bruno-mcp
Bruno MCP
Bruno MCP — это локальный сервер Model Context Protocol для обнаружения, просмотра и выполнения API-коллекций Bruno. Он предоставляет MCP-клиентам семантический интерфейс к коллекциям Bruno, делегируя выполнение запросов, аутентификацию, скрипты, проверки и разрешение окружения интерфейсу командной строки Bruno.
Инструменты обнаружения и просмотра не изменяют файлы коллекций. Выполнение запросов делегируется Bruno и может запускать скрипты коллекций с побочными эффектами. Сервер взаимодействует с MCP-хостом через стандартный ввод и стандартный вывод (stdio).
Неофициальный проект: Bruno MCP — это независимый неофициальный MCP-сервер. Этот проект не связан с Bruno или его создателями, не одобрен и не спонсируется ими, а также не имеет с ними никакого иного отношения. Названия, логотипы и знаки Bruno, а также связанные с ними обозначения являются товарными знаками их соответствующих владельцев. Упоминания Bruno используются исключительно для описания совместимости с программным обеспечением Bruno.
Требования
Node.js 22 или новее
npm
Bruno CLI
>= 4.0.0 && < 5.0.0
Bruno MCP проверяет bru --version при запуске. Поддерживаются стабильные выпуски Bruno CLI 4.x; предварительные выпуски и другие основные версии отклоняются.
Related MCP server: Bruno MCP Server
Поддержка OpenCollection
Bruno MCP поддерживает коллекции OpenCollection в Bruno v4, идентифицируемые файлом opencollection.yml. Он обнаруживает запросы и окружения, представленные YAML-файлами OpenCollection.
Устаревшие коллекции .bru не поддерживаются. Обнаружение запросов игнорирует файлы .bru, а не разбирает и не преобразует их.
Установка
Установите Bruno MCP глобально из npm:
npm install --global @gpact/bruno-mcpУстановите поддерживаемый Bruno CLI отдельно, если его ещё нет:
npm install --global @usebruno/cli@^4.0.0Убедитесь, что обе точки входа доступны:
command -v bruno-mcp
bru --versionbruno-mcp не имеет параметров командной строки, поэтому его вызов запускает stdio-сервер, а не выводит справку. Обычно MCP-хосты запускают его самостоятельно.
Чтобы установить из клонированного репозитория, выполните:
npm ci
npm run build
npm linkКонфигурация MCP-хоста
MCP stdio transport определяет, как хост запускает дочерний процесс сервера и обменивается сообщениями через stdin и stdout. Он не определяет универсальный файл конфигурации хоста.
Настройте хост так, чтобы он запускал точку входа bruno-mcp как локальный stdio-сервер и передавал BRUNO_MCP_ROOT в окружение дочернего процесса. Используйте абсолютный корневой путь, поскольку не все хосты используют одну и ту же рабочую директорию.
Хосты, использующие mcpServers
Конфигурация проектов Claude Desktop и Claude Code использует объект mcpServers:
{
"mcpServers": {
"bruno": {
"command": "bruno-mcp",
"env": {
"BRUNO_MCP_ROOT": "/home/user/bruno"
}
}
}
}Сведения о расположении файлов конфигурации и параметрах области действия см. в официальном руководстве по локальным серверам и документации Claude Code MCP.
Visual Studio Code
VS Code использует объект servers в своей конфигурации mcp.json:
{
"servers": {
"bruno": {
"type": "stdio",
"command": "bruno-mcp",
"env": {
"BRUNO_MCP_ROOT": "/home/user/bruno"
}
}
}
}Сведения о расположении конфигурации рабочей области и пользователя см. в справочнике по конфигурации MCP в VS Code.
OpenCode
OpenCode использует локальную запись MCP в разделе mcp, представляет команду в виде массива и называет поле окружения environment:
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"bruno": {
"type": "local",
"command": ["bruno-mcp"],
"environment": {
"BRUNO_MCP_ROOT": "/home/user/bruno"
}
}
}
}Сведения о приоритете конфигурации и дополнительных параметрах локального сервера см. в документации MCP-сервера OpenCode.
Другие хосты могут использовать другую схему или процесс настройки через командную строку. В любом случае требуемые концепции одинаковы: локальный stdio-транспорт, команда bruno-mcp и переменные окружения, описанные ниже. Если графический хост не может найти bruno-mcp или bru в своём PATH, используйте абсолютный путь, возвращаемый командой command -v bruno-mcp, для серверной команды и задайте BRUNO_MCP_BRU как абсолютный путь к Bruno CLI.
Вы также можете запустить сервер напрямую. Он будет ожидать сообщения MCP на stdin и записывать протокольные сообщения в stdout:
BRUNO_MCP_ROOT=/home/user/bruno bruno-mcpКонфигурация
Конфигурация задаётся через переменные окружения. Некорректная конфигурация не позволяет серверу запуститься.
Переменная | По умолчанию | Описание |
| Текущая рабочая директория | Существующая директория, содержащая доступные коллекции. Путь при запуске приводится к его каноническому расположению, а доступ к коллекциям ограничен этой директорией. |
|
| Имя или путь к исполняемому файлу Bruno CLI. Исполняемый файл вызывается напрямую, никогда через оболочку. |
|
| Тайм-аут одного запуска в миллисекундах. Должен быть положительным целым числом. Значения больше |
|
| При значении true разрешает вызывающим сторонам запрашивать песочницу разработчика Bruno. По умолчанию не включает режим разработчика. |
|
| При значении true разрешает вызывающим сторонам отключать обычную проверку TLS-сертификатов для запуска. По умолчанию не отключает проверку. |
|
| Максимально допустимый размер JSON-отчёта Bruno в байтах UTF-8 (по умолчанию 5 МиБ). Должен быть положительным целым числом. |
|
| Минимальный уровень журналирования в stderr: |
Логические параметры принимают true, 1, yes или on, а также false, 0, no или off без учёта регистра.
Пример с явными политиками выполнения:
BRUNO_MCP_ROOT=/home/user/bruno \
BRUNO_MCP_BRU=/usr/local/bin/bru \
BRUNO_MCP_TIMEOUT_MS=180000 \
BRUNO_MCP_ALLOW_DEVELOPER_SANDBOX=false \
BRUNO_MCP_ALLOW_INSECURE=false \
BRUNO_MCP_MAX_REPORT_BYTES=5242880 \
BRUNO_MCP_LOG_LEVEL=info \
bruno-mcpИнструменты MCP
Идентификаторы коллекций — это пути относительно BRUNO_MCP_ROOT. Пути запросов и окружений задаются относительно их коллекции. Возвращаемые URL-адреса и YAML-переменные не интерполируются.
bruno_list_collections
Перечисляет коллекции Bruno OpenCollection, доступные в настроенной рабочей области. Не принимает аргументов и возвращает идентификаторы коллекций, названия и версии OpenCollection.
bruno_list_requests
Перечисляет и ищет запросы в одной коллекции Bruno OpenCollection. Возвращает пути запросов, названия, типы, а также HTTP-методы и URL-адреса, когда они доступны.
Обязательный входной параметр:
collection— идентификатор коллекции
Необязательные фильтры:
query— подстрока без учёта регистра, сопоставляемая с названием, путём и URLmethod— точный HTTP-метод без учёта регистраtype— точный тип запроса без учёта регистра
bruno_search_requests
Ищет запросы во всех коллекциях одним вызовом. Каждый результат содержит идентификатор своей коллекции.
Обязательный входной параметр:
query— непустая подстрока без учёта регистра, сопоставляемая с названием, путём и URL
Необязательные фильтры method и type используют точное совпадение без учёта регистра.
bruno_get_request
Читает запрос Bruno OpenCollection и возвращает нормализованные метаданные вместе с разобранным YAML-документом.
Обязательные входные параметры:
collection— идентификатор коллекцииrequest— путь запроса относительно коллекции
Установите includeSource в true, чтобы также возвращать исходный YAML-код. По умолчанию — false. Разобранный документ и исходный код возвращаются без маскирования секретов, поэтому используйте пути запросов, полученные с помощью инструментов перечисления или поиска, и не встраивайте учётные данные непосредственно в YAML запроса.
bruno_list_environments
Перечисляет окружения, доступные коллекции, не раскрывая значения переменных. Каждый результат содержит название окружения, относительный путь, количество переменных и количество секретов.
Обязательный входной параметр:
collection— идентификатор коллекции
bruno_get_environment
Просматривает окружение Bruno. Переменные, помеченные как secret: true, возвращаются со значением [REDACTED]; несекретные значения возвращаются в нормализованной строковой форме.
Обязательные входные параметры:
collection— идентификатор коллекцииenvironment— простое имя, напримерLocal, или путь относительно коллекции, напримерenvironments/Local.yml
bruno_run
Выполняет запросы, папки или всю коллекцию с помощью Bruno CLI v4. Возвращает нормализованные результаты выполнения, запросов, ответов, тестов и проверок. Сбои тестов или проверок Bruno возвращаются как результаты, доступные для просмотра, а не как ошибки транспорта MCP.
Входные параметры:
Поле | По умолчанию | Описание |
| Обязательное | Идентификатор коллекции. |
|
| Пути запросов или папок. Пустой массив выполняет всю коллекцию. |
| Нет | Название окружения Bruno. |
| Нет | Несекретные строковые переопределения, передаваемые как переменные окружения Bruno. |
|
| Останавливается после первого запроса, теста или проверки, завершившихся неудачей. |
|
| Выполняет только запросы, содержащие тесты или активные проверки. |
| Нет | Неотрицательная задержка между запросами в миллисекундах. |
|
| Режим песочницы Bruno: |
|
| Запросы отключают проверку TLS-сертификатов. |
|
| Возвращаемые тела ответов: |
|
| Максимальный размер каждого включённого тела ответа в UTF-8 или сериализованном виде. Слишком большие тела заменяются метаданными о размере. |
Обработка секретов
Не передавайте учётные данные и другие секреты через
variables. Аргументы инструментов MCP могут быть видны модели и хосту, а переопределения также передаются процессу Bruno как аргументы. Вместо этого передавайте секреты через обычные механизмы окружения Bruno или окружения процесса.
Проверка окружения учитывает secret: true, но этот маркер не является общей границей доступа к файлам. bruno_get_request возвращает файлы без маскирования и в настоящее время принимает любой существующий файл внутри коллекции, а не только пути, найденные при обнаружении запросов. Поэтому авторизованный вызывающий, указавший путь к файлу окружения, может получить его исходное содержимое. Ограничьте доступ MCP доверенными хостами и пользователями, сузьте область действия BRUNO_MCP_ROOT и не храните секреты в открытом виде в производственной среде там, где их может прочитать вызывающий MCP.
Политики песочницы и TLS
bruno_run по умолчанию использует безопасную песочницу Bruno.
Выполнение в песочнице разработчика требует обоих следующих явных действий:
Оператор сервера устанавливает
BRUNO_MCP_ALLOW_DEVELOPER_SANDBOX=true.Вызывающая сторона устанавливает для запуска
sandboxв значениеdeveloper.
Без разрешения сервера запрос в режиме разработчика завершается ошибкой DEVELOPER_SANDBOX_DISABLED. Режим разработчика предоставляет сценариям Bruno более широкие возможности, поэтому включайте его только для доверенных коллекций.
Ограничение путей контролирует пути, передаваемые в Bruno MCP; оно не изолирует код внутри сценариев Bruno. Сценарии Bruno могут обновлять состояние коллекции или окружения, а сценарии в режиме разработчика могут использовать собственные возможности Node.js для доступа к путям за пределами BRUNO_MCP_ROOT или запуска других процессов.
Обычная проверка сертификатов TLS включена по умолчанию. Её отключение также требует как разрешения сервера (BRUNO_MCP_ALLOW_INSECURE=true), так и insecure: true для отдельного запуска. В противном случае запрос завершается ошибкой INSECURE_DISABLED. Небезопасный режим ослабляет защиту транспортного уровня и должен применяться только в контролируемых средах разработки.
Модель безопасности
Ограничение корневого каталога: Пути коллекций, запросов, окружений и выполнения, передаваемые в Bruno MCP, проверяются на соответствие каноническим границам файловой системы. Обходы путей и переходы по символическим ссылкам за пределы
BRUNO_MCP_ROOTили выбранной коллекции отклоняются. Это не ограничивает код сценариев в режиме разработчика.Без выполнения через оболочку: Bruno MCP передаёт фиксированную операцию и отдельные аргументы напрямую настроенному исполняемому файлу Bruno с отключённым выполнением через оболочку. Он не предоставляет универсальную оболочку или инструмент команд Bruno CLI, но сценарии Bruno в режиме разработчика могут сами запускать процессы.
Инспекция только для чтения: Обнаружение и инспекция намеренно не создают, не обновляют и не удаляют файлы коллекций.
bruno_runделегирует выполнение Bruno CLI и может запускать сценарии с побочными эффектами, включая сохраняемые изменения переменных.Целевое редактирование: Значения окружения, явно помеченные
secret: true, редактируются при инспекции окружения. Отчёты о выполнении рекурсивно редактируют распространённые чувствительные заголовки, включая authorization, cookies и заголовки API-ключей. Чтение необработанных файлов и запросов не редактируется.stdout только для протокола: stdout зарезервирован для трафика протокола MCP. Журналы и диагностика запуска записываются в stderr.
Ограниченные отчёты: Чрезмерно большие отчёты Bruno отклоняются, а включаемые тела ответов имеют отдельный лимит на каждое тело.
Редактирование — это защита в глубину, а не общее обнаружение секретов. Необработанные файлы, YAML запросов, исходный код запросов, URL-адреса, тела ответов и диагностика Bruno могут содержать значения, которые не распознаются как секреты. Настраивайте BRUNO_MCP_ROOT как можно более узко, избегайте встраивания учётных данных в файлы коллекций и при включении выполнения запросов используйте доверенные коллекции и вызывающие MCP-приложения.
Разработка
Установите зафиксированные зависимости:
npm ciПолезные команды:
Command | Назначение |
| Запуск точки входа TypeScript в режиме разработки. |
| Компиляция сервера в |
| Запуск скомпилированного stdio-сервера. |
| Запуск всех проверок, требуемых CI. |
| Проверка исходного кода, тестов и инструментов линтером. |
| Проверка типов исходного кода, тестов и инструментов без создания файлов. |
| Однократный запуск набора модульных тестов. |
| Запуск модульных тестов в режиме наблюдения. |
| Запуск набора интеграционных тестов. |
| Пересоздание фикстур отчётов Bruno при намеренном их обновлении. |
Перед отправкой изменения выполните:
npm run checkИзвестные ограничения
Поддерживается только YAML Bruno OpenCollection; устаревшие коллекции
.bruигнорируются.Инструменты MCP для изменения коллекций, запросов, окружений, папок или рабочих областей не предоставляются. Выполняемые сценарии Bruno по-прежнему могут иметь побочные эффекты.
Импорт и экспорт OpenAPI не поддерживаются.
Сервер не предоставляет произвольные команды Bruno CLI и не выполняет команды через оболочку.
Поддерживается только локальный транспорт stdio MCP. Удалённый и HTTP-транспорты MCP не включены.
Автоматическая интеграция с менеджером секретов не включена.
Bruno MCP не реализует собственный HTTP-клиент, интерполяцию переменных, аутентификацию, OAuth, сценарии, цепочки запросов, проверки, поведение прокси, перенаправления или работу с сертификатами. Эти возможности реализуются Bruno CLI.
Available Tools
11 toolsbruno_create_environmentCreate Bruno environmentA
Create a new Bruno environment file. Secret values must be omitted or [REDACTED].
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Environment name or path (e.g. Local or environments/Local.yml). | |
| variables | No | Initial list of environment variables. | |
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the behavioral disclosure burden. It does add a meaningful constraint: 'Secret values must be omitted or [REDACTED].' However, it does not disclose behavior around overwriting existing files, permission requirements, or what happens after creation. This is a mutation tool, so more detail would be valuable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences: one states the primary action, the other communicates the one critical rule. There is no filler or repetition of schema details. The structure is appropriately concise and front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The schema covers all parameters and the description highlights the key secret-handling rule, so an agent can likely call the tool correctly. However, there is no output schema and the description does not mention what the tool returns, whether it will overwrite an existing environment at the same path, or any side effects. For a file-creating mutation tool, these are notable gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents all three parameters. The description adds the security rule about secrets, but this mostly restates what the schema already specifies via the '[REDACTED]' const and corresponding descriptions. Thus the description provides minimal added value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: 'Create a new Bruno environment file.' This is specific and unambiguous, naming both the verb and the resource. It distinguishes this tool from siblings like bruno_update_environment and bruno_get_environment simply by emphasizing 'new'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description establishes when to use the tool: when creating a new environment, not updating or listing existing ones. It does not explicitly name alternatives, but the 'new' qualifier makes the intended use clear enough. It stops short of explaining what not to use it for, so it lacks explicit exclusion guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_create_requestCreate Bruno requestA
Create a Bruno HTTP request YAML file. Missing parent folders are created and existing files are not overwritten.
| Name | Required | Description | Default |
|---|---|---|---|
| app | No | App extension settings. | |
| url | Yes | Request URL, optionally with Bruno {{variables}}. | |
| auth | No | Authentication config object (e.g. { type: 'bearer', token: '...' }) or 'inherit'. Use Bruno variables for secrets. | |
| body | No | Request body: { type, data } object or list of variants. | |
| docs | No | Documentation text. | |
| name | Yes | Request display name. | |
| tags | No | Request tags. | |
| method | Yes | HTTP method, for example GET or POST. | |
| params | No | Query and path parameters. | |
| headers | No | Request headers. | |
| request | Yes | New request path relative to collection root, including .yml extension (e.g. Users/Create.yml). | |
| runtime | No | ||
| examples | No | Request and response examples. | |
| sequence | No | Execution sequence order. | |
| settings | No | ||
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). | |
| description | No | Request description. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the behavioral burden. It does disclose two non-obvious file behaviors: missing parent folders are auto-created and existing files are not overwritten. But it omits what happens when a file already exists (error vs no-op), what the successful response contains, and any other side effects beyond file creation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one front-loaded sentence that conveys the essential action plus two important edge-case behaviors with no filler. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 17-parameter mutation tool with no output schema and no annotations, the description is not fully complete: it lacks success/error signaling, what happens on an existing-file conflict, and explicit routing to bruno_update_request. The schema compensates for parameter details, and the description covers the most important file-system behaviors, so it is adequate but has clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is high at 88%, so the schema already documents most parameters and the baseline is 3. The description adds extra meaning by clarifying request-path behavior: nested parent folders are automatically created and an existing target file is not overwritten, which is not stated in the schema's parameter descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a concrete action ('Create') and a concrete resource ('Bruno HTTP request YAML file'), so an agent immediately knows what the tool does. The phrase 'existing files are not overwritten' also distinguishes it from bruno_update_request, which is the main sibling it could be confused with.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'create' verb and the warning that existing files are not overwritten imply this tool is for new request files, giving some usage context. However, it never explicitly says to use bruno_update_request when the target already exists, nor does it state any other when-to-use/when-not-to-use guidance relative to sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_get_environmentGet Bruno environmentB
Inspect a Bruno environment. Variables marked as secrets are always redacted.
| Name | Required | Description | Default |
|---|---|---|---|
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). | |
| environment | Yes | Environment name or path (e.g. Local or environments/Local.yml). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses one important behavior: secret variables are always redacted in the output. However, it does not explicitly state that the operation is read-only, nor does it mention potential errors or permission requirements. Since no annotations are provided, the description carries the burden of behavior disclosure, but it only partially fulfills this.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that leads with the core purpose and then adds a crucial detail about secret redaction. It is concise, free of filler, and well-structured; every word contributes to the tool's understanding.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple get operation with two well-documented parameters, the description provides sufficient context: it names the action, the resource, and a key output behavior (redaction). It does not explicitly state the return format, but 'inspect' implies retrieving the environment's details, and the absence of an output schema makes this a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema provides full descriptions for both parameters (collection and environment), so the baseline is 3. The description adds no additional parameter-level semantics beyond what the schema already states, making this a neutral score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Inspect') and the resource ('a Bruno environment'), which distinguishes it from create/update/delete operations. It does not explicitly contrast with bruno_list_environments, but 'inspect' implies fetching details of a specific environment, making the purpose reasonably clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not provide explicit guidance on when to use this tool versus alternatives. It does not mention that this is for retrieving a single environment's details as opposed to listing environments or running requests, leaving the selection decision to the agent's interpretation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_get_requestGet Bruno requestB
Read a Bruno request. Use responseMode=revision for revision check, or full for parsed content.
| Name | Required | Description | Default |
|---|---|---|---|
| request | Yes | Request path relative to collection root (e.g. Users/Create.yml). | |
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). | |
| responseMode | No | Detail level: "full" for document and metadata, or "revision" for revision check only. | |
| includeSource | No | Include raw YAML source in full mode. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral burden. It does convey that the operation is a read and that 'full' returns parsed content while 'revision' performs a revision check, which gives some behavioral insight. However, it does not describe the exact response shape, error behavior, or explicitly confirm that no side effects occur.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two short sentences with the core operation front-loaded and mode guidance immediately following. Every phrase earns its place, and there is no redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The schema covers parameter semantics well, but with no annotations and no output schema, the description should more clearly explain return behavior and how this tool relates to sibling tools. It sketches the difference between revision and full modes but leaves the exact response and tool-selection context to inference. This is adequate but has clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All four parameters already have descriptive comments in the input schema, so the baseline is 3. The description's mode sentence mostly restates the responseMode schema, though 'parsed content' adds a small nuance. It adds no meaningful detail for collection, request, or includeSource beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the operation: 'Read a Bruno request.' The mention of responseMode further clarifies that the tool supports both full content retrieval and revision checks, which is specific and useful. It is distinguishable from create/update/run siblings, though it does not explicitly contrast with list/search tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides guidance for choosing between responseMode values, but it says nothing about when to use this tool instead of bruno_list_requests, bruno_search_requests, or bruno_run. No alternatives or exclusion conditions are mentioned, so an agent must infer the tool's appropriate context from its name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_list_collectionsList Bruno collectionsB
List Bruno collections available in the workspace.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral disclosure burden. It only restates the listing action and does not mention read-only behavior, return format, ordering, pagination, or potential side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single, front-loaded sentence that states the essential purpose with no filler or repetition. It is appropriately sized for such a simple tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter listing tool, the description is functionally sufficient: the agent knows what the tool does and that it operates on workspace collections. The only minor gap is the lack of explicit return-shape details, but no output schema exists and the tool is simple enough to infer a list of collections.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool has zero parameters, so there is no parameter semantics burden. The description does not need to explain inputs, and the empty input schema is trivially complete.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('List') and resource ('Bruno collections') with a clear workspace scope. It is unambiguous, though it does not explicitly contrast with sibling listing tools such as bruno_list_requests or bruno_list_environments.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance about when to use this tool versus alternatives. The agent must infer from the resource name that this is for collections, with no explicit exclusions or context for choosing among the sibling list tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_list_environmentsList Bruno environmentsA
List environments available to a Bruno collection without exposing variable values.
| Name | Required | Description | Default |
|---|---|---|---|
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure. It explicitly promises that variable values are not exposed, which is a meaningful safety/security behavior. It does not describe error handling or return format, but for a simple listing operation this is a solid level of transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no filler. It front-loads the core purpose ('List environments...') and immediately adds the key differentiator ('without exposing variable values'). Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a low-complexity tool with one required parameter and no output schema, the description is largely sufficient. It covers purpose, scope, and the security-relevant behavior. It could be more complete by stating the return shape more explicitly, but the core selection and invocation needs are met.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 100% coverage with a clear parameter description: 'Collection path relative to workspace root (as returned by bruno_list_collections).' The tool description adds no parameter details itself, but the schema already provides sufficient meaning, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource ('List environments') and adds the scope 'available to a Bruno collection'. It also includes a distinctive qualifier, 'without exposing variable values', which differentiates it from a tool like bruno_get_environment that would return variable values.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly scopes the tool to listing environments for a collection and points to bruno_list_collections as the source of the collection path. It does not explicitly name alternatives or say when not to use it, but the 'without exposing variable values' phrasing gives helpful context for choosing between this and a more detailed environment tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_list_requestsList Bruno requestsB
List and search requests in a Bruno collection. Returns request paths, names, types, and HTTP metadata.
| Name | Required | Description | Default |
|---|---|---|---|
| type | No | Filter by request type (e.g. http or graphql). | |
| query | No | Case-insensitive substring filter for request name, path, and URL. | |
| method | No | Filter by HTTP method (e.g. GET or POST). | |
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of explaining behavior. It does disclose that the tool returns request paths, names, types, and HTTP metadata, but it does not mention error behavior, pagination, or whether the operation is strictly read-only. The read-only nature is implied by 'list and search' but not explicit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loaded: it states the core action and return contents in two short sentences with no filler. Every phrase contributes meaningful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the main inputs and return fields, but with no output schema and no annotations, it is only minimally complete. The lack of any distinction from bruno_search_requests is a notable gap for an agent deciding which tool to invoke.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema coverage is 100%, so all parameters already have descriptions. The tool description adds no extra parameter-level semantics beyond confirming the collection context, which the schema already provides. A baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the operation: listing and searching requests in a Bruno collection, and it lists what is returned. However, it does not differentiate itself from the sibling tool bruno_search_requests, whose name suggests overlapping search functionality.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given about when to use this tool instead of bruno_search_requests or bruno_get_request. The description implies it is for exploring requests but never states exclusions or alternative selection criteria, leaving the agent to guess.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_runRun Bruno requestsA
Execute requests, folders, or an entire Bruno collection using Bruno CLI v4. Returns structured execution results. Do not pass credentials or other secrets through variables. MCP tool arguments may be visible to the model and host.
| Name | Required | Description | Default |
|---|---|---|---|
| bail | No | Stop after the first failing request, test, or assertion. | |
| delayMs | No | Delay between requests in milliseconds. | |
| sandbox | No | JavaScript sandbox mode (safe or developer). | safe |
| targets | No | Request files or folders relative to collection root, or empty array for entire collection. | |
| insecure | No | Disable normal TLS certificate verification. | |
| testsOnly | No | Only run requests containing tests or active assertions. | |
| variables | No | Non-secret environment variable overrides. | |
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). | |
| environment | No | Bruno environment name to use for this run. | |
| responseBodyMode | No | When to return response bodies: none, onFailure, or full. | onFailure |
| maxResponseBodyBytes | No | Maximum bytes for each returned response body. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral disclosure burden. It does provide useful warnings about not passing secrets and MCP argument visibility, and it mentions structured results. However, it does not disclose that executing requests may perform live network calls, cause side effects, or take a long time, which are significant behavioral traits for an execution tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three concise sentences that front-load the core action, then state the return type, then add a critical security warning. There is no filler or redundant wording, and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having 11 parameters and no output schema or annotations, the description stays very brief. It does not explain the structure of the execution results, warn about side effects, or provide guidance on selecting targets or interpreting failures. For such a complex, potentially side-effectful tool, the description is insufficiently complete on its own.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the parameters are already well-documented in the schema. The description adds a security warning about variables, reinforcing but not extending the schema's note that variables are non-secret overrides. It provides no additional semantic value for the other ten parameters, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the specific verb 'Execute' and clearly identifies the resource: 'requests, folders, or an entire Bruno collection' via 'Bruno CLI v4'. It also states the result type ('structured execution results'), making the tool's purpose unambiguous and easily distinguishable from the listing/getting/creating siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this tool is for running Bruno requests rather than managing them, but it does not explicitly state when to choose it over alternatives or when not to use it. There is no mention of sibling tools like bruno_list_collections or bruno_get_request, leaving usage context to inference. It is adequate but not explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_search_requestsSearch Bruno requestsB
Search requests across all collections in the workspace. Returns matching requests with collection id.
| Name | Required | Description | Default |
|---|---|---|---|
| type | No | Filter by request type (e.g. http or graphql). | |
| query | Yes | Case-insensitive substring filter for request name, path, and URL. | |
| method | No | Filter by HTTP method (e.g. GET or POST). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of disclosing side effects and behavior. It mentions it returns matching requests, implying a read-only operation, but does not explicitly state that it does not modify data or that it is safe to call. The transparency is moderate but not thorough.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, direct, and free of unnecessary detail. It efficiently conveys the tool's purpose and a key aspect of the output, with no fluff or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description provides the essential information needed to invoke the tool: that it searches across all collections and returns matching requests with collection id. Even though there is no output schema, the mention of the return content satisfies basic completeness. It lacks details on pagination or filtering specifics, but these are minor for a search tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides descriptions for all three parameters: query, type, and method. The tool description does not add any extra context about how these parameters interact or affect the search, so the value added beyond the schema is minimal. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool searches for requests across all collections, using the specific verb 'search' and resource 'requests'. It also mentions it returns matching requests with collection id, which distinguishes it from simply listing requests. However, it does not explicitly contrast with the sibling tool bruno_list_requests, so it stops short of a perfect 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says what the tool does but does not explicitly state when to use it over alternatives (e.g., bruno_list_requests or bruno_get_request). There is no guidance about using search when a filter is needed versus listing when a full enumeration is required, leaving the agent to infer usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_update_environmentUpdate Bruno environmentB
Update an existing Bruno environment file. Existing secrets must be preserved with secret: true.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Environment name or path (e.g. Local or environments/Local.yml). | |
| variables | Yes | Replacement list of variables. Existing secrets must keep secret: true. | |
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry the full behavioral disclosure burden. It does disclose one important constraint (preserving secrets with secret: true), but it omits that variables form a replacement list, whether unspecified variables are removed, and what the operation returns. This is a significant gap for a mutating tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with no redundancy. The primary purpose is stated first, and the critical secret-preservation constraint is added immediately without unnecessary detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutating tool with no annotations and no output schema, the description is too thin. It does not explain the replacement semantics, the effect on omitted variables, or the expected return value. The secret warning is helpful but leaves important operational context uncovered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all parameters. The description's secret-preservation note adds emphasis but largely duplicates the schema's 'Existing secrets must keep secret: true.' Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Update') and the resource ('an existing Bruno environment file'), which distinguishes it from environment creation tools. It does not explicitly name sibling alternatives, so it stops short of full differentiation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Existing' implies this tool is for modifying an already-created environment rather than creating one, providing weak usage context. However, it does not explicitly state when to use this tool over bruno_create_environment, bruno_get_environment, or other siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
bruno_update_requestUpdate Bruno requestA
Patch an existing Bruno HTTP request while preserving untouched content. Use expectedRevision="*" to patch latest version without preflight.
| Name | Required | Description | Default |
|---|---|---|---|
| app | No | ||
| url | No | Request URL, optionally with Bruno {{variables}}. | |
| auth | No | ||
| body | No | ||
| docs | No | ||
| name | No | Request display name. | |
| tags | No | ||
| method | No | HTTP method, for example GET or POST. | |
| params | No | ||
| headers | No | ||
| request | Yes | Existing HTTP request path relative to collection root, including .yml extension. | |
| runtime | No | ||
| examples | No | ||
| sequence | No | ||
| settings | No | ||
| collection | Yes | Collection path relative to workspace root (as returned by bruno_list_collections). | |
| description | No | Request description. | |
| expectedRevision | Yes | Revision returned by bruno_get_request, or "*" to patch latest version without preflight. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure. It does reveal the partial-update nature and the preflight bypass behavior. However, it does not state side effects like persistence, what happens on a revision mismatch, or what the response contains, so it is adequate but not comprehensive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tight sentences with no filler: the core patch behavior is front-loaded, and the operational revision tip follows immediately. The description avoids repeating parameter-level schema details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For an 18-parameter mutation tool with no annotations and no output schema, the description plus the rich schema provides enough to select and invoke the tool correctly: patch an existing request, preserve untouched content, and optionally bypass preflight. Missing details like return shape and conflict behavior are minor but would make it more complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents most parameter meanings in detail. The description adds the cross-cutting patch semantics that omitted content is preserved, which is essential for constructing correct patches. The expectedRevision wildcard tip mostly reinforces existing schema text, so this is above baseline but not exceptional.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Uses a specific verb ('Patch'), a clear resource ('existing Bruno HTTP request'), and the critical scope 'preserving untouched content'. This unmistakably distinguishes it from bruno_create_request and from read/run siblings without needing the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The usage is implied: this is for modifying an existing request, not creating one. However, it never explicitly names alternatives such as bruno_create_request or advises calling bruno_get_request first to fetch a revision. The expectedRevision='*' tip is a useful operational detail but not a full when-to-use vs. when-not-to-use guideline.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
10 tool updates
v0.2.0- Added
bruno_create_environment - Added
bruno_create_request - Changed
bruno_get_environment2 fields changed- changed
Input schema / properties / collection / descriptionPrevious value: -"Collection identifier: the collection's path relative to the workspace root (as returned by bruno_list_collections), not its display name. It may be nested, for example collections/hotel."New value: +"Collection path relative to workspace root (as returned by bruno_list_collections)." - changed
Input schema / properties / environment / descriptionPrevious value: -"Environment reference, either a bare name (Local) or a collection-relative path (environments/Local.yml)."New value: +"Environment name or path (e.g. Local or environments/Local.yml)."
- Changed
bruno_get_request4 fields changed- changed
Input schema / properties / collection / descriptionPrevious value: -"Collection identifier: the collection's path relative to the workspace root (as returned by bruno_list_collections), not its display name. It may be nested, for example collections/hotel."New value: +"Collection path relative to workspace root (as returned by bruno_list_collections)." - changed
Input schema / properties / includeSource / descriptionPrevious value: -"When true, also return the raw request source text alongside the parsed document. Defaults to false."New value: +"Include raw YAML source in full mode." - changed
Input schema / properties / request / descriptionPrevious value: -"Request path relative to the collection root (as returned by bruno_list_requests), for example Hotel/Search.yml."New value: +"Request path relative to collection root (e.g. Users/Create.yml)." - added
Input schema / properties / responseModeAdded value: +{ + "description": "Detail level: \"full\" for document and metadata, or \"revision\" for revision check only.", + "enum": [ + "full", + "revision" + ], + "type": "string" +}
- Changed
bruno_list_environments1 field changed- changed
Input schema / properties / collection / descriptionPrevious value: -"Collection identifier: the collection's path relative to the workspace root (as returned by bruno_list_collections), not its display name. It may be nested, for example collections/hotel."New value: +"Collection path relative to workspace root (as returned by bruno_list_collections)."
- Changed
bruno_list_requests4 fields changed- changed
Input schema / properties / collection / descriptionPrevious value: -"Collection identifier: the collection's path relative to the workspace root (as returned by bruno_list_collections), not its display name. It may be nested, for example collections/hotel."New value: +"Collection path relative to workspace root (as returned by bruno_list_collections)." - changed
Input schema / properties / method / descriptionPrevious value: -"Filter to requests with this HTTP method (case-insensitive), for example GET or POST."New value: +"Filter by HTTP method (e.g. GET or POST)." - changed
Input schema / properties / query / descriptionPrevious value: -"Case-insensitive substring filter matched against each request's name, path, and URL."New value: +"Case-insensitive substring filter for request name, path, and URL." - changed
Input schema / properties / type / descriptionPrevious value: -"Filter to requests of this type (case-insensitive), for example http or graphql."New value: +"Filter by request type (e.g. http or graphql)."
- Changed
bruno_run7 fields changed- changed
Input schema / properties / collection / descriptionPrevious value: -"Collection identifier: the collection's path relative to the workspace root (as returned by bruno_list_collections), not its display name."New value: +"Collection path relative to workspace root (as returned by bruno_list_collections)." - changed
Input schema / properties / insecure / descriptionPrevious value: -"Disable normal TLS certificate verification. Must be enabled by server policy."New value: +"Disable normal TLS certificate verification." - changed
Input schema / properties / maxResponseBodyBytes / descriptionPrevious value: -"Maximum serialized UTF-8 size of each returned response body. Oversized bodies are replaced by size metadata."New value: +"Maximum bytes for each returned response body." - changed
Input schema / properties / responseBodyMode / descriptionPrevious value: -"Response bodies to return in the MCP payload: none, only results with failed tests or assertions, or all results."New value: +"When to return response bodies: none, onFailure, or full." - changed
Input schema / properties / sandbox / descriptionPrevious value: -"JavaScript sandbox mode. Developer mode must be enabled by server policy."New value: +"JavaScript sandbox mode (safe or developer)." - changed
Input schema / properties / targets / descriptionPrevious value: -"Request files or folders relative to the collection root. An empty list runs the entire collection."New value: +"Request files or folders relative to collection root, or empty array for entire collection." - changed
Input schema / properties / variables / descriptionPrevious value: -"Non-secret environment variable overrides. Do not include credentials or other secrets."New value: +"Non-secret environment variable overrides."
- Changed
bruno_search_requests3 fields changed- changed
Input schema / properties / method / descriptionPrevious value: -"Filter to requests with this HTTP method (case-insensitive), for example GET or POST."New value: +"Filter by HTTP method (e.g. GET or POST)." - changed
Input schema / properties / query / descriptionPrevious value: -"Required case-insensitive substring matched against each request's name, path, and URL."New value: +"Case-insensitive substring filter for request name, path, and URL." - changed
Input schema / properties / type / descriptionPrevious value: -"Filter to requests of this type (case-insensitive), for example http or graphql."New value: +"Filter by request type (e.g. http or graphql)."
- Added
bruno_update_environment - Added
bruno_update_request
7 tool updates
v0.1.0- First observed
bruno_get_environment - First observed
bruno_get_request - First observed
bruno_list_collections - First observed
bruno_list_environments - First observed
bruno_list_requests - First observed
bruno_run - First observed
bruno_search_requests
TDQS
Scored across 11 tools
Most tools target distinct resources and actions clearly. The main ambiguity is between bruno_list_requests, which can also search within a collection, and bruno_search_requests, which searches across all collections.
The bruno_ prefix with verb_noun naming is highly consistent across nearly all tools. bruno_run is a minor deviation because it lacks a noun object, but it is still understandable given it runs requests, folders, or collections.
Eleven tools is well-scoped for a Bruno API client server covering collections, requests, environments, and execution. Each tool has a clear role in the overall workflow.
The tool surface covers listing, getting, creating, updating, searching, and running requests, plus environment management. The notable gap is the absence of delete operations for requests, environments, or collections.
Maintenance
Related MCP Connectors
MCP server for interacting with the Supabase platform
Model Context Protocol server for the Apideck Unified API. Connect any MCP-compatible agent framework to 100+ accounting systems, HRIS platforms, file storage providers, and more through one integration. More information https://www.apideck.com/mcp-server
The official MCP Server from Mia-Platform to interact with Mia-Platform Console
The official MCP Server for the Mux API
Related MCP Servers
- MIT
- AlicenseBqualityFmaintenanceA Model Context Protocol (MCP) server that enables programmatic creation and management of Bruno API testing collections, environments, and requests through standardized MCP tools.187 npm36MIT
- AlicenseNot gradedqualityCmaintenanceMCP server that executes requests from Bruno API collections via the Bruno CLI tool, enabling API request execution and collection management.28 PyPI4MIT
- AlicenseNot gradedqualityDmaintenanceExposes Bruno CLI as tools for AI agents, allowing them to discover, inspect, and execute Bruno API collections through the MCP protocol.1MIT