UofT Timetable Builder MCP
This server exposes read-only UofT timetable, Degree Explorer, and ACORN data access, timetable generation/sharing, and optional authenticated session management.
Search and inspect UofT sessions, divisions, departments, courses, and full course details.
Generate conflict-free timetables per term with preferences and blocked time intervals.
Save and retrieve anonymous public Timetable Builder share links.
Read Degree Explorer data: academic history, student records/status, planner, messages, timeouts, and menu/user metadata.
Read ACORN data: eligible registrations, dashboard courses, and student registration info.
Authenticate with UofT via a browser (Degree Explorer/ACORN), check connection status, and forget saved sessions.
In compact mode, discover operations, batch multiple reads, and filter/page in-memory results without refetching.
It does not enroll students or write to ACORN; Degree Explorer writes are not implemented.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@UofT Timetable Builder MCPbuild a conflict-free CSC108 and MAT137 schedule, mornings preferred"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
UofT MCP
A small Python MCP server for the public UofT Timetable Builder
API, with read-only Degree Explorer and ACORN access and reusable UofT login.
It exposes seven tools by default over local stdio using the
official MCP Python SDK.
Discover operations on demand, batch independent reads, and select or page short-lived
results without repeatedly fetching them. The existing 25-tool interface remains
available with --tool-profile legacy. Both profiles support the same timetable,
Degree Explorer, ACORN, and authentication capabilities.
See the efficiency and architecture guide for migration, worked examples, result limits, extension instructions, and reproducible benchmarks.
Work in progress: Degree Explorer and three basic ACORN reads are available in this checkout. Degree Explorer writes and ACORN enrolment changes are not implemented.
Public timetable tools require no login, API key, database, web server, or environment variables. This is an unofficial wrapper; it does not enroll students or write to ACORN. Saving a timetable creates an anonymous public share link on the Timetable Builder, not a personal account record.
Read the release notes for the current version's scope and known limitations.
Connect an MCP Client
Install uv, then add this
configuration to any client that supports mcpServers:
{
"mcpServers": {
"uoft-timetable": {
"command": "uvx",
"args": ["uoft-mcp@latest"],
"env": {
"UV_HTTP_TIMEOUT": "300"
}
}
}
}Restart the client after saving its configuration. On Windows, if the client cannot
find uvx, restart it after installing uv or replace "uvx" with the absolute path
reported by where.exe uvx.
uvx downloads the published package into an isolated environment and starts the
uoft-mcp command. No repository clone, virtual environment setup, API key, server
URL, or listening port is needed. The first start can take longer while uv downloads
Python and the dependencies; later starts use its cache.
To pin a release instead of following the newest release, use
"args": ["uoft-mcp==0.6.0"].
Related MCP server: LettuceMeet MCP
Local Development
From a clone of this repository:
uv python install 3.13
uv sync --locked --managed-pythonuv sync creates .venv, installs the package and development tools, and uses the
committed uv.lock. .python-version selects Python 3.13; the package supports
Python 3.13 and newer.
Run the local checkout with:
uv run --locked python -m uoft_mcpThe installed uoft-mcp command is another entry point. The process waits for an
MCP client on stdin; a blank terminal is expected. Use Ctrl+C to stop a manual run.
Stdout carries protocol messages only, and logging goes to stderr.
Connect Degree Explorer and ACORN
Degree Explorer tools reuse your saved UofT session to read academic records and existing plans. To try them from this checkout, install Chromium once:
uv run --locked python -m uoft_mcp auth setupConnect your MCP client to this local checkout (the published package does not gain branch changes until a release):
{
"mcpServers": {
"uoft": {
"command": "uv",
"args": ["--directory", "C:/path/to/UofT-MCP", "run", "--locked", "python", "-m", "uoft_mcp"]
}
}
}Ask your assistant to "Connect my UofT account to Degree Explorer and ACORN." Complete the official UofT login and Duo prompts in the dedicated Chromium window. After each service first verifies your login, the browser stays on that service for five more seconds, rechecks access, and captures the latest session before moving to the next service or closing. Login state is encrypted locally and reused after browser closure and MCP restarts, while UofT still accepts it. Passwords and Duo codes belong only on the official pages, never in chat or config.
Use "Check my UofT connection" to verify access, or "Forget my saved UofT session" to delete local access. See authentication setup and behavior for terminal commands, memory-only sessions, expiry, and troubleshooting.
Default compact tools
Tool | Purpose |
| Search read operations; request their argument schemas only when needed. |
| Batch up to eight validated reads, with optional selection and bounded previews. |
| Inspect, filter, project, or page an in-memory snapshot without refetching. |
| Explicitly create an anonymous public timetable share. |
| Start or reuse official browser login. |
| Check connection state and login progress. |
| Delete saved access and invalidate private snapshots. |
For example, call uoft_discover with
{"query":"get_course_details","detail":"schemas"}, then uoft_read with:
{"requests":[
{"operation":"get_course_details","arguments":{"course_code":"CSC108H1"}},
{"operation":"get_course_details","arguments":{"course_code":"CSC148H1"}}
]}Results contain per-operation data or errors, retrieval timestamps, and transient
handles. Arrays default to 20 rows, with a maximum of 100; selected JSON data is
bounded to 16 KiB per item. Oversized objects return an explicit overview. Use
uoft_result with the handle and a narrower JSON Pointer, projection, or page.
Snapshots expire after five minutes and are never persisted to disk. Private
snapshots are invalidated on authentication changes. See selection and result
contracts before interpreting partial results.
Legacy tools and operation names
Run uv run --locked python -m uoft_mcp --tool-profile legacy for the original
interface. The following read names are also valid operation values inside
compact uoft_read. save_timetable and the three auth controls remain direct
tools and cannot be included in a read batch.
Tool | Arguments and purpose |
| No arguments. Get current session IDs; skip entries with |
| No arguments. Get campus, division, delivery-mode, and sorting values. |
| No arguments. List recognized faculty/division codes. |
| Required |
| Required |
| Required |
| Optional code/title, section, description, division, session, campus, delivery, and pagination filters. |
| Required |
| Required |
| Required |
| Optional |
| Optional |
| No arguments. Cancels login and removes locally saved UofT session state and its encryption key. |
| Optional |
| Optional |
| Optional |
| No arguments. Read course history, sessions, marks, and requirements after Degree Explorer login. |
| No arguments. Read the payload used by Degree Explorer's Current Status page. |
| No arguments. Read the record payload used by Current Status; it is not a certified transcript. |
| No arguments. Read menu/session user metadata. |
| No arguments. Read available Degree Explorer navigation entries. |
| No arguments. Read the UI string catalog, not a student inbox. |
| No arguments. Read client timeout settings; they do not extend a session. |
| No arguments. Read existing planner timelines and primary-plan flags. |
| No arguments. Read the unparameterized planner popup endpoint; it cannot target a cell. |
See Degree Explorer tools and workflow for all nine authenticated
reads, their fixed API routes, and limitations. Each underlying operation accepts {} and reads only
the connected student's account.
See ACORN tools and workflow for the three basic reads and field-selection examples. They reuse the connected account without opening a login browser.
In legacy mode, each successful lookup, generation, and retrieve call returns one text block
containing the complete upstream JSON. The wrapper preserves fields and arrays,
including upstream payload and status envelopes. It does not summarize or
truncate course data. save_timetable keeps the upstream share object and adds
share_url.
Compact mode performs discovery, bounded batching, and local result selection before returning data. It does not run arbitrary code or supply a code-execution sandbox. Measured fixture comparisons distinguish model-facing output savings from upstream request counts.
Legacy example workflow
Call
get_current_sessionswith{}and select a non-header entry'svalue.Call
get_divisionsorget_reference_datafor valid filter codes.Call
search_course_titleswith these arguments, substituting the session value:
{"term": "CSC108", "divisions": "ARTSC", "sessions": "SESSION_ID_FROM_STEP_1"}Use the returned exact course code in
get_course_details:
{"course_code": "CSC108H1", "section_code": "F"}For filtered, paginated results, call
search_courses:
{
"course_code": "CSC108H1",
"divisions": ["ARTSC"],
"sessions": ["SESSION_ID_FROM_STEP_1"],
"page": 1,
"page_size": 2
}search_courses also accepts course_title, course_section_code,
search_course_description, campuses, delivery_modes, and direction (asc or
desc). Pages start at 1, page size defaults to 20, and sorting defaults to
asc. Omitted collection filters become empty arrays. Course codes should be exact;
use autocomplete for prefixes or course_title for keyword searches.
Copy each selected offering's
idfromget_course_detailsintogenerate_timetable. Activity types are the section types to fill, such asLecture,Tutorial, orPractical. Preference defaults tobalanced. Optional blocked intervals use weekday names and 24-hourHH:MMtimes:
{
"plans": [
{
"courses": [
{
"course_id": "COURSE_ID_FROM_STEP_4",
"activity_types": ["Lecture", "Tutorial"]
}
],
"preference": "early",
"blocked_times": [{"day": "Monday", "start": "8:00", "end": "10:00"}]
}
]
}Use one plan per term. A Fall and Winter year is two plans. The solver returns chosen sections; it does not enroll students.
Store a Timetable Builder state with
save_timetable. Thetimetableobject must includesessions,timetables, andplansin the frontend's serialized shape. The tool returnsidandshare_url(https://ttb.utoronto.ca/#!/?t=...).Reload that share later with
retrieve_timetable:
{"share_id": "SHARE_ID_FROM_STEP_7"}Checks
uv run --locked pytest -q
uv run --locked ruff check .
uv run --locked ruff format --check .The PR workflow runs these checks on pull requests
targeting main or master, using Python 3.13 on Ubuntu. New commits cancel an
older run for the same PR. Tests need no Chromium installation or UofT credentials.
The tests run offline. They cover the twenty-five legacy tools and seven compact tools, request mapping, raw JSON preservation, validation, HTTP errors, timeouts, connection errors, invalid JSON, shared-client cleanup, MCP discovery, and actual stdio subprocesses. Authentication tests cover encrypted persistence, restoration, browser lifecycle, expiry, locking, CLI controls, and sanitized status results using synthetic state and fake backends. Degree Explorer tests also cover all nine GET mappings, MCP schemas and annotations, JSON preservation, sanitized errors, response disposal, saved-session reuse, and serialization with login and forget. These reads have not been verified against a live authenticated account in this change. ACORN tests additionally cover compact JSON, field selection, and expected root types. Both profiles have offline regression coverage; compact tests add batching, selection, snapshot lifecycle, and efficiency budgets. A live ACORN read on 2026-09-19 returned a login redirect; authenticated live verification remains pending.
Previous timetable verification: 50 tests passed. Live checks of lookup, generateYear, tiny/shorten,
and tiny/retrieve succeeded, including generating CSC258H1 and CSC311H1, saving an
anonymous share, and retrieving that share. Live requests are deliberately not part
of the test suite, so tests remain reproducible.
Current authentication verification is recorded in AUTHENTICATION.md.
API Notes
Project layout
The MCP entry points remain uoft_mcp.server and python -m uoft_mcp. Service-specific
code is grouped below the package so integrations can grow independently:
uoft_mcp/
├── timetable_builder/ # public Timetable Builder client and API reference
├── degree_explorer/ # allowlisted, read-only Degree Explorer client
├── acorn/ # allowlisted ACORN reads and field selection
├── utilities/ # shared authentication, browser, and secure session storage
├── server.py # MCP tool registration and application wiring
└── cli.py # stdio server and terminal authentication commandsThe supplied Timetable Builder reference remains the original reference. Live checks found two missing details: pagination starts at 1, and paginated search requires an empty
departmentPropsarray when not filtering by department. The wrapper supplies it.generateYearaccepts an array of plans. Each plan needs courseidvalues fromget_course_details,sectionswithname: "*"and a type,fitnessFunctionOption(MORNING_WEIGHTED,BALANCED, orAFTERNOON_WEIGHTED), andblockedOffintervals using weekday numbers 1-5 (Monday-Friday) and milliseconds since midnight.tiny/shortenstores the officialhttps://ttb.utoronto.ca/#!/?URL for a serialized timetable and returns{ "id": "..." }.tiny/retrieve?id=loads it. These are anonymous share records, not ACORN enrolment.Get division codes from the API. For example, the live API uses
ERINandSCARfor Mississauga and Scarborough, rather than the reference'sUTMandUTSCexamples.Even one course can have a large response because all its sections are included. Choose narrow filters and small page sizes. Compact selection reduces returned data; neither profile fetches extra upstream pages automatically.
HTTP failures become MCP tool errors containing the endpoint and status code. UofT may return HTTP 404 for no matching courses. Timeouts, connection failures, and malformed JSON get their own readable errors. No automatic retries occur.
This API is not covered by an official support guarantee. Changes upstream may require updating the mappings. Successful HTTP responses are preserved as supplied, including any application-level status messages inside their JSON.
Available Tools
7 toolssave_timetableA
Store a serialized Timetable Builder state and return a public share URL.
timetable must be the TTB state object with sessions, timetables, and plans. The wrapper posts the official ttb.utoronto.ca URL for that state and returns the upstream share id plus a https://ttb.utoronto.ca/#!/?t= link. This creates an anonymous share record only; it does not enroll students.
| Name | Required | Description | Default |
|---|---|---|---|
| timetable | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds real context beyond the annotations: it discloses that the wrapper posts to the upstream ttb.utoronto.ca service, returns an upstream share id and a share link, and that only an anonymous share record is created. It does not mention that repeated saves create duplicate records, which the non-idempotent annotation hints at but the prose never confirms.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core action and return value, then the parameter requirement, then scope caveats. It is slightly wordy about the upstream URL mechanics, but every sentence contributes to correct invocation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description correctly documents the return shape (upstream share id plus an https://ttb.utoronto.ca/#!/?t= link). Annotations already cover the safety profile (write, non-idempotent, non-destructive), so remaining gaps are minor, e.g. behavior on repeated saves.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% and the single parameter is an unconstrained nested object (additionalProperties: true), so the description carries the burden. It does so well by specifying that "timetable" must be the TTB state object containing sessions, timetables, and plans, giving the agent the shape the empty schema omits.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: it stores a serialized Timetable Builder state and returns a public share URL. That verb (store/save) plus the share-URL return clearly separates it from siblings like generate_timetable and retrieve_timetable, which produce or fetch rather than persist.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It clarifies one boundary explicitly ("creates an anonymous share record only; it does not enroll students"), which tells the agent this is not an enrollment action. However, it never says when to prefer this over siblings such as retrieve_timetable or what precondition the state must come from, so usage is only implied.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
uoft_auth_statusARead-onlyIdempotent
Get connection and login progress without exposing credentials or student records.
refresh=True checks both services using saved cookies; it never opens a login window. A saved cookie is not proof of a valid session. last_verified is historical, not expiry.
| Name | Required | Description | Default |
|---|---|---|---|
| refresh | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint and destructiveHint=false, so the safety profile is covered. The description adds genuinely new behavioral context: saved cookies are checked without opening a window, a saved cookie is not proof of a valid session, and last_verified is historical rather than an expiry — all of which shape how the agent interprets results.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four short sentences, front-loaded with the core purpose and followed by the parameter behavior and output caveats. Every sentence adds distinct value; none restates the name or schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter, non-destructive status read with no output schema, the description covers enough: scope of the read, refresh behavior, and the interpretation caveat for last_verified. It could say a bit more about what fields the status response contains for an agent to act on, but the essentials are present.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter has 0% schema description coverage, so the description must carry the meaning — and it does, explaining that refresh=True re-checks both services against saved cookies with no login window. It does not describe the default (refresh=false) behavior explicitly, leaving one small gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description gives a specific verb and resource: 'Get connection and login progress.' It also scopes what is NOT returned ('without exposing credentials or student records'), which helps separate it from data-returning siblings like get_course_details. It never names an alternative tool explicitly, so sibling differentiation is implied rather than stated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It states a concrete use condition: 'refresh=True checks both services using saved cookies; it never opens a login window.' This tells the agent when to set the flag and clarifies that this tool is not the login path (uoft_login is). No explicit when-not guidance or named alternative is given, so it stops short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
uoft_discoverBRead-onlyIdempotent
Find read operations locally; request schemas before calling unfamiliar operations.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| query | No | ||
| detail | No | descriptions | |
| service | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint, covering safety and idempotency. The description adds that it finds read operations locally and requests schemas, providing context that it is a discovery tool with no side effects. However, it does not disclose any additional behavioral traits beyond what annotations already convey, so a 3 is appropriate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences that clearly state the purpose and the recommended usage pattern. It is front-loaded with the primary function and is free of redundant information. It earns a 4 for being efficient and well-structured, though it could potentially be expanded with minimal additional detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has 4 parameters, no output schema, and relies on annotations for safety. The description does not explain how to use the parameters, what the return format looks like, or provide examples. For a discovery tool, an agent would need to know what information it returns (e.g., names, descriptions, schemas) and how to specify queries. The description lacks this essential context, making it incomplete for effective use. A score of 2 is appropriate.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 0% description coverage, so the description must compensate for the missing parameter documentation. However, the description does not mention any of the parameters (query, limit, detail, service). The parameter names and enum values (e.g., detail: names/descriptions/schemas; service: timetable/degree_explorer/acorn) provide some self-explanatory meaning, but the description adds no value to understanding the parameters. Given the low coverage, the description fails to compensate, so a score of 2 is justified.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states that the tool finds read operations locally and requests schemas before calling unfamiliar operations. This identifies it as a discovery tool for available read operations and schema retrieval, distinguishing it from sibling tools like uoft_read (which likely performs the actual read). However, the term 'locally' is slightly ambiguous, so a 4 is appropriate.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool should be used to discover read operations and to request schemas before invoking unfamiliar operations, providing a clear context for use. However, it does not explicitly mention alternatives or when not to use it, such as specifying that uoft_read is for actual reads or that this tool should precede any unfamiliar operation. The guidance is implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
uoft_forget_sessionADestructiveIdempotent
Cancel login and delete this MCP's local sessions and encryption key for both apps.
This closes managed authentication resources. It is not university-wide logout.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and idempotentHint=true, so the safety profile is covered. The description adds meaningful specifics beyond that: exactly what is destroyed (local sessions and the encryption key) and for which scope (this MCP, both apps, not university-wide).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences, front-loaded with the destructive action and then the scope caveat. No filler, and the most important constraint is not buried at the end.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-param, no-output-schema tool whose annotations carry the safety hints, the description is nearly complete, covering action and scope. The only unresolved ambiguity is what 'both apps' refers to and whether re-login is required afterward.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so there is nothing for the description to disambiguate; baseline 4 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (cancel/delete) and resource (local sessions and encryption key), and explicitly scopes it away from a university-wide logout. An agent can distinguish this from uoft_login and uoft_auth_status without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives clear context for use ('cancel login', local-only scope) and an explicit boundary ('not university-wide logout'), which tells the agent when this is inappropriate. It stops short of naming the alternative action (e.g. re-authenticating via uoft_login) after forgetting.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
uoft_loginA
Start official UofT browser login, returning immediately while you complete Duo.
service is degree_explorer, acorn, or both. Saved sessions are reused when valid. Newly verified browser sessions wait five seconds, recheck access, and save the latest session before continuing or closing. Status stays in_progress during the wait. remember=False starts a fresh memory-only session without deleting saved sessions. Never supply passwords or MFA codes through tools. Check uoft_auth_status for progress.
| Name | Required | Description | Default |
|---|---|---|---|
| service | No | both | |
| remember | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses important behavior beyond the annotations: immediate return, a five-second wait with rechecking, saving the latest session, status staying in_progress, non-deletion on remember=False, and a security rule against supplying passwords or MFA codes. This gives the agent a strong model of side effects and timing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but not bloated; the core behavior is front-loaded, followed by parameter-specific details and a safety note. Each sentence earns its place and no filler is present.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, but the description covers what happens immediately, how status behaves during the wait, what remember=False does, and where to check progress. This is sufficient for an agent to invoke the tool and follow up correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It lists service options (degree_explorer, acorn, or both) and explains the meaningful semantics of remember=False as a fresh memory-only session without deleting saved sessions. Service values mostly echo the schema enum, but the remember explanation adds real value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Start official UofT browser login') and a clear resource, and immediately signals that it is asynchronous by returning while Duo is completed. It is clearly distinguishable from sibling auth-state tools like uoft_auth_status or uoft_forget_session.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives concrete invocation context: saved sessions are reused when valid, remember=False starts a fresh memory-only session, and the agent should check uoft_auth_status for progress. It does not explicitly contrast with sibling session tools, but the intended usage is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
uoft_readDRead-onlyIdempotent
Batch discovered reads with optional selection. Snapshot handles last five minutes.
| Name | Required | Description | Default |
|---|---|---|---|
| requests | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The only behavioral addition beyond annotations is 'Snapshot handles last five minutes,' which is cryptic and could mean a time window, a snapshot mode, or something else. Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, so the description adds little meaningful transparency. It does not contradict annotations, but the added statement is too vague to be useful.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very short, but brevity results in under-specification rather than conciseness. Neither sentence is actionable: 'Batch discovered reads' is vague, and 'Snapshot handles last five minutes' is ambiguous. Valuable space is wasted on unclear phrasing instead of essential usage details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With a complex nested input schema, no output schema, and zero parameter description coverage, the description is grossly inadequate. It does not explain how to structure requests, what operations are supported, what selection modes do, or what the tool returns. An agent would be unable to invoke the tool correctly based on the description alone.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate for the undocumented parameters, but it does not. The phrase 'optional selection' vaguely references the selection object, yet it leaves the required 'requests' array and nested 'operation', 'arguments', and 'selection' fields completely unexplained. An agent cannot determine valid operation values, selection modes, or filtering semantics from the description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description says 'Batch discovered reads' but never names a specific resource or clear verb-object relationship. It is ambiguous what 'discovered' refers to and how this differs from uoft_discover or uoft_result. The name uoft_read hints at reading, but the description itself does not clarify the tool's core function.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given about when to use this tool versus any sibling. The description does not mention uoft_discover, uoft_result, or any alternative, nor does it state prerequisites or exclusions. The word 'Batch' implies bulk operations, but there is no concrete context for choosing this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
uoft_resultBRead-onlyIdempotent
Select or page a snapshot without network access. Refetch when the handle expires.
| Name | Required | Description | Default |
|---|---|---|---|
| handle | Yes | ||
| selection | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior. The description adds valuable behavioral context: 'without network access' and the note about handle expiration requiring a refetch. These details go beyond what annotations provide and help the agent understand operational constraints, though it doesn't describe the exact failure mode when the handle expires.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise—two short sentences with no filler. The primary behavior ('Select or page a snapshot without network access') is front-loaded, and the handle-expiry note is secondary. Every word earns its place; it is efficient and well-structured for quick scanning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has a complex optional 'selection' parameter and no output schema, the description is far too sparse. It fails to explain what 'selection' does, what the expected return format is, or how to construct a valid selection. The note about handle expiration is useful but insufficient for an agent to call this tool correctly without additional inference. The schema's nested description partially compensates, but overall the description leaves critical gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the tool description does not mention any parameters. Neither 'handle' nor 'selection' is explained in the description. The nested Selection schema has its own description, but the tool description itself provides no guidance on what these parameters mean or how they should be used, leaving a significant gap given the lack of schema-level descriptions for the top-level properties.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific action ('Select or page') on a resource ('a snapshot') and notes the key constraint of no network access. It is clear enough to distinguish from general read operations, though it does not explicitly differentiate from sibling tools like uoft_read. The term 'snapshot' is somewhat vague, but the core purpose is understandable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies that this tool is used when you already have a handle (since it mentions 'Refetch when the handle expires'), but it provides no explicit guidance on when to use this tool versus alternatives like uoft_read or uoft_discover. There are no stated exclusions or conditions for choosing this tool, leaving the agent to infer usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
21 tool updates
v0.6.0- Removed
degree_explorer_get_academic_history - Removed
degree_explorer_get_cell_details - Removed
degree_explorer_get_messages - Removed
degree_explorer_get_planner - Removed
degree_explorer_get_session_timeouts - Removed
degree_explorer_get_student_data - Removed
degree_explorer_get_student_menu - Removed
degree_explorer_get_student_record - Removed
degree_explorer_get_student_user_data - Removed
generate_timetable - Removed
get_course_details - Removed
get_current_sessions - Removed
get_divisions - Removed
get_reference_data - Removed
retrieve_timetable - Removed
search_course_titles - Removed
search_courses - Removed
search_departments - Added
uoft_discover - Added
uoft_read - Added
uoft_result
9 tool updates
v0.4.0- Added
degree_explorer_get_academic_history - Added
degree_explorer_get_cell_details - Added
degree_explorer_get_messages - Added
degree_explorer_get_planner - Added
degree_explorer_get_session_timeouts - Added
degree_explorer_get_student_data - Added
degree_explorer_get_student_menu - Added
degree_explorer_get_student_record - Added
degree_explorer_get_student_user_data
3 tool updates
v0.3.2- Added
uoft_auth_status - Added
uoft_forget_session - Added
uoft_login
10 tool updates
v0.2.0- First observed
generate_timetable - First observed
get_course_details - First observed
get_current_sessions - First observed
get_divisions - First observed
get_reference_data - First observed
retrieve_timetable - First observed
save_timetable - First observed
search_course_titles - First observed
search_courses - First observed
search_departments
TDQS
Scored across 7 tools
Tools are mostly distinct: authentication flow (login, auth_status, forget_session), discovery (discover), read operations (read, result), and saving (save_timetable). Minor overlap between 'read' and 'result' as both handle retrieval, but result is specifically for snapshot paging, so it's acceptable.
Most tools follow a 'uoft_' prefix with verb or noun, but 'save_timetable' breaks the pattern. Verbs are inconsistent (login, discover, read, forget_session) vs nouns (auth_status, result). Still readable, but not a uniform convention.
7 tools is well within the ideal 3-15 range. Each tool serves a clear purpose: authentication management, discovery, reading, result handling, and saving. No redundancy or bloat.
The set covers authentication, discovery, reading, and saving timetable states, but lacks explicit tools for creating or modifying timetables (only saves a provided state). This may require agents to construct states themselves, a notable gap for a 'Timetable Builder' server.
Maintenance
Related MCP Connectors
Query SEC EDGAR filings, XBRL financials, and company data through MCP. STDIO & Streamable HTTP.
Read-only MCP server for ClassQuill, a tutoring-business-management platform.
Remote MCP for TehProf Booking: browse resources & availability, create & cancel reservations.
UMLS MCP — wraps the NLM UMLS Terminology Services REST API (uts-ws.nlm.nih.gov/rest)
Related MCP Servers
- FlicenseAqualityDmaintenanceLocal-first Rutgers course planning assistant that answers 'what should I take and when?' using a CP-SAT solver, real transcript data, and live SOC data, connected to Claude via MCP.13-
- FlicenseNot gradedqualityBmaintenanceUnofficial MCP tools for LettuceMeet to create polls, view responses, and find meeting overlaps via CLI or MCP server.-
- FlicenseNot gradedqualityCmaintenanceRemote MCP connector providing live, structured access to CMU Courses public data including courses, prerequisites, schedules, instructors, gen-eds, and final-exam times to help students plan schedules.-
- AlicenseNot gradedqualityCmaintenanceMCP server for querying the public UCLA Schedule of Classes. It provides tools to list terms, subject areas, search courses, and get detailed enrollment, waitlist, and section information.-