Skip to main content
Glama
nick-choudhary

linkedin-sales-nav-mcp

LinkedIn Sales Navigator MCP Server

CI PyPI License: MIT MCP Badge

MCP server that gives AI assistants (Claude Desktop, Claude Code, any MCP client) access to LinkedIn Sales Navigator contact and account search — by driving a real, logged-in browser on your machine and capturing Sales Navigator's own search API responses.

The common approach — copy your li_at + JSESSIONID cookies and replay them as HTTP requests from a server — gets you logged out repeatedly. LinkedIn scores each session on IP, browser fingerprint, TLS, and the full cookie set; two replayed cookies from a different machine look like a hijacked session, so it invalidates them.

This server does the opposite. It keeps a persistent browser profile you log into once, by hand, and then lets that genuine session do the work:

MCP client (Claude) ──stdio/HTTP──> this server ──drives──> your logged-in Chromium ──> Sales Navigator
                                                    │
                                          captures the JSON the browser
                                          itself receives (page.on "response")

Every request to LinkedIn originates from the real browser: your IP, your fingerprint, your full cookie jar, browser-generated CSRF/track headers, and the session is refreshed by the browser as normal. Nothing is replayed or reconstructed. That is what keeps you signed in.

We never automate the login itself — typing credentials is a strong bot signal. You sign in manually once; the profile persists.

Related MCP server: LinkedIn Sales & Navigator MCP Server

Tools

Tool

What it does

search_contacts

People/lead search from a Sales Navigator URL. Navigates + paginates in the browser, saves records to SQLite, returns a small progress summary.

search_accounts

Company/account search from a Sales Navigator URL. Same, for accounts.

enrich_leads

Add Open Profile / InMail status to a saved contact search. Costs one LinkedIn request per lead, so it is opt-in and resumable — see Open Profile status.

fetch_lead_profiles

Depth 3: full profiles for drafting (~15 KB/lead). Opt-in via ENABLE_PROFILE.

get_lead_profile

Read one stored full profile. Local only, no LinkedIn call.

pipeline_status

One funnel view: scraped → enriched → open → profiled → sent.

reconcile_outreach

Settle sends stuck in sending against LinkedIn itself.

run_outreach_batch

Draft and send for several leads in one call via MCP sampling. Same guards; dry_run defaults true.

check_replies

Read the inbox and mark leads who answered. Sends nothing.

next_outreach_batch

Leads eligible for a first message — Open Profile first, anyone already contacted excluded. Read-only.

send_message

Send ONE message. The only tool that writes to LinkedIn: off by default, dry_run=true by default.

outreach_status

Counts by status and channel, plus remaining daily cap.

check_session_status

Reports whether the browser profile has a live Sales Navigator session (tells you if you need to re-run --login).

list_queries

Every saved search with its progress: url_hash, status, last_page, records_count.

get_results

Pull a bounded slice (1–200) of a saved query's records into the conversation for analysis.

export_results

Write a saved query's records to JSON and/or CSV under the output folder.

Both search tools take a full Sales Navigator URL (build the search in the UI, copy it from the address bar) and a pages count (1–10, 25 results each).

Beyond tools, the server exposes one resource (sales-nav://queries — saved queries and their progress as attachable JSON context) and one prompt (sales_nav_search_workflow — the step-by-step prospecting playbook, for clients that support MCP prompts).

Search tools do not return the records

This is deliberate, and it is the thing most likely to surprise you. Records go to SQLite; the tool returns only a status object, so a 250-row scrape doesn't dump 250 rows into the model's context:

{
  "url_hash": "a6ca46c9365bce93",
  "scraper_type": "contacts",
  "status": "paused",              // new | in_progress | paused | complete
  "new_records_this_call": 25,
  "total_records": 25,
  "total_available": 11897313,
  "pages_fetched": 1,
  "last_page": 1,
  "next_page": 2,                  // null once exhausted
  "raw_dir": null,                 // set when include_raw=true
  "suggestion": "Saved 25 records so far (through page 1) ..."
}

To get at the data, call get_results (a sample) or export_results (files), or read the SQLite database directly.

Pipeline depth

How far a query is taken is a property of the query, not of the call that made it, so a run resumed tomorrow knows what the search was collected for.

Depth

Endpoints

Cost per lead

Gate

search

lead search

one page per 25

always on

open_profile

+ enrich_leads

~240 B

ENABLE_ENRICH (default on)

full

+ fetch_lead_profiles

~15 KB

ENABLE_PROFILE (default off)

search_contacts(url, pages=4, depth="open_profile")

Depth is stored on the query and echoed back with a next_step. Requesting a depth the server has not enabled is refused with an explanation rather than silently downgraded, so a default install cannot be pointed at a list and made to pull thousands of full profiles.

enrich_leads and fetch_lead_profiles hit the same endpoint with different projections, and stay separate on purpose: the screen runs across a whole list to find who is free to message, the full fetch runs only for the leads you are about to write to. Merging them would pull heavy payloads for leads you never contact — and would make "recent activity" as stale as the screen.

Sending messages

This is the only capability that writes to LinkedIn, and it is treated differently from everything else here. Reading looks like a person browsing; a burst of messages looks like exactly what it is, and the consequence lands on your account rather than on the code. So every default is the cautious one:

Guard

Default

ENABLE_SENDING

false — a fresh install cannot message anyone

dry_run

true — returns the exact draft, sends nothing

ALLOW_CREDIT_SPEND

false — refuses anything that costs an InMail credit

SEND_DAILY_CAP

40, rolling 24h, across all campaigns

SEND_DELAY_MIN/MAX

45–120s between sends

Free vs paid, and why enrichment comes first

Open Profile members can be messaged without spending an InMail credit; everyone else costs one from a finite monthly budget. The compose window states which it is — "Free to Open Profile" versus "Use 1 of N credits" — and the sender reads that line, records the channel, and refuses the paid path unless you have explicitly allowed it.

That is why enrich_leads matters commercially and not just as metadata: next_outreach_batch returns only confirmed Open Profile leads by default, so the free channel is the path of least resistance.

Never twice

Outreach state lives in lead_outreach, keyed on (member_id, campaign), and the exclusion is global: anyone with a sent row in any campaign is filtered out of every future batch. Dedupe elsewhere in this server saves a wasted request; here it prevents messaging the same human twice because two searches happened to find them. member_id is the only identifier stable across searches, which is why it is the key.

State is committed per send, never per batch — a crash must not leave a message delivered on LinkedIn but unrecorded here.

The offer file stays yours

The server never generates copy and never learns what you sell. Your positioning lives in a Markdown file that is gitignored and not packaged:

cp offer.example.md offer.md    # then edit it
echo "OFFER_FILE=./offer.md" >> .env

The sales_nav_compose_message prompt renders that file together with the lead record and the drafting rules; your MCP client's model writes the message. With no offer file configured the prompt refuses to render at all.

The evidence gate

The drafting model must return the record fields it drew on:

{"subject": "...", "body": "...", "evidence_used": ["positions[0].title", "companyName"]}

Every entry is resolved against the lead record actually fetched. Name a field that does not exist and the message is rejected unsent. It is a cheap, deterministic check that "personalized" means grounded in data we really have — a message claiming a conference talk gets rejected because nothing supports it. Empty evidence_used is also rejected: that is a template, not personalization.

Unattended batches

Everywhere else the split is deliberate: the server decides who, your client's model decides what to say. That needs a human-driven turn — fine at a desk, useless on a schedule.

run_outreach_batch closes the gap with MCP sampling. The server asks your client for each draft (ctx.sample), so no model runs here, no API key lives here, and no copy is generated by this process — only a request for one.

Nothing is relaxed for automation. Every draft goes through the same send path as a hand-written one: the evidence gate, global dedupe, the daily cap, the free-channel-only default, two-phase commit. dry_run still defaults to true. A draft that fails to parse or fails validation is recorded and skipped rather than sent or allowed to end the run, and the batch stops early when the cap is reached.

run_outreach_batch(url_or_hash, campaign="q3", limit=5)  # drafts only
run_outreach_batch(url_or_hash, campaign="q3", limit=5, dry_run=False)  # sends

The model is given a deliberately narrow slice of the lead — name, title, company, tenure, summary, positions. Not entity_urn, which carries a session token.

Replies

Sending without measuring is not a campaign, and a follow-up to someone who already answered is worse than no follow-up. check_replies reads the Sales Navigator inbox and marks them.

It uses salesApiMessagingThreads, so nothing parses rendered text — a reply is a message whose author is a participant other than you. Two things about that payload are worth knowing, because both were discovered the hard way:

  • participantsResolutionResults maps *<urn> to the same <urn> — a reference, not a resolved profile — and included comes back empty. There is no objectUrn and therefore no member_id anywhere in the payload. Matching goes through the profileId embedded in the participant URN, which is the stable part of entity_urn (the authToken after it is search-scoped).

  • If the viewer cannot be identified, nothing is classified at all. The dangerous failure is not missing a reply — it is reading your own outbound message as the lead's answer, so it refuses rather than guesses.

Only leads this server recorded a send for are matched; a conversation with someone you messaged by hand is left alone. replied counts as contacted, so a reply can never produce a duplicate first touch.

The loop

enrich_leads          -> who is free to message
next_outreach_batch   -> who is eligible, never-contacted
get_results           -> the lead's own words
sales_nav_compose_message prompt -> draft
send_message dry_run=true  -> review
send_message dry_run=false -> send
check_replies         -> who answered
outreach_status       -> where the campaign stands

Resumable by construction. Stop after ten, come back tomorrow, call next_outreach_batch again and it continues where you left off.

Seniority

Lead search is requested with decoration id com.linkedin.sales.deco.desktop.searchv2.LeadSearchResult-16 rather than the -14 Sales Navigator's own web client asks for. -16 is a strict superset: identical fields plus seniorityV2s, for roughly 230 extra bytes per lead. This is the only place the server alters what the browser asks for, and the rewrite is a no-op on any URL that does not carry a LeadSearchResult id.

seniorityV2s is LinkedIn's own seniority classification, and it is multi-valued — a founder comes back as Owner / Partner + CXO + Senior. The enum is ordered by value:

id

Level

id

Level

320

Owner / Partner

210

Experienced Manager

310

CXO

200

Entry Level Manager

300

Vice President

130

Strategic

220

Director

120

Senior

110

Entry Level

100

In Training

Records get the whole list under seniorities (sorted most-senior first) plus seniorityTop / seniorityTopId for the single value most callers want. Rows land in a seniorities child table; CSV exports carry seniority_top, seniority_top_id and seniority_summary.

Note it is inferred, not ground truth — "Director of Client Engagement" comes back as Director + Senior. Leads captured before this change simply have no seniority; the columns are blank rather than wrong.

Open Profile status

Sales Navigator's search payload contains an openLink field, and it is a trap: it is false for every lead, premium members included. It is dead decoration. This server therefore does not surface it at all — publishing a column that reads as an authoritative "not Open Profile" for everyone is worse than publishing nothing.

The live flag is memberBadges.openLink, which only the profile endpoint returns — one request per lead. There is no bulk form; salesApiProfiles with an ids=List(...) batch returns 400 in every shape tried. The search endpoint cannot be coaxed into returning it either: it accepts only a registered decorationId, never a free-form projection, and none of the registered IDs (LeadSearchResult-13-16) include the field.

So it is a separate, opt-in tool:

enrich_leads(url_or_hash, limit=50, only_missing=true)

Roughly one second per lead with pacing. Start with a small limit to sample before committing to a whole query. It is resumable and idempotent — leads that already succeeded are skipped, failures stay pending and are retried — so calling it repeatedly walks the query to completion.

Where the data goes. Enrichment is written to its own lead_enrichment table, never into leads.raw_json and never into the normalized records. Two reasons this matters:

  • iter_records re-derives every record from raw_json on read, so anything written elsewhere would be silently discarded — and writing it into raw_json would break the "raw is exactly what LinkedIn sent" invariant that normalize.py depends on.

  • The table is keyed on member_id, which is stable across searches, rather than entity_urn, which embeds a per-search auth token. A lead found by three different searches is fetched once and shared by all three.

get_results and export_results join it back in: an enrichment block in JSON, and open_profile / inmail_restriction / enriched_at columns in CSV. An empty value means "not checked", which is not the same as false — that distinction is the whole point of keeping the two apart.

One caveat worth knowing: inmailRestriction describes your ability to InMail someone, not their Open Profile status. It reads NO_RESTRICTION for nearly everyone, so do not use it as a proxy.

Searches are resumable. The URL is hashed to a url_hash; calling the same URL again continues from next_page rather than restarting. Sales Navigator caps any single search at 100 pages (2,500 results) no matter what total_available reports — to go past that, split the search into narrower filters and let de-duplication merge the slices.

Browser lifecycle

One Chromium, launched lazily on the first tool call that needs it, and closed either by the lifespan hook on shutdown or by the idle watchdog. There is no per-call launch: relaunching on every call is slow, and repeated launches against the same profile are what risk the session.

Idle timeout. After IDLE_BROWSER_TIMEOUT seconds with no tool call (default 3600 — one hour) the browser closes itself and relaunches on the next call. That reclaims a few hundred MB while you are not scraping, at the cost of a few seconds on the next call, and costs nothing else: your login lives in the profile directory, not in the process. Set it to 0 to keep the browser resident for the whole server lifetime.

The watchdog takes the same lock the tools do, so it can never close a browser mid-operation — a long scrape simply blocks it, and by the time the lock is free the browser is no longer idle.

Orphans. The lifespan hook only runs on a graceful shutdown. If the server is killed, crashes, or its stdio transport drops, Chromium keeps running and keeps holding the profile, and every later launch fails with "Opening in existing browser session" until someone kills it by hand.

The server now recovers from that itself: on a launch failure that looks like a profile lock, it finds the processes holding that exact profile directory, terminates them politely then forcibly, and retries once. The orphan cannot be adopted — patchright launches with --remote-debugging-pipe, so there is no debug endpoint to attach to — but nothing is lost, because the session lives in the profile on disk rather than in the process.

The match requires the resolved profile path to appear literally in a command line and the executable to look like a browser. Your everyday Chrome, other automation browsers, and anything merely mentioning the path are never candidates; when the filter is unsure it matches nothing.

Setup

From PyPI (no clone needed):

uvx --from linkedin-sales-nav-mcp patchright install chromium  # one-time browser download

Or from source:

git clone https://github.com/nick-choudhary/linkedin-sales-nav-mcp
cd linkedin-sales-nav-mcp
uv sync
uv run patchright install chromium   # one-time browser download
cp .env.example .env                 # optional; defaults are fine on your machine

1. Log in once

uvx linkedin-sales-nav-mcp --login   # PyPI install
# or, from a clone: uv run linkedin-sales-nav-mcp --login

A browser window opens. Sign into LinkedIn, open Sales Navigator, finish any 2FA/checkpoint. The server detects the signed-in session and saves the profile, then exits.

2. Run the server

uvx linkedin-sales-nav-mcp             # stdio, PyPI install
# or, from a clone: uv run linkedin-sales-nav-mcp

Claude Desktop / Claude Code config

PyPI install:

{
  "mcpServers": {
    "sales-navigator": {
      "command": "uvx",
      "args": ["linkedin-sales-nav-mcp"]
    }
  }
}

From a clone:

{
  "mcpServers": {
    "sales-navigator": {
      "command": "uv",
      "args": ["run", "--project", "/path/to/linkedin-sales-nav-mcp", "linkedin-sales-nav-mcp"]
    }
  }
}

No secrets in the config — the session lives in the browser profile.

Use --project, not --directory. Both point uv at the repo, but --directory changes the working directory to it, which would send your exports into the repo instead of the project you are working in. --project leaves the working directory alone, which is what the export layout below expects.

Installing it once, for every project

Pointing each config at a repo path gets tedious. Install the command onto your PATH instead:

uv tool install linkedin-sales-nav-mcp   # from PyPI
# or: uv tool install /path/to/linkedin-sales-nav-mcp   (from a clone)

Then every project's config is just:

{
  "mcpServers": {
    "sales-navigator": {
      "command": "linkedin-sales-nav-mcp"
    }
  }
}

No path, no flags, and nothing to update when you move the repo. Re-run the install with --force after pulling changes to pick them up.

Either way the database is shared and the login carries over, so a new project needs no --login of its own — only its own .mcp.json entry.

One server at a time

Configure it in as many projects as you like, but only run one at once. The browser profile is a persistent Chromium profile and Chromium takes an exclusive lock on it, so a second server starting while the first is live will fail to launch its browser. If you use uv run, the first server also holds the repo's .venv, and a second uv run can fail while trying to sync it.

Environment variables

Variable

Default

Purpose

USER_DATA_DIR

~/.linkedin-sales-nav/profile

Persistent browser profile

HEADLESS

false

false = visible window (safest); true = headless (more detectable)

CHROME_PATH

Use your own Chrome instead of bundled Chromium

PROXY_SERVER

Leave empty on your own machine; only for a residential exit node if remote

IDLE_BROWSER_TIMEOUT

3600

Close the browser after this many idle seconds; relaunches on demand. 0 keeps it open

NAV_TIMEOUT / CAPTURE_WAIT / LOGIN_TIMEOUT

60 / 25 / 300

Timeouts (s)

TOOL_TIMEOUT

600.0

Per-tool MCP timeout (s) — must exceed the pacing budget below

PACING_ENABLED

true

Human-like delays between pages (see below)

PAGE_DELAY_MIN / PAGE_DELAY_MAX

3.0 / 8.0

Random dwell before advancing a page (s)

LONG_PAUSE_EVERY

5

Take a longer break every N pages (0 disables)

LONG_PAUSE_MIN / LONG_PAUSE_MAX

20.0 / 45.0

Length of that break (s)

STATE_DIR

~/.linkedin-sales-nav

Where sales_nav.db and raw captures live — follows you between projects

OUTPUT_DIR

output

Where JSON/CSV exports are written, relative to where the server runs

TRANSPORT / HOST / PORT / HTTP_PATH

stdio / 127.0.0.1 / 9000 / /mcp

Transport

LOG_LEVEL

WARNING

DEBUG, INFO, WARNING, ERROR

Where the data goes

Two directories, because the data has two lifetimes.

State lives in <STATE_DIR> (default ~/.linkedin-sales-nav, beside the browser profile): the SQLite database at sales_nav.db plus any raw captures under <url_hash>/raw/. It belongs to your LinkedIn account rather than to any one project, so it is the same database wherever you launch the server from — list_queries shows one history across every folder.

Exports are project artifacts, so they resolve against the working directory. export_results writes JSON/CSV into <OUTPUT_DIR>/<url_hash>/ (default output/<url_hash>/), landing in whichever project you ran the search for. The database stays the source of truth; exports are generated from it on demand.

Upgrading from 1.0. The database used to live in output/sales_nav.db relative to the launch directory. As of 1.1 it is at ~/.linkedin-sales-nav/sales_nav.db and is no longer read from the old path, so an existing output/sales_nav.db will look empty. Either move it (take sales_nav.db, sales_nav.db-wal, sales_nav.db-shm and the <url_hash>/ directories together — the -wal file holds recent writes), delete it and re-run your searches, or set STATE_DIR=./output to keep the old layout.

Schema version 2 (PRAGMA user_version = 2):

Table

Holds

queries

One row per search URL: url_hash, status, last_page, total_available, records_count

leads

People (34 columns): name parts, member_id, title, company + company_id, industry, location, tenure, open_link, premium, raw_json

accounts

Companies (16 columns): company_id, name, industry, headcount range, description, raw_json

positions

One row per current position, so a lead holding two concurrent roles gets two rows. Search responses do not carry past employment, so it isn't stored

badges

Lead/account highlight badges (shared connections, "recently changed jobs", etc.)

Two things worth knowing:

  • raw_json is always stored. LinkedIn's internal API is undocumented and shifts over time, so the complete original element is kept on every row. If the normalizer misses a field, it can be recovered later without re-scraping.

  • Records de-duplicate across runs. UNIQUE(url_hash, record_key) plus INSERT OR IGNORE means resuming, re-running, or overlapping searches never create duplicate rows.

Query it with anything that speaks SQLite:

sqlite3 ~/.linkedin-sales-nav/sales_nav.db \
  "SELECT full_name, title, company_name FROM leads LIMIT 10;"

Both the database and the exports contain real personal data. output/ is in .gitignore for that reason — keep it that way. <STATE_DIR> sits outside the repo by default, so it is never a commit risk, but it is the copy worth protecting: it accumulates across every project.

Pacing

Pages are not fetched back to back. After each page the server dwells for a random 3–8s before clicking "Next", and every ~5 pages (jittered ±1) it takes a 20–45s break instead. Scroll rhythm is varied too — step count, distance, and the gaps between them.

The reason is cadence, not speed: a page load every two seconds, forever, with no breaks, is a machine signature regardless of how genuine the session is. A full 10-page call therefore takes a couple of minutes, most of it spent deliberately idle. That is working as intended.

Tune with PAGE_DELAY_* / LONG_PAUSE_*, or set PACING_ENABLED=false to disable the delays entirely (not recommended). Raise TOOL_TIMEOUT alongside any large increase.

This lowers your footprint; it does not make you invisible. Volume is what gets accounts flagged, and no jitter setting changes how many profiles you pulled today. Fetch what you need, spread it out, and use an account you own.

Example agent usage

User: Find heads of engineering at mid-size fintech companies in Berlin.

Agent: builds/obtains a Sales Navigator search URL (paste one, or use a URL-builder skill), then:

search_contacts(
  search_url="https://www.linkedin.com/sales/search/people?query=(...)",
  pages=2
)

{"url_hash": "a6ca...", "new_records_this_call": 50, "total_records": 50, "next_page": 3, "status": "paused", ...} — the 50 records are now in SQLite, not in the reply.

Agent: then pulls what it needs for the answer:

get_results(url_or_hash="a6ca...", limit=25)      # a sample to reason over
export_results(url_or_hash="a6ca...", format="csv")  # or a file on disk

Important honesty notes

  • Field mapping is best-effort. We capture LinkedIn's internal sales-api JSON, which is undocumented and changes over time. The normalizer (sales_nav_mcp/normalize.py) pulls the fields that have been stable. If one looks empty, you have two ways back to ground truth without re-scraping: the raw_json column on every row, or include_raw=true on a search, which writes the complete untouched API responses to <STATE_DIR>/<url_hash>/raw/. Extend the mapper from those. This is the intended maintenance path.

  • Pagination selectors for the "Next" control can change; the code tries several fallbacks and stops cleanly if none match. If deep pagination stops early, update _NEXT_SELECTORS in sales_nav_mcp/capture.py.

  • Run it on your own machine. A datacenter/cloud IP re-introduces the logout risk this design exists to avoid.

  • Scraping LinkedIn is subject to LinkedIn's Terms of Service. Use an account you own, at conservative rates.

Development

uv run pytest          # full unit suite, no browser and no network

Covered: URL validation, JSON normalization against real captured element shapes (with synthetic values), the SQLite store and exports, and pacing — both the delay arithmetic and its wiring into the capture loop, using a fake page and an injected clock so the suite never actually waits.

Not covered: the live browser path. Exercise that by running --login followed by a real search.

Every push and PR runs the same suite plus ruff lint/format checks in CI (Linux on Python 3.12–3.14, Windows and macOS on 3.13), and the release pipeline re-runs the tests before anything is published.

License and who can use this

MIT — see LICENSE. In plain terms: anyone can use, copy, modify, and redistribute this software, commercially or otherwise, free of charge. The only requirement is keeping the copyright and license notice in copies; the software comes with no warranty.

What the license does not cover is your relationship with LinkedIn:

  • This project is not affiliated with, endorsed by, or supported by LinkedIn. It automates a browser against LinkedIn's own web application.

  • Automated access to LinkedIn is restricted by LinkedIn's Terms of Service. Using this server is your decision and your responsibility — use an account you own, keep volumes conservative, and accept that the account could be restricted.

  • The data you collect is real personal data about real people. Handling it may fall under privacy laws such as the GDPR or CCPA depending on where you and the data subjects are. Compliance is on you, not on this tool.

Available Tools

16 tools
check_repliesCheck For RepliesA
Idempotent

Read the Sales Navigator inbox and mark leads who replied.

Sends nothing. Reads structured message threads — a reply is a message whose author is the lead rather than you, matched to leads by the stable member_id, so nothing depends on parsing rendered text or guessing who spoke last.

Only leads this server recorded a send for are considered; a conversation with someone you messaged by hand elsewhere is left alone. A lead marked replied still counts as contacted, so a reply can never cause a duplicate first touch.

ParametersJSON Schema
NameRequiredDescriptionDefault
scrollsNoHow many times to scroll the inbox for older threads (0-20). Each scroll loads another page.
campaignNoRestrict matching to one campaign. Omit for all.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds substantial behavioral detail beyond the annotations: it sends nothing, reads structured thread data, matches by stable member_id, and guarantees a reply cannot cause a duplicate first touch. This meaningfully clarifies side effects and idempotency beyond the idempotentHint annotation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose and the safety-critical 'Sends nothing' statement. Each subsequent sentence adds a distinct behavioral guarantee or scope restriction, and no sentence feels redundant or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the tool's purpose, matching logic, scope restrictions, side effects, and idempotency behavior. An output schema exists for return values, so the remaining details are sufficiently complete for an agent to invoke this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both 'scrolls' and 'campaign' adequately. The description adds no parameter-specific meaning, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Read the Sales Navigator inbox and mark leads who replied.' It also clarifies the exact matching mechanism and scope, which distinguishes this from generic messaging tools. The intent is unmistakable and would let an agent select it correctly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context: only leads this server recorded a send for are considered, and conversations messaged by hand elsewhere are ignored. This helps an agent know when not to invoke the tool, though it does not explicitly name sibling tools as alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_session_statusCheck Session StatusA
Read-only

Check whether the browser profile has a live Sales Navigator session.

Launches (or reuses) the browser and verifies it lands on a signed-in /sales page. Use this first when searches fail — it tells you if you need to run --login again.

Returns: Dict with logged_in (bool), plus the profile directory and headless setting for this server.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint and openWorldHint. The description adds useful behavioral context beyond annotations: it may launch or reuse a browser, verifies landing on a signed-in /sales page, and returns the profile directory and headless setting. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is compact and front-loaded. The core purpose appears in the first sentence, usage guidance in the second, and a clear 'Returns:' block for the result structure. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter tool with an output schema, this description covers purpose, usage timing, behavioral side effects, and return summary. Nothing essential is missing for an agent to decide when to call and interpret the result.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and empty schema properties, so the semantic baseline is high. The description does not need to explain parameters; its return-value summary compensates for the lack of param-related guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: checking whether the browser profile has a live Sales Navigator session. The description distinguishes this from siblings like outreach_status and pipeline_status by focusing on session/sign-in state rather than campaign or outreach state.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use this first when searches fail' and mentions the decision outcome: whether to run `--login` again. This gives clear when-to-use guidance and implicitly differentiates it from search-oriented sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

enrich_leadsEnrich Leads With Open Profile StatusA
Read-only

Add Open Profile / InMail status to a saved contact search.

Search results cannot carry this. Sales Navigator's search payload has an openLink field, but it is false for everyone — the real flag is memberBadges.openLink, which only the profile endpoint returns, one request per lead. There is no bulk endpoint.

Costs one LinkedIn request per lead (~1s each with pacing), so it is a separate opt-in tool rather than part of search_contacts. Start with a limit to sample before committing to a whole query.

Results go to the lead_enrichment table, keyed on the stable member_id, and are joined in by get_results / export_results as an enrichment block. Search records are never modified, and a lead enriched once is reused by every search that finds them again.

Resumable and idempotent: with only_missing=true (the default), leads that already have a successful fetch are skipped, so calling repeatedly walks through the query. Failed fetches stay pending and are retried.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax leads to enrich in THIS call (1-500). None means all pending — that can be a lot of requests, so prefer a limit.
url_or_hashYesThe query's url_hash (from list_queries) or its original search URL.
only_missingNoSkip leads already enriched successfully. Set false to refresh statuses that may have gone stale.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Even with readOnlyHint and openWorldHint annotations, the description adds substantial behavioral context: one LinkedIn request per lead with ~1s pacing, results stored in the lead_enrichment table keyed by member_id, search records never modified, enriched leads reused across searches, and resumable/idempotent behavior with failed fetches retried. This goes well beyond the annotations and is accurate to the operational reality.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is information-dense but each sentence earns its place: the core purpose is front-loaded, followed by the technical constraint, cost model, storage behavior, and idempotency semantics. It avoids fluff and repetition while covering all needed operational details.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity, the description is complete: it explains why the tool exists, what it costs, where results go, how they are joined in, how idempotency works, and how to sample safely. The output schema exists, so return-value details are not the description's job. An agent has enough to select and invoke this tool correctly without further investigation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds value by explaining the cost implications of limit, clarifying that only_missing=true skips already-fetched leads and that failures remain pending for retry, and reinforcing how url_or_hash identifies the query. These details enrich parameter meaning beyond the schema's own descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Add Open Profile / InMail status to a saved contact search.' It clearly distinguishes itself from closely related siblings like search_contacts and fetch_lead_profiles by explaining that this tool enriches saved query results with a field only available from profile requests.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit usage guidance: it is a separate opt-in tool rather than part of search_contacts, there is no bulk endpoint, users should start with a limit to sample before committing, and only_missing=true lets repeated calls walk through the query. This tells an agent exactly when and how to invoke it versus alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

export_resultsExport ResultsB
Read-only

Export a saved query's records to files under the output folder.

ParametersJSON Schema
NameRequiredDescriptionDefault
formatNo'json', 'csv', or 'both' (default). JSON is the full store view; CSV is flat columns for spreadsheets.both
include_rawNoInclude LinkedIn's raw element JSON in the export.
url_or_hashYesThe query's url_hash (from list_queries) or its original search URL.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.3/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations declare readOnlyHint=true, but the description says the tool writes files to an output folder, which is a side-effecting behavior and contradicts the read-only claim. The description also does not disclose overwrite behavior, file naming conventions, or whether the export preserves prior files.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no filler. It efficiently conveys the core action, resource, and destination in twelve words and earns its place without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The schema covers all parameter semantics and an output schema is present, so return-value documentation is not required. However, the description lacks explicit usage guidance and contains a behavioral contradiction with the readOnlyHint annotation, leaving the definition only partially complete for an agent deciding whether and how to invoke it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all parameters meaningfully. The description adds little beyond the schema, but the baseline of 3 applies because no compensation is needed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Export') with a clear resource ('a saved query's records') and destination ('files under the output folder'). This clearly distinguishes it from result-returning siblings like get_results, since the focus is on producing files rather than returning data in-memory.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'saved query's records' implies the prerequisite of having a saved query, and the schema parameter description reinforces that url_or_hash comes from list_queries. However, the description does not explicitly state when to use this tool over alternatives such as get_results, nor does it give any when-not-to-use guidance. Usage context is implied rather than clearly stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

fetch_lead_profilesFetch Full Lead ProfilesA
Read-only

Fetch full profiles for a query's leads — depth 3, drafting material.

Same endpoint as enrich_leads, much wider projection: headline, summary, full position descriptions, educations, skills, languages, volunteering, connection counts. About 15 KB per lead against ~240 bytes for the enrichment screen.

Deliberately separate from enrich_leads. The screen runs across a whole list to find who is free to message; this runs only for the leads you are about to write to. Merging them would pull heavy payloads for leads you never contact, and would make "recent activity" as stale as the screen.

Requires ENABLE_PROFILE=true — it costs one heavy request per lead, so a default install will not do it.

Resumable: leads with a successful fetch are skipped, so calling repeatedly walks the query.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax leads to fetch in THIS call (1-200).
url_or_hashYesThe query's url_hash or original search URL.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=true, and the description adds meaningful behavioral context: one heavy request per lead, ~15 KB per lead vs ~240 bytes for enrichment, the need for ENABLE_PROFILE=true, and resumability where successfully fetched leads are skipped. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose, then uses concise paragraphs to explain the distinction from enrich_leads, the cost/configuration caveat, and resumability. Every sentence contributes either to routing the agent correctly or to understanding operational behavior.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers the essential operational facets: heavy cost, configuration requirement, resumability, endpoint relationship, and payload size. With an output schema present and annotations for safety, nothing material is missing for an agent to select and invoke this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents both parameters well. The description adds some context around limit being per-call and url_or_hash identifying the query, but this is largely implicit in the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Fetch full profiles for a query's leads'), and explicitly distinguishes itself from the sibling enrich_leads by describing the wider projection and heavier payload. The purpose is immediately clear and not confusable with any sibling.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly explains when to use this tool: only for leads you are about to write to, whereas enrich_leads runs across a whole list to find who is free to message. It also notes the ENABLE_PROFILE=true requirement and resumable behavior, giving clear operational usage guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_lead_profileGet Lead ProfileA
Read-only

Read one stored full profile — the payload you draft a message from.

Reads from the local store only; it does not call LinkedIn. Run fetch_lead_profiles first for leads that have not been fetched.

ParametersJSON Schema
NameRequiredDescriptionDefault
member_idYesStable LinkedIn member id.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, and the description adds useful context by specifying that the tool reads from the local store only and makes no external call to LinkedIn. This goes beyond the annotation and sets accurate expectations about side effects and data freshness.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loads the core purpose, and every sentence earns its place: the first defines the tool, the second explains its scope and prerequisite. There is no redundant or vague wording.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With a single required parameter, full schema description coverage, an output schema, and readOnlyHint annotation, the description covers the remaining needed context: local-only reads and the dependency on fetch_lead_profiles. An agent has everything needed to select and invoke the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already fully documents member_id as 'Stable LinkedIn member id' with 100% coverage. The description does not add additional parameter-level meaning, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource ('Read one stored full profile') and clarifies the tool's purpose as the source for drafting messages. It also distinguishes itself from fetch_lead_profiles by noting it reads from the local store only and does not call LinkedIn.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use this tool and gives a prerequisite: run fetch_lead_profiles first for leads that have not been fetched. It also clarifies a key limitation ('does not call LinkedIn'), so an agent knows this tool is not for live enrichment.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_resultsGet Results SampleA
Read-only

Pull a bounded slice of a saved query's records into the conversation for analysis. Bounded on purpose — for large sets, prefer export_results and analyze the file with code rather than loading everything into context.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax records to return (1-200, default 25).
offsetNoRecords to skip (for paging through the sample).
url_or_hashYesThe query's url_hash or original search URL.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, and the description adds meaningful behavioral context: it is intentionally bounded and is not meant for large retrieval. It also clarifies the purpose of the data pull (analysis), which helps the agent set expectations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences with no filler. The primary purpose is front-loaded, and the design rationale plus routing to the sibling tool is delivered in the second sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only, bounded sample tool, the description covers purpose, scope, and the large-set alternative. The schema covers parameters and the output schema covers return shape, so nothing needed to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the schema already fully documents url_or_hash, limit, and offset with ranges and defaults. The description's mention of 'bounded' aligns with the schema but adds no new parameter-level meaning beyond it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific action ('Pull a bounded slice'), a specific resource ('a saved query's records'), and a clear intent ('into the conversation for analysis'). The phrase 'bounded slice' distinguishes it from the sibling export_results, which is designed for large sets.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to use this tool: for bounded in-context analysis. It also names the alternative for large sets ('prefer export_results') and explains why, preventing the agent from overloading context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_queriesList Saved QueriesA
Read-only

List every saved search and its progress.

Returns: Dict with queries: for each, url_hash, url, scraper_type, status (new|in_progress|paused|complete), last_page, total_available, records_count. Use a url_hash with export_results or get_results.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnlyHint annotation already indicates a safe read operation. The description adds useful behavioral detail: it returns a Dict with per-query fields including status, last_page, total_available, and records_count. It also reveals the status enum values and how to use the returned url_hash. This goes beyond the annotation and gives the agent a clear model of the tool's output and its role in the workflow.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded: the first sentence states the core purpose, and the following section succinctly lists the return structure and provides an action pointer. Every sentence adds value, with no redundant filler or repetition of the title.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that the tool has no parameters, is read-only, and has an output schema, the description covers all essential information: what the tool returns, the exact fields, status values, and how to use the output with sibling tools. Nothing an agent needs to invoke this tool successfully is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, and the schema is empty, so there are no parameter semantics to document. The description appropriately mentions url_hash only as part of the output, not as an input. Baseline for 0 params is 4, and the description reinforces the data shape without needing to clarify any parameter details.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description begins with a specific verb and resource: 'List every saved search and its progress.' This clearly states what the tool does and its scope ('every'), distinguishing it from sibling search tools like search_contacts or search_accounts. The addition of 'progress' adds a unique, purpose-defining detail not present in the title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description includes a practical usage pointer: 'Use a url_hash with export_results or get_results.' This tells the agent how the output of this tool feeds into other tools. It does not explicitly state when to prefer list_queries over alternatives, but the tool's self-explanatory nature and the explicit downstream routing partially compensate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

next_outreach_batchNext Outreach BatchA
Read-only

Leads eligible for a first message, best channel first.

Read-only. Excludes anyone already sent to in ANY campaign — dedupe is on the stable member_id, so a person found by three searches is messaged once — and anyone already handled in this campaign.

With open_profile_only (the default) only leads confirmed Open Profile by enrich_leads come back: those are free to message. Run enrich_leads first or this returns nothing.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax leads to return (1-50).
campaignYesA label for this outreach run, e.g. "direct-mail-q3". Dedupe is global, but status is tracked per campaign.
url_or_hashYesThe query's url_hash or original search URL.
open_profile_onlyNoOnly free-to-message leads. Setting this false surfaces leads whose messages would cost an InMail credit.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the readOnlyHint annotation, it discloses global dedupe by stable member_id, per-campaign status tracking, exclusion of already-messaged leads, and the free-vs-InMail-credit distinction. This is substantial behavioral context an agent needs before calling.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short paragraphs, all information-dense with the main purpose front-loaded. The only slight redundancy is repeating the 'free to message' idea in the last paragraph, but nothing is wasted.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema exists and annotations declare read-only, the description covers all essential call-time knowledge: eligibility, dedupe, campaign scoping, prerequisite enrichment, and the paid-lead toggle. No critical selection or invocation detail is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all four parameters. The description adds useful context around open_profile_only and campaign/dedupe semantics, but it does not add meaning to limit or url_or_hash beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence, 'Leads eligible for a first message, best channel first,' crisply identifies the resource and selection intent. 'Read-only' plus the dedupe explanation clearly separates it from execution-style tools like run_outreach_batch and send_message.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives an explicit prerequisite ('Run enrich_leads first or this returns nothing') and explains the open_profile_only default/alternative behavior. It does not explicitly name sibling tools to use instead for sending or follow-up, but the intended context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

outreach_statusOutreach StatusB
Read-only

Counts by status and channel, plus remaining daily cap.

ParametersJSON Schema
NameRequiredDescriptionDefault
campaignNoRestrict to one campaign. Omit for all.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotation readOnlyHint=true already establishes that this is a safe read operation, and the description does not contradict it. The description adds the context that the tool returns aggregate counts and a remaining daily-cap value, but it does not disclose scoping details such as time window, status definitions, or cap behavior. This is adequate given annotation coverage but not rich.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, compact sentence that front-loads the core action and key outputs. There is no filler or repeated information from the title or schema, and the brevity is appropriate for a simple read-only aggregation tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter, read-only tool with an output schema, the description plus schema is sufficient to invoke the tool correctly: the agent knows what it returns, that it can be filtered by campaign, and that it is non-mutating. It does not explain the exact meaning of 'daily cap' or the time window, but those details are likely covered by the output schema and are not necessary for making the call.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema covers the only parameter 100%, including an explicit description: 'Restrict to one campaign. Omit for all.' The tool description itself adds no parameter-level meaning beyond what the schema already provides, so it meets the baseline for high schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Counts') and a clear resource/scope ('by status and channel'), plus an additional distinct metric ('remaining daily cap'). It is clearly not a mutation or search tool and reads as an aggregate reporting tool, though it does not explicitly differentiate itself from sibling status tools like pipeline_status.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no guidance on when to prefer this tool over alternatives such as pipeline_status, check_session_status, or next_outreach_batch. It does not state a use case like 'check outreach capacity before sending' and provides no exclusions or conditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

pipeline_statusPipeline StatusA
Read-only

One funnel view of a query: scraped → enriched → open → profiled → sent.

State otherwise lives across four tables; this joins it so "where is everything?" is one call instead of mental arithmetic.

ParametersJSON Schema
NameRequiredDescriptionDefault
url_or_hashYesThe query's url_hash or original search URL.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotation already signals readOnlyHint=true. The description adds meaningful behavioral context by revealing that the underlying state lives across four tables and this tool joins them into one funnel view, which is not inferable from annotations alone. No contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no fluff: the first states the core deliverable with a concrete stage list, the second explains why the tool exists. Each sentence carries distinct informational value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With one required parameter fully documented, readOnlyHint provided, and an output schema present, the description supplies the remaining needed context: the funnel stages and the consolidation behavior. No critical information for calling the tool correctly appears missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the single parameter url_or_hash is already explained as the query's url_hash or original search URL. The tool description adds no additional parameter-level meaning, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly defines the tool as a single consolidated pipeline/funnel view for a query, with explicit stages: scraped → enriched → open → profiled → sent. It communicates the resource and scope well, though it does not explicitly differentiate from named sibling tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description establishes a clear use case: answer 'where is everything?' for one query without checking multiple tables. It conveys when the tool should be used but does not explicitly state when not to use it or name an alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

reconcile_outreachReconcile Ambiguous SendsA
Idempotent

Settle sends stuck in sending by checking LinkedIn itself.

A sending row means the Send click happened but the outcome was never recorded — a crash, a killed browser, a disconnect. The message either went out or it did not, and only LinkedIn knows. This opens each lead's conversation, looks for our own message text, and resolves the row to sent or failed.

Sends nothing. Until reconciled, an ambiguous lead is treated as already-contacted, so the uncertainty can never produce a duplicate — it can only delay a legitimate follow-up.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax ambiguous rows to check in this call (1-100).
campaignNoRestrict to one campaign. Omit for all.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description goes well beyond the annotations by explaining that the tool opens conversations, searches for message text, resolves rows to `sent` or `failed`, and explicitly says 'Sends nothing.' It also discloses the effect on duplicate prevention. This adds substantial context beyond idempotentHint and readOnlyHint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose, then gives essential background, then clarifies safety and semantics. Every sentence adds value; there is no filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema exists and the two parameters are fully documented, the description covers all necessary behavioral context: the state transition, the ambiguity scenario, the no-send guarantee, and the duplicate-protection implication. Nothing critical is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both `limit` and `campaign` are already fully documented. The tool description provides useful background but no additional parameter-level semantics. This matches the baseline for fully covered schemas.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence uses a specific verb and resource: 'Settle sends stuck in `sending` by checking LinkedIn itself.' It clearly identifies the outcome: resolving rows to `sent` or `failed`. This distinguishes it from sending tools like send_message and status tools like outreach_status.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a clear trigger scenario: a `sending` row means the Send click happened but the outcome was never recorded. It also explains the follow-up/deduplication rationale. However, it does not explicitly name alternatives or state when not to use this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

run_outreach_batchRun Outreach BatchA
Destructive

Draft and send for several leads in one call, unattended.

Uses MCP sampling: the server asks YOUR client for each draft, so no model runs here and no API key lives here — only the request for a completion. That is what lets a scheduled job run the loop without a person taking a turn.

Nothing is relaxed for automation. Every draft goes through the same send path as a manual one: the evidence gate, global dedupe, the daily cap, the free-channel-only default, and two-phase commit. dry_run still defaults to true, so the first call shows you what it would say and sends nothing.

Stops early when the daily cap is reached. A draft that fails to parse or fails validation is recorded and skipped rather than ending the run.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax leads to attempt in THIS call (1-50).
dry_runNoTrue (default) drafts and validates without sending.
campaignYesCampaign label for these sends.
url_or_hashYesThe query to draw candidates from.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description goes well beyond the annotations, detailing that drafts are generated via MCP sampling, that no API key lives here, that all manual send safeguards still apply, that dry_run defaults to true, that it stops at the daily cap, and that failed drafts are skipped. This is exemplary disclosure for a destructive, non-idempotent tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is organized into clear paragraphs and front-loads the core purpose before explaining mechanics. It is slightly longer than strictly necessary, but every paragraph adds meaningful operational or safety context for a destructive batch tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers what happens with drafts, send-path constraints, dry-run behavior, stopping conditions, and failure handling. An output schema exists, so return values need not be described. This is complete for the complexity of the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already explains all four parameters. The description reinforces dry_run's default safety and mentions daily-cap behavior, but it does not add substantial per-parameter meaning beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The opening sentence specifies the verb and resource: 'Draft and send for several leads in one call, unattended.' It clearly distinguishes this batch tool from siblings like send_message and next_outreach_batch by emphasizing unattended multi-lead operation and MCP sampling.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly conveys context: use this for several leads, unattended, in a scheduled job without human turn-taking. It does not explicitly name alternatives or say 'use send_message for a single lead,' so it stops short of a 5, but the context is unambiguous enough to guide an agent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_accountsSearch Sales Navigator AccountsA
Read-only

Search companies/accounts by driving Sales Navigator in the logged-in browser and capturing its search API responses. Results are saved to the local database automatically; this tool returns a small summary, not the records (call export_results or get_results for the data).

Build the search in Sales Navigator (industry / headcount / geography / growth filters), copy the URL from the address bar, and pass it here. Saved account lists work too.

Resumable: the search URL is hashed to a query id. If a previous run stopped partway, calling again with the same URL resumes from the next page instead of restarting.

ParametersJSON Schema
NameRequiredDescriptionDefault
pagesNoHow many 25-result pages to fetch in THIS call (1-10).
resumeNoIf true (default), continue from where a prior run of this same URL stopped. If false, start from page 1 (saved records are kept and de-duplicated).
refreshNoIf true, forget this query's saved progress and records and re-scrape from page 1.
search_urlYesFull Sales Navigator URL (/sales/search/accounts, /sales/search/company, or /sales/lists/accounts).
include_rawNoKeep LinkedIn's raw element JSON alongside each record.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.9/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations declare readOnlyHint=true, but the description says results are 'saved to the local database automatically' and the refresh parameter 'forget[s] this query's saved progress and records and re-scrape[s].' These are state-modifying behaviors that directly contradict the read-only annotation. While the description transparently discusses caching and resume behavior, this is an annotation contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured in three tight paragraphs: behavior and output, URL input workflow, and resume semantics. It is front-loaded with the most important operational facts and every sentence carries useful information, with no filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema and full parameter documentation, the description only needs to add workflow and behavioral context, and it does so thoroughly. It explains the summary return, database persistence, valid URL inputs, resume behavior, and refresh semantics. Nothing needed to call or understand the tool is missing aside from the annotation conflict.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already provides 100% parameter documentation, so the baseline is 3. The description adds practical meaning for search_url by explaining how to build the search and copy the URL, and it notes that saved account lists are accepted. This goes beyond the schema's path list and gives the agent actionable guidance for constructing a valid parameter value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The first sentence clearly identifies the operation and resource: searching Sales Navigator companies/accounts and capturing API responses. It also clarifies the output contract (summary only, not records), which distinguishes it from export_results/get_results. The account scope differentiates it from the sibling search_contacts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a concrete workflow: build the Sales Navigator search, copy the URL, and pass it in, with saved account lists also supported. It explicitly directs users to export_results or get_results for the actual records. It does not explicitly contrast with search_contacts or mention when not to use this tool, but the account-scoped intent is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_contactsSearch Sales Navigator ContactsA
Read-only

Search people/leads by driving Sales Navigator in the logged-in browser and capturing its search API responses. Results are saved to the local database automatically; this tool returns a small summary, not the records (call export_results or get_results for the data).

Build the search in Sales Navigator (title / geography / industry / seniority / keyword filters), copy the URL from the address bar, and pass it here. Saved lead lists work too.

Resumable: the search URL is hashed to a query id. If a previous run stopped partway, calling again with the same URL resumes from the next page instead of restarting — safe to call repeatedly to page deeper.

ParametersJSON Schema
NameRequiredDescriptionDefault
depthNo
pagesNoHow many 25-result pages to fetch in THIS call (1-10). Call again to continue past that.
resumeNoIf true (default), continue from where a prior run of this same URL stopped. If false, start from page 1 (records already saved are kept and de-duplicated).
refreshNoIf true, forget this query's saved progress and records and re-scrape from page 1.
search_urlYesFull Sales Navigator URL (/sales/search/people, /sales/search/leads, or /sales/lists/people).
include_rawNoKeep LinkedIn's raw element JSON alongside each record (useful when a field looks wrong).

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.9/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description transparently discloses important behavior: results are saved to a local database, re-calling with the same URL resumes from the next page, and refresh forgets saved progress and records. However, this directly contradicts readOnlyHint=true, which signals that the tool makes no observable state changes; the description describes writes and clearing of saved records observable via get_results/list_queries. This is an annotation contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short paragraphs are front-loaded with the core purpose and output, followed by the usage recipe and the resumability caveat. Every sentence contributes a fact needed for correct invocation, with no filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a stateful, browser-driving tool with six parameters and an output schema, the description covers prerequisites (logged-in browser), input construction, output behavior, alternative retrieval, and rerun/resume/refresh semantics. Nothing needed to call it correctly is missing, and the output schema accounts for the return shape.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 83%, so the schema already documents most parameters. The description adds real meaning by explaining that search_url can be a people/leads search or a saved list URL and by tying pages/resume/refresh to the URL-hash resume mechanism. It does not add semantics for depth, but the enum/default covers that well.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb-resource pair: 'Search people/leads by driving Sales Navigator...' and immediately distinguishes itself from data-retrieval siblings by stating it returns a small summary, not the records. This clearly separates it from export_results/get_results and search_accounts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives an explicit workflow: build the search in Sales Navigator, copy the URL, pass it here, and notes saved lead lists also work. It also routes the agent to export_results or get_results when the actual records are needed. It lacks an explicit exclusionary pointer to search_accounts for account searches, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

send_messageSend Sales Navigator MessageA
Destructive

Send ONE Sales Navigator message. Writes to LinkedIn.

This is the only tool here that is not read-only, and it is guarded accordingly:

  • dry_run defaults to true — you get back exactly what would be sent and nothing leaves the browser. Set it false deliberately.

  • Sending must also be enabled server-side (ENABLE_SENDING=true), so a default install cannot message anyone.

  • A lead already messaged in ANY campaign is refused.

  • A rolling 24h cap applies across all campaigns.

  • If the lead is not Open Profile the message would spend an InMail credit, and that is refused unless ALLOW_CREDIT_SPEND=true.

  • evidence_used must name fields that exist on the stored lead record, or the draft is rejected as ungrounded.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesMessage body.
dry_runNoTrue (default) validates and returns without sending.
subjectYesMessage subject. Required by Sales Navigator.
campaignYesCampaign label this send belongs to.
member_idYesStable LinkedIn member id (from next_outreach_batch).
url_or_hashYesThe query the lead belongs to, for record lookup.
evidence_usedNoRecord fields the personalization drew on, e.g. ["positions[0].title", "companyName"]. Each must resolve.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already signal non-read-only, idempotent-false, and destructive behavior, but the description adds substantial context beyond them: dry_run defaults true, server-side sending must be enabled, already-messaged leads are refused, a 24h cap applies, InMail credits may be spent, and evidence_used must resolve against stored fields. This is exactly the behavioral detail an agent needs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is tightly structured with a front-loaded purpose and a bulleted list of guardrails. Every bullet conveys a distinct operational constraint, and there is no filler or repetition of schema content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's side-effecting nature, the description covers all critical operational constraints: dry-run safety, server-side enablement, duplicate prevention, rate limiting, credit risk, and grounding requirements. An output schema exists to cover return values, so no essential guidance is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds meaningful semantics for several parameters: it explains dry_run behavior and return value, that evidence_used must reference real lead-record fields, and that member_id comes from next_outreach_batch. This goes beyond the schema descriptions without repeating them.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'Send ONE Sales Navigator message. Writes to LinkedIn,' naming a specific verb, resource, and scope. It also distinguishes itself from siblings by explicitly calling itself the only non-read-only tool here, so an agent can tell it apart without inspecting other schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It clearly states when this tool is appropriate: to send a single Sales Navigator message and to perform the one write action in this toolset. It gives strong context around guarded sending and refusal conditions, though it does not explicitly name an alternative batch-send tool such as run_outreach_batch.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

TDQS

A3.9/5.0
Disambiguation4/5

Most tools target clearly distinct functions: search, results retrieval, enrichment, messaging, and monitoring are well separated. A few pairs like fetch_lead_profiles/get_lead_profile and enrich_leads/fetch_lead_profiles require reading descriptions to avoid confusion, but the detailed docs resolve the boundaries.

Naming Consistency4/5

Names are consistently snake_case and mostly follow a verb_noun pattern (search_contacts, export_results, send_message, check_replies). A few noun-style names like outreach_status, next_outreach_batch, and pipeline_status break the pattern, but the overall style remains predictable and readable.

Tool Count4/5

At 16 tools, the set is slightly above the ideal range but still justified by the end-to-end Sales Navigator workflow: search, storage, enrichment, messaging, reconciliation, and pipeline visibility. Each tool serves a distinct need, though the count feels a bit heavy for a single server.

Completeness4/5

The core lifecycle is well covered: search leads/accounts, retrieve and export results, enrich, profile, select, draft, send, reconcile, and check replies. Notable gaps are the lack of a follow-up send path (only first messages appear supported) and no explicit campaign or query lifecycle management tools.

Maintenance

ActivityMaintained
ResponsivenessSyncing

Related MCP Connectors

Related MCP Servers

  • F
    license
    A
    quality
    Not graded
    maintenance
    Enables AI assistants to interact with LinkedIn and LinkedIn Sales Navigator for searching profiles, managing leads, and handling messaging via cookie-based authentication. It supports professional networking tasks such as sending connection requests and retrieving account details through the Model Context Protocol.
    22
    1
  • A
    license
    A
    quality
    F
    maintenance
    Enables searching and scraping of LinkedIn for structured data on people, companies, and job listings. It allows AI clients to retrieve detailed profiles, experience, and activity sections using browser automation.
    7
    182
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/nick-choudhary/linkedin-sales-nav-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server