmen an der RRF-Fusion teil, standardmäßig aus

CLI-Schnellübersicht (ohne Dienststart)

python -m kb add "记忆内容" --tags 偏好 --client TraeWork                       # 写入(project 缺省自动取当前目录名)
python -m kb search "查询词" --client TraeWork                                 # 混合检索(只回本客户端+本项目的 memory)
python -m kb stats                            # 统计:类型分布 / 访问热度 / 陈旧分布
python -m kb ask "问题" --client TraeWork      # 终端 RAG 问答(LLM 不可用时输出检索命中)
python -m kb audit --client TraeWork --days 7   # 查某客户端/项目存过/读过什么
python -m kb eval --file tests/eval_zh_50.jsonl   # 检索质量评测(Recall@1/@5 + MRR)
python -m kb forget --stale --days 90         # 清理超期未命中记忆
python -m kb dedup --threshold 0.92           # 语义去重

kb ask verbindet sich direkt mit der lokalen Dienstlogik (nicht über HTTP); empfohlen, wenn serve gestoppt ist, um Schreibkonkurrenz zweier Prozesse auf die Datenbank zu vermeiden.

agent-orchestra — Multi-Agent-Kollaborationssystem (experimentell)

Mehrere KI-Assistenten (verschiedene TraeWork-Aufgaben / Claude-Code-Sitzungen, Modelle können unterschiedlich sein) entwickeln über das gemeinsame kb-Taskboard kollaborativ: Die Koordinator-KI zerlegt Karten und verteilt sie, die Worker-KI übernimmt Karten und führt sie aus (eine Karte pro Runde) und schreibt Ergebnisse zurück; der Koordinator prüft und lässt den Workflow weiterlaufen.

# 前置:kb serve 已运行。开一个新 TraeWork 任务,粘贴以下引导语即可唤醒一个 worker:
venv\Scripts\python.exe orchestra\board.py new-worker worker-1

Die vollständige Verwendung (wie der Koordinator Karten zerlegt, wie mehrere Worker parallel arbeiten, Kollaborationsdisziplin und bekannte Einschränkungen) finden Sie in Benutzerhandbuch, Abschnitt 4.

Verzeichnisstruktur

kb/            kb 服务源码(config / models / embedder / storage / bm25 / retriever /
               service / llm / ingest / watcher / api / mcp / cli + reranker / sparse / eval)
tests/         kb 验收测试(339 项,含 eval_zh_50.jsonl 检索评测数据集)
orchestra/     多 Agent 协作系统(board.py CLI + 协议三件套 + skill + 245 项测试)
docs/          设计文档、节点计划、用户使用手册
kb_data/       kb 运行数据(gitignore)
_archive/      旧学习项目归档(仅保留历史,禁止参考)

Weitere Dokumentation

  • Benutzerhandbuch (Einstieg für menschliche Benutzer): docs/USER_GUIDE.md

  • KI-Übergabedokument (Einstieg für KI-Assistenten): PROJECT.md (Projektstatus / Fortschritts-Board / Übergabeanleitung)

  • Designdokument (Anforderungen, Architektur, API, Meilensteine): docs/superpowers/specs/2026-08-23-kb-memory-service-design.md

  • P2-Logging-Design: docs/superpowers/specs/2026-08-24-logging-design.md

  • P2-Roadmap: docs/superpowers/plans/2026-08-24-p2-roadmap.md

  • Knoten-Entwicklungsplan: docs/superpowers/plans/2026-08-23-kb-dev-nodes.md

  • KI-Kollaborationsrichtlinien: AGENTS.md

Available Tools

13 tools
add_documentB

导入本地文档(PDF/DOCX/MD/TXT 及 Office 格式)切分入库; 返回 {"source": 文件名, "chunks": 块数};文件不存在或格式不支持时 返回 {"error": "FILE_NOT_FOUND" | "UNSUPPORTED_FORMAT", "message": 原因}。 project:文档 chunk 落入该项目子库(空=全局库);client:仅用于审计归类。 English: Import a local document (PDF/DOCX/MD/TXT and Office formats), split and ingest it; returns {"source": filename, "chunks": count}; when the file is missing or the format is unsupported returns {"error": "FILE_NOT_FOUND" | "UNSUPPORTED_FORMAT", "message": reason}. project: chunks go to that project's sub-store (empty = global); client is audit-only.

NameRequiredDescriptionDefault
pathYes
clientNo
projectNo

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so the description carries the full burden; it usefully discloses the return shape (source/chunks) and the two error codes with reasons, which is real behavioral value. However it omits permissions/auth, idempotency, and what happens on re-import or duplicate files.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loads the operation and return contract, which is good structure. But the entire content is duplicated in Chinese and English, roughly doubling length without adding information, and the parameter notes trail after the return-value block.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema the description correctly supplies the return and error contract, and with no annotations it covers parameter meaning. It is only missing the safety/permission profile and path-format semantics, so it is close to complete for a 3-parameter ingest tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It does well for project (sub-store target, empty = global) and client (audit-only), but the required `path` parameter is left unqualified – no indication of whether it is a server-side or client-side path or an absolute vs relative path.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (import/split/ingest) and resource (local document) plus the supported formats, so it is distinguishable from the sibling add_webpage via the 'local' qualifier. It stops short of naming the sibling explicitly, but the intent is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit when-to-use or when-not-to-use guidance. It never mentions add_webpage (the obvious alternative for remote content) or any prerequisite/precondition, leaving the agent to infer that this tool is only for local files.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

add_webpageA

抓取网页正文并切分入库;返回 {"source": url, "chunks": 块数}; 抓取/正文提取失败时返回 {"error": "WEB_FETCH_FAILED", "message": 原因}。 project:web chunk 落入该项目子库(空=全局库);client:仅用于审计归类。 English: Fetch a webpage body and ingest it after splitting; returns {"source": url, "chunks": count}; on fetch/body-extraction failure returns {"error": "WEB_FETCH_FAILED", "message": reason}. project: chunks go to that project's sub-store (empty = global); client is audit-only.

NameRequiredDescriptionDefault
urlYes
clientNo
projectNo

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does reasonably well: it discloses both the success return shape ({source, chunks}) and the failure shape including the WEB_FETCH_FAILED error code and a reason message. It also explains the storage scoping rule (project sub-store vs global). It stops short of auth requirements, rate limits, or duplicate-URL behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The content is front-loaded and each piece of information is useful, but the entire description is duplicated verbatim in Chinese and English, which doubles the token cost without adding information for a reader who understands either language.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description's disclosure of the return and error shapes is exactly what is needed. For a simple 3-parameter ingestion tool with no annotations, the description covers purpose, parameters, and outcomes adequately; only operational details like deduplication or size limits are absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, and it does for the non-obvious parameters: 'project' is explained as the destination sub-store with empty meaning global, and 'client' is explicitly flagged as audit-only metadata. 'url' is self-evident. This adds real meaning beyond the echoed titles in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a concrete verb chain and resource: fetch a webpage body, split it, and ingest it into the store. That is far more specific than the bare name, but it never differentiates itself from the sibling add_document (file-based ingestion) or write_memory, so an agent must infer which ingestion tool to pick.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied by the phrase 'fetch a webpage body and ingest it' — an agent can infer this is for pulling web content into the knowledge base. There is no statement of when to prefer add_document over this tool, no prerequisites, and no exclusions (e.g. unsupported schemes or already-ingested URLs).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

ask_kbA

基于知识库的 RAG 问答(检索 → 上下文拼装 → 护栏生成),返回 answer 与 sources; project:检索该项目子库 + 全局库(空=仅全局库),并写 ask 存取审计; client:来源客户端(可选,缺省从 clientInfo 自动识别,仅审计); LLM 不可用时返回 {"error": "LLM_DISABLED", "message": 配置指引}。 English: Knowledge-base RAG Q&A (retrieve → build context → guarded generation), returning answer and sources; project: search that project's sub-store plus the global store (empty = global only); an ask access-audit is emitted; client is audit-only; returns {"error": "LLM_DISABLED", "message": setup guidance} when the LLM is unavailable.

NameRequiredDescriptionDefault
clientNo
projectNo
questionYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations the description carries the full burden, and it does disclose meaningful behavior: the retrieve→context→guarded-generation pipeline, the side effect that an ask access-audit is written, that client is audit-only, and the exact failure contract {"error": "LLM_DISABLED", ...}. It stops short of covering auth requirements, rate limits, or result-size limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The content is front-loaded and dense, but the English block restates the Chinese block nearly verbatim, roughly doubling the length without adding information. A single-language description would carry the same payload.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, so the description correctly takes on the return contract (answer + sources, plus the error object) and covers the one non-obvious side effect. Missing detail is limited to the shape of sources and any size or rate limits.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It successfully explains project (sub-store + global, empty = global only) and client (optional, auto-detected from clientInfo, audit-only), which the schema alone gives no meaning for. Only 'question' is left without added detail, but its meaning is self-evident.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Knowledge-base RAG Q&A (retrieve → build context → guarded generation), returning answer and sources'. It is unambiguous about what the tool produces, but it does not name or contrast with siblings such as search_memory, so an agent must infer the boundary itself.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by the pipeline and by the project/client explanations, and the LLM-disabled fallback gives situational context. However, there is no explicit when-to-use-this-vs-search_memory guidance, no statement about question phrasing, and no exclusion conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

delete_documentA

按 source 删除一份 RAG 文档/网页/表格的全部记录,返回 {"source", "deleted"}; 删除会级联清理 BM25 与向量索引;source 为空时返回 INVALID_ARGUMENT。 project 指定项目子库(空=全局库);client 仅用于审计归类。 English: Delete all records of one RAG document/webpage/table by source, returning {"source", "deleted"}; cascades to BM25 and vector indexes; empty source returns INVALID_ARGUMENT. project selects the sub-store (empty = global); client is audit-only.

NameRequiredDescriptionDefault
clientNo
sourceYes
projectNo

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden and does substantial work: it discloses cascade deletion of BM25 and vector indexes, the {"source", "deleted"} return shape, the INVALID_ARGUMENT failure for empty source, and that client is audit-only metadata. It stops short of stating whether deletion is recoverable, what the `deleted` count represents, or whether elevated permissions are required for a destructive operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Content is front-loaded with the destructive scope and cascade behavior in the opening sentence, which is correct ordering. But the entire text is duplicated verbatim in Chinese and English, roughly doubling length with zero added information for a single agent, and the parenthetical error/parameter notes are run together in one block.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 3-parameter destructive tool with no annotations and no output schema, the description supplies the essential load-bearing facts: what gets removed, that secondary indexes are cascaded, the return shape, and the error condition. Only permission/auth prerequisites and irreversibility are unstated, which is a minor residual gap given the rest of the coverage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, and it explains the role of all three parameters: project selects the sub-store (empty = global), client is audit-only, and source is the deletion key. The remaining gap is that the required `source` parameter's expected format (exact URL, path, or filename) and matching semantics are never specified.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource with explicit scope: delete *all records* of one RAG document/webpage/table, keyed by source. That scope wording distinguishes it from the sibling delete_memory (which operates on memories, not ingested document records) without needing to open either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use it (purge a whole document's records by source) and explains the project sub-store selection and the empty-source error case. However it gives no explicit when-not-to-use guidance, never mentions the delete_memory sibling, and does not say anything about confirming intent before a destructive purge.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

delete_memoryA

按 ID 删除一条记忆;成功返回 {"ok": true},记录不存在返回 {"error": "NOT_FOUND"}。 project:先查该项目子库,再查全局库;不传时先查全局库再查各项目子库。 client:来源客户端(可选,缺省从 clientInfo 自动识别,仅审计)。 English: Delete a memory by ID; returns {"ok": true} on success and {"error": "NOT_FOUND"} when it does not exist. project: locate in that project's sub-store then the global store; when omitted, global first and then each project store. client is audit-only.

NameRequiredDescriptionDefault
clientNo
projectNo
record_idYes

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it discloses return payloads ({'ok': true} vs {'error': 'NOT_FOUND'}), the scoped search order for project, and that client is audit-only with auto-detection from clientInfo. It omits whether deletion is permanent/irreversible and any permission requirements.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Content is front-loaded and clear, but it is presented bilingually with the English text duplicating the Chinese nearly verbatim, roughly doubling the length without adding information. That redundancy costs efficiency.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutating tool with no annotations and no output schema, the description covers the essentials: return values, project scoping order, and audit behavior. It is nearly complete, only missing auth/irreversibility details and guidance on obtaining record_id.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It explains 'project' lookup behavior and clarifies 'client' is optional and audit-only, but says nothing about the required 'record_id' (format, where to obtain it), leaving one of three params undocumented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Delete a memory by ID') and the operation is unambiguously distinct from siblings like read_memory, update_memory, and write_memory. An agent can identify the correct tool without inspecting the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explains the resolution behavior for the 'project' parameter (project sub-store vs global store, and the lookup order when omitted), which is the main usage-relevant context. It does not state explicit when-not-to-use conditions or name alternative tools, but the delete semantics are self-evident.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_documentsA

列出已入库的 RAG 内容(按 source 聚合,kind=doc/web/table), project 指定项目子库(空=全局库);client 仅用于审计归类。 返回 [{"source", "chunks", "chars", "last_imported", "kind"}]。 English: List ingested RAG content grouped by source (kind=doc/web/table); project selects the sub-store (empty = global); client is audit-only. Returns [{"source", "chunks", "chars", "last_imported", "kind"}].

NameRequiredDescriptionDefault
clientNo
projectNo

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are supplied, so the description carries the full burden, and it does disclose genuinely non-obvious behavior: results are pre-aggregated per source with chunk and character counts, 'client' does not filter but is audit-only, and an empty project means the global store. What is missing is any statement about ordering, result limits, or behavior on an empty store — relevant for a listing call that can return many sources.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Each language block is well front-loaded (purpose first, then parameters, then return shape), but the entire content is duplicated in Chinese and English, effectively doubling length with no added information. It also restates the return fields even though an output schema already exists.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 0-required-parameter read-only listing tool with only two optional parameters and an output schema, the description covers purpose, both parameters, and aggregation semantics. The residual gap is operational detail (ordering, limits) that an agent might want when the store is large.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, and it does: it explains that project selects the sub-store with empty meaning global, and that client is audit-only rather than a filter — meaning an agent could not derive from the schema alone. It stops short of stating accepted value formats or whether unknown project names error or return empty.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource ('List ingested RAG content') plus the aggregation semantics ('grouped by source') and the kind values allowed (doc/web/table). It is clearly an inventory/listing tool, distinguishable in intent from siblings like ask_kb or search_memory, though it never names an alternative explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is only implied: the reader can infer this is the browse/inventory step rather than the retrieval step, and the note that project empty = global is a scoping rule. There is no explicit when-to-use/when-not guidance and no mention of ask_kb or search_memory as the alternative for content lookup.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

read_memoryA

按 ID 读取单条记忆完整内容;记录不存在返回 {"error": "NOT_FOUND"}。 project:先查该项目子库,再查全局库;不传时先查全局库再查各项目子库。 client:来源客户端(可选,缺省从 clientInfo 自动识别,仅审计)。 English: Read the full content of a single memory by ID; returns {"error": "NOT_FOUND"} when absent. project: search that project's sub-store first, then the global store; when omitted, global first and then each project store. client is audit-only.

NameRequiredDescriptionDefault
clientNo
projectNo
record_idYes

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does disclose meaningful behavior: the exact NOT_FOUND error shape, the store-resolution order for project lookups (project sub-store then global, vs global then each project store when omitted), and that client is audit-only and auto-detected. It stops short of stating permissions or the success payload shape.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The core action is front-loaded and each sentence carries information, but the full Chinese/English duplication roughly doubles the length for a single-language agent, which is redundant rather than additive.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, and the description covers the failure return and store-resolution behavior, which are the non-obvious parts. The success payload is only gestured at ('full content'), a minor gap for a read-by-ID tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, and it explains two of three parameters well: project's lookup-order semantics and client being optional, auto-detected, and audit-only. record_id is left undefined but is self-evident from 'by ID'.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Read the full content of a single memory by ID'), and the singular 'by ID' framing cleanly separates it from the sibling search_memory, which returns multiple matches. An agent can pick correctly without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The 'by ID' phrasing implies it is a direct-lookup tool that presupposes a known identifier, but the description never states when to prefer it over search_memory or how to obtain a record_id. Usage is inferred from context rather than stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_memoryA

混合检索记忆与知识(向量语义 + BM25 关键词,归一化融合); 返回命中列表,每项含 id/content/score/type/source。 project 指定项目子库时,检索范围 = 该项目子库 + 全局库(项目命中加分); 不传 project 时只检索全局库。 top_k 小于 1 时返回 {"error": "INVALID_ARGUMENT", "message": 原因}。 client:来源客户端(可选,缺省从 clientInfo 自动识别,仅审计)。 English: Hybrid retrieval over memories and knowledge (vector semantics + BM25 keywords, normalized fusion); returns a hit list, each item having id/content/score/type/source. With project, the scope is that project's sub-store plus the global store (project hits boosted); without project, only the global store is searched. Returns {"error": "INVALID_ARGUMENT", "message": reason} when top_k is less than 1. client: source client (optional; auto-detected from clientInfo when omitted; audit only).

NameRequiredDescriptionDefault
queryYes
top_kNo
clientNo
projectNo

Output Schema

NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden and largely meets it: it discloses the return shape (id/content/score/type/source per hit), the error contract for top_k < 1, the project-boost behavior, and that client is audit-only. It omits auth/permission requirements and any latency or rate-limit context, keeping it out of 5 territory.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Content is front-loaded and each clause carries information, but the entire description is duplicated verbatim in Chinese and English, roughly doubling the length for the same payload. That redundancy is a real cost against a tight token budget even if it aids bilingual readability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a four-parameter retrieval tool with an output schema present, the description covers the scoping model, error behavior, and audit-only client well enough to call correctly. Since an output schema exists it need not detail return values, though it helpfully does; only query semantics and default top_k are left unaddressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, and it does for most parameters: project's scoping effect, top_k's validation boundary, and client's optional/auto-detected/audit-only nature. The query parameter itself is left unexplained and top_k's default (5) and result-count meaning are not spelled out, so it is strong but not complete.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource — hybrid retrieval over memories and knowledge — and even names the retrieval mechanism (vector semantics + BM25, normalized fusion), so the agent knows exactly what operation this performs. It does not, however, differentiate itself from siblings like read_memory or ask_kb, so it falls short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied through conditional scoping rules (with project → project sub-store + global; without project → global only), which tells the agent how the call behaves. But there is no explicit guidance on when to choose this over ask_kb or read_memory, and no exclusions stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

update_memoryA

按 ID 更新记忆内容(变更后自动重新嵌入);记录不存在返回 {"error": "NOT_FOUND"}; 内容为空串或纯空白时返回 {"error": "INVALID_ARGUMENT", "message": 原因}。 project:先查该项目子库,再查全局库;不传时先查全局库再查各项目子库。 client:来源客户端(可选,缺省从 clientInfo 自动识别,仅审计)。 English: Update a memory's content by ID (auto re-embed on change); returns {"error": "NOT_FOUND"} when absent; empty content returns {"error": "INVALID_ARGUMENT", "message": reason}. project: locate in that project's sub-store, then the global store; when omitted, global first and then each project store. client is audit-only.

NameRequiredDescriptionDefault
clientNo
contentYes
projectNo
record_idYes

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does well: it discloses auto re-embedding, that an absent record returns NOT_FOUND (i.e. no upsert), that blank content yields INVALID_ARGUMENT with a reason, and the project/global store lookup order. It omits permission/auth requirements and whether other fields are preserved, keeping it below 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Purpose is front-loaded, but the content is fully duplicated in Chinese and English, roughly doubling the length for the same information. Each individual sentence earns its place, yet the bilingual redundancy is a real efficiency cost.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 4-parameter mutation tool with no annotations and no output schema, the description supplies the safety-relevant behavior (error codes, no-upsert, re-embed) and the resolution semantics. Auth/authorization and field-preservation behavior are the remaining gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must compensate, and it covers all four parameters: content (empty/whitespace validation), record_id (lookup by ID), project (sub-store then global lookup order), and client (audit-only, auto-detected from clientInfo). Values are meaningful beyond the bare schema titles.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Update a memory's content by ID') plus the key side effect ('auto re-embed on change'), which clearly separates it from read_memory, delete_memory, and search_memory. It never names a sibling explicitly, so it stops short of a 5, but an agent can pick it correctly without opening the schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied rather than stated: the ID-based update signals 'edit an existing record', and the project/client resolution rules tell the agent how to target the record. There is no explicit when-to-use vs write_memory alternative and no prerequisite guidance, so it remains minimum viable.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

write_memoryA

写入一条记忆短文本(事实/笔记/摘要),可选标签;返回 {"id": 记录ID}。 内容为空串或纯空白时返回 {"error": "INVALID_ARGUMENT", "message": 原因}。 project 指定项目子库(空=全局库);client 仅用于审计归类(自动识别); 记录主键由服务端生成。 English: Write a memory short text (fact/note/summary) with optional tags; returns {"id": record_id}. Returns {"error": "INVALID_ARGUMENT", "message": reason} when content is empty or blank. project selects the project sub-store (empty = global); client is audit-bucketing only (auto-detected). The record primary key is generated server-side.

NameRequiredDescriptionDefault
tagsNo
clientNo
contentYes
projectNo

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and does so well: it states the return shape ({"id": record_id}), the validation failure mode and error payload for empty/blank content, that the primary key is server-generated, and that 'client' is audit-only and auto-detected. It omits concurrency/duplicate-handling behavior, which keeps it from a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Core action and return value are front-loaded, and each sentence is informative. The full bilingual duplication roughly doubles the length, but the structure remains clean and non-repetitive per language.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 4-param write tool with no annotations and no output schema, the description covers return value, error case, and all parameter roles, which is enough for correct invocation. Remaining gaps (duplicate handling, size limits on content) are minor.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, and it does: content is defined as the fact/note/summary text, project selects the sub-store with 'empty = global', client is audit-bucketing only, and tags is optional. Tags get only a bare mention, leaving room for richer semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description gives a specific verb+resource ('write a memory short text (fact/note/summary)') and scopes the content type, so an agent understands what the tool does. It does not explicitly differentiate itself from siblings like update_memory or add_document, so it stops short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It hints at content type (fact/note/summary) but provides no explicit when-to-use guidance, no conditions for choosing this over update_memory, add_document, or add_webpage, and no exclusions. Usage must be inferred entirely from the tool name and contents.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 2 tool updatesv2.4.4
    • Addeddelete_document
    • Addedlist_documents
  2. 3 tool updatesv2.2.0
    • Addedlink_memory
    • Addedlist_links
    • Addedunlink_memory
  3. 8 tool updates
    • First observedadd_document
    • First observedadd_webpage
    • First observedask_kb
    • First observeddelete_memory
    • First observedread_memory
    • First observedsearch_memory
    • First observedupdate_memory
    • First observedwrite_memory

TDQS

A3.9/5.0

Scored across 13 tools

Disambiguation5/5

Each tool has a clearly distinct resource/action: document ingestion/listing/deletion, memory CRUD, link create/delete/list, hybrid search, and RAG Q&A. The closest pair, search_memory vs ask_kb, is clearly separated by raw retrieval hits versus generated answer with sources.

Naming Consistency5/5

All 13 tools use snake_case with an imperative verb first, and singular/plural usage is predictable (list_documents, add_document, delete_document; write/read/update/delete_memory). list_links is a minor generic noun but still fits the same verb_noun pattern.

Tool Count5/5

13 tools are well-scoped for a knowledge-base plus memory server: document operations, memory CRUD/search, link operations, and one QA tool. Each tool has a clear role and none feels redundant.

Completeness4/5

Core lifecycle coverage is strong: document add/list/delete, memory create/read/update/delete/search, link create/delete/list, and RAG Q&A. Minor gaps remain: no update/replace document operation, no explicit table ingestion tool despite kind=table, and no general list-memories endpoint outside search.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    Persistent memory MCP server for AI coding agents (Claude Code, Codex, Gemini CLI). Hybrid retrieval (vector + BM25), cross-encoder reranking, knowledge graph, session checkpoint/resume, and multi-scope isolation. Local-first with LanceDB.
    30
    45 npm
    15
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Durable hybrid memory for AI agents. Combines vector search, BM25, temporal retrieval, and optional Memgraph knowledge graph via reciprocal rank fusion. 6 MCP tools: health, search, answer, feedback, graph_query, graph_add_triple. Self-hosted with Qdrant backend.
    7
    278 PyPI
    9
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server that enables persistent, hybrid, local memory for LLM agents, with vector + BM25 search, knowledge graph, and policy-driven retention, providing token-budgeted context injection for AI assistants.
    MIT