Skip to main content
Glama
mshegolev

harbor-registry-mcp

by mshegolev

harbor-registry-mcp

PyPI Python License: MIT

MCP server for Harbor Registry. Lets an LLM agent (Claude Code, Cursor, OpenCode, etc.) list projects, repositories and artifacts, run storage reports, find cleanup candidates, and delete untagged or old artifacts — all with safety rails (dry-run by default for bulk delete).

Python, FastMCP, stdio transport.

Works with any Harbor 2.x instance — SaaS or self-hosted / on-prem.

Why another Harbor MCP?

A couple of community Harbor MCPs exist (nomagicln/mcp-harbor, bupd/harbor-mcp-server) but they expose only the basic list/get endpoints. This one adds storage reports, cleanup candidates, delete untagged, and delete old artifacts with dry-run — the operations DevOps engineers actually need to reclaim disk space.

Related MCP server: harvest-mcp-server

Design highlights

  • Tool annotations — read-only tools get readOnlyHint: True; destructive ones (harbor_delete_*) carry destructiveHint: True so MCP clients ask for confirmation.

  • Dry-run by default on both bulk cleanups (harbor_delete_untagged, harbor_delete_old_artifacts) — the agent must pass dry_run=False to execute.

  • Structured output — every tool returns a typed payload (TypedDict) + a markdown summary.

  • Structured errors — 401 / 403 / 404 / 429 / 5xx mapped to actionable hints.

  • Pydantic input validation for every argument.

  • Vulnerability snapshotharbor_list_artifacts surfaces scan status and counts if with_scan_overview is enabled.

Features (8 tools)

Discovery & inspection

  • harbor_list_projects — projects with repo counts and visibility

  • harbor_list_repos — repositories in a project

  • harbor_list_artifacts — artifacts in a repository with tags/size/scan status

  • harbor_storage_report — full project storage breakdown (all repos × all artifacts)

Cleanup planning

  • harbor_cleanup_candidates — suggest what to delete (untagged, never-pulled, old versions)

Cleanup execution (destructive)

  • harbor_delete_artifact — delete a single artifact by tag or digest

  • harbor_delete_untagged — delete all untagged artifacts in a project/repo (dry-run default)

  • harbor_delete_old_artifacts — keep N latest per repo, delete the rest (dry-run default)

Installation

Requires Python 3.10+.

# via uvx (recommended)
uvx --from harbor-registry-mcp harbor-registry-mcp

# or via pipx
pipx install harbor-registry-mcp

Configuration

claude mcp add harbor -s project \
  --env HARBOR_URL=https://harbor.example.com \
  --env HARBOR_USERNAME='robot$your-robot' \
  --env HARBOR_PASSWORD=your-robot-token \
  --env HARBOR_SSL_VERIFY=true \
  -- uvx --from harbor-registry-mcp harbor-registry-mcp

Or in .mcp.json:

{
  "mcpServers": {
    "harbor": {
      "type": "stdio",
      "command": "uvx",
      "args": ["--from", "harbor-registry-mcp", "harbor-registry-mcp"],
      "env": {
        "HARBOR_URL": "https://harbor.example.com",
        "HARBOR_USERNAME": "robot$your-robot",
        "HARBOR_PASSWORD": "${HARBOR_PASSWORD}",
        "HARBOR_SSL_VERIFY": "true"
      }
    }
  }
}

Check:

claude mcp list
# harbor: uvx --from harbor-registry-mcp harbor-registry-mcp - ✓ Connected

Environment variables

Variable

Required

Description

HARBOR_URL

yes

Harbor URL (no trailing slash)

HARBOR_USERNAME

yes

Harbor username — robot account recommended

HARBOR_PASSWORD

yes

Password or robot token

HARBOR_SSL_VERIFY

no

true/false. Default: true.

Example usage

  • "Storage report for project einvy-pub"

  • "Find cleanup candidates in qa-assistant — keep latest 3"

  • "Delete all untagged artifacts in qa-assistant"

  • "Dry-run delete of old artifacts in qa-assistant/pgvector-rag, keep 1 latest"

  • "What's in einvy-pub/my-image?"

Safety

  • Read tools use readOnlyHint: True — no confirmation needed.

  • Delete tools use destructiveHint: True — clients should confirm.

  • harbor_delete_untagged and harbor_delete_old_artifacts both default to dry_run=True; the agent must explicitly set dry_run=False to actually delete.

  • harbor_cleanup_candidates is read-only — it only suggests candidates, never deletes.

Development

git clone https://github.com/mshegolev/harbor-registry-mcp.git
cd harbor-registry-mcp
pip install -e '.[dev]'
pytest

License

MIT © Mikhail Shchegolev

Available Tools

8 tools
harbor_cleanup_candidatesA
Read-onlyIdempotent

Suggest which artifacts could be deleted to reclaim space.

READ-ONLY — never deletes anything; just produces a list with reasons. Use harbor_delete_artifact / harbor_delete_untagged / harbor_delete_old_artifacts to act on the results.

Reasons emitted: - untagged — artifact has no tags (orphaned layer) - never_pulled — artifact has never been pulled (and is past the keep_latest_per_repo cutoff) - old_version — artifact is older than the keep_latest_per_repo newest tagged artifacts

ParametersJSON Schema
NameRequiredDescriptionDefault
project_nameYesHarbor project name.
include_untaggedNoSuggest deleting untagged artifacts (orphaned layers).
include_zero_pullsNoSuggest deleting artifacts that have never been pulled.
keep_latest_per_repoNoHow many newest artifacts to always keep per repository.

Output Schema

ParametersJSON Schema
NameRequiredDescription
projectYes
candidates_countYes
total_reclaimableYes
total_reclaimable_bytesYes
candidatesYes
hintYes

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, destructiveHint, and idempotentHint. The description adds behavioral context by listing the specific reasons emitted (untagged, never_pulled, old_version) and confirming no deletion occurs. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise with minimal sentences, yet fully informative. It uses bullet points for reasons, front-loading the purpose. Every sentence adds value without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has an output schema, the description complements it by explaining the reasons that appear in the output. Input parameters are fully covered in schema. References to sibling tools for actions complete the context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description does not add additional meaning beyond the schema for parameters; it focuses on output reasons. This is adequate but not enhanced.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool suggests artifacts for deletion to reclaim space, using specific verbs and resources. It distinguishes itself from deletion tools by emphasizing read-only nature and listing reasons emitted, which differentiates it from siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states it is read-only and never deletes, and directs users to sibling deletion tools (harbor_delete_artifact, etc.) for acting on results. This provides clear when-to-use and when-not-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

harbor_delete_artifactA
Destructive

Delete a single artifact by tag or digest.

DESTRUCTIVE & IRREVERSIBLE — Harbor immediately removes the manifest from its catalogue; the underlying blobs are reclaimed by the next GC sweep. There is no soft-delete or undo.

Returns the freed space and tag list for confirmation.

ParametersJSON Schema
NameRequiredDescriptionDefault
project_nameYesHarbor project name.
repository_nameYesRepository name within the project.
referenceYesTag (e.g. 'v1.0') or digest (e.g. 'sha256:...').

Output Schema

ParametersJSON Schema
NameRequiredDescription
successYes
projectYes
repositoryYes
referenceYes
deleted_tagsYes
freed_sizeYes
freed_bytesYes
errorYes

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Description goes beyond annotations by emphasizing 'DESTRUCTIVE & IRREVERSIBLE', explaining immediate manifest removal and blob reclamation during GC, with no soft-delete or undo. Also states the return value of freed space and tag list for confirmation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is relatively concise with front-loaded purpose. The warning section is slightly redundant but adds value. Could be more streamlined without losing clarity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Description covers purpose, behavioral impact, parameter clarification, and return value. For a destructive action with 3 required parameters, it adequately informs the agent. Output schema existence is noted but not detailed, which is acceptable given description covers return.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema has 100% coverage with clear descriptions for each parameter. Description adds minimal value beyond schema, only clarifying that reference can be tag or digest. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states 'Delete a single artifact by tag or digest', using a specific verb and resource. It distinguishes from sibling tools like harbor_delete_old_artifacts (batch deletion) and harbor_delete_untagged (deletes untagged artifacts).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Description implies usage for deleting a specific artifact by tag or digest. It does not explicitly mention when not to use or alternative tools, but the context of siblings provides some guidance. Lacks exclusions for bulk or untagged deletion scenarios.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

harbor_delete_old_artifactsA
Destructive

Keep the N newest artifacts in a repository, delete the rest.

DESTRUCTIVE. dry_run=True is the default — the agent must explicitly set dry_run=False to actually delete. Each entry in to_delete carries a deleted field (True/False after real run, None in dry-run).

ParametersJSON Schema
NameRequiredDescriptionDefault
project_nameYesHarbor project name.
repository_nameYesRepository name within the project.
keep_countNoNumber of newest artifacts to keep.
dry_runNoIf True (default) — only report what would be deleted, do not delete.

Output Schema

ParametersJSON Schema
NameRequiredDescription
projectYes
repositoryYes
dry_runYes
keepingYes
to_delete_countYes
freed_sizeYes
freed_bytesYes
to_deleteYes
hintYes
messageYes

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already set destructiveHint=true and readOnlyHint=false. The description adds key behavior: 'dry_run=True is the default' and that each to_delete entry has a 'deleted' field (True/False after real run, None in dry-run). This adds value beyond annotations without contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise: two sentences plus a note. It front-loads the main purpose and essential safety information without any wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema (mentioned in context signals) and good annotations, the description covers the key aspects: purpose, destructive nature, dry-run default, and a preview of the response. It is complete for a cleanup tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema has 100% coverage with descriptions for all 4 parameters. The description adds extra context: the dry_run default behavior and the output field 'deleted' which is not in the input schema, providing additional meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The title and description clearly state: 'Keep the N newest artifacts in a repository, delete the rest.' It uses a specific verb (delete) and resource (old artifacts in repository) and distinguishes from siblings like harbor_delete_artifact (single artifact) and harbor_delete_untagged (untagged only).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description warns 'DESTRUCTIVE' and explains the dry_run default, advising the agent to explicitly set dry_run=False for actual deletion. This provides clear usage guidance and safety context, though it doesn't explicitly list when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

harbor_delete_untaggedA
DestructiveIdempotent

Delete all untagged artifacts in a project (or single repository).

DESTRUCTIVE. Untagged artifacts are typically orphaned layers left behind after pushing a new tag of the same image — generally safe to delete. The full project sweep is opaque, so the response includes repos_scanned for visibility.

ParametersJSON Schema
NameRequiredDescriptionDefault
project_nameYesHarbor project name.
repository_nameNoIf set, only that repository is processed; otherwise every repository in the project.

Output Schema

ParametersJSON Schema
NameRequiredDescription
projectYes
repos_scannedYes
deleted_countYes
freed_sizeYes
freed_bytesYes
deletedYes
errorsYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already include destructiveHint=true and idempotentHint=true. Description adds context about what untagged artifacts are, that the sweep is opaque, and that response includes repos_scanned for visibility, enhancing transparency beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three very concise sentences with bold for emphasis. Front-loaded with key action, no wasted words. Earns its length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given output schema exists and parameters are fully described in schema, description adds necessary behavioral context. Could mention output schema content briefly, but not required.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for both parameters. Description adds nuance about opacity but doesn't add new parameter meaning beyond schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it deletes all untagged artifacts in a project or single repository. Verb 'delete' plus resource 'untagged artifacts' with scope specified, differentiating from siblings like harbor_delete_artifact.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explains when to use: for untagged artifacts which are typically orphaned and safe to delete. Mentions opaque project sweep and repos_scanned for visibility. Lacks explicit when-not or direct comparison to alternatives, but context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

harbor_list_artifactsA
Read-onlyIdempotent

List artifacts (tags) in a repository, newest first.

Each artifact carries digest, size, push/pull timestamps, scan status and vulnerability counts (if scanned).

Pagination: if has_more is True, call again with page + 1. For repositories with hundreds of artifacts prefer harbor_storage_report or harbor_cleanup_candidates which paginate internally.

ParametersJSON Schema
NameRequiredDescriptionDefault
project_nameYesHarbor project name.
repository_nameYesRepository name within the project.
pageNoPage number (1-based).
page_sizeNoItems per page (1-100).

Output Schema

ParametersJSON Schema
NameRequiredDescription
projectYes
repositoryYes
total_sizeYes
total_size_bytesYes
artifacts_countYes
pageYes
page_sizeYes
has_moreYes
next_pageYes
artifactsYes

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, destructiveHint, and idempotentHint, so safety is clear. The description adds useful behavioral context such as the fields returned (digest, size, timestamps, scan status) and pagination with has_more flag.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with 4 sentences: purpose, returned fields, pagination, and alternative recommendations. No unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (4 parameters, output schema), the description covers purpose, usage, behavioral details, and alternatives comprehensively. It is fully adequate for agent selection and invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema has 100% description coverage for all 4 parameters. The description adds value by explaining the pagination behavior and the has_more flag, which are not in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists artifacts (tags) in a repository, newest first, which is a specific verb and resource. It distinguishes itself from siblings like harbor_storage_report and harbor_cleanup_candidates by noting their internal pagination.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly advises preferring harbor_storage_report or harbor_cleanup_candidates for repositories with hundreds of artifacts, providing clear when-to-use guidance. It also explains pagination mechanics.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

harbor_list_projectsA
Read-onlyIdempotent

List Harbor projects, sorted by repository count (descending within the page).

Use this first to discover which Harbor projects exist before drilling in with harbor_list_repos / harbor_list_artifacts.

Pagination: if has_more is True, call again with page + 1. Note that sorting is per-page — agents that need a global ranking should aggregate across pages.

Returns: dict with keys projects_count / page / page_size / has_more / next_page / projects (list).

ParametersJSON Schema
NameRequiredDescriptionDefault
pageNoPage number (1-based).
page_sizeNoItems per page (1-100).

Output Schema

ParametersJSON Schema
NameRequiredDescription
projects_countYes
pageYes
page_sizeYes
has_moreYes
next_pageYes
projectsYes

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnly, destructive, idempotent, and open-world hints. The description adds crucial behavioral context: sorting is per-page, pagination logic, and return structure, which goes beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is concise (about 6 sentences) and well-structured. Front-loaded with main purpose, then usage guidance, pagination details, sorting caveat, and return format. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of annotations covering safety and idempotency, and an output schema (implied by return key listing), the description fully covers purpose, usage, pagination, sorting nuance, and return structure for a list tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with good parameter descriptions. The description adds some context about per-page sorting affecting results, but does not significantly enhance parameter understanding beyond what the schema provides. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'List Harbor projects' with a specific verb and resource. It distinguishes from siblings by indicating it should be used first before harbor_list_repos and harbor_list_artifacts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use this first to discover which Harbor projects exist before drilling in with harbor_list_repos / harbor_list_artifacts.' Also provides pagination instructions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

harbor_list_reposA
Read-onlyIdempotent

List repositories in a Harbor project.

Each repository is reported with artifact count and total pull count (useful for spotting unused repos before cleanup).

Pagination: if has_more is True, call again with page + 1.

ParametersJSON Schema
NameRequiredDescriptionDefault
project_nameYesHarbor project name.
pageNoPage number (1-based).
page_sizeNoItems per page (1-100).

Output Schema

ParametersJSON Schema
NameRequiredDescription
projectYes
repositories_countYes
pageYes
page_sizeYes
has_moreYes
next_pageYes
repositoriesYes

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark the tool as read-only and idempotent. The description adds behavioral context: it explains pagination mechanics (has_more flag, calling again with page+1) and what data is returned per repository. This goes beyond annotations but does not cover rate limits or error handling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences: first states purpose, second adds output details and use case, third explains pagination. It is front-loaded and contains no unnecessary information. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a list tool with pagination, the description covers purpose, reported data, and pagination. With output schema present and annotations providing safety hints, the description is largely complete. It does not mention prerequisites or error handling, but these are less critical given the output schema and simple parameters.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema covers all 3 parameters with descriptions (100% coverage). The description does not add additional meaning to parameters beyond what the schema provides. The pagination detail refers to the response, not parameters, so parameter semantics are adequately covered by schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'List repositories in a Harbor project' with specific verb and resource. It adds details about reported data (artifact count, pull count) and a use case (spotting unused repos before cleanup), distinguishing it from sibling tools like harbor_list_artifacts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides a use case ('useful for spotting unused repos before cleanup') but does not explicitly state when to use this tool vs alternatives like harbor_list_artifacts or harbor_cleanup_candidates. The context is implied rather than explicit, lacking exclusions or alternative recommendations.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

harbor_storage_reportA
Read-onlyIdempotent

Full storage breakdown for a Harbor project.

Iterates every repository × every artifact and returns a sorted-by-size report — the canonical view for "what's eating up our quota?". Performs O(repos × artifacts) API calls; emits progress events through MCP Context.

ParametersJSON Schema
NameRequiredDescriptionDefault
project_nameYesHarbor project name.

Output Schema

ParametersJSON Schema
NameRequiredDescription
projectYes
total_repositoriesYes
total_sizeYes
total_size_bytesYes
repositoriesYes

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, destructiveHint=false, idempotentHint=true. The description adds that it performs O(repos×artifacts) API calls and emits progress events, providing behavioral context beyond annotations. No contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three concise sentences: first states purpose, second explains method and performance, third mentions progress events. No filler words; every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the annotations (readOnly, idempotent) and output schema existence, the description covers purpose, method, computational cost, and event output. No obvious gaps for a reporting tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with a single parameter (project_name) described as 'Harbor project name.' The description adds no additional parameter detail beyond what the schema provides, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Full storage breakdown for a Harbor project' and explains it iterates over repositories and artifacts. It positions itself as the canonical view for quota usage, distinguishing it from sibling tools like cleanup or deletion tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies use for diagnosing quota usage ('what's eating up our quota?') and notes the computational cost (O(repos×artifacts) calls), but does not explicitly exclude other use cases or compare to siblings beyond mentioning its unique scope.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

TDQS

A4.4/5.0
Disambiguation5/5

Each tool targets a distinct operation: listing, reporting, or deleting. The cleanup candidate tool is clearly separate from the delete tools, and deletion tools are differentiated by scope (single, old, untagged). No overlapping purposes.

Naming Consistency4/5

Most tools follow the harbor_verb_noun pattern (e.g., harbor_delete_artifact, harbor_list_projects), but harbor_storage_report uses a noun_noun pattern, breaking consistency. The prefix and general style are otherwise uniform.

Tool Count5/5

Eight tools cover the essential operations for a Harbor registry: discovery (list projects, repos, artifacts), cleanup (candidates, delete single, delete old, delete untagged), and reporting (storage report). The count is well-scoped without being excessive.

Completeness5/5

The tool set provides comprehensive coverage for registry management: full lifecycle for artifacts (list, delete individual/bulk/untagged), project and repository exploration, storage analysis, and a cleanup candidate suggestion tool. No major gaps in functionality for the intended domain.

Maintenance

ActivityMaintained
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/mshegolev/harbor-registry-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server