Skip to main content
Glama

ctf_download

Downloads a CTFd challenge's hosted files by ID or name into CTFD_FILES_DIR//, returning the save directory, saved files, and connection info.

Instructions

Download a challenge's CTFd-hosted files (id or name) into CTFD_FILES_DIR//. Returns dir + saved files + connection_info.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
challengeYes

Output Schema

TableJSON Schema
NameRequiredDescriptionDefault
resultYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observedv1.0.0

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations at all, the description does carry useful behavioral detail: files are written to CTFD_FILES_DIR/<slug>/ and the response includes dir, saved files and connection_info. However it omits key side-effect semantics an agent needs for a write-to-disk operation, such as overwrite behavior, auth requirements, or what happens when a challenge has no hosted files.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two compact sentences, front-loaded with the action and destination, then the return payload. No filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a low-complexity, single-parameter tool with an output schema covering the return shape, the description supplies purpose, destination and accepted identifier forms. Remaining gaps (overwrite/no-files behavior, permissions) are minor given the tool's simplicity and the presence of an output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and the single 'challenge' parameter is undocumented, but the description compensates partially by stating it accepts an id or a name. It does not clarify whether the name is the display name or slug, nor how collisions are resolved.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (Download) plus the exact resource (a challenge's CTFd-hosted files) and the destination path, which distinguishes it from siblings like ctf_show and ctf_list that read metadata rather than persist files.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description never states when to use this versus ctf_show or fetch_url, nor any prerequisite (e.g. being registered for the challenge, challenge having files). Usage is only inferable from the purpose sentence.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.