bruno-mcp
Bruno MCP
Bruno MCP ist ein lokaler Model Context Protocol-Server zum Auffinden, Inspizieren und Ausführen von Bruno-API-Collections. Er bietet MCP-Clients eine semantische Schnittstelle zu Bruno-Collections und delegiert die Ausführung von Requests, Authentifizierung, Scripting, Assertions und die Auflösung von Umgebungen an die Bruno-CLI.
Die Such- und Inspektionswerkzeuge verändern keine Collection-Dateien. Die Ausführung von Requests wird an Bruno delegiert und kann Collection-Skripte mit Nebenwirkungen ausführen. Der Server kommuniziert mit einem MCP-Host über Standardeingabe und Standardausgabe (stdio).
Inoffizielles Projekt: Bruno MCP ist ein unabhängiger, inoffizieller MCP-Server. Dieses Projekt ist weder mit Bruno oder seinen Urhebern verbunden, noch wird es von ihnen befürwortet, gesponsert oder steht in anderer Weise mit ihnen in Verbindung. Bruno und zugehörige Namen, Logos und Marken sind Marken ihrer jeweiligen Inhaber. Verweise auf Bruno dienen ausschließlich dazu, die Kompatibilität mit der Bruno-Software zu beschreiben.
Requirements
Node.js 22 oder neuer
npm
Bruno CLI
>= 4.0.0 && < 5.0.0
Bruno MCP prüft bru --version beim Start. Stabile Bruno-CLI-4.x-Versionen werden unterstützt; Vorabversionen und andere Hauptversionen werden abgelehnt.
Related MCP server: Bruno MCP Server
OpenCollection-Unterstützung
Bruno MCP unterstützt Bruno-v4-OpenCollection-Collections, die durch eine opencollection.yml-Datei gekennzeichnet sind. Es erkennt Requests und Umgebungen, die durch OpenCollection-YAML-Dateien repräsentiert werden.
Legacy-.bru-Collections werden nicht unterstützt. Die Request-Erkennung ignoriert .bru-Dateien, anstatt sie zu parsen oder zu konvertieren.
Installation
Bruno MCP global über npm installieren:
npm install --global @gpact/bruno-mcpInstallieren Sie eine unterstützte Bruno-CLI separat, falls sie nicht bereits verfügbar ist:
npm install --global @usebruno/cli@^4.0.0Bestätigen Sie, dass beide Einstiegspunkte aufgelöst werden:
command -v bruno-mcp
bru --versionbruno-mcp hat keine Befehlszeilenoptionen. Ein Aufruf startet daher den Stdio-Server, anstatt Hilfe anzuzeigen. MCP-Hosts starten ihn normalerweise für Sie.
Um stattdessen aus einem Repository-Checkout zu installieren:
npm ci
npm run build
npm linkMCP-Host-Konfiguration
Der MCP-Stdio-Transport definiert, wie ein Host einen Server-Subprozess startet und Nachrichten über stdin und stdout austauscht. Er definiert keine universelle Host-Konfigurationsdatei.
Konfigurieren Sie Ihren Host so, dass er den bruno-mcp-Einstiegspunkt als lokalen Stdio-Server ausführt, und übergeben Sie BRUNO_MCP_ROOT in der Umgebung des Kindprozesses. Verwenden Sie einen absoluten Root-Pfad, da nicht alle Hosts dasselbe Arbeitsverzeichnis verwenden.
Hosts, die mcpServers verwenden
Die Projektkonfiguration von Claude Desktop und Claude Code verwendet ein mcpServers-Objekt:
{
"mcpServers": {
"bruno": {
"command": "bruno-mcp",
"env": {
"BRUNO_MCP_ROOT": "/home/user/bruno"
}
}
}
}Informationen zu Konfigurationsorten und Bereichsoptionen finden Sie im offiziellen Leitfaden für lokale Server und in der Claude Code MCP-Dokumentation.
Visual Studio Code
VS Code verwendet ein servers-Objekt in seiner mcp.json-Konfiguration:
{
"servers": {
"bruno": {
"type": "stdio",
"command": "bruno-mcp",
"env": {
"BRUNO_MCP_ROOT": "/home/user/bruno"
}
}
}
}Informationen zu den Konfigurationsorten für Arbeitsbereich und Benutzer finden Sie in der VS Code MCP-Konfigurationsreferenz.
OpenCode
OpenCode verwendet einen lokalen MCP-Eintrag unter mcp, stellt den Befehl als Array dar und nennt das Umgebungsfeld environment:
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"bruno": {
"type": "local",
"command": ["bruno-mcp"],
"environment": {
"BRUNO_MCP_ROOT": "/home/user/bruno"
}
}
}
}Informationen zur Konfigurationspriorität und zu weiteren lokalen Serveroptionen finden Sie in der OpenCode-MCP-Serverdokumentation.
Andere Hosts verwenden möglicherweise ein anderes Schema oder einen Einrichtungsablauf über die Befehlszeile. In jedem Fall sind die erforderlichen Konzepte dieselben: ein lokaler Stdio-Transport, der Befehl bruno-mcp und die unten beschriebenen Umgebungsvariablen. Wenn ein GUI-Host bruno-mcp oder bru nicht in seinem PATH finden kann, verwenden Sie den absoluten Pfad, den command -v bruno-mcp ausgibt, für den Serverbefehl und setzen Sie BRUNO_MCP_BRU auf einen absoluten Bruno-CLI-Pfad.
Sie können den Server auch direkt starten. Er wartet dann auf MCP-Nachrichten auf stdin und schreibt Protokollnachrichten auf stdout:
BRUNO_MCP_ROOT=/home/user/bruno bruno-mcpKonfiguration
Die Konfiguration erfolgt über Umgebungsvariablen. Eine ungültige Konfiguration verhindert den Start des Servers.
Variable | Standard | Beschreibung |
| Aktuelles Arbeitsverzeichnis | Vorhandenes Verzeichnis, das die zugänglichen Collections enthält. Der Pfad wird beim Start in seinen kanonischen Speicherort aufgelöst, und der Zugriff auf Collections ist auf dieses Verzeichnis beschränkt. |
|
| Name oder Pfad der Bruno-CLI-ausführbaren Datei. Die ausführbare Datei wird direkt aufgerufen, niemals über eine Shell. |
|
| Timeout pro Ausführung in Millisekunden. Er muss eine positive Ganzzahl sein. Werte über |
|
| Erlaubt Aufrufern, Brunos Entwickler-Sandbox anzufordern, wenn |
|
| Erlaubt Aufrufern, die normale TLS-Zertifikatsprüfung für eine Ausführung zu deaktivieren, wenn |
|
| Maximale akzeptierte Größe des Bruno-JSON-Reporters in UTF-8-Bytes (standardmäßig 5 MiB). Sie muss eine positive Ganzzahl sein. |
|
| Mindestprotokollstufe für stderr: |
Boolesche Einstellungen akzeptieren true, 1, yes oder on sowie false, 0, no oder off, ohne Berücksichtigung der Groß-/Kleinschreibung.
Beispiel mit expliziten Ausführungsrichtlinien:
BRUNO_MCP_ROOT=/home/user/bruno \
BRUNO_MCP_BRU=/usr/local/bin/bru \
BRUNO_MCP_TIMEOUT_MS=180000 \
BRUNO_MCP_ALLOW_DEVELOPER_SANDBOX=false \
BRUNO_MCP_ALLOW_INSECURE=false \
BRUNO_MCP_MAX_REPORT_BYTES=5242880 \
BRUNO_MCP_LOG_LEVEL=info \
bruno-mcpMCP-Werkzeuge
Collection-Kennungen sind Pfade relativ zu BRUNO_MCP_ROOT. Request- und Umgebungspfade sind relativ zu ihrer Collection. Zurückgegebene URLs und YAML-Variablen werden nicht interpoliert.
bruno_list_collections
Listet die im konfigurierten Arbeitsbereich verfügbaren Bruno-OpenCollection-Collections auf. Sie benötigt keine Argumente und gibt Collection-Kennungen, Namen und OpenCollection-Versionen zurück.
bruno_list_requests
Listet Requests in einer Bruno-OpenCollection-Collection auf und durchsucht sie. Sie gibt Request-Pfade, Namen, Typen sowie HTTP-Methoden und URLs zurück, sofern verfügbar.
Erforderliche Eingabe:
collection: Collection-Kennung
Optionale Filter:
query: eine Teilzeichenfolge ohne Beachtung der Groß-/Kleinschreibung, die mit Name, Pfad und URL abgeglichen wirdmethod: exakte HTTP-Methode ohne Beachtung der Groß-/Kleinschreibungtype: exakter Request-Typ ohne Beachtung der Groß-/Kleinschreibung
bruno_search_requests
Durchsucht in einem einzigen Aufruf alle Collections nach Requests. Jedes Ergebnis enthält seine Collection-Kennung.
Erforderliche Eingabe:
query: nicht leere Teilzeichenfolge ohne Beachtung der Groß-/Kleinschreibung, die mit Name, Pfad und URL abgeglichen wird
Die optionalen Filter method und type verwenden exakten Abgleich ohne Beachtung der Groß-/Kleinschreibung.
bruno_get_request
Liest einen Bruno-OpenCollection-Request und gibt normalisierte Metadaten sowie das geparste YAML-Dokument zurück.
Erforderliche Eingaben:
collection: Collection-Kennungrequest: Request-Pfad relativ zur Collection
Setzen Sie includeSource auf true, um auch die rohe YAML-Quelle zurückzugeben. Der Standardwert ist false. Das geparste Dokument und die Quelle werden ohne Schwärzung von Geheimnissen zurückgegeben. Verwenden Sie daher Request-Pfade, die von den Listen- oder Suchwerkzeugen erzeugt wurden, und betten Sie keine Anmeldeinformationen direkt in Request-YAML ein.
bruno_list_environments
Listet die für eine Collection verfügbaren Umgebungen auf, ohne Variablenwerte offenzulegen. Jedes Ergebnis enthält den Umgebungsnamen, den relativen Pfad, die Anzahl der Variablen und die Anzahl der Geheimnisse.
Erforderliche Eingabe:
collection: Collection-Kennung
bruno_get_environment
Untersucht eine Bruno-Umgebung. Variablen, die mit secret: true markiert sind, werden mit dem Wert [REDACTED] zurückgegeben; nicht geheime Werte werden in normalisierter Zeichenfolgenform zurückgegeben.
Erforderliche Eingaben:
collection: Collection-Kennungenvironment: bloßer Name wieLocaloder ein collections-relativer Pfad wieenvironments/Local.yml
bruno_run
Führt Requests, Ordner oder eine gesamte Collection mit der Bruno-CLI v4 aus. Sie gibt normalisierte Ausführungs-, Request-, Antwort-, Test- und Assertion-Ergebnisse zurück. Fehlgeschlagene Bruno-Tests oder -Assertions bleiben überprüfbare Ergebnisse und keine MCP-Transportfehler.
Eingaben:
Feld | Standard | Beschreibung |
| Erforderlich | Collection-Kennung. |
|
| Request- oder Ordnerpfade. Ein leeres Array führt die gesamte Collection aus. |
| Keine | Name der Bruno-Umgebung. |
| Keine | Nicht geheime Zeichenfolgen-Überschreibungen, die als Bruno-Umgebungsvariablen übergeben werden. |
|
| Stoppt nach dem ersten fehlgeschlagenen Request, Test oder Assertion. |
|
| Führt nur Requests aus, die Tests oder aktive Assertions enthalten. |
| Keine | Nicht negative Verzögerung zwischen Requests in Millisekunden. |
|
| Bruno-Sandboxmodus: |
|
| Deaktiviert die TLS-Zertifikatsprüfung für Requests. |
|
| Zurückgegebene Antworttexte: |
|
| Maximale UTF-8- oder serialisierte Größe jedes enthaltenen Antworttexts. Übergroße Antworttexte werden durch Größenmetadaten ersetzt. |
Umgang mit Geheimnissen
Übergeben Sie keine Anmeldeinformationen oder anderen Geheimnisse über
variables. MCP-Werkzeugargumente können für das Modell und den Host sichtbar sein, und Überschreibungen werden auch als Argumente an den Bruno-Prozess übergeben. Stellen Sie Geheimnisse stattdessen über Brunos normale Umgebungs- oder Prozessumgebungsmechanismen bereit.
Die Umgebungsprüfung respektiert secret: true, aber diese Markierung ist keine allgemeine Grenze für den Dateizugriff. bruno_get_request gibt Dateien ohne Schwärzung zurück und akzeptiert derzeit jede vorhandene Datei innerhalb einer Collection, nicht nur Pfade, die von der Request-Erkennung gefunden wurden. Ein autorisierter Aufrufer, der einen Umgebungsdateipfad angibt, könnte daher deren Rohinhalt erhalten. Beschränken Sie den MCP-Zugriff auf vertrauenswürdige Hosts und Benutzer, grenzen Sie BRUNO_MCP_ROOT eng ein und vermeiden Sie Produktionsgeheimnisse im Klartext an jeder Stelle, an der ein MCP-Aufrufer sie lesen kann.
Sandbox- und TLS-Richtlinien
bruno_run verwendet standardmäßig Brunos sichere Sandbox.
Die Ausführung in der Entwickler-Sandbox erfordert beide dieser expliziten Entscheidungen:
Der Serverbetreiber setzt
BRUNO_MCP_ALLOW_DEVELOPER_SANDBOX=true.Der Werkzeugaufrufer setzt
sandboxfür die Ausführung aufdeveloper.
Ohne Serverberechtigung schlägt eine Anfrage im Entwicklermodus mit DEVELOPER_SANDBOX_DISABLED fehl. Der Entwicklermodus verleiht Bruno-Skripten größere Fähigkeiten, aktivieren Sie ihn daher nur für vertrauenswürdige Sammlungen.
Die Pfadeingrenzung kontrolliert Pfade, die an Bruno MCP übergeben werden; sie sandboxt keinen Code innerhalb von Bruno-Skripten. Bruno-Skripte können den Zustand von Sammlungen oder Umgebungen aktualisieren, und Skripte im Entwicklermodus können native Node.js-Fähigkeiten nutzen, um auf Pfade außerhalb von BRUNO_MCP_ROOT zuzugreifen oder andere Prozesse zu starten.
Die normale TLS-Zertifikatsprüfung ist standardmäßig aktiviert. Zum Deaktivieren sind zudem sowohl die Serverberechtigung (BRUNO_MCP_ALLOW_INSECURE=true) als auch insecure: true bei einem einzelnen Lauf erforderlich. Andernfalls schlägt die Anfrage mit INSECURE_DISABLED fehl. Der unsichere Modus schwächt die Transportsicherheit und sollte auf kontrollierte Entwicklungsumgebungen beschränkt werden.
Sicherheitsmodell
Root-Eingrenzung: Sammlungs-, Anfrage-, Umgebungs- und Ausführungspfade, die an Bruno MCP übergeben werden, werden gegen kanonische Dateisystemgrenzen geprüft. Traversal- und Symlink-Ausbrüche außerhalb von
BRUNO_MCP_ROOToder einer ausgewählten Sammlung werden abgelehnt. Dies schränkt Skriptcode im Entwicklermodus nicht ein.Keine Shell-Ausführung: Bruno MCP übergibt eine feste Operation und einzelne Argumente direkt an die konfigurierte ausführbare Bruno-Datei, wobei die Shell-Ausführung deaktiviert ist. Es stellt weder eine allgemeine Shell noch ein Tool für Bruno CLI-Befehle bereit, aber Bruno-Skripte im Entwicklermodus können selbst Prozesse starten.
Schreibgeschützte Inspektion: Discovery und Inspektion erstellen, aktualisieren oder löschen nicht absichtlich Sammlungsdateien.
bruno_rundelegiert an die Bruno CLI und kann Skripte mit Nebenwirkungen ausführen, einschließlich persistierter Variablenänderungen.Gezielte Schwärzung: Umgebungswerte, die explizit mit
secret: truemarkiert sind, werden von der Umgebungsinspektion geschwärzt. Ausführungsberichte schwärzen rekursiv gängige sensible Header, einschließlich Autorisierungs-, Cookie- und API-Schlüssel-Headern. Rohe Datei- und Anfrage-Lesezugriffe werden nicht geschwärzt.stdout ausschließlich für Protokollverkehr: stdout ist für den MCP-Protokollverkehr reserviert. Logs und Startdiagnosen werden auf stderr geschrieben.
Begrenzte Berichte: Übermäßig große Bruno-Berichte werden abgelehnt, und enthaltene Antwort-Bodys haben ein separates Limit pro Body.
Schwärzung ist Defense in Depth, keine allgemeine Geheimniserkennung. Rohe Dateien, Anfrage-YAML, Anfragequelle, URLs, Antwort-Bodys und Bruno-Diagnosen können Werte enthalten, die nicht als Geheimnisse erkannt werden. Konfigurieren Sie BRUNO_MCP_ROOT so eng wie praktikabel, vermeiden Sie, Zugangsdaten in Sammlungsdateien einzubetten, und verwenden Sie vertrauenswürdige Sammlungen und MCP-Aufrufer, wenn Sie die Ausführung von Anfragen aktivieren.
Entwicklung
Installieren Sie die festgeschriebenen Abhängigkeiten:
npm ciNützliche Befehle:
Befehl | Zweck |
| Führt den TypeScript-Einstiegspunkt in der Entwicklung aus. |
| Kompiliert den Server nach |
| Führt den kompilierten Stdio-Server aus. |
| Führt alle von CI geforderten Prüfungen aus. |
| Führt Linting für Quellcode, Tests und Tooling aus. |
| Führt eine Typprüfung von Quellcode, Tests und Tooling durch, ohne Dateien zu erzeugen. |
| Führt die Unit-Testsuite einmal aus. |
| Führt Unit-Tests im Watch-Modus aus. |
| Führt die Integrationstestsuite aus. |
| Regeneriert Bruno-Reporter-Fixtures, wenn Sie sie absichtlich aktualisieren. |
Führen Sie vor dem Einreichen einer Änderung Folgendes aus:
npm run checkBekannte Einschränkungen
Es wird nur Bruno OpenCollection YAML unterstützt; veraltete
.bru-Sammlungen werden ignoriert.Für Sammlungen, Anfragen, Umgebungen, Ordner und Arbeitsbereiche werden keine MCP-Mutationswerkzeuge bereitgestellt. Ausgeführte Bruno-Skripte können weiterhin Nebenwirkungen haben.
OpenAPI-Import und -Export werden nicht unterstützt.
Der Server stellt weder beliebige Bruno CLI-Befehle noch Shell-Ausführung bereit.
Es wird nur lokaler Stdio-MCP-Transport unterstützt. Remote-MCP- und HTTP-MCP-Transporte sind nicht enthalten.
Eine automatische Secret-Manager-Integration ist nicht enthalten.
Bruno MCP implementiert keinen eigenen HTTP-Client, keine Variableninterpolation, keine Authentifizierung, kein OAuth, keine Skripte, keine Anfrageverkettung, keine Assertions, kein Proxyverhalten, keine Weiterleitungen und kein Zertifikatsverhalten. Diese Verhaltensweisen obliegen der Bruno CLI.
Available Tools
11 toolsbruno_create_environmentCreate Bruno environmentA
Create a new Bruno environment file. Secret values must be omitted or [REDACTED].
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Environment name or path (e.g. Local or environments/Local.yml). | |
| variables | No | Initial list of environment variables. | |
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the behavioral disclosure burden. It does add a meaningful constraint: 'Secret values must be omitted or [REDACTED].' However, it does not disclose behavior around overwriting existing files, permission requirements, or what happens after creation. This is a mutation tool, so more detail would be valuable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences: one states the primary action, the other communicates the one critical rule. There is no filler or repetition of schema details. The structure is appropriately concise and front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The schema covers all parameters and the description highlights the key secret-handling rule, so an agent can likely call the tool correctly. However, there is no output schema and the description does not mention what the tool returns, whether it will overwrite an existing environment at the same path, or any side effects. For a file-creating mutation tool, these are notable gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents all three parameters. The description adds the security rule about secrets, but this mostly restates what the schema already specifies via the '[REDACTED]' const and corresponding descriptions. Thus the description provides minimal added value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: 'Create a new Bruno environment file.' This is specific and unambiguous, naming both the verb and the resource. It distinguishes this tool from siblings like bruno_update_environment and bruno_get_environment simply by emphasizing 'new'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description establishes when to use the tool: when creating a new environment, not updating or listing existing ones. It does not explicitly name alternatives, but the 'new' qualifier makes the intended use clear enough. It stops short of explaining what not to use it for, so it lacks explicit exclusion guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_create_requestCreate Bruno requestA
Create a Bruno HTTP request YAML file. Missing parent folders are created and existing files are not overwritten.
| Name | Required | Description | Default |
|---|---|---|---|
| app | No | App extension settings. | |
| url | Yes | Request URL, optionally with Bruno {{variables}}. | |
| auth | No | Authentication config object (e.g. { type: 'bearer', token: '...' }) or 'inherit'. Use Bruno variables for secrets. | |
| body | No | Request body: { type, data } object or list of variants. | |
| docs | No | Documentation text. | |
| name | Yes | Request display name. | |
| tags | No | Request tags. | |
| method | Yes | HTTP method, for example GET or POST. | |
| params | No | Query and path parameters. | |
| headers | No | Request headers. | |
| request | Yes | New request path relative to collection root, including .yml extension (e.g. Users/Create.yml). | |
| runtime | No | ||
| examples | No | Request and response examples. | |
| sequence | No | Execution sequence order. | |
| settings | No | ||
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). | |
| description | No | Request description. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the behavioral burden. It does disclose two non-obvious file behaviors: missing parent folders are auto-created and existing files are not overwritten. But it omits what happens when a file already exists (error vs no-op), what the successful response contains, and any other side effects beyond file creation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one front-loaded sentence that conveys the essential action plus two important edge-case behaviors with no filler. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 17-parameter mutation tool with no output schema and no annotations, the description is not fully complete: it lacks success/error signaling, what happens on an existing-file conflict, and explicit routing to bruno_update_request. The schema compensates for parameter details, and the description covers the most important file-system behaviors, so it is adequate but has clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is high at 88%, so the schema already documents most parameters and the baseline is 3. The description adds extra meaning by clarifying request-path behavior: nested parent folders are automatically created and an existing target file is not overwritten, which is not stated in the schema's parameter descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a concrete action ('Create') and a concrete resource ('Bruno HTTP request YAML file'), so an agent immediately knows what the tool does. The phrase 'existing files are not overwritten' also distinguishes it from bruno_update_request, which is the main sibling it could be confused with.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'create' verb and the warning that existing files are not overwritten imply this tool is for new request files, giving some usage context. However, it never explicitly says to use bruno_update_request when the target already exists, nor does it state any other when-to-use/when-not-to-use guidance relative to sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_get_environmentGet Bruno environmentB
Inspect a Bruno environment. Variables marked as secrets are always redacted.
| Name | Required | Description | Default |
|---|---|---|---|
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). | |
| environment | Yes | Environment name or path (e.g. Local or environments/Local.yml). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses one important behavior: secret variables are always redacted in the output. However, it does not explicitly state that the operation is read-only, nor does it mention potential errors or permission requirements. Since no annotations are provided, the description carries the burden of behavior disclosure, but it only partially fulfills this.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that leads with the core purpose and then adds a crucial detail about secret redaction. It is concise, free of filler, and well-structured; every word contributes to the tool's understanding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple get operation with two well-documented parameters, the description provides sufficient context: it names the action, the resource, and a key output behavior (redaction). It does not explicitly state the return format, but 'inspect' implies retrieving the environment's details, and the absence of an output schema makes this a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides full descriptions for both parameters (collection and environment), so the baseline is 3. The description adds no additional parameter-level semantics beyond what the schema already states, making this a neutral score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Inspect') and the resource ('a Bruno environment'), which distinguishes it from create/update/delete operations. It does not explicitly contrast with bruno_list_environments, but 'inspect' implies fetching details of a specific environment, making the purpose reasonably clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not provide explicit guidance on when to use this tool versus alternatives. It does not mention that this is for retrieving a single environment's details as opposed to listing environments or running requests, leaving the selection decision to the agent's interpretation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_get_requestGet Bruno requestB
Read a Bruno request. Use responseMode=revision for revision check, or full for parsed content.
| Name | Required | Description | Default |
|---|---|---|---|
| request | Yes | Request path relative to collection root (e.g. Users/Create.yml). | |
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). | |
| responseMode | No | Detail level: "full" for document and metadata, or "revision" for revision check only. | |
| includeSource | No | Include raw YAML source in full mode. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It does convey that the operation is a read and that 'full' returns parsed content while 'revision' performs a revision check, which gives some behavioral insight. However, it does not describe the exact response shape, error behavior, or explicitly confirm that no side effects occur.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two short sentences with the core operation front-loaded and mode guidance immediately following. Every phrase earns its place, and there is no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The schema covers parameter semantics well, but with no annotations and no output schema, the description should more clearly explain return behavior and how this tool relates to sibling tools. It sketches the difference between revision and full modes but leaves the exact response and tool-selection context to inference. This is adequate but has clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All four parameters already have descriptive comments in the input schema, so the baseline is 3. The description's mode sentence mostly restates the responseMode schema, though 'parsed content' adds a small nuance. It adds no meaningful detail for collection, request, or includeSource beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the operation: 'Read a Bruno request.' The mention of responseMode further clarifies that the tool supports both full content retrieval and revision checks, which is specific and useful. It is distinguishable from create/update/run siblings, though it does not explicitly contrast with list/search tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides guidance for choosing between responseMode values, but it says nothing about when to use this tool instead of bruno_list_requests, bruno_search_requests, or bruno_run. No alternatives or exclusion conditions are mentioned, so an agent must infer the tool's appropriate context from its name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_list_collectionsList Bruno collectionsB
List Bruno collections available in the workspace.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral disclosure burden. It only restates the listing action and does not mention read-only behavior, return format, ordering, pagination, or potential side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence that states the essential purpose with no filler or repetition. It is appropriately sized for such a simple tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter listing tool, the description is functionally sufficient: the agent knows what the tool does and that it operates on workspace collections. The only minor gap is the lack of explicit return-shape details, but no output schema exists and the tool is simple enough to infer a list of collections.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so there is no parameter semantics burden. The description does not need to explain inputs, and the empty input schema is trivially complete.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('List') and resource ('Bruno collections') with a clear workspace scope. It is unambiguous, though it does not explicitly contrast with sibling listing tools such as bruno_list_requests or bruno_list_environments.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance about when to use this tool versus alternatives. The agent must infer from the resource name that this is for collections, with no explicit exclusions or context for choosing among the sibling list tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_list_environmentsList Bruno environmentsA
List environments available to a Bruno collection without exposing variable values.
| Name | Required | Description | Default |
|---|---|---|---|
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure. It explicitly promises that variable values are not exposed, which is a meaningful safety/security behavior. It does not describe error handling or return format, but for a simple listing operation this is a solid level of transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no filler. It front-loads the core purpose ('List environments...') and immediately adds the key differentiator ('without exposing variable values'). Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a low-complexity tool with one required parameter and no output schema, the description is largely sufficient. It covers purpose, scope, and the security-relevant behavior. It could be more complete by stating the return shape more explicitly, but the core selection and invocation needs are met.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 100% coverage with a clear parameter description: 'Collection path relative to workspace root (as returned by bruno_list_collections).' The tool description adds no parameter details itself, but the schema already provides sufficient meaning, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource ('List environments') and adds the scope 'available to a Bruno collection'. It also includes a distinctive qualifier, 'without exposing variable values', which differentiates it from a tool like bruno_get_environment that would return variable values.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly scopes the tool to listing environments for a collection and points to bruno_list_collections as the source of the collection path. It does not explicitly name alternatives or say when not to use it, but the 'without exposing variable values' phrasing gives helpful context for choosing between this and a more detailed environment tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_list_requestsList Bruno requestsB
List and search requests in a Bruno collection. Returns request paths, names, types, and HTTP metadata.
| Name | Required | Description | Default |
|---|---|---|---|
| type | No | Filter by request type (e.g. http or graphql). | |
| query | No | Case-insensitive substring filter for request name, path, and URL. | |
| method | No | Filter by HTTP method (e.g. GET or POST). | |
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of explaining behavior. It does disclose that the tool returns request paths, names, types, and HTTP metadata, but it does not mention error behavior, pagination, or whether the operation is strictly read-only. The read-only nature is implied by 'list and search' but not explicit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded: it states the core action and return contents in two short sentences with no filler. Every phrase contributes meaningful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the main inputs and return fields, but with no output schema and no annotations, it is only minimally complete. The lack of any distinction from bruno_search_requests is a notable gap for an agent deciding which tool to invoke.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema coverage is 100%, so all parameters already have descriptions. The tool description adds no extra parameter-level semantics beyond confirming the collection context, which the schema already provides. A baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the operation: listing and searching requests in a Bruno collection, and it lists what is returned. However, it does not differentiate itself from the sibling tool bruno_search_requests, whose name suggests overlapping search functionality.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given about when to use this tool instead of bruno_search_requests or bruno_get_request. The description implies it is for exploring requests but never states exclusions or alternative selection criteria, leaving the agent to guess.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_runRun Bruno requestsA
Execute requests, folders, or an entire Bruno collection using Bruno CLI v4. Returns structured execution results. Do not pass credentials or other secrets through variables. MCP tool arguments may be visible to the model and host.
| Name | Required | Description | Default |
|---|---|---|---|
| bail | No | Stop after the first failing request, test, or assertion. | |
| delayMs | No | Delay between requests in milliseconds. | |
| sandbox | No | JavaScript sandbox mode (safe or developer). | safe |
| targets | No | Request files or folders relative to collection root, or empty array for entire collection. | |
| insecure | No | Disable normal TLS certificate verification. | |
| testsOnly | No | Only run requests containing tests or active assertions. | |
| variables | No | Non-secret environment variable overrides. | |
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). | |
| environment | No | Bruno environment name to use for this run. | |
| responseBodyMode | No | When to return response bodies: none, onFailure, or full. | onFailure |
| maxResponseBodyBytes | No | Maximum bytes for each returned response body. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral disclosure burden. It does provide useful warnings about not passing secrets and MCP argument visibility, and it mentions structured results. However, it does not disclose that executing requests may perform live network calls, cause side effects, or take a long time, which are significant behavioral traits for an execution tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three concise sentences that front-load the core action, then state the return type, then add a critical security warning. There is no filler or redundant wording, and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having 11 parameters and no output schema or annotations, the description stays very brief. It does not explain the structure of the execution results, warn about side effects, or provide guidance on selecting targets or interpreting failures. For such a complex, potentially side-effectful tool, the description is insufficiently complete on its own.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the parameters are already well-documented in the schema. The description adds a security warning about variables, reinforcing but not extending the schema's note that variables are non-secret overrides. It provides no additional semantic value for the other ten parameters, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the specific verb 'Execute' and clearly identifies the resource: 'requests, folders, or an entire Bruno collection' via 'Bruno CLI v4'. It also states the result type ('structured execution results'), making the tool's purpose unambiguous and easily distinguishable from the listing/getting/creating siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this tool is for running Bruno requests rather than managing them, but it does not explicitly state when to choose it over alternatives or when not to use it. There is no mention of sibling tools like bruno_list_collections or bruno_get_request, leaving usage context to inference. It is adequate but not explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_search_requestsSearch Bruno requestsB
Search requests across all collections in the workspace. Returns matching requests with collection id.
| Name | Required | Description | Default |
|---|---|---|---|
| type | No | Filter by request type (e.g. http or graphql). | |
| query | Yes | Case-insensitive substring filter for request name, path, and URL. | |
| method | No | Filter by HTTP method (e.g. GET or POST). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of disclosing side effects and behavior. It mentions it returns matching requests, implying a read-only operation, but does not explicitly state that it does not modify data or that it is safe to call. The transparency is moderate but not thorough.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, direct, and free of unnecessary detail. It efficiently conveys the tool's purpose and a key aspect of the output, with no fluff or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description provides the essential information needed to invoke the tool: that it searches across all collections and returns matching requests with collection id. Even though there is no output schema, the mention of the return content satisfies basic completeness. It lacks details on pagination or filtering specifics, but these are minor for a search tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides descriptions for all three parameters: query, type, and method. The tool description does not add any extra context about how these parameters interact or affect the search, so the value added beyond the schema is minimal. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool searches for requests across all collections, using the specific verb 'search' and resource 'requests'. It also mentions it returns matching requests with collection id, which distinguishes it from simply listing requests. However, it does not explicitly contrast with the sibling tool bruno_list_requests, so it stops short of a perfect 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says what the tool does but does not explicitly state when to use it over alternatives (e.g., bruno_list_requests or bruno_get_request). There is no guidance about using search when a filter is needed versus listing when a full enumeration is required, leaving the agent to infer usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_update_environmentUpdate Bruno environmentB
Update an existing Bruno environment file. Existing secrets must be preserved with secret: true.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Environment name or path (e.g. Local or environments/Local.yml). | |
| variables | Yes | Replacement list of variables. Existing secrets must keep secret: true. | |
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the full behavioral disclosure burden. It does disclose one important constraint (preserving secrets with secret: true), but it omits that variables form a replacement list, whether unspecified variables are removed, and what the operation returns. This is a significant gap for a mutating tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no redundancy. The primary purpose is stated first, and the critical secret-preservation constraint is added immediately without unnecessary detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutating tool with no annotations and no output schema, the description is too thin. It does not explain the replacement semantics, the effect on omitted variables, or the expected return value. The secret warning is helpful but leaves important operational context uncovered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all parameters. The description's secret-preservation note adds emphasis but largely duplicates the schema's 'Existing secrets must keep secret: true.' Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Update') and the resource ('an existing Bruno environment file'), which distinguishes it from environment creation tools. It does not explicitly name sibling alternatives, so it stops short of full differentiation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Existing' implies this tool is for modifying an already-created environment rather than creating one, providing weak usage context. However, it does not explicitly state when to use this tool over bruno_create_environment, bruno_get_environment, or other siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_update_requestUpdate Bruno requestA
Patch an existing Bruno HTTP request while preserving untouched content. Use expectedRevision="*" to patch latest version without preflight.
| Name | Required | Description | Default |
|---|---|---|---|
| app | No | ||
| url | No | Request URL, optionally with Bruno {{variables}}. | |
| auth | No | ||
| body | No | ||
| docs | No | ||
| name | No | Request display name. | |
| tags | No | ||
| method | No | HTTP method, for example GET or POST. | |
| params | No | ||
| headers | No | ||
| request | Yes | Existing HTTP request path relative to collection root, including .yml extension. | |
| runtime | No | ||
| examples | No | ||
| sequence | No | ||
| settings | No | ||
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). | |
| description | No | Request description. | |
| expectedRevision | Yes | Revision returned by bruno_get_request, or "*" to patch latest version without preflight. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure. It does reveal the partial-update nature and the preflight bypass behavior. However, it does not state side effects like persistence, what happens on a revision mismatch, or what the response contains, so it is adequate but not comprehensive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with no filler: the core patch behavior is front-loaded, and the operational revision tip follows immediately. The description avoids repeating parameter-level schema details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For an 18-parameter mutation tool with no annotations and no output schema, the description plus the rich schema provides enough to select and invoke the tool correctly: patch an existing request, preserve untouched content, and optionally bypass preflight. Missing details like return shape and conflict behavior are minor but would make it more complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents most parameter meanings in detail. The description adds the cross-cutting patch semantics that omitted content is preserved, which is essential for constructing correct patches. The expectedRevision wildcard tip mostly reinforces existing schema text, so this is above baseline but not exceptional.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Uses a specific verb ('Patch'), a clear resource ('existing Bruno HTTP request'), and the critical scope 'preserving untouched content'. This unmistakably distinguishes it from bruno_create_request and from read/run siblings without needing the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The usage is implied: this is for modifying an existing request, not creating one. However, it never explicitly names alternatives such as bruno_create_request or advises calling bruno_get_request first to fetch a revision. The expectedRevision='*' tip is a useful operational detail but not a full when-to-use vs. when-not-to-use guideline.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
10 tool updates
v0.2.0- Added
bruno_create_environment - Added
bruno_create_request - Changed
bruno_get_environment2 fields changed- changed
Input schema / properties / collection / descriptionPrevious value: -"Collection identifier: the collection's path relative to the workspace root (as returned by bruno_list_collections), not its display name. It may be nested, for example collections/hotel."New value: +"Collection path relative to workspace root (as returned by bruno_list_collections)." - changed
Input schema / properties / environment / descriptionPrevious value: -"Environment reference, either a bare name (Local) or a collection-relative path (environments/Local.yml)."New value: +"Environment name or path (e.g. Local or environments/Local.yml)."
- Changed
bruno_get_request4 fields changed- changed
Input schema / properties / collection / descriptionPrevious value: -"Collection identifier: the collection's path relative to the workspace root (as returned by bruno_list_collections), not its display name. It may be nested, for example collections/hotel."New value: +"Collection path relative to workspace root (as returned by bruno_list_collections)." - changed
Input schema / properties / includeSource / descriptionPrevious value: -"When true, also return the raw request source text alongside the parsed document. Defaults to false."New value: +"Include raw YAML source in full mode." - changed
Input schema / properties / request / descriptionPrevious value: -"Request path relative to the collection root (as returned by bruno_list_requests), for example Hotel/Search.yml."New value: +"Request path relative to collection root (e.g. Users/Create.yml)." - added
Input schema / properties / responseModeAdded value: +{ + "description": "Detail level: \"full\" for document and metadata, or \"revision\" for revision check only.", + "enum": [ + "full", + "revision" + ], + "type": "string" +}
- Changed
bruno_list_environments1 field changed- changed
Input schema / properties / collection / descriptionPrevious value: -"Collection identifier: the collection's path relative to the workspace root (as returned by bruno_list_collections), not its display name. It may be nested, for example collections/hotel."New value: +"Collection path relative to workspace root (as returned by bruno_list_collections)."
- Changed
bruno_list_requests4 fields changed- changed
Input schema / properties / collection / descriptionPrevious value: -"Collection identifier: the collection's path relative to the workspace root (as returned by bruno_list_collections), not its display name. It may be nested, for example collections/hotel."New value: +"Collection path relative to workspace root (as returned by bruno_list_collections)." - changed
Input schema / properties / method / descriptionPrevious value: -"Filter to requests with this HTTP method (case-insensitive), for example GET or POST."New value: +"Filter by HTTP method (e.g. GET or POST)." - changed
Input schema / properties / query / descriptionPrevious value: -"Case-insensitive substring filter matched against each request's name, path, and URL."New value: +"Case-insensitive substring filter for request name, path, and URL." - changed
Input schema / properties / type / descriptionPrevious value: -"Filter to requests of this type (case-insensitive), for example http or graphql."New value: +"Filter by request type (e.g. http or graphql)."
- Changed
bruno_run7 fields changed- changed
Input schema / properties / collection / descriptionPrevious value: -"Collection identifier: the collection's path relative to the workspace root (as returned by bruno_list_collections), not its display name."New value: +"Collection path relative to workspace root (as returned by bruno_list_collections)." - changed
Input schema / properties / insecure / descriptionPrevious value: -"Disable normal TLS certificate verification. Must be enabled by server policy."New value: +"Disable normal TLS certificate verification." - changed
Input schema / properties / maxResponseBodyBytes / descriptionPrevious value: -"Maximum serialized UTF-8 size of each returned response body. Oversized bodies are replaced by size metadata."New value: +"Maximum bytes for each returned response body." - changed
Input schema / properties / responseBodyMode / descriptionPrevious value: -"Response bodies to return in the MCP payload: none, only results with failed tests or assertions, or all results."New value: +"When to return response bodies: none, onFailure, or full." - changed
Input schema / properties / sandbox / descriptionPrevious value: -"JavaScript sandbox mode. Developer mode must be enabled by server policy."New value: +"JavaScript sandbox mode (safe or developer)." - changed
Input schema / properties / targets / descriptionPrevious value: -"Request files or folders relative to the collection root. An empty list runs the entire collection."New value: +"Request files or folders relative to collection root, or empty array for entire collection." - changed
Input schema / properties / variables / descriptionPrevious value: -"Non-secret environment variable overrides. Do not include credentials or other secrets."New value: +"Non-secret environment variable overrides."
- Changed
bruno_search_requests3 fields changed- changed
Input schema / properties / method / descriptionPrevious value: -"Filter to requests with this HTTP method (case-insensitive), for example GET or POST."New value: +"Filter by HTTP method (e.g. GET or POST)." - changed
Input schema / properties / query / descriptionPrevious value: -"Required case-insensitive substring matched against each request's name, path, and URL."New value: +"Case-insensitive substring filter for request name, path, and URL." - changed
Input schema / properties / type / descriptionPrevious value: -"Filter to requests of this type (case-insensitive), for example http or graphql."New value: +"Filter by request type (e.g. http or graphql)."
- Added
bruno_update_environment - Added
bruno_update_request
7 tool updates
v0.1.0- First observed
bruno_get_environment - First observed
bruno_get_request - First observed
bruno_list_collections - First observed
bruno_list_environments - First observed
bruno_list_requests - First observed
bruno_run - First observed
bruno_search_requests
TDQS
Scored across 11 tools
Most tools target distinct resources and actions clearly. The main ambiguity is between bruno_list_requests, which can also search within a collection, and bruno_search_requests, which searches across all collections.
The bruno_ prefix with verb_noun naming is highly consistent across nearly all tools. bruno_run is a minor deviation because it lacks a noun object, but it is still understandable given it runs requests, folders, or collections.
Eleven tools is well-scoped for a Bruno API client server covering collections, requests, environments, and execution. Each tool has a clear role in the overall workflow.
The tool surface covers listing, getting, creating, updating, searching, and running requests, plus environment management. The notable gap is the absence of delete operations for requests, environments, or collections.
Maintenance
Related MCP Connectors
MCP server for interacting with the Supabase platform
Model Context Protocol server for the Apideck Unified API. Connect any MCP-compatible agent framework to 100+ accounting systems, HRIS platforms, file storage providers, and more through one integration. More information https://www.apideck.com/mcp-server
The official MCP Server from Mia-Platform to interact with Mia-Platform Console
The official MCP Server for the Mux API
Related MCP Servers
- MIT
- AlicenseBqualityFmaintenanceA Model Context Protocol (MCP) server that enables programmatic creation and management of Bruno API testing collections, environments, and requests through standardized MCP tools.181 npm36MIT
- AlicenseNot gradedqualityCmaintenanceMCP server that executes requests from Bruno API collections via the Bruno CLI tool, enabling API request execution and collection management.4MIT
- AlicenseNot gradedqualityDmaintenanceExposes Bruno CLI as tools for AI agents, allowing them to discover, inspect, and execute Bruno API collections through the MCP protocol.1MIT