harbor-registry-mcp
harbor-registry-mcp
Harbor Registry用MCPサーバー。LLMエージェント(Claude Code、Cursor、OpenCodeなど)を使用して、プロジェクト、リポジトリ、アーティファクトの一覧表示、ストレージレポートの実行、クリーンアップ候補の検索、タグなしまたは古いアーティファクトの削除が可能です。すべて安全策(一括削除はデフォルトでドライラン)が講じられています。
Python、FastMCP、stdioトランスポートを使用。
SaaSまたはセルフホスト/オンプレミスのあらゆるHarbor 2.xインスタンスで動作します。
なぜ別のHarbor MCPが必要なのか?
既存のコミュニティ製Harbor MCP(nomagicln/mcp-harbor、bupd/harbor-mcp-server)は、基本的な一覧表示/取得エンドポイントのみを公開しています。本サーバーは、ストレージレポート、クリーンアップ候補の特定、タグなしアーティファクトの削除、ドライラン付きの古いアーティファクト削除といった、DevOpsエンジニアがディスク容量を解放するために実際に必要とする操作を追加しています。
Related MCP server: Harbor MCP Server
設計のハイライト
ツールアノテーション — 読み取り専用ツールには
readOnlyHint: Trueが設定され、破壊的なツール(harbor_delete_*)にはdestructiveHint: Trueが設定されているため、MCPクライアントは確認を求めます。デフォルトでドライラン — 一括クリーンアップ(
harbor_delete_old_artifacts(dry_run=True))はデフォルトでドライランとなり、エージェントが実行するには設定を切り替える必要があります。構造化出力 — すべてのツールは型付きペイロード(TypedDict)とMarkdown形式の要約を返します。
構造化エラー — 401 / 403 / 404 / 429 / 5xx エラーは、対処可能なヒントにマッピングされます。
Pydanticによる入力検証 — すべての引数に対して検証を行います。
脆弱性スナップショット —
with_scan_overviewが有効な場合、harbor_list_artifactsはスキャンステータスと件数を表示します。
機能(8つのツール)
探索と調査
harbor_list_projects— リポジトリ数と可視性を含むプロジェクト一覧harbor_list_repos— プロジェクト内のリポジトリ一覧harbor_list_artifacts— タグ/サイズ/スキャンステータスを含むリポジトリ内のアーティファクト一覧harbor_storage_report— プロジェクト全体のストレージ内訳(全リポジトリ × 全アーティファクト)
クリーンアップ計画
harbor_cleanup_candidates— 削除候補の提案(タグなし、プルされていない、古いバージョン)
クリーンアップ実行(破壊的)
harbor_delete_artifact— タグまたはダイジェストによる単一アーティファクトの削除harbor_delete_untagged— プロジェクト/リポジトリ内のすべてのタグなしアーティファクトを削除harbor_delete_old_artifacts— リポジトリごとに最新のN個を残し、残りを削除(デフォルトはドライラン)
インストール
Python 3.10以上が必要です。
# via uvx (recommended)
uvx --from harbor-registry-mcp harbor-registry-mcp
# or via pipx
pipx install harbor-registry-mcp設定
claude mcp add harbor -s project \
--env HARBOR_URL=https://harbor.example.com \
--env HARBOR_USERNAME='robot$your-robot' \
--env HARBOR_PASSWORD=your-robot-token \
--env HARBOR_SSL_VERIFY=true \
-- uvx --from harbor-registry-mcp harbor-registry-mcpまたは .mcp.json に記述します:
{
"mcpServers": {
"harbor": {
"type": "stdio",
"command": "uvx",
"args": ["--from", "harbor-registry-mcp", "harbor-registry-mcp"],
"env": {
"HARBOR_URL": "https://harbor.example.com",
"HARBOR_USERNAME": "robot$your-robot",
"HARBOR_PASSWORD": "${HARBOR_PASSWORD}",
"HARBOR_SSL_VERIFY": "true"
}
}
}
}確認:
claude mcp list
# harbor: uvx --from harbor-registry-mcp harbor-registry-mcp - ✓ Connected環境変数
変数 | 必須 | 説明 |
| はい | Harbor URL(末尾のスラッシュなし) |
| はい | Harborユーザー名 — ロボットアカウントを推奨 |
| はい | パスワードまたはロボットトークン |
| いいえ |
|
使用例
「プロジェクト
einvy-pubのストレージレポートを表示して」「
qa-assistant内のクリーンアップ候補を探して。最新3つは残して」「
qa-assistant内のタグなしアーティファクトをすべて削除して」「
qa-assistant/pgvector-rag内の古いアーティファクトをドライランで削除して。最新1つは残して」「
einvy-pub/my-imageには何が入っている?」
安全性
読み取りツールは
readOnlyHint: Trueを使用するため、確認は不要です。削除ツールは
destructiveHint: Trueを使用するため、クライアントは確認を行うべきです。harbor_delete_old_artifactsはデフォルトでdry_run=Trueです。実際に削除するには、エージェントが明示的にdry_run=Falseを設定する必要があります。harbor_cleanup_candidatesは読み取り専用であり、候補を提案するだけで、削除は行いません。
開発
git clone https://github.com/mshegolev/harbor-registry-mcp.git
cd harbor-registry-mcp
pip install -e '.[dev]'
pytestライセンス
MIT © Mikhail Shchegolev
Available Tools
8 toolsharbor_cleanup_candidatesARead-onlyIdempotent
Suggest which artifacts could be deleted to reclaim space.
READ-ONLY — never deletes anything; just produces a list with
reasons. Use harbor_delete_artifact / harbor_delete_untagged /
harbor_delete_old_artifacts to act on the results.
Reasons emitted:
- untagged — artifact has no tags (orphaned layer)
- never_pulled — artifact has never been pulled (and is past
the keep_latest_per_repo cutoff)
- old_version — artifact is older than the keep_latest_per_repo
newest tagged artifacts
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| include_untagged | No | Suggest deleting untagged artifacts (orphaned layers). | |
| include_zero_pulls | No | Suggest deleting artifacts that have never been pulled. | |
| keep_latest_per_repo | No | How many newest artifacts to always keep per repository. |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| candidates_count | Yes | |
| total_reclaimable | Yes | |
| total_reclaimable_bytes | Yes | |
| candidates | Yes | |
| hint | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, destructiveHint, and idempotentHint. The description adds behavioral context by listing the specific reasons emitted (untagged, never_pulled, old_version) and confirming no deletion occurs. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise with minimal sentences, yet fully informative. It uses bullet points for reasons, front-loading the purpose. Every sentence adds value without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has an output schema, the description complements it by explaining the reasons that appear in the output. Input parameters are fully covered in schema. References to sibling tools for actions complete the context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description does not add additional meaning beyond the schema for parameters; it focuses on output reasons. This is adequate but not enhanced.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool suggests artifacts for deletion to reclaim space, using specific verbs and resources. It distinguishes itself from deletion tools by emphasizing read-only nature and listing reasons emitted, which differentiates it from siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states it is read-only and never deletes, and directs users to sibling deletion tools (harbor_delete_artifact, etc.) for acting on results. This provides clear when-to-use and when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_delete_artifactADestructive
Delete a single artifact by tag or digest.
DESTRUCTIVE & IRREVERSIBLE — Harbor immediately removes the manifest from its catalogue; the underlying blobs are reclaimed by the next GC sweep. There is no soft-delete or undo.
Returns the freed space and tag list for confirmation.
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| repository_name | Yes | Repository name within the project. | |
| reference | Yes | Tag (e.g. 'v1.0') or digest (e.g. 'sha256:...'). |
Output Schema
| Name | Required | Description |
|---|---|---|
| success | Yes | |
| project | Yes | |
| repository | Yes | |
| reference | Yes | |
| deleted_tags | Yes | |
| freed_size | Yes | |
| freed_bytes | Yes | |
| error | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Description goes beyond annotations by emphasizing 'DESTRUCTIVE & IRREVERSIBLE', explaining immediate manifest removal and blob reclamation during GC, with no soft-delete or undo. Also states the return value of freed space and tag list for confirmation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is relatively concise with front-loaded purpose. The warning section is slightly redundant but adds value. Could be more streamlined without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Description covers purpose, behavioral impact, parameter clarification, and return value. For a destructive action with 3 required parameters, it adequately informs the agent. Output schema existence is noted but not detailed, which is acceptable given description covers return.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% coverage with clear descriptions for each parameter. Description adds minimal value beyond schema, only clarifying that reference can be tag or digest. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states 'Delete a single artifact by tag or digest', using a specific verb and resource. It distinguishes from sibling tools like harbor_delete_old_artifacts (batch deletion) and harbor_delete_untagged (deletes untagged artifacts).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Description implies usage for deleting a specific artifact by tag or digest. It does not explicitly mention when not to use or alternative tools, but the context of siblings provides some guidance. Lacks exclusions for bulk or untagged deletion scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_delete_old_artifactsADestructive
Keep the N newest artifacts in a repository, delete the rest.
DESTRUCTIVE. dry_run=True is the default — the agent must
explicitly set dry_run=False to actually delete. Each entry in
to_delete carries a deleted field (True/False after
real run, None in dry-run).
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| repository_name | Yes | Repository name within the project. | |
| keep_count | No | Number of newest artifacts to keep. | |
| dry_run | No | If True (default) — only report what would be deleted, do not delete. |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| repository | Yes | |
| dry_run | Yes | |
| keeping | Yes | |
| to_delete_count | Yes | |
| freed_size | Yes | |
| freed_bytes | Yes | |
| to_delete | Yes | |
| hint | Yes | |
| message | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already set destructiveHint=true and readOnlyHint=false. The description adds key behavior: 'dry_run=True is the default' and that each to_delete entry has a 'deleted' field (True/False after real run, None in dry-run). This adds value beyond annotations without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise: two sentences plus a note. It front-loads the main purpose and essential safety information without any wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the output schema (mentioned in context signals) and good annotations, the description covers the key aspects: purpose, destructive nature, dry-run default, and a preview of the response. It is complete for a cleanup tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% coverage with descriptions for all 4 parameters. The description adds extra context: the dry_run default behavior and the output field 'deleted' which is not in the input schema, providing additional meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The title and description clearly state: 'Keep the N newest artifacts in a repository, delete the rest.' It uses a specific verb (delete) and resource (old artifacts in repository) and distinguishes from siblings like harbor_delete_artifact (single artifact) and harbor_delete_untagged (untagged only).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description warns 'DESTRUCTIVE' and explains the dry_run default, advising the agent to explicitly set dry_run=False for actual deletion. This provides clear usage guidance and safety context, though it doesn't explicitly list when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_delete_untaggedADestructiveIdempotent
Delete all untagged artifacts in a project (or single repository).
DESTRUCTIVE. Untagged artifacts are typically orphaned layers left
behind after pushing a new tag of the same image — generally safe to
delete. The full project sweep is opaque, so the response includes
repos_scanned for visibility.
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| repository_name | No | If set, only that repository is processed; otherwise every repository in the project. |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| repos_scanned | Yes | |
| deleted_count | Yes | |
| freed_size | Yes | |
| freed_bytes | Yes | |
| deleted | Yes | |
| errors | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already include destructiveHint=true and idempotentHint=true. Description adds context about what untagged artifacts are, that the sweep is opaque, and that response includes repos_scanned for visibility, enhancing transparency beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three very concise sentences with bold for emphasis. Front-loaded with key action, no wasted words. Earns its length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given output schema exists and parameters are fully described in schema, description adds necessary behavioral context. Could mention output schema content briefly, but not required.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for both parameters. Description adds nuance about opacity but doesn't add new parameter meaning beyond schema. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states it deletes all untagged artifacts in a project or single repository. Verb 'delete' plus resource 'untagged artifacts' with scope specified, differentiating from siblings like harbor_delete_artifact.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explains when to use: for untagged artifacts which are typically orphaned and safe to delete. Mentions opaque project sweep and repos_scanned for visibility. Lacks explicit when-not or direct comparison to alternatives, but context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_list_artifactsARead-onlyIdempotent
List artifacts (tags) in a repository, newest first.
Each artifact carries digest, size, push/pull timestamps, scan status and vulnerability counts (if scanned).
Pagination: if has_more is True, call again with page + 1.
For repositories with hundreds of artifacts prefer harbor_storage_report
or harbor_cleanup_candidates which paginate internally.
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| repository_name | Yes | Repository name within the project. | |
| page | No | Page number (1-based). | |
| page_size | No | Items per page (1-100). |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| repository | Yes | |
| total_size | Yes | |
| total_size_bytes | Yes | |
| artifacts_count | Yes | |
| page | Yes | |
| page_size | Yes | |
| has_more | Yes | |
| next_page | Yes | |
| artifacts | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, destructiveHint, and idempotentHint, so safety is clear. The description adds useful behavioral context such as the fields returned (digest, size, timestamps, scan status) and pagination with has_more flag.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise with 4 sentences: purpose, returned fields, pagination, and alternative recommendations. No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (4 parameters, output schema), the description covers purpose, usage, behavioral details, and alternatives comprehensively. It is fully adequate for agent selection and invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% description coverage for all 4 parameters. The description adds value by explaining the pagination behavior and the has_more flag, which are not in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists artifacts (tags) in a repository, newest first, which is a specific verb and resource. It distinguishes itself from siblings like harbor_storage_report and harbor_cleanup_candidates by noting their internal pagination.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly advises preferring harbor_storage_report or harbor_cleanup_candidates for repositories with hundreds of artifacts, providing clear when-to-use guidance. It also explains pagination mechanics.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_list_projectsARead-onlyIdempotent
List Harbor projects, sorted by repository count (descending within the page).
Use this first to discover which Harbor projects exist before drilling in
with harbor_list_repos / harbor_list_artifacts.
Pagination: if has_more is True, call again with page + 1.
Note that sorting is per-page — agents that need a global ranking should
aggregate across pages.
Returns:
dict with keys projects_count / page / page_size /
has_more / next_page / projects (list).
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number (1-based). | |
| page_size | No | Items per page (1-100). |
Output Schema
| Name | Required | Description |
|---|---|---|
| projects_count | Yes | |
| page | Yes | |
| page_size | Yes | |
| has_more | Yes | |
| next_page | Yes | |
| projects | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnly, destructive, idempotent, and open-world hints. The description adds crucial behavioral context: sorting is per-page, pagination logic, and return structure, which goes beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is concise (about 6 sentences) and well-structured. Front-loaded with main purpose, then usage guidance, pagination details, sorting caveat, and return format. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of annotations covering safety and idempotency, and an output schema (implied by return key listing), the description fully covers purpose, usage, pagination, sorting nuance, and return structure for a list tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with good parameter descriptions. The description adds some context about per-page sorting affecting results, but does not significantly enhance parameter understanding beyond what the schema provides. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'List Harbor projects' with a specific verb and resource. It distinguishes from siblings by indicating it should be used first before harbor_list_repos and harbor_list_artifacts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use this first to discover which Harbor projects exist before drilling in with harbor_list_repos / harbor_list_artifacts.' Also provides pagination instructions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_list_reposARead-onlyIdempotent
List repositories in a Harbor project.
Each repository is reported with artifact count and total pull count (useful for spotting unused repos before cleanup).
Pagination: if has_more is True, call again with page + 1.
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| page | No | Page number (1-based). | |
| page_size | No | Items per page (1-100). |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| repositories_count | Yes | |
| page | Yes | |
| page_size | Yes | |
| has_more | Yes | |
| next_page | Yes | |
| repositories | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the tool as read-only and idempotent. The description adds behavioral context: it explains pagination mechanics (has_more flag, calling again with page+1) and what data is returned per repository. This goes beyond annotations but does not cover rate limits or error handling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences: first states purpose, second adds output details and use case, third explains pagination. It is front-loaded and contains no unnecessary information. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a list tool with pagination, the description covers purpose, reported data, and pagination. With output schema present and annotations providing safety hints, the description is largely complete. It does not mention prerequisites or error handling, but these are less critical given the output schema and simple parameters.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema covers all 3 parameters with descriptions (100% coverage). The description does not add additional meaning to parameters beyond what the schema provides. The pagination detail refers to the response, not parameters, so parameter semantics are adequately covered by schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'List repositories in a Harbor project' with specific verb and resource. It adds details about reported data (artifact count, pull count) and a use case (spotting unused repos before cleanup), distinguishing it from sibling tools like harbor_list_artifacts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a use case ('useful for spotting unused repos before cleanup') but does not explicitly state when to use this tool vs alternatives like harbor_list_artifacts or harbor_cleanup_candidates. The context is implied rather than explicit, lacking exclusions or alternative recommendations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_storage_reportARead-onlyIdempotent
Full storage breakdown for a Harbor project.
Iterates every repository × every artifact and returns a sorted-by-size report — the canonical view for "what's eating up our quota?". Performs O(repos × artifacts) API calls; emits progress events through MCP Context.
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| total_repositories | Yes | |
| total_size | Yes | |
| total_size_bytes | Yes | |
| repositories | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, idempotentHint=true. The description adds that it performs O(repos×artifacts) API calls and emits progress events, providing behavioral context beyond annotations. No contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three concise sentences: first states purpose, second explains method and performance, third mentions progress events. No filler words; every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the annotations (readOnly, idempotent) and output schema existence, the description covers purpose, method, computational cost, and event output. No obvious gaps for a reporting tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a single parameter (project_name) described as 'Harbor project name.' The description adds no additional parameter detail beyond what the schema provides, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Full storage breakdown for a Harbor project' and explains it iterates over repositories and artifacts. It positions itself as the canonical view for quota usage, distinguishing it from sibling tools like cleanup or deletion tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies use for diagnosing quota usage ('what's eating up our quota?') and notes the computational cost (O(repos×artifacts) calls), but does not explicitly exclude other use cases or compare to siblings beyond mentioning its unique scope.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
8 tool updates
v0.1.0- First observed
harbor_cleanup_candidates - First observed
harbor_delete_artifact - First observed
harbor_delete_old_artifacts - First observed
harbor_delete_untagged - First observed
harbor_list_artifacts - First observed
harbor_list_projects - First observed
harbor_list_repos - First observed
harbor_storage_report
TDQS
Scored across 8 tools
Each tool targets a distinct operation: listing, reporting, or deleting. The cleanup candidate tool is clearly separate from the delete tools, and deletion tools are differentiated by scope (single, old, untagged). No overlapping purposes.
Most tools follow the harbor_verb_noun pattern (e.g., harbor_delete_artifact, harbor_list_projects), but harbor_storage_report uses a noun_noun pattern, breaking consistency. The prefix and general style are otherwise uniform.
Eight tools cover the essential operations for a Harbor registry: discovery (list projects, repos, artifacts), cleanup (candidates, delete single, delete old, delete untagged), and reporting (storage report). The count is well-scoped without being excessive.
The tool set provides comprehensive coverage for registry management: full lifecycle for artifacts (list, delete individual/bulk/untagged), project and repository exploration, storage analysis, and a cleanup candidate suggestion tool. No major gaps in functionality for the intended domain.
Maintenance
Related MCP Connectors
Docker Hub MCP — wraps the Docker Hub v2 API (free, no auth required for public data)
Go MCP server for GitLab: 2 dynamic tools reach 1000+ REST/GraphQL actions. Free/CE, no paid tier.
- mcpOAuthio.artifacta
Artifact store for AI agents. Hosted OAuth at mcp.artifacta.io/mcp; local stdio via npm/PyPI.
Related MCP Servers
- AlicenseNot gradedqualityFmaintenanceA Node.js application that provides a Model Context Protocol server for interacting with Harbor container registry, supporting operations for projects, repositories, tags, and Helm charts.19 npm7MIT
- AlicenseNot gradedqualityDmaintenanceEnables AI models to interact with Harbor container registries to manage projects, repositories, and system configurations in real time. It provides a suite of tools for monitoring health, retrieving statistics, and performing searches across registry data.20 npm5MIT
- AlicenseNot gradedqualityDmaintenanceMCP Harbor is a Node.js application that provides a Model Context Protocol (MCP) server for interacting with Harbor container registry.19 npmMIT
- FlicenseNot gradedqualityDmaintenanceMCP server for the Harbor hub that exposes evaluation jobs, trials, uploads, and published packages as tools for AI agents.-