harbor-registry-mcp
harbor-registry-mcp
Harbor Registry 的 MCP 服务器。允许 LLM 智能体(如 Claude Code、Cursor、OpenCode 等)列出项目、仓库和制品,运行存储报告,查找清理候选对象,并删除无标签或旧的制品 — 所有操作均带有安全防护(批量删除默认开启试运行模式)。
Python,FastMCP,stdio 传输。
适用于任何 Harbor 2.x 实例 — SaaS 或自托管/本地部署。
为什么需要另一个 Harbor MCP?
社区中已存在几个 Harbor MCP(如 nomagicln/mcp-harbor、[bupd/harbor-mcp-server](https://github.com/bupd/harbor-mcp-server),但它们仅暴露了基础的列表/获取端点。本项目增加了**存储报告、清理候选对象、删除无标签制品以及带试运行功能的删除旧制品**功能 — 这些都是 DevOps 工程师回收磁盘空间真正需要的操作。
Related MCP server: Harbor MCP Server
设计亮点
工具注解 — 只读工具带有
readOnlyHint: True;破坏性工具(harbor_delete_*)带有destructiveHint: True,以便 MCP 客户端请求确认。默认试运行 — 批量清理操作默认开启试运行(
harbor_delete_old_artifacts(dry_run=True)) — 智能体必须手动切换才能执行。结构化输出 — 每个工具返回一个类型化载荷 (TypedDict) 和一个 Markdown 摘要。
结构化错误 — 401 / 403 / 404 / 429 / 5xx 错误映射为可操作的提示。
Pydantic 输入验证 — 对每个参数进行验证。
漏洞快照 — 如果启用了
with_scan_overview,harbor_list_artifacts会显示扫描状态和计数。
功能 (8 个工具)
发现与检查
harbor_list_projects— 列出项目及其仓库数量和可见性harbor_list_repos— 列出项目中的仓库harbor_list_artifacts— 列出仓库中的制品,包含标签/大小/扫描状态harbor_storage_report— 完整的项目存储明细(所有仓库 × 所有制品)
清理规划
harbor_cleanup_candidates— 建议删除的对象(无标签、从未拉取、旧版本)
清理执行(破坏性)
harbor_delete_artifact— 通过标签或摘要删除单个制品harbor_delete_untagged— 删除项目/仓库中所有无标签的制品harbor_delete_old_artifacts— 每个仓库保留 N 个最新版本,删除其余版本(默认试运行)
安装
需要 Python 3.10+。
# via uvx (recommended)
uvx --from harbor-registry-mcp harbor-registry-mcp
# or via pipx
pipx install harbor-registry-mcp配置
claude mcp add harbor -s project \
--env HARBOR_URL=https://harbor.example.com \
--env HARBOR_USERNAME='robot$your-robot' \
--env HARBOR_PASSWORD=your-robot-token \
--env HARBOR_SSL_VERIFY=true \
-- uvx --from harbor-registry-mcp harbor-registry-mcp或者在 .mcp.json 中配置:
{
"mcpServers": {
"harbor": {
"type": "stdio",
"command": "uvx",
"args": ["--from", "harbor-registry-mcp", "harbor-registry-mcp"],
"env": {
"HARBOR_URL": "https://harbor.example.com",
"HARBOR_USERNAME": "robot$your-robot",
"HARBOR_PASSWORD": "${HARBOR_PASSWORD}",
"HARBOR_SSL_VERIFY": "true"
}
}
}
}检查:
claude mcp list
# harbor: uvx --from harbor-registry-mcp harbor-registry-mcp - ✓ Connected环境变量
变量 | 必需 | 描述 |
| 是 | Harbor URL(末尾不带斜杠) |
| 是 | Harbor 用户名 — 建议使用机器人账号 |
| 是 | 密码或机器人令牌 |
| 否 |
|
使用示例
“获取项目
einvy-pub的存储报告”“在
qa-assistant中查找清理候选对象 — 保留最新的 3 个”“删除
qa-assistant中所有无标签的制品”“在
qa-assistant/pgvector-rag中试运行删除旧制品,保留最新的 1 个”“
einvy-pub/my-image里有什么?”
安全性
只读工具使用
readOnlyHint: True— 无需确认。删除工具使用
destructiveHint: True— 客户端应进行确认。harbor_delete_old_artifacts默认开启dry_run=True;智能体必须显式设置dry_run=False才能真正执行删除。harbor_cleanup_candidates是只读的 — 它仅提供候选建议,绝不执行删除。
开发
git clone https://github.com/mshegolev/harbor-registry-mcp.git
cd harbor-registry-mcp
pip install -e '.[dev]'
pytest许可证
MIT © Mikhail Shchegolev
Available Tools
8 toolsharbor_cleanup_candidatesARead-onlyIdempotent
Suggest which artifacts could be deleted to reclaim space.
READ-ONLY — never deletes anything; just produces a list with
reasons. Use harbor_delete_artifact / harbor_delete_untagged /
harbor_delete_old_artifacts to act on the results.
Reasons emitted:
- untagged — artifact has no tags (orphaned layer)
- never_pulled — artifact has never been pulled (and is past
the keep_latest_per_repo cutoff)
- old_version — artifact is older than the keep_latest_per_repo
newest tagged artifacts
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| include_untagged | No | Suggest deleting untagged artifacts (orphaned layers). | |
| include_zero_pulls | No | Suggest deleting artifacts that have never been pulled. | |
| keep_latest_per_repo | No | How many newest artifacts to always keep per repository. |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| candidates_count | Yes | |
| total_reclaimable | Yes | |
| total_reclaimable_bytes | Yes | |
| candidates | Yes | |
| hint | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, destructiveHint, and idempotentHint. The description adds behavioral context by listing the specific reasons emitted (untagged, never_pulled, old_version) and confirming no deletion occurs. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise with minimal sentences, yet fully informative. It uses bullet points for reasons, front-loading the purpose. Every sentence adds value without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has an output schema, the description complements it by explaining the reasons that appear in the output. Input parameters are fully covered in schema. References to sibling tools for actions complete the context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description does not add additional meaning beyond the schema for parameters; it focuses on output reasons. This is adequate but not enhanced.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool suggests artifacts for deletion to reclaim space, using specific verbs and resources. It distinguishes itself from deletion tools by emphasizing read-only nature and listing reasons emitted, which differentiates it from siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states it is read-only and never deletes, and directs users to sibling deletion tools (harbor_delete_artifact, etc.) for acting on results. This provides clear when-to-use and when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_delete_artifactADestructive
Delete a single artifact by tag or digest.
DESTRUCTIVE & IRREVERSIBLE — Harbor immediately removes the manifest from its catalogue; the underlying blobs are reclaimed by the next GC sweep. There is no soft-delete or undo.
Returns the freed space and tag list for confirmation.
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| repository_name | Yes | Repository name within the project. | |
| reference | Yes | Tag (e.g. 'v1.0') or digest (e.g. 'sha256:...'). |
Output Schema
| Name | Required | Description |
|---|---|---|
| success | Yes | |
| project | Yes | |
| repository | Yes | |
| reference | Yes | |
| deleted_tags | Yes | |
| freed_size | Yes | |
| freed_bytes | Yes | |
| error | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Description goes beyond annotations by emphasizing 'DESTRUCTIVE & IRREVERSIBLE', explaining immediate manifest removal and blob reclamation during GC, with no soft-delete or undo. Also states the return value of freed space and tag list for confirmation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is relatively concise with front-loaded purpose. The warning section is slightly redundant but adds value. Could be more streamlined without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Description covers purpose, behavioral impact, parameter clarification, and return value. For a destructive action with 3 required parameters, it adequately informs the agent. Output schema existence is noted but not detailed, which is acceptable given description covers return.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% coverage with clear descriptions for each parameter. Description adds minimal value beyond schema, only clarifying that reference can be tag or digest. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states 'Delete a single artifact by tag or digest', using a specific verb and resource. It distinguishes from sibling tools like harbor_delete_old_artifacts (batch deletion) and harbor_delete_untagged (deletes untagged artifacts).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Description implies usage for deleting a specific artifact by tag or digest. It does not explicitly mention when not to use or alternative tools, but the context of siblings provides some guidance. Lacks exclusions for bulk or untagged deletion scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_delete_old_artifactsADestructive
Keep the N newest artifacts in a repository, delete the rest.
DESTRUCTIVE. dry_run=True is the default — the agent must
explicitly set dry_run=False to actually delete. Each entry in
to_delete carries a deleted field (True/False after
real run, None in dry-run).
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| repository_name | Yes | Repository name within the project. | |
| keep_count | No | Number of newest artifacts to keep. | |
| dry_run | No | If True (default) — only report what would be deleted, do not delete. |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| repository | Yes | |
| dry_run | Yes | |
| keeping | Yes | |
| to_delete_count | Yes | |
| freed_size | Yes | |
| freed_bytes | Yes | |
| to_delete | Yes | |
| hint | Yes | |
| message | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already set destructiveHint=true and readOnlyHint=false. The description adds key behavior: 'dry_run=True is the default' and that each to_delete entry has a 'deleted' field (True/False after real run, None in dry-run). This adds value beyond annotations without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise: two sentences plus a note. It front-loads the main purpose and essential safety information without any wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the output schema (mentioned in context signals) and good annotations, the description covers the key aspects: purpose, destructive nature, dry-run default, and a preview of the response. It is complete for a cleanup tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% coverage with descriptions for all 4 parameters. The description adds extra context: the dry_run default behavior and the output field 'deleted' which is not in the input schema, providing additional meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The title and description clearly state: 'Keep the N newest artifacts in a repository, delete the rest.' It uses a specific verb (delete) and resource (old artifacts in repository) and distinguishes from siblings like harbor_delete_artifact (single artifact) and harbor_delete_untagged (untagged only).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description warns 'DESTRUCTIVE' and explains the dry_run default, advising the agent to explicitly set dry_run=False for actual deletion. This provides clear usage guidance and safety context, though it doesn't explicitly list when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_delete_untaggedADestructiveIdempotent
Delete all untagged artifacts in a project (or single repository).
DESTRUCTIVE. Untagged artifacts are typically orphaned layers left
behind after pushing a new tag of the same image — generally safe to
delete. The full project sweep is opaque, so the response includes
repos_scanned for visibility.
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| repository_name | No | If set, only that repository is processed; otherwise every repository in the project. |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| repos_scanned | Yes | |
| deleted_count | Yes | |
| freed_size | Yes | |
| freed_bytes | Yes | |
| deleted | Yes | |
| errors | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already include destructiveHint=true and idempotentHint=true. Description adds context about what untagged artifacts are, that the sweep is opaque, and that response includes repos_scanned for visibility, enhancing transparency beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three very concise sentences with bold for emphasis. Front-loaded with key action, no wasted words. Earns its length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given output schema exists and parameters are fully described in schema, description adds necessary behavioral context. Could mention output schema content briefly, but not required.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for both parameters. Description adds nuance about opacity but doesn't add new parameter meaning beyond schema. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states it deletes all untagged artifacts in a project or single repository. Verb 'delete' plus resource 'untagged artifacts' with scope specified, differentiating from siblings like harbor_delete_artifact.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explains when to use: for untagged artifacts which are typically orphaned and safe to delete. Mentions opaque project sweep and repos_scanned for visibility. Lacks explicit when-not or direct comparison to alternatives, but context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_list_artifactsARead-onlyIdempotent
List artifacts (tags) in a repository, newest first.
Each artifact carries digest, size, push/pull timestamps, scan status and vulnerability counts (if scanned).
Pagination: if has_more is True, call again with page + 1.
For repositories with hundreds of artifacts prefer harbor_storage_report
or harbor_cleanup_candidates which paginate internally.
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| repository_name | Yes | Repository name within the project. | |
| page | No | Page number (1-based). | |
| page_size | No | Items per page (1-100). |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| repository | Yes | |
| total_size | Yes | |
| total_size_bytes | Yes | |
| artifacts_count | Yes | |
| page | Yes | |
| page_size | Yes | |
| has_more | Yes | |
| next_page | Yes | |
| artifacts | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, destructiveHint, and idempotentHint, so safety is clear. The description adds useful behavioral context such as the fields returned (digest, size, timestamps, scan status) and pagination with has_more flag.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise with 4 sentences: purpose, returned fields, pagination, and alternative recommendations. No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (4 parameters, output schema), the description covers purpose, usage, behavioral details, and alternatives comprehensively. It is fully adequate for agent selection and invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% description coverage for all 4 parameters. The description adds value by explaining the pagination behavior and the has_more flag, which are not in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists artifacts (tags) in a repository, newest first, which is a specific verb and resource. It distinguishes itself from siblings like harbor_storage_report and harbor_cleanup_candidates by noting their internal pagination.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly advises preferring harbor_storage_report or harbor_cleanup_candidates for repositories with hundreds of artifacts, providing clear when-to-use guidance. It also explains pagination mechanics.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_list_projectsARead-onlyIdempotent
List Harbor projects, sorted by repository count (descending within the page).
Use this first to discover which Harbor projects exist before drilling in
with harbor_list_repos / harbor_list_artifacts.
Pagination: if has_more is True, call again with page + 1.
Note that sorting is per-page — agents that need a global ranking should
aggregate across pages.
Returns:
dict with keys projects_count / page / page_size /
has_more / next_page / projects (list).
| Name | Required | Description | Default |
|---|---|---|---|
| page | No | Page number (1-based). | |
| page_size | No | Items per page (1-100). |
Output Schema
| Name | Required | Description |
|---|---|---|
| projects_count | Yes | |
| page | Yes | |
| page_size | Yes | |
| has_more | Yes | |
| next_page | Yes | |
| projects | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnly, destructive, idempotent, and open-world hints. The description adds crucial behavioral context: sorting is per-page, pagination logic, and return structure, which goes beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is concise (about 6 sentences) and well-structured. Front-loaded with main purpose, then usage guidance, pagination details, sorting caveat, and return format. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of annotations covering safety and idempotency, and an output schema (implied by return key listing), the description fully covers purpose, usage, pagination, sorting nuance, and return structure for a list tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with good parameter descriptions. The description adds some context about per-page sorting affecting results, but does not significantly enhance parameter understanding beyond what the schema provides. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'List Harbor projects' with a specific verb and resource. It distinguishes from siblings by indicating it should be used first before harbor_list_repos and harbor_list_artifacts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use this first to discover which Harbor projects exist before drilling in with harbor_list_repos / harbor_list_artifacts.' Also provides pagination instructions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_list_reposARead-onlyIdempotent
List repositories in a Harbor project.
Each repository is reported with artifact count and total pull count (useful for spotting unused repos before cleanup).
Pagination: if has_more is True, call again with page + 1.
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. | |
| page | No | Page number (1-based). | |
| page_size | No | Items per page (1-100). |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| repositories_count | Yes | |
| page | Yes | |
| page_size | Yes | |
| has_more | Yes | |
| next_page | Yes | |
| repositories | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark the tool as read-only and idempotent. The description adds behavioral context: it explains pagination mechanics (has_more flag, calling again with page+1) and what data is returned per repository. This goes beyond annotations but does not cover rate limits or error handling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences: first states purpose, second adds output details and use case, third explains pagination. It is front-loaded and contains no unnecessary information. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a list tool with pagination, the description covers purpose, reported data, and pagination. With output schema present and annotations providing safety hints, the description is largely complete. It does not mention prerequisites or error handling, but these are less critical given the output schema and simple parameters.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema covers all 3 parameters with descriptions (100% coverage). The description does not add additional meaning to parameters beyond what the schema provides. The pagination detail refers to the response, not parameters, so parameter semantics are adequately covered by schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'List repositories in a Harbor project' with specific verb and resource. It adds details about reported data (artifact count, pull count) and a use case (spotting unused repos before cleanup), distinguishing it from sibling tools like harbor_list_artifacts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides a use case ('useful for spotting unused repos before cleanup') but does not explicitly state when to use this tool vs alternatives like harbor_list_artifacts or harbor_cleanup_candidates. The context is implied rather than explicit, lacking exclusions or alternative recommendations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
harbor_storage_reportARead-onlyIdempotent
Full storage breakdown for a Harbor project.
Iterates every repository × every artifact and returns a sorted-by-size report — the canonical view for "what's eating up our quota?". Performs O(repos × artifacts) API calls; emits progress events through MCP Context.
| Name | Required | Description | Default |
|---|---|---|---|
| project_name | Yes | Harbor project name. |
Output Schema
| Name | Required | Description |
|---|---|---|
| project | Yes | |
| total_repositories | Yes | |
| total_size | Yes | |
| total_size_bytes | Yes | |
| repositories | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, idempotentHint=true. The description adds that it performs O(repos×artifacts) API calls and emits progress events, providing behavioral context beyond annotations. No contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three concise sentences: first states purpose, second explains method and performance, third mentions progress events. No filler words; every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the annotations (readOnly, idempotent) and output schema existence, the description covers purpose, method, computational cost, and event output. No obvious gaps for a reporting tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a single parameter (project_name) described as 'Harbor project name.' The description adds no additional parameter detail beyond what the schema provides, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Full storage breakdown for a Harbor project' and explains it iterates over repositories and artifacts. It positions itself as the canonical view for quota usage, distinguishing it from sibling tools like cleanup or deletion tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies use for diagnosing quota usage ('what's eating up our quota?') and notes the computational cost (O(repos×artifacts) calls), but does not explicitly exclude other use cases or compare to siblings beyond mentioning its unique scope.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
8 tool updates
v0.1.0- First observed
harbor_cleanup_candidates - First observed
harbor_delete_artifact - First observed
harbor_delete_old_artifacts - First observed
harbor_delete_untagged - First observed
harbor_list_artifacts - First observed
harbor_list_projects - First observed
harbor_list_repos - First observed
harbor_storage_report
TDQS
Scored across 8 tools
Each tool targets a distinct operation: listing, reporting, or deleting. The cleanup candidate tool is clearly separate from the delete tools, and deletion tools are differentiated by scope (single, old, untagged). No overlapping purposes.
Most tools follow the harbor_verb_noun pattern (e.g., harbor_delete_artifact, harbor_list_projects), but harbor_storage_report uses a noun_noun pattern, breaking consistency. The prefix and general style are otherwise uniform.
Eight tools cover the essential operations for a Harbor registry: discovery (list projects, repos, artifacts), cleanup (candidates, delete single, delete old, delete untagged), and reporting (storage report). The count is well-scoped without being excessive.
The tool set provides comprehensive coverage for registry management: full lifecycle for artifacts (list, delete individual/bulk/untagged), project and repository exploration, storage analysis, and a cleanup candidate suggestion tool. No major gaps in functionality for the intended domain.
Maintenance
Related MCP Connectors
Docker Hub MCP — wraps the Docker Hub v2 API (free, no auth required for public data)
Go MCP server for GitLab: 2 dynamic tools reach 1000+ REST/GraphQL actions. Free/CE, no paid tier.
- mcpOAuthio.artifacta
Artifact store for AI agents. Hosted OAuth at mcp.artifacta.io/mcp; local stdio via npm/PyPI.
Related MCP Servers
- AlicenseNot gradedqualityFmaintenanceA Node.js application that provides a Model Context Protocol server for interacting with Harbor container registry, supporting operations for projects, repositories, tags, and Helm charts.19 npm7MIT
- AlicenseNot gradedqualityDmaintenanceEnables AI models to interact with Harbor container registries to manage projects, repositories, and system configurations in real time. It provides a suite of tools for monitoring health, retrieving statistics, and performing searches across registry data.20 npm5MIT
- AlicenseNot gradedqualityDmaintenanceMCP Harbor is a Node.js application that provides a Model Context Protocol (MCP) server for interacting with Harbor container registry.19 npmMIT
- FlicenseNot gradedqualityDmaintenanceMCP server for the Harbor hub that exposes evaluation jobs, trials, uploads, and published packages as tools for AI agents.-