PersonaMCP
This server gives an AI agent read-only access to your measured writing style plus real conversation examples, so it can draft replies that sound like you — it never generates replies itself.
get_style_profile(context?) — retrieve your measured outgoing-message style, either global or for a user-assigned context (e.g. business, casual).
get_person_style(person) — get one-to-one writing statistics and evidence count for an exact recipient, never group history.
search_messages(query, person?, platform?, limit?) — full-text search your own outgoing messages, with recipient/platform filters and a bounded result limit to minimize disclosure.
find_similar_interactions(message, person?, context?, platform?, limit?) — find real incoming-message/reply pairs similar to a message, indicating whether results are semantic or lexical and their coverage.
get_writing_context(message, person?, context?, platform?) — get a compact style summary plus up to three quoted real examples for a specific incoming message; it deliberately never writes a reply.
get_persona_summary() — fetch a compact profile and index/database coverage counts without exposing raw conversation history.
All tools are read-only, idempotent, and closed-world; they return evidence for your agent to compose the final message. Historical content is explicitly flagged as untrusted data.
Imports Instagram conversation exports, including message_N.json files and current Meta message_N.html folders. Supports pagination merging, repairs common broken JSON Unicode, and never executes HTML scripts, links, or media. Enables analysis of writing style from Instagram chats.
Imports Snapchat exports, including chat_history.json, supported chat-card HTML subpages, and original ZIP exports. Handles direct recipient-keyed and nested JSON layouts, and reads ZIPs without extraction. Enables analysis of writing style from Snapchat conversations.
Imports WhatsApp UTF-8 TXT exports with Android and bracketed iOS timestamps. Supports slash-separated dates, day/month default with a --month-first option, retains multiline text, and excludes system/media notices from style analysis. Enables analysis of writing style from WhatsApp chats.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@PersonaMCPhelp me reply to Alex's 'mai vii azi la cafea?' in my writing style"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
PersonaMCP
Your communication style and memory for AI agents.
PersonaMCP imports your conversation exports, measures how you write, and gives an AI agent a compact style profile plus relevant incoming-message/reply examples. Your raw history stays on your computer. There is no model training, web dashboard, cloud embedding requirement, telemetry, or automatic reply generation.
Writing preferences are usually too vague: “sound casual” does not capture someone who uses lowercase, sends three short messages, switches languages, or writes differently to a colleague. PersonaMCP gives the connected writer evidence instead of a guessed personality.
Install
Python 3.11 or newer. Install from PyPI:
python -m pip install personamcp
persona --helpOr run it without installing, using uv: uvx personamcp --help.
To work from a checkout of this repository:
git clone https://github.com/robyroro/PersonaMCP.git
cd PersonaMCP
uv sync --locked
uv run persona --helpOr install into your own virtual environment:
python -m venv .venv
# Linux/macOS: source .venv/bin/activate
# Windows PowerShell: .venv\Scripts\Activate.ps1
python -m pip install .
persona --helpIn a uv checkout, prefix the persona commands below with uv run. With an activated pip
installation, run persona directly.
The base installation supports import, analysis, FTS search, lexical interaction retrieval, and MCP. Semantic retrieval is an optional, fully local extra:
After initialization and imports (described below):
uv sync --locked --extra semantic
uv run persona model prepare
uv run persona indexWith pip, use python -m pip install '.[semantic]'. Preparing the model explicitly downloads
weights from Hugging Face and pins their immutable revision. It does not read or send chats.
Indexing and subsequent queries load only local files with remote code disabled.
Related MCP server: personal-context
Quick start
persona init
persona config set-name "Robert"
persona config add-alias "roby"
persona config set-name "Exact Instagram display name" --platform instagram
persona config set-name "snapchat_username" --platform snapchat
persona import instagram ./instagram-export/
persona import snapchat ./snapchat-export/
persona import whatsapp ./chat.txt
persona import json ./messages.json
persona stats
persona analyze
persona search "cat costa"
persona similar "mai vii azi?" --person "David"
persona writing-context "ce faci diseara?" --person "David" --platform instagramFor a synthetic first run, use a separate data directory:
persona --home ./sample-persona init
persona --home ./sample-persona config set-name "Owner"
persona --home ./sample-persona import json ./examples/messages.json
persona --home ./sample-persona analyze
persona --home ./sample-persona writing-context "mai vii azi la cafea?" --person "Alex"Put private imports and custom data directories outside your repository. The included
.gitignore covers conventional private folders but cannot protect every arbitrarily named path.
Identity must match an exact exported sender name or sender ID. Platform aliases override global
names on that platform. No participant is guessed from message volume. An import matching no
owner messages fails before writing anything. Changing names/aliases recomputes ownership and
interactions and invalidates profiles/vectors; run analyze and index again.
Supported imports
Platform | Supported input | Notes |
| Pagination is merged. Common broken JSON Unicode is repaired. HTML scripts/links/media are never executed. | |
Snapchat |
| Direct recipient-keyed and nested JSON layouts. ZIPs are read without extraction; JSON takes precedence over duplicate HTML. |
UTF-8 TXT, Android and bracketed iOS timestamps | Slash-separated dates; day/month default, | |
Generic | JSON conversation object, | See the schema below. |
Only chat files are imported. Media is not opened, transcribed, downloaded, or analyzed. Unsupported variants fail clearly. A malformed file rolls back the import as a whole. Original files stay untouched. Content hashes and stable message IDs prevent repeated imports from duplicating rows.
WhatsApp has no stable export thread ID. By default the filename identifies the conversation;
use --conversation-id "stable-chat-name" when importing renamed or refreshed exports.
Offsetless timestamps use a documented UTC convention for wall-clock ordering; they are not
claimed to have been recorded in UTC. Instagram/Snapchat HTML support English export dates.
Generic JSON:
{
"id": "stable-conversation-id",
"platform": "json",
"title": "Alex",
"participants": ["Owner", "Alex"],
"context": "casual",
"messages": [
{"id": "external-message-id", "sender": "Alex", "sender_id": "account-123",
"text": "mai vii azi?", "timestamp": "2024-01-01T10:00:00Z"},
{"sender": "Owner", "text": "da gen vin acu", "timestamp": "2024-01-01T10:00:10Z"}
]
}For JSONL, each line is a message with sender, text, timestamp, and an optional
conversation_id. Optional external IDs and reply_to are preserved. Generic identity comes
from configured aliases, never an imported is_user assertion. Use explicit conversation IDs
when importing different datasets; absent IDs use a documented default conversation.
What is measured
persona analyze writes persona.md and persona-profile.json in the private data directory and
stores structured profiles in SQLite. Only outgoing text feeds the analyzer. Incoming text is
kept as bounded retrieval context.
Measurements include character/word/sentence lengths, short message bursts, casing, punctuation, emoji codepoints, repeated characters, common words and phrases, repeated slang/abbreviation forms, greetings, sign-offs, Romanian diacritics, and Romanian/English word markers. Language markers are heuristics, not a language classifier. Emoji counts measure codepoints, not complete grapheme clusters. Repeated phrases/forms need at least three observations; isolated misspellings are not instructions to add typos.
Context labels are explicit and extensible:
persona conversations
persona set-context CONVERSATION_ID business
persona set-context OTHER_ID casual
persona analyze
persona person "David"Global profiles always use available outgoing text. Separate context/person profiles require at least 20 messages by default. On-demand person statistics report their evidence count. No family, dating, personality, sarcasm, or psychological classification is inferred. Recipient-specific queries conservatively exclude groups. Exact names may occur on multiple platforms; pass a platform to retrieval/writing-context when that distinction matters.
Search and semantic retrieval
SQLite FTS5 searches outgoing messages and incoming interaction contexts. Interactions retain up to three incoming messages and a burst of up to eight outgoing replies. A two-hour gap or a media record breaks pairing; an outgoing burst spans at most five minutes between messages.
The local semantic provider uses sentence-transformers/paraphrase-multilingual-MiniLM-L12-v2.
It embeds incoming contexts and stores float32 vectors in SQLite. Queries use exact cosine scans
over eligible vectors; this favors a simple local architecture over an external vector server.
Indexes resume after interruption. A recipient/context/platform filter applies before ranking.
If eligible vectors are absent, retrieval reports lexical explicitly. A partially built index
reports its coverage. Semantic scores below 0.25 are omitted; these scores are not probabilities
or guarantees of relevance. There is no silent cross-recipient fallback. Future providers can
implement the EmbeddingProvider protocol without changing the import or writing interfaces.
MCP setup
The server uses the official Python MCP SDK and stdio transport. Stdout carries only protocol messages; diagnostic output goes to stderr.
persona serveIf the data directory has not been initialized yet, serve creates it the same way
persona init does and reports this on stderr; tools return empty results until you import
exports. Usually the client launches this command for you. Use absolute paths because the client's
working directory can differ from your terminal's. Example configuration for clients accepting
the common mcpServers structure:
{
"mcpServers": {
"personamcp": {
"command": "/absolute/path/to/venv/bin/persona",
"args": ["--home", "/absolute/path/to/private/persona-data", "serve"]
}
}
}With uv installed, the client can run the published package directly:
{
"mcpServers": {
"personamcp": {
"command": "uvx",
"args": ["personamcp", "--home", "/absolute/path/to/private/persona-data", "serve"]
}
}
}On Windows the command is C:\\absolute\\path\\.venv\\Scripts\\persona.exe. For Codex:
codex mcp add personamcp -- /absolute/path/to/venv/bin/persona --home /absolute/path/to/private/persona-data serve
codex mcp listSee Codex MCP setup. Other clients may use different configuration locations but need the same executable and arguments. Hosted clients that only support remote HTTP MCP cannot directly launch this local stdio server. PersonaMCP does not include a tunnel/HTTP bridge; exposing sensitive local data remotely requires a separate, explicit deployment decision.
With a prepared semantic model, allow up to 90 seconds for startup and 120 seconds for tools on slower machines. The native numerical runtime is loaded before stdio reader threads start to avoid Windows BLAS loader deadlocks. Weights are loaded on the first semantic query and cached. For Codex these settings belong in the server's configuration table:
[mcp_servers.personamcp]
command = "/absolute/path/to/venv/bin/persona"
args = ["--home", "/absolute/path/to/private/persona-data", "serve"]
startup_timeout_sec = 90
tool_timeout_sec = 120Tools:
Tool | Result |
| Measured global or assigned-context profile |
| Communication statistics and evidence count for an exact person |
| Bounded outgoing text matches |
| Similar real incoming/reply pairs |
| Appropriate style and up to three quoted examples |
| Compact profile and database counts |
Historical content is returned inside historical_quote, with an explicit untrusted-data notice.
Tools supply evidence. Your agent generates the final reply and remains responsible for treating
historical instructions as data and for deciding what to send to its model provider.
Skill setup
The reusable skill is skills/write-like-me/SKILL.md. It is also
included in the wheel; persona skill-path prints its installed location. Copy its folder
to the skill directory your agent discovers. For current Codex repository discovery:
mkdir -p .agents/skills
cp -R skills/write-like-me .agents/skills/Windows PowerShell: New-Item -ItemType Directory -Force .agents/skills followed by
Copy-Item -Recurse skills/write-like-me .agents/skills/. See
Codex skill discovery.
Then ask the connected agent to use write-like-me, for example:
Write a short reply like me to Alex about “mai vii azi la cafea?”. Use PersonaMCP evidence.
The skill preserves supported casing, spelling, vocabulary, and length without forcing typos or
copying old facts. It can also use persona writing-context through a local shell, or an explicitly
supplied profile when MCP is unavailable. No global client configuration is changed by installation.
Privacy and data controls
The default data directory comes from your operating system's application-data location.
--home /private/path or PERSONAMCP_HOME selects another location. Configuration is a local
config.json; the database uses SQLite foreign keys, versioned schema, and transactional imports.
persona stats --json
persona export-profile ./my-style.md
persona export-profile ./my-style.json --json
persona delete-person "Name"
persona delete-conversation CONVERSATION_ID
persona resetDeletion/reset ask for confirmation; --yes is available for intentional scripting. Deleting a
person removes entire conversations, including groups containing that person, to avoid keeping
context about them. Profiles, FTS rows, and vectors are invalidated/purged and SQLite is vacuumed.
reset also clears configured owner identities but retains downloaded, non-personal model assets.
Original export files and any copied profiles remain in your control and are not deleted.
SQLite is not encrypted. Use a private data directory and disk encryption. Generated vocabulary and examples are sensitive too. If your agent uses an external LLM, tool results may reach that provider; “local-first” describes storage and computation, not the connected client's behavior. Read SECURITY.md for deletion and prompt-injection limits.
Offline benchmark
persona benchmark --limit 30The last 20% of interactions by timestamp form a holdout. Retrieval and style profiles use only earlier data. The held-out actual reply is used only for scoring. The default candidate is a retrieved historical reply, not an LLM-generated answer.
The report includes retrieval coverage, response-length similarity, vocabulary overlap,
punctuation similarity, capitalization similarity, and their mean Style Similarity Score.
When a local model is available, embedding similarity is reported separately. No raw benchmark
replies are printed. CandidateResponseProvider is the extension point for a future explicitly
configured generator. Scores do not prove identity imitation, authorship, relevance, or generation
quality. Small or temporally uniform datasets cannot support this evaluation.
Architecture
exports → platform adapters → normalized conversations/messages
↓
SQLite + participants + FTS5
↓
bounded incoming/outgoing interactions
↙ ↘
deterministic profiles local embedding vectors
↘ ↙
retrieval/service layer
↙ ↘
CLI MCP stdio → writing skill → agentThe package uses a src/personamcp layout: importers, models, configuration, storage, analysis,
embeddings, retrieval, shared service, MCP server, CLI, and benchmark. No external database or
LLM provider is required. Schema compatibility is tracked with PRAGMA user_version; older
versions reject a newer database instead of guessing how to read it.
Development, roadmap, and limits
Run uv sync --locked, then uv run pytest, uv run ruff check src tests,
uv run ruff format --check src tests, and uv run mypy src. CI checks Windows/Linux and Python
3.11–3.13, with no personal data or model download. Public fixtures are synthetic. See
CONTRIBUTING.md, CODE_OF_CONDUCT.md, and
implementation decisions.
Next steps are additional export adapters (Discord, Telegram, Messenger, iMessage, Signal), explicit redaction rules, a faster local vector index for very large archives, richer language signals, and optional generation-based evaluation. They are not implemented in this MVP.
This version is a CLI/MCP engine. Export schemas can change; group recipient inference, psychological profiling, automatic typo correction, speech/media analysis, encryption at rest, cloud embedding providers, HTTP hosting, and a frontend are outside its current support.
MIT licensed © Robert Vind-Gardoș (@robyroro). Model weights and dependencies retain their own licenses; see the multilingual MiniLM model card and Sentence Transformers documentation.
Available Tools
6 toolsfind_similar_interactionsCRead-onlyIdempotent
Return bounded real incoming/reply examples, marking semantic/lexical coverage.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| person | No | ||
| context | No | ||
| message | Yes | ||
| platform | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, so the safety profile is covered. The description adds that results are 'real' (as opposed to synthetic) examples and are bounded, which is useful context, but 'marking semantic/lexical coverage' is opaque and never explained.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single tight sentence with no padding and the retrieval action front-loaded. It is efficient, though brevity here shades into under-specification rather than being purely a virtue.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists so return values need not be explained, but with five undocumented parameters, no usage guidance, and an unexplained 'coverage' concept, the definition leaves too much for an agent to infer before calling correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across five parameters, so the schema documents nothing. The description only obliquely gestures at 'limit' via 'bounded' and says nothing about message, person, context, or platform, leaving the agent to guess how inputs shape the search.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The verb 'Return' and resource 'incoming/reply examples' indicate it retrieves interaction examples, and 'bounded' hints at a limit. However, the purpose is muddied by the cryptic clause 'marking semantic/lexical coverage,' and it never distinguishes itself from the sibling search_messages, which sounds like an obvious alternative.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to use this tool versus search_messages, get_writing_context, or the style/profile siblings. No prerequisites, no exclusion conditions, no routing guidance of any kind.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_persona_summaryARead-onlyIdempotent
Return compact profile and index coverage, without raw conversation history.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare the tool is read-only, idempotent, non-destructive, and closed-world. The description adds useful scope by stating it returns a compact profile and index coverage and explicitly excludes raw conversation history, but it does not provide additional behavioral details such as permissions, rate limits, or what 'index coverage' entails.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence that states the return content and the key exclusion without any wasted words. It is optimally sized for a zero-parameter read operation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the low complexity (no parameters), the presence of an output schema, and annotations that cover the safety profile, the description provides enough context to invoke the tool correctly. The main omission is sibling differentiation, which is already reflected in the usage-guidelines score.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The tool takes zero parameters, so there are no parameter semantics to describe. Per the rubric, zero parameters establish a baseline of 4, and the description needs no further parameter guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('Return') and resource ('compact profile and index coverage'), making the tool's output clear. However, it does not differentiate from similar-sounding siblings like get_person_style or get_style_profile, so an agent cannot easily tell when to prefer this tool over them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description includes a negative scope statement ('without raw conversation history'), which hints at when not to use it, but it offers no explicit when-to-use guidance and never names alternatives. An agent must infer its role among five sibling tools with overlapping profile/style purposes.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_person_styleARead-onlyIdempotent
Get one-to-one writing statistics for an exact recipient name, never group history.
| Name | Required | Description | Default |
|---|---|---|---|
| person | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so safety is covered. The description adds the scoping behavior (per-recipient, excluding group history), which is genuinely useful, but says nothing about what statistics are returned or matching behavior on non-exact names.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single tight sentence with the scope constraint front-loaded. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be explained, and annotations cover the safety profile. For a one-parameter read tool the scope statement is nearly sufficient; only the name format and match behavior remain unaddressed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single 'person' parameter has 0% schema description coverage, so the description carries the burden. It adds that the name must be exact and 1:1, which is meaningful, but gives no format hints (e.g. whether it is an email, handle, or display name).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (get) and resource (one-to-one writing statistics) and scopes it to an exact recipient name, which distinguishes it from the broader get_style_profile / get_persona_summary siblings. It stops short of naming which sibling to use for group or aggregate history, so it is clear but not fully differentiated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'never group history' implies the tool applies only to individual recipients and that group-level queries belong elsewhere, but it never names the alternative tool or states the condition explicitly. Usage is inferred rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_style_profileBRead-onlyIdempotent
Return measured outgoing-message style for a global or user-assigned context.
| Name | Required | Description | Default |
|---|---|---|---|
| context | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, and openWorldHint=false, so the safety profile is covered. The description adds that the returned style is 'measured outgoing-message' for 'global or user-assigned' contexts, which gives some content context beyond annotations, but it does not disclose authorization needs, rate limits, or other operational traits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single front-loaded sentence with no filler, and the scoping distinction is stated early. It is appropriately concise for a simple getter, though the terseness leaves some ambiguity that could have been resolved in one additional clause.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be explained, and annotations already cover the safety profile. The remaining gaps are usage guidance against siblings and full parameter semantics, making this minimally complete for a simple one-parameter read tool but not rich enough to resolve selection ambiguity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has one optional parameter, 'context', with 0% description coverage. The description partially compensates by indicating that the context may be 'global or user-assigned', which helps an agent infer that a string value selects a user-assigned context while null/omission likely selects global. It does not, however, specify valid formats or examples for the user-assigned case.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Return') and resource ('measured outgoing-message style') with a scope modifier ('global or user-assigned context'), so the core purpose is clear. However, it does not distinguish this tool from sibling tools such as get_person_style or get_persona_summary, leaving the agent to infer when this profile is the right one.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool versus alternatives like get_person_style or get_persona_summary, and no prerequisites or exclusions are mentioned. The description only states what it does, not when an agent should select it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_writing_contextCRead-onlyIdempotent
Return compact style and up to three untrusted examples; never generate a reply.
| Name | Required | Description | Default |
|---|---|---|---|
| person | No | ||
| context | No | ||
| message | Yes | ||
| platform | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish a safe read-only, idempotent profile, and the description adds two things not in the annotations: the bounded result size ('up to three') and a trust warning that the examples are 'untrusted', plus the 'never generate a reply' constraint. That is genuine added behavioral context, though it omits what 'style' contains.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is a single tight sentence with no filler, which is good, but the brevity crosses into under-specification rather than economy. The important caveats are front-loaded, but nothing else earns its place because nothing else is stated.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists so return values need not be explained, but for a four-parameter tool with 0% schema coverage and no usage guidance, the definition leaves critical gaps. An agent cannot reliably infer what the optional filters do or when this tool wins over its siblings.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the description mentions none of the four parameters (person, context, message, platform). With a required 'message' param and three optional filters, the description should at least indicate what these select, and it does not compensate for the schema gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names an action (return) and a resource (compact style plus up to three examples), so the basic purpose is legible. However, 'compact style' is vague, and with siblings get_person_style and get_style_profile in the list there is no differentiation explaining what this tool returns that those do not.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no statement of when to call this tool versus search_messages, get_person_style, or get_style_profile. 'Never generate a reply' is a behavioral constraint on the caller, not usage guidance, so an agent still has to guess the triggering conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_messagesARead-onlyIdempotent
Search owner's messages; use recipient/platform filters to minimize disclosure.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | ||
| query | Yes | ||
| person | No | ||
| platform | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, idempotentHint, and destructiveHint=false, so the safety profile is covered. The description adds a meaningful behavioral trait beyond those flags: that results can expose sensitive content and should be narrowed via filters to reduce disclosure. That is real added context, though nothing is said about result volume or matching behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single compact sentence with the action front-loaded and the privacy guidance trailing it. Nothing is wasted, though it is terse enough that a small amount of additional clarification could have been justified.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
An output schema exists, so return values need not be described. However, for a four-parameter search tool with zero schema descriptions, the definition leaves the core query syntax and limit semantics unexplained, which is a meaningful gap for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the burden falls on the description, which only addresses two of four parameters (person/recipient and platform filters). The required 'query' parameter and the 'limit' parameter are never explained, leaving matching semantics and pagination behavior undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Search owner's messages'), which is clear enough to distinguish it from the sibling tools, all of which deal with style profiles, personas, or writing context rather than message retrieval. No explicit sibling differentiation is given, but the domain is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The clause 'use recipient/platform filters to minimize disclosure' implies a usage pattern (narrow the search to protect privacy), but it never states when to choose this tool over alternatives or when not to use it. Guidance is implied rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
6 tool updates
v0.1.0- First observed
find_similar_interactions - First observed
get_person_style - First observed
get_persona_summary - First observed
get_style_profile - First observed
get_writing_context - First observed
search_messages
TDQS
Scored across 6 tools
Several tools retrieve style/profile data (get_person_style, get_style_profile, get_persona_summary, get_writing_context) with subtle scope differences; descriptions clarify recipient vs global vs compact context, but an agent could still misselect. search_messages and find_similar_interactions are more distinct.
Names use snake_case and mostly verb_noun form (get_*, search_*, find_*), but the mix of get/search/find and slight noun-order variation (get_person_style vs get_style_profile) keeps it from perfect consistency.
6 tools is well within the ideal range and each seems to cover a distinct retrieval need, though some overlap exists. No excessive tool bloat.
The set covers style retrieval, persona summary, message search, similar examples, and writing context, which is solid for a read-only persona/writing assistant. Minor gaps include no explicit index/refresh or persona management operations, but likely outside intended scope.
Maintenance
Related MCP Connectors
A personal RAG database you build from chat, so AI creates work that sounds like you.
Private, portable memory and reusable skills for AI agents.
Write in the user's own voice, fitted to the occasion. Learns from the text they actually send.
Local-first long-term memory for AI agents, with byte-recomputable signed verification receipts.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables Claude to write in your personal style by learning from your local documents. It provides statistical style context for natural language rewriting, all without any data leaving your machine.MIT
- FlicenseAqualityBmaintenanceEnables LLMs to access a user's personal writing context—voice, style, opinions, expertise, projects, and communication patterns—via curated markdown files, helping the LLM match the user's voice when generating written content.23-
- AlicenseNot gradedqualityDmaintenanceEnables AI agents to maintain persistent, local memory with retrieval-augmented search, knowledge graphs, and context surfacing, without any cloud dependencies.2,052 npmMIT
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to search and read a local, provider-independent email archive, reconstruct contacts and interactions, and prepare draft responses without sending anything.MIT