Skip to main content
Glama
link0-o

PerfLens MCP Server

by link0-o

resolve_docker_target

Read-onlyIdempotent

Verify a container process's identity by re-resolving it against Docker, /proc, PID start time, namespaces, cgroup, and UID policy—without profiling the process.

Instructions

Re-resolve one container process against Docker, /proc, PID start time, namespaces, cgroup identity, and UID policy without profiling it.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
host_pidNo
container_pidNo
container_referenceYes

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
cgroupYes
host_pidYes
host_uidYes
namespaceYes
target_idYes
created_atYes
target_kindYes
uid_mappingYes
container_pidYes
adapter_sha256Yes
content_sha256Yes
schema_versionNo1.0
executable_nameYes
perflens_versionYes
adapter_recipe_idYes
validation_statusNoverified
allowed_conclusionsNo
identity_fingerprintYes
forbidden_conclusionsNo
host_start_time_ticksYes
image_identity_sha256Yes
rootful_risk_authorizedNo
container_identity_sha256Yes

Schema Changelog

Changes observed during successful MCP inspections.

  1. Addedv0.3.2

TDQS

B3.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior, so the bar is lower. The description adds useful context beyond annotations by naming the sources consulted (Docker, /proc, PID start time, namespaces, cgroup identity, UID policy) and explicitly stating that profiling is not performed. It does not address failure cases, but this is consistent with the safe read-only profile.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one dense sentence with the action front-loaded and no filler. Every phrase contributes to defining the operation, though the long list of resolution sources makes it somewhat heavy to parse. It is concise without being under-specified.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The output schema covers return values and annotations cover safety, but the description omits usage conditions and optional-parameter semantics. In a large sibling set, an agent still lacks clear guidance on when this should be called instead of collection, discovery, or profiling tools, making the definition incomplete for confident invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate, but it never explains the relationship or selection logic for host_pid, container_pid, and container_reference. It mentions PID start time as a resolution criterion but does not map that to the parameters. The property names are partly self-explanatory, but the description does not add meaningful parameter-level guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('Re-resolve'), a bounded resource ('one container process'), and a precise set of resolution criteria (Docker, /proc, PID start time, namespaces, cgroup identity, UID policy). The phrase 'without profiling it' distinguishes it from profiling- and collection-oriented siblings. It is not a 5 because 're-resolve' itself is not defined, leaving some ambiguity about what the operation produces.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance on when to use this tool versus alternatives such as collect_docker_target, discover_docker_processes, or analyze_profile. 'Re-resolve' weakly implies a follow-up to an earlier resolution, and 'without profiling it' implies a lightweight purpose, but the agent is left to infer the actual selection conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.