PatchWarden

run_direct_verification_bundle

Destructive

Run a sequence of approved verification commands in a single session and receive only concise structured status to confirm pass or fail, without log noise.

Instructions

Run multiple allowlisted Direct verification commands sequentially and return only bounded structured status. Omits stdout/stderr tails and log content.

Tool call template

Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {
      "session_id": "<session_id>",
      "commands": "<commands>"
    },
    "name": "run_direct_verification_bundle"
  }
}

Input Schema

Name	Required	Description
`commands`	Yes	Verification commands to run in order. Each command must be accepted by the existing Direct command guard.
`review_id`	No	Fresh review ID for this exact verification bundle when required.
`session_id`	Yes	Direct session ID
`timeout_seconds`	No

Schema Changelog

Changes observed during successful MCP inspections.

Changed1 schema field changedv1.7.1Jul 31, 2026

addedInput schema / properties / review_id

Added value: +{
+  "description": "Fresh review ID for this exact verification bundle when required.",
+  "type": "string"
+}

First observedv1.5.0Jul 8, 2026

TDQS

A3.5/5.0

Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive behavior, and the description adds that commands run sequentially and that logs are omitted. However, it does not disclose potential side effects of the commands, failure behavior, or what 'bounded structured status' entails beyond the structured annotation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a clear, two-sentence summary that is front-loaded with the core purpose and omits unnecessary details. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Without an output schema, the description's term 'bounded structured status' is vague and leaves return format unclear. It also does not explain the interaction with the Direct session, partial execution, or timeout behavior, so the description is incomplete for a destructive tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 75%, and the description adds no additional parameter semantics. It fails to clarify the undocumented timeout_seconds parameter or the exact conditions for review_id, leaving potential ambiguity.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool runs multiple allowlisted Direct verification commands sequentially and returns only bounded structured status, explicitly noting it omits stdout/stderr tails and log content. This distinguishes it from similar tools like run_verification or get_test_log.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies a use case (running a bundle of verification commands in a Direct session) but does not provide explicit when-to-use vs. when-not-to-use guidance or name alternative tools. The omission of log content hints at when not to use, but lacks direct exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Deploy Server