populi-mcp
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@populi-mcpFind the person with email jane.doe@example.com and show their billing"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
populi-mcp
MCP server for the Populi API v2. It lets Claude, Codex, Cursor and any other Model Context Protocol client look up people, admissions, academics and billing data in your Populi instance, and, if you opt in, make changes.
Package: @kisasa/populi-mcp on npm. Command: populi-mcp. Transport: stdio.
How it works
Populi's API has 697 routes across 180 models. Exposing each as its own tool would flood a model's context, so this server gives the model a small toolset plus the API reference itself:
Tool | What it does |
| Keyword search over the bundled route catalog ( |
| Full reference for one route: path ids, required and optional fields with types, |
|
|
|
|
| Look up people by exact email and/or name. |
| Shows the instance, key type (sandbox or live), whether writes are on, the files folder and the timeout. |
|
|
Together they cover the whole API: all 492 documented GET routes, all 205 write routes, file uploads and file downloads. Routes that aren't in the bundled catalog work too, since the tools take any path.
A typical exchange: the model searches for the route, reads its parameters, then calls populi_get with a server-side filter.
The catalog is generated from the public API docs and ships inside the package, so searching and describing work offline and cost no API requests.
Related MCP server: Edvibe School MCP
Configuration
Variable | Required | Description |
| yes | Your instance, e.g. |
| yes | An API key token. In Populi: Account & Settings > API > Keys (Account Administrator). Sent as a bearer token to |
| no | Set to |
| no | The one folder downloads are saved to and uploads are read from. Default: |
| no | How long one Populi request may take, 1000 to 600000. Default: |
The key's Populi roles decide what it can see. A route the key cannot reach returns a 403 naming the problem; populi_describe_api lists the roles each route needs.
Sandbox first
Populi issues separate sk_sandbox_... keys that only work against sandbox instances (live keys only work on live). Point this server at a sandbox while you evaluate it.
Read-only by default
With no POPULI_ALLOW_WRITES, the write tool is not registered at all, so the model cannot even attempt a change. When you enable it, populi_write is marked destructive, so clients that prompt for approval will ask before each call. DELETE in Populi is permanent.
Install
Requires Node.js 20 or newer. Every client below runs npx -y @kisasa/populi-mcp, so there is nothing to install by hand.
Claude Code
claude mcp add populi \
-e POPULI_BASE_URL=https://yourschool.populiweb.com \
-e POPULI_API_KEY=sk_sandbox_... \
-- npx -y @kisasa/populi-mcpClaude Desktop
Edit claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\):
{
"mcpServers": {
"populi": {
"command": "npx",
"args": ["-y", "@kisasa/populi-mcp"],
"env": {
"POPULI_BASE_URL": "https://yourschool.populiweb.com",
"POPULI_API_KEY": "sk_sandbox_..."
}
}
}
}On Windows, if Claude Desktop cannot find npx, use "command": "cmd" with "args": ["/c", "npx", "-y", "@kisasa/populi-mcp"].
Codex
codex mcp add populi \
--env POPULI_BASE_URL=https://yourschool.populiweb.com \
--env POPULI_API_KEY=sk_sandbox_... \
-- npx -y @kisasa/populi-mcpor in ~/.codex/config.toml:
[mcp_servers.populi]
command = "npx"
args = ["-y", "@kisasa/populi-mcp"]
[mcp_servers.populi.env]
POPULI_BASE_URL = "https://yourschool.populiweb.com"
POPULI_API_KEY = "sk_sandbox_..."Cursor
In .cursor/mcp.json (project) or ~/.cursor/mcp.json (global). Cursor expands ${env:NAME}, which keeps the key out of the file:
{
"mcpServers": {
"populi": {
"command": "npx",
"args": ["-y", "@kisasa/populi-mcp"],
"env": {
"POPULI_BASE_URL": "https://yourschool.populiweb.com",
"POPULI_API_KEY": "${env:POPULI_API_KEY}"
}
}
}
}Any other MCP client
Run npx -y @kisasa/populi-mcp as a stdio server with POPULI_BASE_URL and POPULI_API_KEY in its environment.
More than one instance
Add one entry per instance under different names (populi-sandbox, populi-live), each with its own key.
API behaviors worth knowing
Rate limits. 50 requests/min per key from 3AM-7PM PST, 100/min overnight, plus per-IP and per-school limits. On HTTP 429 the call returns an error with how long to wait, and later calls fail fast with the remaining wait instead of hammering a limited key. Prefer one filtered call over many unfiltered ones.
One request at a time. Populi allows a single "heavy" call (Data Slicer, big exports) at once, so the server runs requests sequentially even if the client sends several in parallel.
Pages. Lists return at most 200 records.
all_pagesfollows every page up to 500 pages, stopping oncemax_records(default 500, up to 1,000,000) is reached. The page that crosses the limit is kept whole, so nothing is dropped. The result says whether itcompleted and otherwise gives anext_pageto resume from. If a rate limit or timeout hits part-way, the pages already fetched are returned, not thrown away.Filters. Populi ignores filter field names it does not know and returns the whole list, which looks like "everyone matches".
populi_describe_apilists the valid condition names for a route;populi_find_peopleuses the right ones for people.GET parameters.
filter,expand,pageandlimittravel in aparametersquery value, because most HTTP clients cannot send a GET body. If that would make the URL longer than about 7 KB (for example a filter listing thousands of ids), the request is sent as aGETwith a JSON body instead, which Populi documents as the normal form.POST/PUT/DELETEsend a JSON body.Large responses from
populi_getare truncated atmax_chars(default 40,000, up to 1,000,000) with a note on how to narrow the request. Usepopuli_downloadto save the whole thing to a file instead.File downloads. Routes that return a file (PDF/XLS/CSV exports, transcripts, Data Slicer results, file downloads) are fetched with
populi_download, which writes into the files folder. It never overwrites (an existing name gets-1,-2, ...), and only uses names, never paths, so it can't write outside the folder.populi_getdescribes a file response but can't show it.File uploads.
populi_writetakesfiles, each either apathinside the files folder orcontent_base64. They are sent asmultipart/form-datawith the file asfileand the other fields as a JSONparameterspart, which is how Populi's upload routes (/people/{id}/upload_file,/people/{id}/update_profile_picture,/libraryresources/{id}/update_image,/libraryresources/{id}/digitalresources/upload) expect them. As a safety cap, this server refuses files over 100 MB.The files folder is a boundary. A model can only read uploads from, and save downloads to,
POPULI_FILES_DIR. Paths that leave it, including through symlinks, are refused, so a prompt-injected "upload my SSH key" has nothing to read. Point it at a broader folder only if you want that.Timeouts. Populi publishes no timeout, and reports such as Data Slicer can be slow, so the default is two minutes. Your MCP client may enforce its own tool timeout as well, which this server can't raise; check its settings if a long report is cut off.
Student data is sensitive. Records can include SSNs, birthdates, grades and financial aid. The server never logs request or response bodies, and the key is never echoed in errors, but whatever a tool returns goes to your model provider. Use the narrowest key role and
expandyou need.
Development
git clone https://github.com/kisasa/populi-mcp.git
cd populi-mcp
npm install
npm run build # compile to dist/
npm test # unit + in-memory MCP tests, no networkTry it against a real instance:
POPULI_BASE_URL=https://yourschool.populiweb.com POPULI_API_KEY=sk_sandbox_... \
npx @modelcontextprotocol/inspector node dist/index.jsRefreshing the API catalog
data/catalog.json is scraped from the rendered API docs (Populi publishes no OpenAPI file):
npm run build:catalogReview and commit the diff when Populi ships API changes.
Releasing
Publishing is automated by .github/workflows/publish.yml on every push to main, and only acts when the version is new. To release:
Bump
versioninpackage.jsonand bothversionfields inserver.json.Merge to
main. The workflow publishes to npm (with provenance), the MCP Registry asio.github.kisasa/populi-mcp, and creates a GitHub release.
npm authentication uses trusted publishing if configured for this repo, otherwise the NPM_TOKEN repository secret.
License
MIT. Not affiliated with Populi. "Populi" is a trademark of its owner.
Available Tools
6 toolspopuli_describe_apiDescribe a Populi API routeARead-onlyIdempotent
Full reference for one route: path placeholders, required/optional parameters with types, expandable properties, filter conditions, required Populi roles, and a link to the docs. Pass a route id from populi_search_api, or a concrete method and path.
| Name | Required | Description | Default |
|---|---|---|---|
| id | No | Route id such as people.show | |
| path | No | A route path such as /people/123 or /people/(person) | |
| method | No | With `path`, to look a route up by URL |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already cover safety (readOnly, idempotent, closed-world), so the description's job is to add context — and it does, by disclosing that the response is metadata including required Populi roles and a docs link, which tells the agent this is a documentation lookup rather than a data fetch. It doesn't describe size/format of the reference payload, but with readOnly+idempotent declared that gap is minor.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence that front-loads the payload contents and closes with the two ways to invoke it. No filler, nothing repeated from the schema verbatim.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema exists, but the description enumerates the return contents (placeholders, typed params, expandable properties, filters, roles, docs link), so the agent knows what to expect. All three optional parameters are covered and the read-only nature is declared via annotations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3, but the description adds genuine meaning: it distinguishes the id-based lookup from the combined method+path lookup and indicates the id comes from populi_search_api. That relationship (id alone vs. method and path together) is not stated in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Full reference for one route') and enumerates exactly what the reference contains: placeholders, parameters with types, expandable properties, filter conditions, roles, and a docs link. This makes it unambiguous against siblings like populi_get (fetch data) and populi_search_api (find routes) without needing either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Pass a route id from populi_search_api, or a concrete method and path' gives clear entry conditions and points at the sibling that produces valid ids. It stops short of any exclusion (e.g. 'use populi_get instead if you already know the route and want data'), so it is clear context without explicit when-not guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
populi_downloadDownload from Populi to a fileA
GET a Populi route and save the response to a file in the files folder instead of returning it. Use it for routes that return files (PDF/XLS/CSV exports, transcripts and grade reports, Data Slicer results, file and backup downloads, images) and to keep a big list or full export out of the conversation (use all_pages). Takes the same arguments as populi_get. Never overwrites: an existing name gets -1, -2, ... appended. Returns the saved path and a short preview.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page of results, 1-based. With all_pages, the page to start from | |
| path | Yes | Route under /api2, with real ids, e.g. /people/24469940/leads | |
| limit | No | Records per page | |
| expand | No | Related properties to include | |
| filter | No | Populi filter object (list routes) | |
| params | No | Any other documented parameters for the route (sort, report options, format, ...) | |
| save_as | No | File name to save under (no folders). Defaults to the name Populi suggests, or a timestamp | |
| all_pages | No | Follow pagination and merge every page into one list | |
| timeout_ms | No | Per-request timeout. Raise for slow reports and exports (default 120000) | |
| max_records | No | With all_pages: stop once at least this many records are collected (the last page is kept whole). The result says whether it finished and, if not, the next_page to continue from |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Goes well beyond the annotations by disclosing the never-overwrite naming convention (-1, -2 suffixes), the saved-path-plus-preview return shape, and the all_pages/max_records loop behavior. Nothing contradicts annotations: readOnlyHint=false correctly reflects local file writes, and destructiveHint=false matches the never-overwrite guarantee.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, front-loaded with the core behavior, then use cases, then the non-obvious file-naming and return behavior. No filler or restatement of the tool name.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Ten parameters with nested objects and no output schema, yet the description covers purpose, when-to-use, the pagination escape hatch, file collision behavior, and what comes back (path + preview). An agent has everything needed to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description earns above-baseline credit by explaining collision handling for save_as and the purpose of all_pages, details the schema does not state, though it does not clarify page/limit/expand semantics beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource (GET a Populi route) plus the key divergence — result goes to a file instead of the conversation. Explicitly differentiates from the sibling populi_get by saying it takes the same arguments but saves output, so an agent can pick between them without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Names concrete when-to-use cases: file-returning routes (PDF/XLS/CSV, transcripts, Data Slicer, backups, images) and oversized lists/exports where all_pages should be used. The 'instead of returning it' phrasing implicitly routes non-file, small-payload reads to populi_get.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
populi_find_peopleFind people in PopuliARead-onlyIdempotent
Look up people by email address and/or name. Email is an exact match; first and last name are 'contains' matches. Returns Populi's people list: ids, names and status, plus a report_data block with the primary email and phone (contact_primary_email, contact_primary_phone). For full contact records fetch /people/{id} with expand=['email_addresses', 'phone_numbers']. Needs at least one criterion.
| Name | Required | Description | Default |
|---|---|---|---|
| No | Exact email address | ||
| limit | No | Maximum people to return | |
| last_name | No | Substring of the last name | |
| first_name | No | Substring of the first name |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly/idempotent/openWorld, so the safety profile is covered; the description then adds match semantics, the constraint that at least one criterion is required, and what the response contains (people list plus report_data with primary email/phone). Useful value beyond structured fields, though result ordering and pagination behavior are not mentioned.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four tight sentences, front-loaded with the core action and match semantics, then the return shape, then the pointer for deeper data. No redundant restatement of the name or title.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description usefully summarizes return values (ids, names, status, report_data block) and explains the escalation path for full contact records. Nearly complete; ordering/truncation behavior of results is the only noticeable gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline would be 3; the description goes further by stating the exact-vs-contains matching behavior per field and adding an invocation rule ('Needs at least one criterion') that no schema constraint expresses, since required is empty. limit is left to the schema, which documents it fully.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Look up people') plus the exact searchable criteria (email, first/last name). This is clearly a specialized people-search tool, distinguishable from generic siblings like populi_get or populi_search_api without opening a schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives the precondition 'Needs at least one criterion' and the matching semantics (email exact, names contains), and points to the alternative route ('/people/{id}' with expand) for full contact records. No explicit when-not-to-use, but the routing to the alternative covers the main decision.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
populi_getRead from PopuliARead-onlyIdempotent
GET any Populi API v2 route (read-only). Path is under /api2, e.g. /people/123, /academicterms, /people/123/leads. Lists return up to 200 records per page; use page, limit, or all_pages. Use expand to inline related records (see populi_describe_api for the allowed names) and filter to narrow lists. A filter looks like {"0":{"logic":"ALL","fields":[{"name":"first_name","value":{"type":"CONTAINS","text":"john"},"positive":1}]}}. Populi allows about 50 requests/min per key, so prefer one filtered call over many unfiltered ones. Routes that return a file (PDF/XLS exports, transcripts, Data Slicer results, file downloads) can't be shown here: use populi_download for those. If a rate limit stops all_pages part-way, the pages already fetched are returned with a next_page to resume from.
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page of results, 1-based. With all_pages, the page to start from | |
| path | Yes | Route under /api2, with real ids, e.g. /people/24469940/leads | |
| limit | No | Records per page | |
| expand | No | Related properties to include | |
| filter | No | Populi filter object (list routes) | |
| params | No | Any other documented parameters for the route (sort, report options, format, ...) | |
| all_pages | No | Follow pagination and merge every page into one list | |
| max_chars | No | Truncate the response text beyond this many characters | |
| timeout_ms | No | Per-request timeout. Raise for slow reports and exports (default 120000) | |
| max_records | No | With all_pages: stop once at least this many records are collected (the last page is kept whole). The result says whether it finished and, if not, the next_page to continue from |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations cover read-only/idempotent/open-world, and the description adds context they cannot: ~50 requests/min rate limit, 200-record default page size, and the failure mode where all_pages stops mid-run but returns fetched pages plus a next_page to resume. That is exactly the operational behavior an agent needs before invoking.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core action and path shape, then pagination, filtering, rate limits, and the sibling escape hatch in a logical order. The inline filter JSON literal is dense but earns its place as a copyable template; slightly heavy overall.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 10-parameter open-world passthrough with no output schema, it covers paths, pagination, filtering, expansion, rate limits, partial-failure recovery, and the file-route alternative. The only thin spot is describing the single-object (non-list) response shape.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3, but the description adds real meaning: a concrete filter object example, the note that expand names must come from populi_describe_api, and how page/limit/all_pages interact. It stops short of explaining params/max_chars/max_records beyond the schema text.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('GET any Populi API v2 route') plus the read-only constraint and a concrete path shape with examples. It also distinguishes itself from siblings by naming populi_describe_api for expand names and populi_download for file-returning routes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicit when-to-use (generic /api2 route reads), explicit when-not (PDF/XLS exports, transcripts, Data Slicer, file downloads → populi_download), and an efficiency rule ('prefer one filtered call over many unfiltered ones'). Nothing is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
populi_search_apiSearch Populi API routesARead-onlyIdempotent
Search the Populi API v2 route catalog (697 routes across 180 models) by keyword, e.g. 'application', 'enrollments', 'invoice', 'course offering'. Returns route ids with method and path. Use this first to find the right route, then populi_describe_api for its parameters.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum routes to return | |
| query | Yes | Keywords, or an exact route id like people.create | |
| method | No | Only routes with this HTTP method |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, idempotent and closed-world, so safety is covered. The description adds genuinely useful context the annotations cannot: the size of the catalog and the exact return shape ('route ids with method and path'). It does not mention the default/maximum result limit or truncation behavior, which keeps it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with the resource and scale, then the return shape, then the routing instruction. Nothing is redundant and every sentence carries information an agent needs.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only search with three simple parameters and no output schema, the description supplies everything needed: what is searched, how large the corpus is, what comes back, and which tool to call next. No material gap remains.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so query, method and limit are all documented in structured fields. The description reinforces the query parameter with example keywords, but says nothing about the method filter or the limit semantics, so it adds only marginal value over the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Search the Populi API v2 route catalog') with concrete scale (697 routes / 180 models) and example keywords. It also distinguishes itself from the sibling populi_describe_api by naming that tool as the next step, so an agent can route between them without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
'Use this first to find the right route, then populi_describe_api for its parameters' gives an explicit ordering and names the alternative tool. The one gap is that it doesn't say what to do when you already have an exact route id, though the schema covers that case.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
populi_statusPopuli connection statusARead-onlyIdempotent
Shows which Populi instance this server talks to, whether the key is a sandbox key, and whether writes are enabled. Set verify to make one live request that checks the key works.
| Name | Required | Description | Default |
|---|---|---|---|
| verify | No | Make a live request to check the credentials |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint/idempotentHint/openWorldHint, and the description stays consistent while adding real context: `verify` triggers one live external request, and write capability may or may not be enabled. It stops short of saying what a failed verification looks like or what latency/error surface to expect.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, zero filler, with the primary capability front-loaded and the optional parameter behavior trailing. Nothing is repeated from the schema verbatim.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description does the necessary work by naming the three facts returned. It is slightly thin on what differs in the output when `verify` is true (e.g., an auth error vs. a status field), but an agent has enough to call it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3; the description earns an extra point by clarifying that `verify` costs exactly one live request against the API, which tells the agent this is a non-trivial network round-trip rather than a local flag check.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb ('Shows') and enumerates exactly what is reported: target instance, sandbox-vs-production key, and write enablement. The diagnostic nature distinguishes it cleanly from the data-access siblings (populi_get, populi_search_api, populi_find_people), none of which report server configuration.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The second sentence explains what setting `verify` does, which implies the usage context (credential sanity check), but the description never says when to call this tool versus alternatives, nor when to leave `verify` off. Usage is inferable rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
6 tool updates
v0.2.0- First observed
populi_describe_api - First observed
populi_download - First observed
populi_find_people - First observed
populi_get - First observed
populi_search_api - First observed
populi_status
TDQS
Scored across 6 tools
The discovery pair (search_api then describe_api) and the GET pair (get vs download) are clearly segmented, with descriptions explicitly stating when to use download over get. The only soft overlaps are populi_find_people versus a filtered populi_get on /people, and status/verify versus a plain get, but both are framed as convenience wrappers with clear boundaries.
All tools share the populi_ prefix in snake_case, which is highly predictable. Verb style is slightly mixed (populi_get and populi_download lack a noun object while search_api/describe_api use verb_noun), but no tool breaks convention or casing.
Six tools is well-scoped for a generic API gateway: discovery, introspection, two read execution modes, an identity/status check, and one domain shortcut. Every tool earns its place and none look like filler.
Read coverage is essentially complete thanks to the generic populi_get against the whole 697-route catalog, but the surface is read-only while populi_status advertises 'whether writes are enabled', creating a dead end with no create/update/delete or bulk-mutation tool. A task needing a write operation cannot be completed with this set.
Maintenance
Related MCP Connectors
Managed MCP gateway with OAuth, per-agent permissions, shared accounts and activity logs.
Read-only MCP server for ClassQuill, a tutoring-business-management platform.
Governed data discovery, exact queries, decisions, simulations, and runtime utilities over MCP.
Discover, plan and run tools across your connected business systems through one OAuth MCP endpoint
Related MCP Servers
- AlicenseAqualityAmaintenanceEnables SOQL queries, SOSL search, and record CRUD operations on a single Salesforce org via MCP, with optional read-only mode.9121 npmMIT
- FlicenseCqualityBmaintenanceEnables MCP-based access to the Edvibe School API for supported Pro-plan schools, exposing 78 operations categorized by risk for read, write, high-risk, and sensitive actions.78-
- FlicenseAqualityCmaintenanceEnables read-only interaction with CMU Student Information Online data, including student context, schedules, grades, enrollment, account activity, and campus life through MCP tools.8-
- AlicenseAqualityCmaintenanceEnables MCP clients to query Mindbody Public API v6 for schedules, attendance, sales, services, contracts, and client details, with PII masked before results reach the model and per-site rate pacing. Read-only by default, with writes and webhook administration available only behind explicit flags.13MIT