Skip to main content
Glama

@reachpad/mcp

reachpad lets Claude, Codex and other coding agents build full-stack apps in persistent workspaces and share them by link, without a separate deployment. A workspace is a cloud development computer an agent operates itself: a repo, a filesystem, installed dependencies and build state that all survive between calls, not an ephemeral sandbox that forgets. Processes are the exception; see below.

This is the MCP server. It lets Claude, ChatGPT, Cursor, OpenCode or your own agent create a workspace, run commands in it, fork it, and come back to it later, without a developer keeping a laptop open for them.

  • It persists. Pause it and the disk is sealed; the next call boots from that seal with the files, installs and git state intact, rather than rebuilding. Processes are the exception: a start is always a cold boot.

  • It forks. Twenty attempts from one prepared state cost a delta each, not twenty rebuilds — because the workspace is a snapshot chain, not a machine.

  • It can keep secrets out of the workspace. A brokered credential is called at the boundary on your behalf and its value never enters the workspace, the log or the store. A credential written into the workspace instead is readable there, by design.

  • It is agent-agnostic. The REST API is canonical; this server, the SDK and the CLI are translations of it. Bring your own agent.

The API is the product boundary, not a web UI: reachpad.dev.

Install

npx -y @reachpad/mcp          # stdio, for a local client

In Claude Code:

claude mcp add reachpad -e REACHPAD_IDENTITY_CREDENTIAL=… -- npx -y @reachpad/mcp

Related MCP server: Nolane Habitat

Two transports, one implementation

npx @reachpad/mcp                                  # stdio
REACHPAD_MCP_HTTP_PORT=8722 npx @reachpad/mcp      # streamable http

stdio is what a local client talks to; Streamable HTTP is what a remote connector talks to. Same tools, same behaviour — added rather than forked, because two implementations of one surface is how they drift.

The HTTP side answers 405 to GET: every tool here is request/response, and the spec permits declining the server-initiated stream rather than holding a connection open for traffic that never comes. There are no sessions — nothing is held across calls that a restart could not rebuild. And it carries no credential of its own: whatever authorizes the HTTP request is what authorizes reachpad.

It is authenticated by default. Set REACHPAD_MCP_HTTP_TOKEN and that is the bearer token; set nothing and one is generated for the run and printed on stderr, because a port that bridges to your account with run_command behind it should not be open to every other process on the machine:

reachpad mcp: streamable http on http://127.0.0.1:8722
reachpad mcp: no REACHPAD_MCP_HTTP_TOKEN was set, so this one was generated for this run:

    Authorization: Bearer 3Qk…

reachpad mcp: it changes every restart. Set REACHPAD_MCP_HTTP_TOKEN to pin it, or
reachpad mcp: REACHPAD_MCP_HTTP_NO_AUTH=1 to serve with no authentication at all.

Serving with no authentication is still available and is now something you say out loud: REACHPAD_MCP_HTTP_NO_AUTH=1.

Configure

variable

meaning

REACHPAD_ENDPOINT

your reachpad host. Plaintext http:// to anything but loopback is refused before a socket opens.

REACHPAD_IDENTITY_CREDENTIAL

your per-user credential. It names one account and can act for no other — the server takes the identity from the credential's own record, never from the request.

REACHPAD_API_KEY

optional, per-workspace scoped and revocable. When set, run_command uses it and needs no identity exchange.

REACHPAD_MCP_HTTP_PORT

serve HTTP instead of stdio.

REACHPAD_MCP_HTTP_HOST

default 127.0.0.1. This process bridges to a control plane with your credentials, so binding it to the world is a decision made on purpose, behind a proxy that terminates TLS.

REACHPAD_MCP_HTTP_TOKEN

bearer token, compared in constant time. Absent, one is generated for the run and printed on stderr — the endpoint is never unauthenticated by omission.

REACHPAD_MCP_HTTP_NO_AUTH

1 serves with no authentication at all: every caller that can reach the port is authorized. An affirmative choice, not a default.

REACHPAD_MCP_ALLOWED_ORIGINS

comma-separated. A request carrying an unlisted Origin is refused — a browser cannot forge it, which closes DNS rebinding. No Origin at all is a non-browser client and is allowed.

If several credentials are set, the narrowest wins, and a refused credential is never retried under a broader one — falling back would be privilege escalation nobody chose to perform.

Tools

tool

what it does

get_credit_balance()

remaining compute credits. One credit runs one standard workspace for one minute.

create_workspace(repo?, ref?, name?)

a new workspace, optionally with a repository cloned into $HOME/work. Reachpad generates its display name when omitted.

list_workspaces()

your workspaces and how many forks each has

get_workspace(workspace)

what it boots from: its head snapshot, its log position and its fork tree

run_command(workspace, argv, cwd?, env?, timeout_ms?)

one command, its exit code and its output. A paused workspace resumes to serve it.

checkpoint_workspace(workspace, name?)

fork from the last sealed snapshot; the original is untouched

expose_port(workspace, port, check?)

open a port to the web and get the link that reaches it. Idempotent per port.

list_ports(workspace)

the ports this workspace has open, oldest first, with their links

revoke_port(workspace, port)

close one port. Re-opening it later mints a different link.

delete_workspace(workspace)

archive it and free the plan slot. Nothing is deleted — snapshots and history survive.

Renamed in 0.4.0. Six tools used to be spelled *_environment and took an environment argument, while the CLI, the manual and the dashboard all said workspace. There was only ever one object; now there is only one word for it. The old names and the old argument still work and are not advertised, so nothing that already calls them breaks — but write new calls against the workspace spelling.

Not here, deliberately: starting an agent inside the workspace. It is in reachpad's roadmap and not in the fleet yet — a tool that always fails costs a model a turn and teaches it to distrust the rest, so this server advertises nothing it cannot serve.

Worth reading before you hand one to somebody, because none of it is discoverable from the URL:

  • Anyone signed in to Reachpad who has the link can open it. It is not a private URL and not a secure one. Treat it like a preview deployment.

  • The link is an address, not a copy. Restart the app on the same port and the same link serves the new version.

  • A running process does not survive a pause. The workspace cold-boots with its files intact and nothing running, so after a pause the link answers with an error until something is listening on that port again. A visitor's request wakes a paused workspace; it does not restart anything inside it.

  • expose_port dials the port afterwards and tells you if nothing answered, because a link to a port nothing is serving looks exactly like a link that works. Pass check: false to skip it — the dial resumes a paused workspace.

  • With only REACHPAD_API_KEY, the key must be --role owner. A collaborator key is refused: listing hands back live tokens, and a token is a capability.

The rules it is built to

These are the ways a naive client of a streaming exec API misleads a model, and what this one does instead.

  • An unterminated stream is UNKNOWN, never success. If the response ends without a terminal event, the tool says so in those words. It is not a zero exit, and an agent must not retry a non-idempotent command on the strength of it.

  • Its deadline is looser than the server's, so a server-side answer always wins the race. A client that gives up first turns "your build finished" into "unknown", and the numbers are mirrored from the server rather than guessed.

  • Refusals carry remedies, not codes. At your plan limit you get the limit, your current count, and what to do — the numbers come from the server, because a limit hardcoded in a client is a lie the moment your plan changes.

  • Results are handles, not payloads. Output is tailed with the dropped byte count named. Build logs can be megabytes, and an MCP result that size destroys the caller's context window.

  • A refusal is a result, not a transport error, so the model can read it and act. Only an unknown tool is a protocol error.

Test

node --test 'test/*.test.mjs'

No network and no credentials. The protocol suite spawns the shipped server as a child process and speaks real JSON-RPC over its stdio against a stub control plane on a real socket, so nothing under test is an internal import. One test runs the same arc against a real reachpad and skips when no endpoint is configured.

Repository

This repository is the source. It is deliberately separate from the reachpad backend: this code is public, it is published to npm, and its release workflow holds publishing rights — none of which belong in the same repository as the control plane. Nothing here can read the backend's source, and no job in the backend copies files out to here.

Two server constants are mirrored in src/client.js — the exec grace period and the default exec timeout. A mirrored constant normally rots; this one does not, because the backend's own CI fetches this published package and fails if they disagree. The check lives where the number would change.

Available Tools

7 tools
checkpoint_environmentFork environmentAInspect

Fork an environment from its last sealed snapshot into a new one. The original is untouched. This is how you try several approaches from one prepared state — the fork costs a delta, not a rebuild.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNoName for the fork.
environmentYes

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations indicate a mutation (readOnlyHint=false) and non-destructive (destructiveHint=false). The description adds behavioral nuance by stating 'The original is untouched' and that the fork costs a delta rather than a rebuild, which explains the side-effect profile beyond the annotations. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise, using two sentences to convey purpose, behavior, and usage rationale. It is front-loaded with the primary action and avoids unnecessary filler, earning each sentence's place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given there is no output schema, the description should clarify what the tool returns or produces, but it does not mention the result (e.g., new environment ID). It also omits prerequisites like the existence of a sealed snapshot. While it covers the cost model and non-destructive nature, it lacks sufficient detail for an agent to know what to expect beyond a side effect.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 50% since 'environment' lacks a description. The description does not explain the parameters at all; it never clarifies that 'environment' refers to the source identifier or that 'name' is for the new fork. It fails to compensate for the missing parameter documentation, leaving the agent without essential semantic guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (fork) and resource (environment) with specific scope: 'Fork an environment from its last sealed snapshot into a new one.' It distinguishes from siblings like create_environment by emphasizing the fork originates from a snapshot and leaves the original untouched, which is a clear differentiator.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit guidance on when to use the tool: 'This is how you try several approaches from one prepared state.' It conveys the intended use case, though it does not mention when not to use it or contrast with create_environment directly. Still, the context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

create_environmentCreate environmentAInspect

Create a persistent development environment: a filesystem and processes that survive between calls. Optionally clone a git repository into it. Returns the environment id used by every other tool.

ParametersJSON Schema
NameRequiredDescriptionDefault
refNoOptional branch or tag to check out.
nameNoOptional display name. Reachpad generates one when omitted.
repoNoOptional git URL to clone into /work. Must be reachable without credentials unless the account has a mirror for it.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds meaningful behavioral context beyond the annotations: persistence across calls, optional git cloning, and the return value. This complements annotations like openWorldHint=true (cloning) and readOnlyHint=false (creation). It does not mention resource/credit implications or failure modes, but covers the core behavioral contract well.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the essential function, and no filler. It efficiently communicates persistence, optional cloning, and the return id—every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the essential facts for a creation tool with no output schema: what is created, persistence, optional repo cloning, and the return id. It does not discuss edge cases like clone failures, name conflicts, or costs, but given the moderate complexity and strong schema/annotations, it is sufficiently complete for an agent to invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all three parameters (ref, name, repo) are already documented structurally. The description's mention of optional repository cloning adds a small layer of meaning, but it does not enrich parameter semantics beyond what the schema provides, matching the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Create') and clearly identifies the resource ('persistent development environment') with defining traits: a filesystem and processes that survive between calls. It also distinguishes from siblings by noting the returned environment id is used by every other tool, making the tool's role as the foundational creation step unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use this tool by stating it returns the environment id used by every other tool, establishing it as the prerequisite step. However, it does not explicitly name alternatives or state when not to use it (e.g., prefer run_command for existing environments), so it falls short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

delete_environmentArchive environmentA
DestructiveIdempotent
Inspect

Archive an environment, freeing the plan slot it holds. Nothing is deleted: its snapshots and history survive, it simply stops counting as live and can no longer be used.

ParametersJSON Schema
NameRequiredDescriptionDefault
environmentYes

TDQS

A4.3/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description significantly expands on the annotations by explaining what happens: the environment is no longer usable, its plan slot is freed, and its snapshots and history survive. This adds valuable behavioral nuance beyond the destructiveHint=true and idempotentHint=true annotations, and it does not contradict them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences long, front-loaded with the main action, and every clause adds relevant meaning. There is no repetition, filler, or unnecessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple one-parameter tool with no output schema, the description covers the action, consequences, and non-destructive nature of data. However, it lacks guidance on how to specify the environment parameter and does not explicitly contrast it with related tools, leaving small but real gaps in completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The only parameter 'environment' has no schema description and the description gives no detail about what form it should take (name, ID, path, etc.). Since schema description coverage is 0%, the description was expected to compensate, but it only says 'an environment' without specifying how to identify it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the specific verb 'Archive' and clearly identifies the resource ('an environment') and the key consequence: freeing the plan slot it holds. It also distinguishes itself from the sibling delete/create tools by explicitly clarifying that nothing is deleted, which prevents confusion with the tool's name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool: when you want an environment to stop counting as live and free its plan slot, while preserving snapshots and history. It does not explicitly name alternatives or state when not to use it, but the context is clear enough for a simple one-parameter archiving operation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_credit_balanceGet compute-credit balanceA
Read-onlyIdempotent
Inspect

Show this account's remaining compute credits. One credit runs one standard environment for one minute; paused environments use no compute credits.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and non-destructive behavior. The description adds valuable context beyond annotations: the definition of a credit (one minute per standard environment) and that paused environments don't consume credits. This enriches understanding of the resource being measured without contradicting the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the core purpose and followed by a concise clarification of credit units. Every sentence adds essential information with no waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only, zero-parameter tool with rich annotations and no output schema, the description fully covers what the tool does, the resource it references, and the consumption model. This is sufficient for an agent to decide when to call it and what to expect.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the baseline is 4. The description doesn't need to elaborate on parameters but correctly implies that no inputs are required, making it clear the action is a simple balance query.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Show this account's remaining compute credits.' It uses a specific verb (show) and resource (compute credits), and the additional detail about credit usage distinguishes it from sibling tools like create_environment and run_command.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use this tool by explaining how credits are consumed, which helps an agent understand that checking balance is relevant when considering environment execution. It doesn't explicitly mention alternatives or exclusions, but since no sibling tool covers credits, the usage context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_environmentInspect environmentA
Read-onlyIdempotent
Inspect

What an environment resumes from: its head snapshot, how far its log had got, and its fork tree. Every start is a cold boot from the head snapshot: files survive, running processes do not.

ParametersJSON Schema
NameRequiredDescriptionDefault
environmentYes

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the read-only, idempotent, and non-destructive annotations, the description adds valuable behavioral context: running processes do not survive a cold boot while files do. This is exactly the kind of contextual insight that the annotations alone do not provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and well-structured: two sentences front-load the core output details and then add the essential cold-boot behavior. Every sentence earns its place without unnecessary restatement.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter, read-only inspection tool, the description is largely sufficient: it names the returned concepts and a key behavioral nuance, and the annotations cover safety and idempotency. It does not describe a concrete output format, but no output schema is present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema exposes one undocumented string parameter, 'environment', and schema description coverage is 0%. The description clarifies that the tool operates on an environment's resumption state, but it does not explain how to obtain or format the environment identifier, e.g. whether it is an ID or name from list_environments.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies what the tool returns: an environment's resumption state, including its head snapshot, log progress, and fork tree. This distinguishes it from siblings like list_environments, create_environment, and delete_environment, which perform different lifecycle operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit alternatives are listed, but the description provides clear operational context: every start is a cold boot from the head snapshot, so this tool helps you understand what state an environment will resume with. The absence of explicit when-not-to-use guidance prevents a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_environmentsList environmentsA
Read-onlyIdempotent
Inspect

List this account's environments, with how many forks each has.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already express readOnly, openWorld, idempotent, and non-destructive behavior. The description adds behavioral context by scoping to the current account and revealing that fork counts are included in the response. This goes beyond the annotations without contradicting them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence that is front-loaded with the verb 'List' and immediately identifies the resource and output. Every word adds value; there is no unnecessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that the tool has no parameters, no output schema, and strong annotations, this description fully covers the core invocation and expected result. An agent has enough information to correctly select and call this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool takes zero parameters, so the baseline of 4 is appropriate. The description does not need to define parameter meanings because there are none to clarify.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the specific verb 'List' and states the exact resource ('this account's environments') plus a meaningful differentiator ('with how many forks each has'). This clearly distinguishes it from get_environment, which focuses on a singular environment.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use this tool—when you need an account-level summary of environments and their fork counts—but it does not explicitly say when to prefer this over get_environment or list other alternatives. It provides clear context but no exclusionary guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

run_commandRun a commandA
Destructive
Inspect

Run one command in an environment and get its exit code and output. Not a shell: pass argv as a list, and ask for a shell explicitly with ["/bin/sh","-lc","…"] if you want one. A paused environment resumes to serve this.

ParametersJSON Schema
NameRequiredDescriptionDefault
cwdNo
envNo
argvYes
timeout_msNoGive up after this long. PASS IT. Clamped by the entitlement server-side, and without it the environment is allowed ten minutes — so a wedged environment costs you ten before you learn anything. Seconds to a couple of minutes suits most commands; raise it for builds.
environmentYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate openWorldHint=true and destructiveHint=true, but the description adds valuable behavioral context: it is not a shell, it returns exit code and output, and a paused environment resumes for it. These details go beyond the annotations and help the agent understand execution semantics.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the core purpose. Each sentence adds essential information without redundancy, making it highly concise and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 5 parameters with nested objects and no output schema, the description covers the primary behavior (command execution, exit code/output) and key usage notes (argv, shell). It lacks detailed parameter explanations but the schema covers timeout_ms, and the annotations cover safety aspects. This is reasonably complete for a command runner tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With schema description coverage at only 20%, the description should compensate. It adds meaning to the argv parameter (list form, explicit shell usage) and mentions environment behavior, but does not explain cwd, env, or environment beyond that. The timeout_ms parameter already has a schema description. This is adequate but not comprehensive.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states 'Run one command in an environment and get its exit code and output,' which clearly identifies the verb, resource, and outcome. It also distinguishes itself from a shell, clarifying its scope and differentiating it from sibling tools that manage environments.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear usage instructions: 'pass argv as a list, and ask for a shell explicitly with ["/bin/sh","-lc","…"] if you want one.' It also notes that a paused environment resumes to serve the command, giving practical context. However, it does not explicitly discuss when to use this versus alternatives, though siblings are not direct alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 7 tool updatesv0.1.0
    • First observedcheckpoint_environment
    • First observedcreate_environment
    • First observeddelete_environment
    • First observedget_credit_balance
    • First observedget_environment
    • First observedlist_environments
    • First observedrun_command

TDQS

A4.4/5.0
Disambiguation5/5

Each tool addresses a distinct concern: credit balance, environment lifecycle, and command execution are cleanly separated. Even checkpoint_environment is unambiguous because it explicitly forks an environment into a new one.

Naming Consistency5/5

All tools follow a consistent verb_noun pattern in snake_case, such as create_environment, list_environments, and delete_environment. Singular/plural usage is natural and predictable.

Tool Count5/5

Seven tools is well-scoped for managing persistent development environments: credit checking, creation, listing, inspection, command execution, forking, and deletion/archival. No tool feels redundant or out of place.

Completeness5/5

The environment lifecycle is covered end-to-end: create, read (list/get), fork/checkpoint, execute commands, and delete/archive. The credit balance tool fills the one supporting need for running environments, leaving no obvious dead ends.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/Reachpad/reachpad-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server