Skip to main content
Glama

populi-mcp

MCP server for the Populi API v2. It lets Claude, Codex, Cursor and any other Model Context Protocol client look up people, admissions, academics and billing data in your Populi instance, and, if you opt in, make changes.

Package: @kisasa/populi-mcp on npm. Command: populi-mcp. Transport: stdio.

How it works

Populi's API has 697 routes across 180 models. Exposing each as its own tool would flood a model's context, so this server gives the model a small toolset plus the API reference itself:

Tool

What it does

populi_search_api

Keyword search over the bundled route catalog (applications, invoice, enrollments, ...).

populi_describe_api

Full reference for one route: path ids, required and optional fields with types, expand options, filter conditions, required Populi roles, docs link.

populi_get

GET any route. Supports filter, expand, page, limit, and all_pages to merge every page into one list.

populi_download

GET a route and save the response to a file instead of returning it. For PDF/XLS/CSV exports, transcripts, Data Slicer results, file and backup downloads, and for keeping a large export out of the conversation.

populi_find_people

Look up people by exact email and/or name.

populi_status

Shows the instance, key type (sandbox or live), whether writes are on, the files folder and the timeout. verify: true makes one live request to check the key.

populi_write

POST / PUT / DELETE any route, including multipart file uploads. Only exists when POPULI_ALLOW_WRITES=true.

Together they cover the whole API: all 492 documented GET routes, all 205 write routes, file uploads and file downloads. Routes that aren't in the bundled catalog work too, since the tools take any path.

A typical exchange: the model searches for the route, reads its parameters, then calls populi_get with a server-side filter.

The catalog is generated from the public API docs and ships inside the package, so searching and describing work offline and cost no API requests.

Related MCP server: Edvibe School MCP

Configuration

Variable

Required

Description

POPULI_BASE_URL

yes

Your instance, e.g. https://yourschool.populiweb.com. A trailing /api2 is fine and optional. Must be https.

POPULI_API_KEY

yes

An API key token. In Populi: Account & Settings > API > Keys (Account Administrator). Sent as a bearer token to POPULI_BASE_URL only.

POPULI_ALLOW_WRITES

no

Set to true to enable populi_write. Default: read-only.

POPULI_FILES_DIR

no

The one folder downloads are saved to and uploads are read from. Default: ~/populi-mcp-files.

POPULI_TIMEOUT_MS

no

How long one Populi request may take, 1000 to 600000. Default: 120000 (two minutes). Each call can also pass timeout_ms.

The key's Populi roles decide what it can see. A route the key cannot reach returns a 403 naming the problem; populi_describe_api lists the roles each route needs.

Sandbox first

Populi issues separate sk_sandbox_... keys that only work against sandbox instances (live keys only work on live). Point this server at a sandbox while you evaluate it.

Read-only by default

With no POPULI_ALLOW_WRITES, the write tool is not registered at all, so the model cannot even attempt a change. When you enable it, populi_write is marked destructive, so clients that prompt for approval will ask before each call. DELETE in Populi is permanent.

Install

Requires Node.js 20 or newer. Every client below runs npx -y @kisasa/populi-mcp, so there is nothing to install by hand.

Claude Code

claude mcp add populi \
  -e POPULI_BASE_URL=https://yourschool.populiweb.com \
  -e POPULI_API_KEY=sk_sandbox_... \
  -- npx -y @kisasa/populi-mcp

Claude Desktop

Edit claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\):

{
  "mcpServers": {
    "populi": {
      "command": "npx",
      "args": ["-y", "@kisasa/populi-mcp"],
      "env": {
        "POPULI_BASE_URL": "https://yourschool.populiweb.com",
        "POPULI_API_KEY": "sk_sandbox_..."
      }
    }
  }
}

On Windows, if Claude Desktop cannot find npx, use "command": "cmd" with "args": ["/c", "npx", "-y", "@kisasa/populi-mcp"].

Codex

codex mcp add populi \
  --env POPULI_BASE_URL=https://yourschool.populiweb.com \
  --env POPULI_API_KEY=sk_sandbox_... \
  -- npx -y @kisasa/populi-mcp

or in ~/.codex/config.toml:

[mcp_servers.populi]
command = "npx"
args = ["-y", "@kisasa/populi-mcp"]

[mcp_servers.populi.env]
POPULI_BASE_URL = "https://yourschool.populiweb.com"
POPULI_API_KEY = "sk_sandbox_..."

Cursor

In .cursor/mcp.json (project) or ~/.cursor/mcp.json (global). Cursor expands ${env:NAME}, which keeps the key out of the file:

{
  "mcpServers": {
    "populi": {
      "command": "npx",
      "args": ["-y", "@kisasa/populi-mcp"],
      "env": {
        "POPULI_BASE_URL": "https://yourschool.populiweb.com",
        "POPULI_API_KEY": "${env:POPULI_API_KEY}"
      }
    }
  }
}

Any other MCP client

Run npx -y @kisasa/populi-mcp as a stdio server with POPULI_BASE_URL and POPULI_API_KEY in its environment.

More than one instance

Add one entry per instance under different names (populi-sandbox, populi-live), each with its own key.

API behaviors worth knowing

  • Rate limits. 50 requests/min per key from 3AM-7PM PST, 100/min overnight, plus per-IP and per-school limits. On HTTP 429 the call returns an error with how long to wait, and later calls fail fast with the remaining wait instead of hammering a limited key. Prefer one filtered call over many unfiltered ones.

  • One request at a time. Populi allows a single "heavy" call (Data Slicer, big exports) at once, so the server runs requests sequentially even if the client sends several in parallel.

  • Pages. Lists return at most 200 records. all_pages follows every page up to 500 pages, stopping once max_records (default 500, up to 1,000,000) is reached. The page that crosses the limit is kept whole, so nothing is dropped. The result says whether it completed and otherwise gives a next_page to resume from. If a rate limit or timeout hits part-way, the pages already fetched are returned, not thrown away.

  • Filters. Populi ignores filter field names it does not know and returns the whole list, which looks like "everyone matches". populi_describe_api lists the valid condition names for a route; populi_find_people uses the right ones for people.

  • GET parameters. filter, expand, page and limit travel in a parameters query value, because most HTTP clients cannot send a GET body. If that would make the URL longer than about 7 KB (for example a filter listing thousands of ids), the request is sent as a GET with a JSON body instead, which Populi documents as the normal form. POST/PUT/DELETE send a JSON body.

  • Large responses from populi_get are truncated at max_chars (default 40,000, up to 1,000,000) with a note on how to narrow the request. Use populi_download to save the whole thing to a file instead.

  • File downloads. Routes that return a file (PDF/XLS/CSV exports, transcripts, Data Slicer results, file downloads) are fetched with populi_download, which writes into the files folder. It never overwrites (an existing name gets -1, -2, ...), and only uses names, never paths, so it can't write outside the folder. populi_get describes a file response but can't show it.

  • File uploads. populi_write takes files, each either a path inside the files folder or content_base64. They are sent as multipart/form-data with the file as file and the other fields as a JSON parameters part, which is how Populi's upload routes (/people/{id}/upload_file, /people/{id}/update_profile_picture, /libraryresources/{id}/update_image, /libraryresources/{id}/digitalresources/upload) expect them. As a safety cap, this server refuses files over 100 MB.

  • The files folder is a boundary. A model can only read uploads from, and save downloads to, POPULI_FILES_DIR. Paths that leave it, including through symlinks, are refused, so a prompt-injected "upload my SSH key" has nothing to read. Point it at a broader folder only if you want that.

  • Timeouts. Populi publishes no timeout, and reports such as Data Slicer can be slow, so the default is two minutes. Your MCP client may enforce its own tool timeout as well, which this server can't raise; check its settings if a long report is cut off.

  • Student data is sensitive. Records can include SSNs, birthdates, grades and financial aid. The server never logs request or response bodies, and the key is never echoed in errors, but whatever a tool returns goes to your model provider. Use the narrowest key role and expand you need.

Development

git clone https://github.com/kisasa/populi-mcp.git
cd populi-mcp
npm install
npm run build      # compile to dist/
npm test           # unit + in-memory MCP tests, no network

Try it against a real instance:

POPULI_BASE_URL=https://yourschool.populiweb.com POPULI_API_KEY=sk_sandbox_... \
  npx @modelcontextprotocol/inspector node dist/index.js

Refreshing the API catalog

data/catalog.json is scraped from the rendered API docs (Populi publishes no OpenAPI file):

npm run build:catalog

Review and commit the diff when Populi ships API changes.

Releasing

Publishing is automated by .github/workflows/publish.yml on every push to main, and only acts when the version is new. To release:

  1. Bump version in package.json and both version fields in server.json.

  2. Merge to main. The workflow publishes to npm (with provenance), the MCP Registry as io.github.kisasa/populi-mcp, and creates a GitHub release.

npm authentication uses trusted publishing if configured for this repo, otherwise the NPM_TOKEN repository secret.

License

MIT. Not affiliated with Populi. "Populi" is a trademark of its owner.

Available Tools

6 tools
populi_describe_apiDescribe a Populi API routeA
Read-onlyIdempotent

Full reference for one route: path placeholders, required/optional parameters with types, expandable properties, filter conditions, required Populi roles, and a link to the docs. Pass a route id from populi_search_api, or a concrete method and path.

NameRequiredDescriptionDefault
idNoRoute id such as people.show
pathNoA route path such as /people/123 or /people/(person)
methodNoWith `path`, to look a route up by URL

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover safety (readOnly, idempotent, closed-world), so the description's job is to add context — and it does, by disclosing that the response is metadata including required Populi roles and a docs link, which tells the agent this is a documentation lookup rather than a data fetch. It doesn't describe size/format of the reference payload, but with readOnly+idempotent declared that gap is minor.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence that front-loads the payload contents and closes with the two ways to invoke it. No filler, nothing repeated from the schema verbatim.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, but the description enumerates the return contents (placeholders, typed params, expandable properties, filters, roles, docs link), so the agent knows what to expect. All three optional parameters are covered and the read-only nature is declared via annotations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3, but the description adds genuine meaning: it distinguishes the id-based lookup from the combined method+path lookup and indicates the id comes from populi_search_api. That relationship (id alone vs. method and path together) is not stated in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('Full reference for one route') and enumerates exactly what the reference contains: placeholders, parameters with types, expandable properties, filter conditions, roles, and a docs link. This makes it unambiguous against siblings like populi_get (fetch data) and populi_search_api (find routes) without needing either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Pass a route id from populi_search_api, or a concrete method and path' gives clear entry conditions and points at the sibling that produces valid ids. It stops short of any exclusion (e.g. 'use populi_get instead if you already know the route and want data'), so it is clear context without explicit when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

populi_downloadDownload from Populi to a fileA

GET a Populi route and save the response to a file in the files folder instead of returning it. Use it for routes that return files (PDF/XLS/CSV exports, transcripts and grade reports, Data Slicer results, file and backup downloads, images) and to keep a big list or full export out of the conversation (use all_pages). Takes the same arguments as populi_get. Never overwrites: an existing name gets -1, -2, ... appended. Returns the saved path and a short preview.

NameRequiredDescriptionDefault
pageNoPage of results, 1-based. With all_pages, the page to start from
pathYesRoute under /api2, with real ids, e.g. /people/24469940/leads
limitNoRecords per page
expandNoRelated properties to include
filterNoPopuli filter object (list routes)
paramsNoAny other documented parameters for the route (sort, report options, format, ...)
save_asNoFile name to save under (no folders). Defaults to the name Populi suggests, or a timestamp
all_pagesNoFollow pagination and merge every page into one list
timeout_msNoPer-request timeout. Raise for slow reports and exports (default 120000)
max_recordsNoWith all_pages: stop once at least this many records are collected (the last page is kept whole). The result says whether it finished and, if not, the next_page to continue from

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Goes well beyond the annotations by disclosing the never-overwrite naming convention (-1, -2 suffixes), the saved-path-plus-preview return shape, and the all_pages/max_records loop behavior. Nothing contradicts annotations: readOnlyHint=false correctly reflects local file writes, and destructiveHint=false matches the never-overwrite guarantee.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, front-loaded with the core behavior, then use cases, then the non-obvious file-naming and return behavior. No filler or restatement of the tool name.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Ten parameters with nested objects and no output schema, yet the description covers purpose, when-to-use, the pagination escape hatch, file collision behavior, and what comes back (path + preview). An agent has everything needed to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description earns above-baseline credit by explaining collision handling for save_as and the purpose of all_pages, details the schema does not state, though it does not clarify page/limit/expand semantics beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource (GET a Populi route) plus the key divergence — result goes to a file instead of the conversation. Explicitly differentiates from the sibling populi_get by saying it takes the same arguments but saves output, so an agent can pick between them without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Names concrete when-to-use cases: file-returning routes (PDF/XLS/CSV, transcripts, Data Slicer, backups, images) and oversized lists/exports where all_pages should be used. The 'instead of returning it' phrasing implicitly routes non-file, small-payload reads to populi_get.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

populi_find_peopleFind people in PopuliA
Read-onlyIdempotent

Look up people by email address and/or name. Email is an exact match; first and last name are 'contains' matches. Returns Populi's people list: ids, names and status, plus a report_data block with the primary email and phone (contact_primary_email, contact_primary_phone). For full contact records fetch /people/{id} with expand=['email_addresses', 'phone_numbers']. Needs at least one criterion.

NameRequiredDescriptionDefault
emailNoExact email address
limitNoMaximum people to return
last_nameNoSubstring of the last name
first_nameNoSubstring of the first name

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/idempotent/openWorld, so the safety profile is covered; the description then adds match semantics, the constraint that at least one criterion is required, and what the response contains (people list plus report_data with primary email/phone). Useful value beyond structured fields, though result ordering and pagination behavior are not mentioned.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four tight sentences, front-loaded with the core action and match semantics, then the return shape, then the pointer for deeper data. No redundant restatement of the name or title.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description usefully summarizes return values (ids, names, status, report_data block) and explains the escalation path for full contact records. Nearly complete; ordering/truncation behavior of results is the only noticeable gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline would be 3; the description goes further by stating the exact-vs-contains matching behavior per field and adding an invocation rule ('Needs at least one criterion') that no schema constraint expresses, since required is empty. limit is left to the schema, which documents it fully.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Look up people') plus the exact searchable criteria (email, first/last name). This is clearly a specialized people-search tool, distinguishable from generic siblings like populi_get or populi_search_api without opening a schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives the precondition 'Needs at least one criterion' and the matching semantics (email exact, names contains), and points to the alternative route ('/people/{id}' with expand) for full contact records. No explicit when-not-to-use, but the routing to the alternative covers the main decision.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

populi_getRead from PopuliA
Read-onlyIdempotent

GET any Populi API v2 route (read-only). Path is under /api2, e.g. /people/123, /academicterms, /people/123/leads. Lists return up to 200 records per page; use page, limit, or all_pages. Use expand to inline related records (see populi_describe_api for the allowed names) and filter to narrow lists. A filter looks like {"0":{"logic":"ALL","fields":[{"name":"first_name","value":{"type":"CONTAINS","text":"john"},"positive":1}]}}. Populi allows about 50 requests/min per key, so prefer one filtered call over many unfiltered ones. Routes that return a file (PDF/XLS exports, transcripts, Data Slicer results, file downloads) can't be shown here: use populi_download for those. If a rate limit stops all_pages part-way, the pages already fetched are returned with a next_page to resume from.

NameRequiredDescriptionDefault
pageNoPage of results, 1-based. With all_pages, the page to start from
pathYesRoute under /api2, with real ids, e.g. /people/24469940/leads
limitNoRecords per page
expandNoRelated properties to include
filterNoPopuli filter object (list routes)
paramsNoAny other documented parameters for the route (sort, report options, format, ...)
all_pagesNoFollow pagination and merge every page into one list
max_charsNoTruncate the response text beyond this many characters
timeout_msNoPer-request timeout. Raise for slow reports and exports (default 120000)
max_recordsNoWith all_pages: stop once at least this many records are collected (the last page is kept whole). The result says whether it finished and, if not, the next_page to continue from

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations cover read-only/idempotent/open-world, and the description adds context they cannot: ~50 requests/min rate limit, 200-record default page size, and the failure mode where all_pages stops mid-run but returns fetched pages plus a next_page to resume. That is exactly the operational behavior an agent needs before invoking.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Front-loaded with the core action and path shape, then pagination, filtering, rate limits, and the sibling escape hatch in a logical order. The inline filter JSON literal is dense but earns its place as a copyable template; slightly heavy overall.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 10-parameter open-world passthrough with no output schema, it covers paths, pagination, filtering, expansion, rate limits, partial-failure recovery, and the file-route alternative. The only thin spot is describing the single-object (non-list) response shape.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds real meaning: a concrete filter object example, the note that expand names must come from populi_describe_api, and how page/limit/all_pages interact. It stops short of explaining params/max_chars/max_records beyond the schema text.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource ('GET any Populi API v2 route') plus the read-only constraint and a concrete path shape with examples. It also distinguishes itself from siblings by naming populi_describe_api for expand names and populi_download for file-returning routes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit when-to-use (generic /api2 route reads), explicit when-not (PDF/XLS exports, transcripts, Data Slicer, file downloads → populi_download), and an efficiency rule ('prefer one filtered call over many unfiltered ones'). Nothing is left to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

populi_search_apiSearch Populi API routesA
Read-onlyIdempotent

Search the Populi API v2 route catalog (697 routes across 180 models) by keyword, e.g. 'application', 'enrollments', 'invoice', 'course offering'. Returns route ids with method and path. Use this first to find the right route, then populi_describe_api for its parameters.

NameRequiredDescriptionDefault
limitNoMaximum routes to return
queryYesKeywords, or an exact route id like people.create
methodNoOnly routes with this HTTP method

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent and closed-world, so safety is covered. The description adds genuinely useful context the annotations cannot: the size of the catalog and the exact return shape ('route ids with method and path'). It does not mention the default/maximum result limit or truncation behavior, which keeps it short of a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, front-loaded with the resource and scale, then the return shape, then the routing instruction. Nothing is redundant and every sentence carries information an agent needs.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only search with three simple parameters and no output schema, the description supplies everything needed: what is searched, how large the corpus is, what comes back, and which tool to call next. No material gap remains.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so query, method and limit are all documented in structured fields. The description reinforces the query parameter with example keywords, but says nothing about the method filter or the limit semantics, so it adds only marginal value over the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Search the Populi API v2 route catalog') with concrete scale (697 routes / 180 models) and example keywords. It also distinguishes itself from the sibling populi_describe_api by naming that tool as the next step, so an agent can route between them without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Use this first to find the right route, then populi_describe_api for its parameters' gives an explicit ordering and names the alternative tool. The one gap is that it doesn't say what to do when you already have an exact route id, though the schema covers that case.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

populi_statusPopuli connection statusA
Read-onlyIdempotent

Shows which Populi instance this server talks to, whether the key is a sandbox key, and whether writes are enabled. Set verify to make one live request that checks the key works.

NameRequiredDescriptionDefault
verifyNoMake a live request to check the credentials

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint/idempotentHint/openWorldHint, and the description stays consistent while adding real context: `verify` triggers one live external request, and write capability may or may not be enabled. It stops short of saying what a failed verification looks like or what latency/error surface to expect.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, zero filler, with the primary capability front-loaded and the optional parameter behavior trailing. Nothing is repeated from the schema verbatim.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With no output schema, the description does the necessary work by naming the three facts returned. It is slightly thin on what differs in the output when `verify` is true (e.g., an auth error vs. a status field), but an agent has enough to call it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3; the description earns an extra point by clarifying that `verify` costs exactly one live request against the API, which tells the agent this is a non-trivial network round-trip rather than a local flag check.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb ('Shows') and enumerates exactly what is reported: target instance, sandbox-vs-production key, and write enablement. The diagnostic nature distinguishes it cleanly from the data-access siblings (populi_get, populi_search_api, populi_find_people), none of which report server configuration.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The second sentence explains what setting `verify` does, which implies the usage context (credential sanity check), but the description never says when to call this tool versus alternatives, nor when to leave `verify` off. Usage is inferable rather than stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 6 tool updatesv0.2.0
    • First observedpopuli_describe_api
    • First observedpopuli_download
    • First observedpopuli_find_people
    • First observedpopuli_get
    • First observedpopuli_search_api
    • First observedpopuli_status

TDQS

A4.3/5.0

Scored across 6 tools

Disambiguation4/5

The discovery pair (search_api then describe_api) and the GET pair (get vs download) are clearly segmented, with descriptions explicitly stating when to use download over get. The only soft overlaps are populi_find_people versus a filtered populi_get on /people, and status/verify versus a plain get, but both are framed as convenience wrappers with clear boundaries.

Naming Consistency4/5

All tools share the populi_ prefix in snake_case, which is highly predictable. Verb style is slightly mixed (populi_get and populi_download lack a noun object while search_api/describe_api use verb_noun), but no tool breaks convention or casing.

Tool Count5/5

Six tools is well-scoped for a generic API gateway: discovery, introspection, two read execution modes, an identity/status check, and one domain shortcut. Every tool earns its place and none look like filler.

Completeness3/5

Read coverage is essentially complete thanks to the generic populi_get against the whole 697-route catalog, but the surface is read-only while populi_status advertises 'whether writes are enabled', creating a dead end with no create/update/delete or bulk-mutation tool. A task needing a write operation cannot be completed with this set.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    Enables SOQL queries, SOSL search, and record CRUD operations on a single Salesforce org via MCP, with optional read-only mode.
    9
    121 npm
    MIT
  • F
    license
    A
    quality
    C
    maintenance
    Enables read-only interaction with CMU Student Information Online data, including student context, schedules, grades, enrollment, account activity, and campus life through MCP tools.
    8
    -
  • A
    license
    A
    quality
    C
    maintenance
    Enables MCP clients to query Mindbody Public API v6 for schedules, attendance, sales, services, contracts, and client details, with PII masked before results reach the model and per-site rate pacing. Read-only by default, with writes and webhook administration available only behind explicit flags.
    13
    MIT