io.github.shigechika/junos-mcp
MCP server that exposes Juniper Junos device operations to AI assistants over STDIO/HTTP — reading device state, running CLI commands, managing config, and upgrading firmware, with dry-run safety defaults.
Device info: fetch facts (
get_device_facts), JUNOS version/upgrade status (get_version), inventory listing (get_router_list), and server/config status (health_check).CLI execution: run one show command (
run_show_command) with text/json/xml output, several in one session (run_show_commands), or one in parallel across many devices with tag filtering and regexgrep_patternfiltering (run_show_command_batch).Configuration management: read config as text/set/xml (
get_config), diff against a rollback version (get_config_diff), and push config via file or inline set-commands with commit-confirmed and health-check auto-rollback (push_config).Upgrade operations: assess readiness (
check_upgrade_readiness), compare version strings (compare_version), get model-specific package name/hash (get_package_info), list remote files, SCP the package with checksum (copy_package), install (install_package, withunlinkfor EX2300/EX3400), roll back (rollback_package), and schedule reboots (schedule_reboot).Diagnostics: collect RSI/SCF from one device or many in parallel (
collect_rsi,collect_rsi_batch) with model-specific timeouts.Pre-flight checks: probe NETCONF reachability (
check_reachability), verify local firmware checksums (check_local_inventory), verify staged packages on devices (check_remote_packages).Daily operations: morning fleet sweep (
daily_brief) covering alarms, interface flaps, syslog alert patterns, dual-RE faults, and optional inet.0 route-count baseline, returning a CRITICAL/WARNING/OK Markdown summary.Safety: five destructive tools (
push_config,copy_package,install_package,rollback_package,schedule_reboot) default todry_run=True; configurable connection pooling, per-host NETCONF session reuse, and config.ini/tag-based host targeting.
Provides tools for managing Juniper Networks devices via NETCONF, including device information retrieval, CLI command execution, configuration management, firmware upgrades, diagnostics, and daily operations.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@io.github.shigechika/junos-mcprun show version on router-1"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
junos-mcp
English | 日本語
MCP (Model Context Protocol) server for junos-ops.
Exposes Juniper Networks device operations to MCP-compatible AI assistants (Claude Desktop, Claude Code, etc.) via STDIO transport. While junos-ops is the CLI tool for humans, junos-mcp is the AI-facing interface to the same powerful engine.
Features
Device Information
Tool | Description | Connection |
| Get basic device information (model, hostname, serial, version) | Yes |
| Get JUNOS version with upgrade status | Yes |
| List routers from config.ini (optionally filtered by tags) | No |
| Report server version + config status (router count, distinct tags). Lightweight; does NOT connect to any device | No |
CLI Command Execution
Tool | Description | Connection |
| Run a single CLI show command ( | Yes |
| Run multiple CLI commands in a single session ( | Yes |
| Run a command on multiple devices in parallel (supports tag filter and | Yes |
Configuration Management
Tool | Description | Connection |
| Get device configuration (text/set/xml format) | Yes |
| Show config diff against a rollback version | Yes |
| Push config with commit confirmed + health check | Yes |
Upgrade Operations
Tool | Description | Connection |
| Check if device is ready for upgrade | Yes |
| Compare two JUNOS version strings | No |
| Get model-specific package file and hash | No |
| List files on remote device path | Yes |
| Copy firmware package via SCP with checksum | Yes |
| Install firmware with pre-flight checks ( | Yes |
| Rollback to previous package version | Yes |
| Schedule device reboot at specified time | Yes |
Diagnostics
Tool | Description | Connection |
| Collect RSI/SCF with model-specific timeouts | Yes |
| Collect RSI/SCF from multiple devices in parallel (supports tag filter) | Yes |
Pre-flight Checks
Equivalent to the junos-ops check subcommand modes. All three reuse the
junos-ops display layer for table rendering.
Tool | Description | Connection |
| Probe NETCONF reachability + available disk space per host (fast: no facts, 5s TCP probe) | Yes |
| Verify local firmware checksums against config.ini inventory | No |
| Verify staged firmware checksum + available disk space on devices (post-SCP verification) | Yes |
Daily Operations
Tool | Description | Connection |
| Morning health check across multiple devices in parallel — alarms, interface up/down, syslog alert patterns within a look-back window ( | Yes |
| Run the same sweep as a background job for fleets too large for one call (a hosted client's per-call limit is about 60 s): | Yes |
Safety by Design
All destructive operations (push_config, copy_package, install_package,
rollback_package, schedule_reboot) default to dry-run mode (dry_run=True).
The AI assistant must explicitly set dry_run=False to make changes.
push_config provides additional safety features not found in other Junos MCP servers:
commit confirmed with configurable timeout (auto-rollback if not confirmed)
Fallback health check after commit (ping, NETCONF uptime probe, or any CLI command)
Automatic rollback if health check fails (commit is not confirmed, timer expires)
no_commit=True— issuescommit confirmedbut intentionally skips the final commit. JUNOS auto-rolls back afterconfirm_timeoutminutes. Useful for restarting services that lack arequest ...restartcommand (e.g. syslog daemon on EX3400 post-upgrade).
Related MCP server: juniper-mist-mcp
Requirements
Python 3.12+
junos-ops with a valid
config.iniMCP Python SDK >= 1.0
Installation
pip install junos-mcpOr for development:
git clone https://github.com/shigechika/junos-mcp.git
cd junos-mcp
python3 -m venv .venv
. .venv/bin/activate
pip install -e ".[test]"CLI options
python -m junos_mcp --helpOption | Description |
| Print version and exit |
| Load config.ini, list routers, and exit (exit code 1 on error) |
| With |
| Transport protocol (default: |
| streamable-http only: address and port to listen on (default: |
--check is handy to verify JUNOS_OPS_CONFIG and config.ini are reachable before registering the server with an AI assistant. Combine with --check-host rt1 to also confirm that credentials actually authenticate against a real device.
Tag-based host filtering
run_show_command_batch, collect_rsi_batch, and get_router_list accept an optional tags argument. The grammar matches the junos-ops --tags CLI flag (since junos-mcp 0.9.0 / junos-ops 0.16.6):
Each list element is one tag group. Comma-separated tags inside a group AND together.
Multiple list elements OR together across groups.
When combined with
hostnameson batch tools, the result is the intersection (tags filter further narrowed by names). An empty intersection returns an error.
# 1 group, 1 tag — hosts tagged "main"
run_show_command_batch(command="show route summary", tags=["main"])
# 1 group, 2 tags — AND within the group: tokyo AND edge
collect_rsi_batch(tags=["tokyo,edge"])
# 2 groups — OR across groups: main OR backup
get_router_list(tags=["main", "backup"])
# Mixed: (tokyo AND core) OR backup
run_show_command_batch(command="show version", tags=["tokyo,core", "backup"])
# Intersection: among backup-tagged hosts, only rt1/rt2
run_show_command_batch(
command="show version",
hostnames=["rt1.example.jp", "rt2.example.jp"],
tags=["backup"],
)See the junos-ops tag documentation for how to tag sections in config.ini and for the matching CLI grammar.
Structured output format
run_show_command and run_show_commands accept an optional output_format parameter:
Value | Description |
| Default. Plain-text CLI output (same as typing the command) |
| NETCONF JSON output — device returns a structured dict |
| NETCONF XML output — device returns pretty-printed XML |
Note: CLI pipe stages (| match, | last, | count, etc.) are silently dropped
regardless of output_format. PyEZ's Device.cli() sends the command over NETCONF
RPC, which JunOS does not pipe-process. Run the command without pipes and filter
client-side instead. For a single command, run_show_command_batch's grep_pattern
argument (see below) offers server-side-style filtering — even against a single
host, by passing a one-element hostnames list — but it always fetches plain-text
output internally (it cannot be combined with output_format="json"/"xml"), and
it only accepts one command at a time, so it isn't a drop-in workaround for
run_show_commands' multi-command case.
# Get structured BGP summary data
run_show_command("router-a", "show bgp summary", output_format="json")Server-side output filtering
run_show_command_batch accepts an optional grep_pattern argument (Python re pattern). When set, only lines matching the pattern are kept from each host's output. Header lines (starting with #) are always preserved. Hosts with no matching lines show (no match).
This reduces large batch results — for example, 93 routers × show route summary — from hundreds of KB to a few hundred bytes by extracting just the relevant lines:
# Extract only the inet.0 destination count from 93 routers
run_show_command_batch(
command="show route summary",
tags=["main"],
grep_pattern=r"inet\.0:\s+\d+ destinations",
)Connection pool
junos-mcp maintains a per-host NETCONF connection pool. Reusing an idle
Device avoids the TCP/NETCONF handshake on every tool call; the pool
serialises concurrent operations on the same host through a per-host lock.
Environment variable | Default | Description |
|
| Set to |
|
| Idle timeout in seconds. Connections unused longer than this are closed on the next call. Set to |
Security note: pooled connections are long-lived SSH sessions. In
environments where session duration is restricted by policy, set
JUNOS_MCP_POOL_IDLE to a value shorter than the inactivity limit, or set
JUNOS_MCP_POOL=0 to disable the pool entirely.
Configuration
This server uses the same config.ini as junos-ops. See junos-ops README for details.
Each tool accepts an optional config_path parameter. If omitted, the default search order is used:
Environment variable
JUNOS_OPS_CONFIG./config.ini~/.config/junos-ops/config.ini
config.ini is not optional in practice: every tool — including get_router_list and health_check, which never open a device connection — reads from it at startup, and there is no degrade-gracefully path if it can't be found. Put a working config.ini in one of the three locations above before registering the server with any MCP client.
Write operations
Five tools change device state. Everything else only reads. These are the same five that default to dry_run=True — see Safety by Design for the dry-run and commit-confirmed mechanics; this table is about what each one calls and the device-side privilege that gates it.
Tool | API call | Permission gate |
|
| The |
|
| Same account needs file-copy / storage-write access (SCP to device flash). |
|
| Requires software-installation privilege — JUNOS |
|
| Same elevated software-maintenance privilege as |
| Schedules | Requires reboot/maintenance privilege on the device. |
Provision the config.ini account for a host with a read-only/operator login class and these five tools fail against that host with a permission error; every other tool — show commands, config reads, diagnostics, daily_brief — keeps working. There is no separate plugin-level switch for this: the privilege boundary is entirely in the JUNOS login class assigned to the account in config.ini.
Usage
Claude Code (plugin)
This repository doubles as a single-plugin marketplace, so Claude Code can install the server for you:
/plugin marketplace add shigechika/junos-mcp
/plugin install junos-mcp@junos-mcpThe plugin launches uvx junos-mcp and reads the same environment variables described in Configuration; export JUNOS_OPS_CONFIG (or drop config.ini at ./config.ini or ~/.config/junos-ops/config.ini) before starting Claude Code.
uvx must be on the PATH of the process that runs Claude Code — a login
shell usually has it, but a GUI-launched app may not; install
uv system-wide if the plugin fails to start.
Claude Code (manual)
Register the MCP server with claude mcp add:
claude mcp add junos-mcp \
-e JUNOS_OPS_CONFIG=~/.config/junos-ops/config.ini \
-- python -m junos_mcpThe --scope (-s) option controls where the configuration is stored:
Scope | Description | Config location |
| Current project, current user only |
|
| Current project, shared with team |
|
| All projects, current user only |
|
Claude Desktop
Add to Claude Desktop config file:
OS | Config file |
macOS |
|
Windows |
|
Linux |
|
{
"mcpServers": {
"junos-mcp": {
"command": "python",
"args": ["-m", "junos_mcp"],
"env": {
"JUNOS_OPS_CONFIG": "/path/to/config.ini"
}
}
}
}Restart Claude Desktop after editing.
Remote Access with OAuth (via mcp-stdio)
junos-mcp supports Streamable HTTP transport, enabling remote access from Claude Desktop or Claude Code through mcp-stdio as an OAuth proxy.
graph TB
A[junos-mcp<br/>remote server] <-- "OAuth 2.1 + HTTPS" --> B[mcp-stdio<br/>proxy]
B <-- "STDIO" --> C[Claude Desktop<br/>Claude Code]Step 1: Start junos-mcp with Streamable HTTP on the remote server
JUNOS_OPS_CONFIG=~/.config/junos-ops/config.ini \
python -m junos_mcp --transport streamable-httpThe server listens on http://localhost:8000/mcp by default.
Step 2: Register mcp-stdio as the MCP server on your local machine
claude mcp add junos-mcp -- mcp-stdio https://your-server:8000/mcpmcp-stdio handles OAuth 2.1 authentication (RFC 8414 discovery, RFC 7591 dynamic client registration, PKCE) and relays STDIO ↔ Streamable HTTP.
See mcp-stdio README for detailed configuration including OAuth provider setup.
When junos-mcp is launched by
mcp-stdio serve(the gateway mode) and runs on MCP SDK 2.x, use mcp-stdio 0.43.7 or later. Older gateways forward a request envelope that a 2.x server rejects; on those, install withmcp<2.
MCP Inspector (development)
mcp dev junos_mcp/server.pyTesting
pytest tests/ -v133 tests covering all 23 tools, the connection pool, helper functions, and edge cases.
Live smoke test
Those tests mock PyEZ, which is what makes them fast — and also what makes them
blind to a tool that has stopped returning real data.
scripts/smoke_test.py runs every registered tool against the configured
devices and fails on empty, malformed or error answers:
# uses the same inventory file as the server (JUNOS_OPS_CONFIG)
uv run python scripts/smoke_test.py
uv run python scripts/smoke_test.py --only facts --tracebackRead-only.
push_config,copy_package,install_package,rollback_packageandschedule_rebootare skipped by name, and a test enforces that.collect_rsi/collect_rsi_batchare skipped too — they change nothing, but they are minutes of RE CPU and a file per device for an answer no assertion would read. The command-running tools are exercised withshow system uptime: they accept operational commands in general, and a smoke test must not be the thing that types one that matters.No payloads in the report. Tool names and statuses only; error text is redacted too, since these tools quote the device they were asked about and the payloads are configuration.
Nothing estate-specific in the specs. The device the per-host tools need is discovered at run time from the configured inventory, and the hardware model
get_package_infoneeds comes from that device's own facts. Two tests keep it that way: one refuses those parameters as literals, the other bans anything address-shaped anywhere in the file, because this repository is public.Every probe refuses the
Error: .../Connection error: ...lines these tools return in place of raising — otherwise an unreachable device would read as a successful call.CI enforces the cheap half: a tool registered without a probe spec fails the build (
tests/test_smoke_probes.py), so adding a tool forces the question "how would we know it works?".scripts/smoke_harness.pyis the engine and holds no JUNOS knowledge: it is kept identical across the servers that share it, so fix engine bugs once and sync the file rather than patching this copy.
Architecture
Stdout-safe by construction
Since junos-ops 0.14.1, core functions return structured dict values and never print to stdout; MCP tools render output via junos_ops.display.format_*(). No contextlib.redirect_stdout is needed, so the MCP STDIO JSON-RPC channel stays clean.
Global State Initialization
junos-ops uses common.args and common.config as global variables. The MCP server initializes these using the same pattern as the test fixtures in junos-ops (conftest.py).
Parallel Execution
Batch tools (run_show_command_batch, collect_rsi_batch) use ThreadPoolExecutor via junos-ops common.run_parallel() with configurable max_workers.
License
Apache License 2.0
Available Tools
26 toolscheck_local_inventoryA
Verify local firmware checksums against the config.ini inventory.
Equivalent to junos-ops check --local. Iterates every
<model>.file / <model>.hash pair in the DEFAULT section of
config.ini and verifies the file on the staging server. No
device connection required.
Args: model: Restrict to a single model (empty = all configured models) config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| model | No | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full responsibility. It explains the process of iterating model-file/hash pairs and verifying checksums on the staging server. However, it does not detail what happens on mismatch or the tool's side effects, leaving some uncertainty.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with a brief summary, command equivalent, and parameter documentation in a consistent format. It is appropriately sized for the tool's complexity and front-loads the main purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that an output schema exists (not shown), the description does not need to explain return values. It sufficiently covers purpose, parameters, and behavior, making it complete for the provided context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description adds meaning to both parameters beyond the input schema. It explains that empty model means all configured models and empty config_path uses default search. This is valuable since the schema itself provides no parameter descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool verifies local firmware checksums against config.ini inventory, with a specific verb and resource. It gives a command equivalent for context. However, it does not explicitly distinguish from sibling tools like check_remote_packages or check_upgrade_readiness.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description notes that no device connection is required, implying usage when offline verification is needed. It provides an equivalent command hint, but lacks explicit guidance on when to use this tool versus alternatives, and does not mention when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_reachabilityA
Probe NETCONF reachability for one or more devices.
Equivalent to junos-ops check --connect. Opens a fast NETCONF
handshake (no full PyEZ facts gathering, 5-second TCP probe) and
reports per-host status as a table.
Args:
hostnames: List of target device hostnames (must exist in config.ini)
tags: Tag filter. Each list element is one tag group (comma-separated
tags AND together within a group); multiple list elements OR
together across groups. Combined with hostnames the result is
the intersection.
max_workers: Maximum parallel threads (default 20, matches junos-ops)
config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | ||
| hostnames | No | ||
| config_path | No | ||
| max_workers | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It discloses it's a fast NETCONF handshake (5-second TCP probe), doesn't gather full facts, reports per-host status as table, and uses parallel threads. This is good transparency for a non-annotated tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is fairly long but well-structured with bullet points and a code-equivalent line. All sentences add value. Slight redundancy in explaining tags filter, but overall efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given sibling tools are network device management functions, the description covers the tool's purpose, parameters, and output (table). Output schema exists, so return values need not be detailed. Complete enough for selection and invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so description must add meaning. It explains all four parameters: hostnames (must exist in config.ini), tags (complex filter logic with AND/OR and intersection with hostnames), max_workers (default 20), config_path (empty string uses default). This exceeds schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it probes NETCONF reachability for devices, specifies it's a fast handshake without full PyEZ facts gathering, and distinguishes from siblings like get_device_facts or health_check by mentioning speed and specific protocol.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies it's for quick reachability checks (fast NETCONF handshake) but does not explicitly state when to use versus alternatives or when not to use. No exclusion criteria given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_remote_packagesA
Verify the staged firmware checksum on one or more devices.
Equivalent to junos-ops check --remote. Connects to each device
via NETCONF and verifies the package file (<model>.file) sitting
on the device against <model>.hash. Doubles as post-SCP copy
verification. Per-host model resolution: model arg > config.ini
[host].model > device facts.
Args:
hostnames: List of target device hostnames (must exist in config.ini)
tags: Tag filter. Each list element is one tag group (comma-separated
tags AND together within a group); multiple list elements OR
together across groups. Combined with hostnames the result is
the intersection.
model: Override model resolution for all hosts (empty = per-host resolution)
max_workers: Maximum parallel threads (default 20)
config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | ||
| model | No | ||
| hostnames | No | ||
| config_path | No | ||
| max_workers | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description bears full burden. It discloses connection via NETCONF, checksum verification, and parallelism via 'max_workers'. It does not explicitly state non-destructiveness, but the verification purpose implies it. The description could mention that no changes are made to devices, but current detail is sufficient for a read-only check tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured: purpose first, then equivalent command, then details, then parameter docs. It is concise but contains slight redundancy (e.g., 'Per-host model resolution' echoes model arg). Overall, it's efficient and front-loaded, earning a 4.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 parameters, no annotations, and presence of output schema, the description is comprehensive. It covers the verification process, parameter details, and model resolution. It lacks error handling or prerequisites, but for a verification tool with output schema, it is sufficiently complete. Missing details like expected return values are covered by the output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so description must explain parameters. It does so thoroughly: 'hostnames' (target list), 'tags' (filter logic with AND/OR groups), 'model' (override), 'max_workers' (parallelism), 'config_path' (config file). Each parameter's role and default are clear, adding significant value beyond the raw schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('verify'), resource ('staged firmware checksum'), and scope ('on one or more devices'). It distinguishes the tool from siblings like 'install_package' or 'copy_package' by focusing on verification. The mention of equivalence to a CLI command further clarifies its role.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides context for usage, e.g., 'Doubles as post-SCP copy verification', and explains the model resolution hierarchy. However, it does not explicitly state when to avoid using this tool or compare it to alternatives like 'check_local_inventory'. While the context is helpful, explicit comparisons would improve clarity.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_upgrade_readinessB
Check if a device is ready for upgrade.
Verifies whether the device is already running the target version, and performs a dry-run to check local/remote package availability.
Args: hostname: Target device hostname (must exist in config.ini) config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| hostname | Yes | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, description carries full burden but only mentions dry-run and version check; lacks details on error handling, permissions, or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Concise, front-loaded with purpose, and uses clear structure. No unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Describes core functionality and parameters, but missing usage context and output hints despite having an output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Adds meaning beyond schema: hostname must exist in config.ini, config_path default uses default search. Compensates for 0% schema description coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool checks if a device is ready for upgrade, verifying target version and package availability. However, it does not differentiate from sibling tools like check_remote_packages or compare_version.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus individual checks; it only implies comprehensive readiness without explicit context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
collect_rsiA
Collect RSI (Request Support Information) and SCF (Show Configuration) from a device.
Saves two files: {hostname}.SCF (show configuration) and {hostname}.RSI (request support information). Model-specific timeouts are applied automatically (e.g., SRX Branch: 1200s, Virtual Chassis: 1800s).
Args: hostname: Target device hostname (must exist in config.ini) output_dir: Directory to save output files (empty uses config RSI_DIR or current dir) config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| hostname | Yes | ||
| output_dir | No | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Though no annotations are provided, the description discloses key behaviors: saving two files with specific naming, automatic model-specific timeouts, and default parameters. It does not mention whether the operation is safe/read-only or any potential side effects, but for a collection tool these are reasonable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and well-structured, starting with the purpose, then detailing output and arguments. It avoids unnecessary words while providing essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity (3 parameters, output schema exists), the description covers the core functionality, output, and special behavior (timeouts). It does not detail the return structure (but output schema may do so) or error cases, but is largely complete for effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has no descriptions (0% coverage), but the description explains each parameter beyond its name: hostname must exist in config.ini, output_dir defaults, config_path defaults. This adds significant meaning, though some details (e.g., hostname validation) are omitted.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool collects RSI and SCF from a device, identifies the output files, and distinguishes it from batch operations. It uses a specific verb ('Collect') and names the resources (RSI, SCF), making the purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance is provided on when to use this tool versus its sibling tools like 'collect_rsi_batch' or other diagnostic tools. The description implies it's for a single device but does not state prerequisites or scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
collect_rsi_batchA
Collect RSI/SCF from multiple devices in parallel.
Uses ThreadPoolExecutor for concurrent collection. Default 20 workers
matches junos-ops CLI default for RSI collection. Either hostnames
or tags selects the targets; if both are omitted, every router in
config.ini is targeted. When both are given, the intersection is used.
Args:
hostnames: List of target device hostnames
tags: Tag filter. Each list element is one tag group (comma-separated
tags AND together within a group); multiple list elements OR
together across groups. Combined with hostnames the result is
the intersection.
output_dir: Directory to save output files (empty uses config RSI_DIR or current dir)
max_workers: Maximum parallel threads (default 20)
config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | ||
| hostnames | No | ||
| output_dir | No | ||
| config_path | No | ||
| max_workers | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses concurrency, default workers, and target intersection logic, but no annotation support and omits potential side effects or permissions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-organized with summary, details, and parameter list, though slightly verbose; every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers essential aspects for a batch collection tool with 5 params and no annotations, though could mention error handling or output file details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Explains each parameter in detail despite 0% schema coverage, including complex tag filter logic and default behaviors, adding significant value beyond schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it collects RSI/SCF from multiple devices in parallel using ThreadPoolExecutor, distinguishing it from singular collect_rsi and batch command tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Describes target selection via hostnames/tags and defaults, but lacks explicit when-to-use vs alternatives like singular collect_rsi.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
compare_versionA
Compare two JUNOS version strings.
Returns whether left is greater than, equal to, or less than right. No device connection required.
Args: left: First JUNOS version string (e.g., "22.4R3-S6.5") right: Second JUNOS version string (e.g., "23.2R1.0")
| Name | Required | Description | Default |
|---|---|---|---|
| left | Yes | ||
| right | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses that the operation is a pure string comparison, no device connection, and the output is a comparison result. This is sufficient for a simple, deterministic tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is brief, with only two sentences that directly explain purpose, usage, and no device requirement. It is front-loaded and every sentence provides essential information without waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has an output schema (not shown but present), so the description only needs to explain the high-level behavior, which it does. It covers purpose, parameters, and return value, making it complete for a simple comparison tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description compensates by providing example version strings (e.g., 22.4R3-S6.5) that clarify the expected format. This adds value beyond the basic schema types.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool compares two JUNOS version strings and returns the relational result. The verb 'compare' and resource 'JUNOS version strings' are specific, and the sibling tools (e.g., get_version, check_reachability) have distinct purposes, eliminating confusion.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'No device connection required,' indicating light-weight usage without network calls. While it doesn't list when not to use, the context is clear, and the sibling tools provide natural alternatives for version retrieval or device checks.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
copy_packageA
Copy firmware package to remote device via SCP with checksum verification.
Checks if copy is needed (already running target version, or package already present on device). Cleans up storage before copying.
Args: hostname: Target device hostname (must exist in config.ini) dry_run: If True (default), show what would be done without copying force: If True, skip version checks and force copy config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| force | No | ||
| dry_run | No | ||
| hostname | Yes | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description takes full responsibility. It discloses key behaviors: checksum verification, existence checks, storage cleanup, and the function of dry_run and force parameters. However, it lacks details on error handling or timeout behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with a summary line followed by bullet points. It is reasonably concise but includes some explanatory text that could be shortened without losing meaning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 4 parameters and no annotations, the description covers purpose, behavior, and parameter semantics. An output schema exists but its content is not described; however, the description is sufficient for basic invocation. Minor gaps in error handling or output format remain.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description compensates for 0% schema coverage by detailing each parameter's meaning: hostname must exist in config.ini, dry_run defaults to true, force skips checks, config_path default search. This adds substantial value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Copy firmware package to remote device via SCP with checksum verification', specifying a concrete action and resource. It differentiates from sibling tools like install_package or rollback_package by focusing on the copy step.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use the tool by mentioning pre-checks (version, presence) and the force flag's effect, but it does not explicitly list conditions for use or caution against using when copy is unnecessary. No direct comparison with siblings is given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
daily_briefA
Run a morning health check across multiple devices in parallel.
Checks per host (Phase 1):
show system alarms/show chassis alarmsshow interfaces descriptions— a physical interface is flagged[IF_DOWN]only when it has a description (Admin=up,Link=down) and itsLast flappedtime is withinsince_hours. Undescribed unused ports and chronically-down ports are suppressed (loopback / mgmt / internal logical units are also excluded).show log messages | last 200— alert patterns withinsince_hoursdual-RE redundancy — an explicit routing-engine fault is flagged
[RE_FAULT](skipped on SRX chassis clusters, whose facts misreport RE status; a failed cluster node raises chassis alarms instead)route_baseline(optional) — when > 0, a device whoseinet.0destination count differs from this value is flagged[ROUTE_BASELINE]. Scope withtags(e.g.tags=["main"], route_baseline=152), since full-table routers carry far more routes than access routers.
Syslog patterns watched: BGP state change away from Established, STP port role change, OSPF neighbor down, ARP address conflict, IF_DOWN.
since_hours defaults to 18 (≈ previous 15:00 for a 09:00 morning run).
Tags default to none (all routers); pass tags=["main"] to limit scope.
Output tiers:
CRITICAL — connection failure
WARNING — at least one anomaly found
OK — clean
Returns a Markdown summary with anomaly details for CRITICAL/WARNING hosts and a collapsed OK list.
The call stops after JUNOS_DEADLINE seconds (default 45; 0 disables) so a
large fleet does not run into a client's per-call timeout: hosts that have not
finished are listed under NOT CHECKED and the summary is marked partial.
For a full sweep of a large fleet use daily_brief_start / daily_brief_result.
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | ||
| hostnames | No | ||
| config_path | No | ||
| max_workers | No | ||
| since_hours | No | ||
| route_baseline | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden, and it does so thoroughly: it lists per-host checks, alarm patterns, flag suppression rules, output tiers, Markdown return format, JUNOS_DEADLINE behavior, and partial NOT CHECKED handling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is long but front-loaded and structured with sections for purpose, checks, output tiers, and timeout behavior. Given the operational complexity, most sentences earn their place, though the length is near the upper bound.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a complex, multi-device health-check tool with no annotations and an output schema, the description covers behavior, return format, and alternatives well. However, the 0% schema coverage means the omission of hostnames, config_path, and max_workers leaves the invocation contract incomplete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% across six parameters, so the description must compensate. It documents since_hours default (18), tags default/scoping, and route_baseline usage with tags, but omits hostnames, config_path, and max_workers, leaving clear gaps.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States 'Run a morning health check across multiple devices in parallel', a specific verb and resource, and points to daily_brief_start/daily_brief_result for full fleet sweeps, distinguishing its synchronous scope from asynchronous siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly names the alternative and condition: 'For a full sweep of a large fleet use daily_brief_start / daily_brief_result.' It also supplies defaults and scoping guidance ('Tags default to none'; pass tags=['main'] to limit scope), giving clear context for use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
daily_brief_resultA
Fetch a daily_brief_start job by id.
status is running (keep polling), done (result holds the brief), error
(error holds the exception type name only) or unknown (bad or expired id).
| Name | Required | Description | Default |
|---|---|---|---|
| job_id | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden and does so well: it enumerates the four status states, explains what result and error hold, and warns that 'unknown' means a bad or expired id. It omits whether the call is idempotent/read-only or how long a job survives, which keeps it from a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two compact blocks: the action sentence first, then a status-to-outcome mapping. Every clause is load-bearing and no sentence is wasted.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
There is no output schema, so the description must explain return values — and it does, mapping each status to the field that carries the payload and noting that error holds only the exception type name. For a one-parameter polling tool this is complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% and the single job_id parameter is undocumented in the schema, so the description must compensate. It implies the id originates from daily_brief_start and that an expired id yields 'unknown', but never states the id's format or where exactly to obtain it — partial compensation only.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (fetch) and resource (a daily_brief_start job, by id), and explicitly ties itself to the sibling tool that produces the id. An agent can distinguish it from daily_brief and daily_brief_start without opening any schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives concrete operational guidance embedded in the status semantics: 'running (keep polling)' tells the agent to call again, while 'done' tells it to stop and read result. It does not explicitly say when not to use it or name an alternative retrieval path, so it falls short of a 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
daily_brief_startA
Start a daily_brief in the background; returns immediately with a job_id.
Use this for a fleet too large for one synchronous daily_brief (a client's per-call
timeout is about 60 s). Arguments mirror daily_brief. Poll daily_brief_result(job_id)
every few seconds until status is done (the full brief is under result, with no
deadline) or error. If too many jobs are retained, returns {"status": "rejected", ...}.
While a job is running, a call that would switch to a different config file is
refused (the config is process-global); use the same config_path or none.
Args:
hostnames: Only these hosts (must exist in config.ini). Default: all hosts.
tags: Tag filter. Each element is one group: a comma inside an element means
the host must have ALL of those tags ("main,core"); several elements
are ORed (["main", "core"] = hosts tagged main OR core). Case-insensitive.
With hostnames too, the result is the intersection of the two.
since_hours: Look-back window for syslog/interface events (default 18).
route_baseline: When > 0, flag a device whose inet.0 route count differs.
max_workers: Devices checked in parallel (default 10).
config_path: Path to config.ini (empty uses the default search).
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | ||
| hostnames | No | ||
| config_path | No | ||
| max_workers | No | ||
| since_hours | No | ||
| route_baseline | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does so: async fire-and-return semantics, the job_id handle, polling cadence, terminal status values (done/error), the rejection mode when too many jobs are retained, and the process-global config lock that can refuse a call. That is far more than the name or schema conveys.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Front-loaded with the core async contract, then failure modes, then args — a sensible order with no filler. The prose is dense and slightly run-on in places (the timeout aside, the tag clause), but for a six-parameter tool with zero schema documentation the length is largely earned.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers the full lifecycle an agent needs: invocation, returned job_id, polling target and cadence, terminal states, rejection handling, and the concurrency constraint. No output schema exists, yet the description still tells the agent what 'result' holds, so nothing material is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate, and it documents all six parameters with real semantics: tag AND/OR grouping with case-insensitivity, intersection behavior when combined with hostnames, default look-back of 18 hours, route_baseline threshold behavior, and config_path fallback. This is exactly the syntax detail the bare schema lacks.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Start a daily_brief in the background') and immediately gives the distinguishing behavior: it 'returns immediately with a job_id'. It explicitly contrasts itself with the sibling daily_brief by naming the condition (fleet too large for one synchronous call) that separates them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives explicit when-to-use ('for a fleet too large for one synchronous daily_brief', citing the ~60 s per-call timeout), names the follow-up tool and cadence ('Poll daily_brief_result(job_id) every few seconds'), and states the when-not constraint (config_path cannot be switched while a job runs).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_configB
Get device configuration.
Args: hostname: Target device hostname (must exist in config.ini) output_format: Output format - "text" (default), "set", or "xml" config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| hostname | Yes | ||
| config_path | No | ||
| output_format | No | text |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It does not disclose that the operation is read-only, whether authentication is required, or any side effects. The statement 'Get device configuration' implies a safe operation but is not explicit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is brief and well-organized with a purpose line followed by a parameter list. It avoids redundancy and focuses on key information, though the parameter descriptions could be integrated more naturally.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with an output schema, the description does not need to detail return values. However, it lacks behavioral context (e.g., read-only) and usage scenario, which are important for an agent to use it correctly, making it only minimally complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema coverage, the description adds necessary meaning: hostname must exist, output_format options (text/set/xml), and config_path default behavior. This compensates well for the empty schema descriptions, though it could specify format details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Get device configuration' using a specific verb and resource. It distinguishes itself from siblings like get_config_diff and get_version by focusing on the full configuration retrieval.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives. The description does not provide context for when not to use it or mention any prerequisites, leaving the agent to infer usage from the tool name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_config_diffA
Show configuration difference compared to a rollback version.
Args: hostname: Target device hostname (must exist in config.ini) rollback_id: Rollback version to compare against (0-49, default 1) config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| hostname | Yes | ||
| config_path | No | ||
| rollback_id | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the burden. It mentions constraints (hostname must exist in config.ini, rollback_id 0-49) indicating a read-only 'show' operation. However, it does not disclose error behavior, authentication needs, or rate limits, which are important for a tool with no annotation safety hints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise with no redundant sentences. It uses clear section headers (Args) and effectively front-loads the purpose. Every sentence provides necessary context.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given a relatively simple tool and the presence of an output schema (reducing need to describe return values), the description covers purpose, parameters, and key constraints. It could be improved by briefly noting expected behavior if rollback version does not exist or if device is unreachable, but it's largely sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage, the description adds significant meaning beyond the schema: it explains that hostname must exist in config.ini, rollback_id range (0-49, default 1), and config_path behavior (empty uses default). This clarifies constraints and defaults not evident from types alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Show configuration difference compared to a rollback version' with a specific verb and resource. It distinguishes from siblings like 'get_config' (which retrieves current config) and 'compare_version' (generic comparison) by specifying rollback comparison.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for comparing current config to a rollback version but does not explicitly state when to use this tool versus alternatives like 'compare_version' or 'get_config'. No exclusions or conditions are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_device_factsA
Get basic device information (model, hostname, serial, version, etc.).
Args: hostname: Target device hostname (must exist in config.ini) config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| hostname | Yes | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It mentions hostname must exist in config.ini but does not describe behavior on failure (e.g., error handling, return format), or what happens if config_path is invalid. This is insufficient for a read operation that could fail.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is relatively short (one sentence + Args block) and front-loaded with the purpose. Every sentence adds value, though the Arg descriptions could be integrated into a more fluent structure without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given low parameter count (2), presence of an output schema (which will describe return values), and no nested objects, the description adequately explains what the tool does and the key parameters. It could mention what 'basic device information' includes beyond the examples, but the output schema likely covers that.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, but description adds meaning beyond schema: hostname must correspond to a device in config.ini, config_path uses default search if empty. This clarifies the source of the hostname and the optional file path.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Get basic device information (model, hostname, serial, version, etc.)' which is a specific verb+resource combination. It distinguishes from siblings like get_version and get_router_list by focusing on a broad set of facts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus siblings (e.g., get_version for just version, get_router_list for inventory). The description only notes prerequisites (hostname must exist in config.ini) but lacks usage context or alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_package_infoA
Get package file name and expected hash for a specific device model.
Retrieves model-specific package information from config.ini. No device connection required.
Args: hostname: Target device hostname (must exist in config.ini) model: Device model name (e.g., "EX2300-24T") config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| model | Yes | ||
| hostname | Yes | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It discloses that the tool reads from config.ini and requires no device connection, implying safety. Missing details about error behavior if config or hostname missing, but overall it is honest and clear about its behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise with a clear purpose statement up front, followed by a structured Args list. Every sentence provides necessary information without redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (3 params, no enums, output schema exists), the description covers the essential aspects: what it does, parameters, and that it's safe. It lacks error conditions but is generally sufficient for an agent to use correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must explain parameters. The Args section provides meaning: hostname must exist, model includes an example, config_path default path. This adds value beyond the schema, though could be more detailed on constraints.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly states 'Get package file name and expected hash for a specific device model.' It clearly identifies the action (get) and the resource (package info). It also notes 'No device connection required,' distinguishing it from tools that require connectivity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains the function and parameters but does not provide explicit guidance on when to use this tool versus its many siblings (e.g., check_remote_packages, install_package). It mentions no device connection, which hints at appropriate contexts, but lacks clear when/not-to-use advice.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_router_listA
List routers defined in config.ini, optionally filtered by tags.
Returns section names from config.ini, which represent the hostnames that can be used with other tools. No device connection required.
Args:
tags: Tag filter. Each list element is one tag group (comma-separated
tags AND together within a group); multiple list elements OR
together across groups. E.g. ["tokyo,core", "backup"] means
(tokyo AND core) OR backup. None/empty returns all.
config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Given no annotations, the description discloses that the tool reads a local config file and returns section names without connecting to devices, which is transparent for a read-only listing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with a concise summary followed by an Args section, though it could be slightly more streamlined without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the tool's input, behavior, and output sufficiently, and with an output schema present, no further detail on return values is needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The description provides a detailed explanation of the tags parameter with logical grouping (AND within group, OR across groups) and clarifies the config_path default behavior, compensating for the 0% schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the tool lists routers from config.ini with optional tag filtering, distinguishing it from sibling tools that perform other operations like package management or device commands.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Describes the purpose as returning hostnames for use with other tools and notes no device connection required, providing clear context for when to use it, though it does not explicitly state alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_versionA
Get JUNOS version information with upgrade status.
Shows running version, planning version, pending version, local/remote package status, and reboot schedule.
Args: hostname: Target device hostname (must exist in config.ini) config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| hostname | Yes | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries the full burden. It discloses the output categories (running, planning, pending, package status, schedule), implying a read-only operation. However, it does not address potential side effects, authentication needs, or error behavior (e.g., missing hostname), leaving some behavioral gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the primary purpose and lists version details compactly. The Args section is clear but somewhat redundant with the schema. Overall, it is efficient with minimal waste, earning a 4.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of an output schema (not shown), the description reasonably covers the returned information. It does not explain error conditions or usage context relative to sibling tools. For a simple retrieval tool, it is adequate but could be more thorough about prerequisites and edge cases.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage, so the description compensates by adding meaning: hostname must exist in config.ini, config_path defaults to empty string for default search. These enrich the bare schema types, though further details (e.g., format of hostname) are omitted.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly states 'Get JUNOS version information with upgrade status,' clearly identifying the verb (Get) and resource (JUNOS version information). It lists specific details like running, planning, and pending versions, which distinguishes it from sibling tools such as get_device_facts or compare_version.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives. The description only specifies the required parameter (hostname) and default for config_path, but does not mention any prerequisites, exclusion criteria, or comparisons with sibling tools like check_upgrade_readiness or get_device_facts.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
health_checkA
Report server version and config status — without connecting to any device.
Call this at session start (or after a tool-call timeout) to confirm the MCP is up, see which version is running, and verify that config.ini loads and how many routers it defines. Lightweight by design: junos-mcp fans out to many Juniper devices, so this check ONLY loads config.ini and counts hosts — it opens NO NETCONF/SSH connection to any device.
Always returns the same keys: status (healthy / error),
service, version, config_path (the resolved config.ini path it
would use), router_count (number of host sections in config.ini),
tags (sorted list of distinct tags across configured hosts), and
config (ok / error / missing). On an error result, detail carries
the reason. There is no degraded state: this check either loads config.ini
or it does not.
Args: config_path: Path to config.ini (empty string uses default search).
| Name | Required | Description | Default |
|---|---|---|---|
| config_path | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, but the description fully discloses behavior: lightweight design, only loads config.ini, no network connections, guaranteed return keys, and error states. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-structured with a headline summary, usage guidance, detailed return fields, and parameter documentation. Every sentence adds value without verbosity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Without an output schema, the description enumerates all return keys (status, service, version, etc.) and explains error handling. It compensates fully for missing structured metadata.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage, but the description adds a full parameter explanation: 'config_path: Path to config.ini (empty string uses default search).' This provides essential meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Report server version and config status — without connecting to any device.' It identifies the specific verb and resource, and distinguishes from sibling tools that connect to devices.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly advises 'Call this at session start (or after a tool-call timeout)' and specifies when not to use it: 'opens NO NETCONF/SSH connection to any device,' contrasting with other tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
install_packageA
Install firmware package on device with pre-flight checks.
Full upgrade flow: version check -> rollback pending if needed -> copy (with checksum) -> clear reboot schedule -> rescue config save -> request system software add (with validation).
Args:
hostname: Target device hostname (must exist in config.ini)
dry_run: If True (default), show what would be done without installing
force: If True, skip version checks and force install
unlink: If True, run request system software add <pkg> unlink
via CLI instead of PyEZ SW.install(). Use for low-flash devices
(EX2300 / EX3400, ~1.3 GB /dev/gpt/junos) where major version
upgrades fail with "ERROR: insufficient space" because PyEZ does
not expose the unlink parameter. The CLI path frees ~330 MB by
unlinking the source tgz during extraction.
config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| force | No | ||
| unlink | No | ||
| dry_run | No | ||
| hostname | Yes | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses pre-flight checks, the full upgrade flow, and explains the effect of dry_run, force, and unlink including the rationale for CLI path.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with a purpose sentence, a bulleted upgrade flow, and detailed parameter descriptions. Every sentence adds value with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of 5 parameters and no annotations, the description provides complete behavioral and parameter information. The return value is not explained but an output schema exists, which per rules is sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, but the description provides detailed explanations for each parameter: hostname must exist in config.ini, dry_run default viewing mode, force skipping checks, unlink for low-flash devices, config_path default.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Install firmware package on device with pre-flight checks' and details the full upgrade flow, distinguishing it from sibling tools like rollback_package and copy_package.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides context for when to use force (skip version checks) and unlink (low-flash devices), but does not explicitly compare to siblings or state when not to use this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_remote_filesA
List files on the remote device path (/var/tmp by default).
Args: hostname: Target device hostname (must exist in config.ini) config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| hostname | Yes | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description bears full burden for behavioral disclosure. It fails to mention side effects, authorization needs, or behavior in error cases (e.g., invalid hostname, missing path). The default path is mentioned but the absence of a path parameter is confusing.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise with no wasted words. It uses a clear 'Args:' structure to document parameters. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given an output schema exists, return values need not be explained. However, the description omits behavior for invalid inputs, error handling, and how the default path is used. It is minimally complete for a simple list operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description adds needed meaning. It explains that hostname must exist in config.ini and that config_path is the path to config.ini with a default search behavior. This goes beyond the schema's type/default definitions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists files on a remote device path, specifying the default path '/var/tmp'. It uses a specific verb and resource, distinguishing it from sibling tools like 'check_local_inventory' or 'run_show_command'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides context that hostname must exist in config.ini, but does not specify when to use this tool over others or when not to use it. No alternatives are mentioned, leaving usage guidance implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
push_configA
Push configuration to a device with commit confirmed and health check.
Supports two input methods (exactly one required):
config_file: Path to a .set or .j2 file containing set commands
set_commands: List of set command strings (inline)
Safety features (not available in Juniper's official MCP server):
dry_run mode (default True): shows diff without committing
commit confirmed: auto-rollback if not confirmed within timeout
health check: auto-rollback on connectivity failure after commit
Commit flow (normal): lock -> load -> diff -> commit_check -> commit confirmed -> health check -> confirm -> unlock
Commit flow (no_commit=True — intentional auto-rollback): lock -> load -> diff -> commit_check -> commit confirmed -> unlock (health check and final confirm are skipped; JUNOS rolls back automatically after confirm_timeout minutes)
Args:
hostname: Target device hostname (must exist in config.ini)
config_file: Path to .set or .j2 file (mutually exclusive with set_commands)
set_commands: List of set commands (mutually exclusive with config_file)
dry_run: If True (default), show diff only without committing
confirm_timeout: Minutes before auto-rollback (default 1, used with commit confirmed)
no_commit: If True, issue commit confirmed but intentionally skip the final
commit so JUNOS auto-rolls back after confirm_timeout minutes. Useful
for triggering service restarts (e.g. syslog on EX3400) where no
request ...restart command exists. dry_run=True takes precedence
over no_commit (diff is shown but nothing is committed).
health_check: Fallback health check commands tried in order after commit.
Passes if ANY command succeeds. Supports "ping ..." (checks packets received),
"uptime" (NETCONF RPC probe), or any CLI command (success if no exception).
Default: ["uptime"] — uses the existing NETCONF session and does not
depend on ICMP reachability. (Changed from broadcast ping in junos-mcp
0.11.0 to match junos-ops 0.16.8+.)
Ignored when no_commit=True.
config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| dry_run | No | ||
| hostname | Yes | ||
| no_commit | No | ||
| config_file | No | ||
| config_path | No | ||
| health_check | No | ||
| set_commands | No | ||
| confirm_timeout | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full burden. It fully discloses the commit flows (normal and no_commit), dry_run precedence, health check behavior, and mutual exclusivity of inputs. All behavioral traits are transparently documented.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with clear sections (main purpose, input methods, safety features, commit flows, Args list). It is fairly long but every sentence adds value. Slightly verbose, but the structure compensates.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 8 parameters, 0% schema coverage, and no annotations, the description is highly complete. It covers all parameters, explains two commit flows, and provides edge cases (e.g., no_commit for restarts). No gaps are evident.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, but the description provides detailed explanations for each parameter, including mutual exclusivity, defaults, and behavior. It adds substantial meaning beyond the schema, such as the no_commit use case and health check command list.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Push configuration to a device with commit confirmed and health check.' It uses a specific verb and resource, and distinguishes from sibling tools like get_config, run_show_command, etc., which are read-only or have different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains when to use the tool (push configuration), details two mutually exclusive input methods, and describes safety features. It also provides a specific use case for no_commit (service restarts). However, it does not explicitly state when NOT to use it, but the clarity of purpose is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
rollback_packageA
Rollback to previously installed package version.
Checks pending version first. If no pending version exists, rollback is skipped.
Args: hostname: Target device hostname (must exist in config.ini) dry_run: If True (default), show what would be done without rolling back config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| dry_run | No | ||
| hostname | Yes | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses key behaviors: checking pending version, skipping rollback if absent, and dry_run defaulting to true. It could mention more about side effects (e.g., if rollback triggers a reboot).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is multi-line with an Args section, but every sentence adds value. It is not overly verbose and avoids redundancy, though it could be slightly more compact.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has an output schema (not shown) and 3 parameters. The description covers behavioral aspects and parameter roles well. It lacks information about return values, but the output schema likely fills that gap. Overall, it is adequately complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 0% schema description coverage, the description adds essential meaning: hostname must exist in config.ini, dry_run shows what would be done, config_path uses default search if empty. These details compensate for the missing schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Rollback to previously installed package version', which is a specific verb+resource pair. It also distinguishes from siblings like install_package and copy_package by focusing on rollback functionality.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains that the tool checks a pending version first and skips if none exists, providing clear context for when the tool is effective. However, it does not explicitly state when not to use it or mention alternative tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
run_show_commandA
Run a CLI show command on the device and return output.
Args: hostname: Target device hostname (must exist in config.ini) command: CLI command to execute (e.g., "show bgp summary") output_format: Output format — "text" (default), "json", or "xml". Note: pipe stages (| match, | last, | count, etc.) are silently dropped regardless of output_format — PyEZ's Device.cli() sends the command over NETCONF RPC, which JunOS does not pipe-process. Run the command without pipes; for line filtering, use run_show_command_batch's grep_pattern argument instead (works for a single host too — pass a one-element hostnames list). That workaround always fetches text output internally, so it cannot be combined with output_format="json"/"xml" — for structured output you must filter the result client-side instead. config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| command | Yes | ||
| hostname | Yes | ||
| config_path | No | ||
| output_format | No | text |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses critical behaviors: pipe stages are silently dropped due to PyEZ's NETCONF RPC, and explains the workaround. It does not mention destructive behavior, but 'show' commands are inherently read-only.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is lengthy but well-structured with clear argument descriptions and important caveats. Every sentence adds value, though some redundancy could be trimmed. It is front-loaded with the core action.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no annotations and an output schema not shown, the description covers all necessary context: parameter details, behavioral quirks (pipe dropping), and alternative tools. It is fully adequate for an agent to correctly invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0%, so the description must explain all parameters. It does so thoroughly: hostname (must exist in config.ini), command (example given), output_format (text/json/xml with pipe-drop warning), and config_path (empty default). Each parameter adds meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description begins with 'Run a CLI show command on the device and return output,' which is a specific verb+resource statement. It clearly distinguishes itself from siblings like run_show_command_batch by mentioning batch usage for filtering.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool vs alternatives, including details about pipe-stage dropping, recommending run_show_command_batch with grep_pattern for filtering, and warning that structured output cannot be combined with batch filtering. This provides clear usage context and exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
run_show_command_batchA
Run a CLI show command on multiple devices in parallel.
Uses ThreadPoolExecutor for concurrent execution. Either hostnames
or tags selects the targets; if both are omitted, every router in
config.ini is targeted. When both are given, the intersection is used.
Args:
command: CLI command to execute on all devices
hostnames: List of target device hostnames (must exist in config.ini)
tags: Tag filter. Each list element is one tag group (comma-separated
tags AND together within a group). Multiple list elements OR
together across groups. E.g. ["tokyo,core", "backup"] means
(tokyo AND core) OR backup. Combined with hostnames the
result is the intersection.
grep_pattern: Optional Python re pattern. When set, only lines
matching the pattern (via re.search) are kept from each
host's output. Header lines (starting with #) are always
preserved. Hosts with no matching lines show (no match).
Reduces large batch outputs to the essential lines. This tool
always fetches text output internally (there is no
output_format parameter here) — grep_pattern filters
plain-text lines and cannot be combined with structured
JSON/XML output.
max_workers: Maximum parallel threads (default 5)
config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | ||
| command | Yes | ||
| hostnames | No | ||
| config_path | No | ||
| max_workers | No | ||
| grep_pattern | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. Discloses ThreadPoolExecutor, concurrency, default max_workers, grep behavior (preserving headers, '(no match)' display), and that output is always text (no structured format). Lacks details on error handling or timeouts, but sufficient for typical usage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-structured with a brief intro followed by an Args section. Each sentence adds unique value, though length could be trimmed slightly. No redundant information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers all input parameters thoroughly. Output schema exists (not shown), so omission of return details is acceptable. Does not mention error scenarios or prerequisites (e.g., config.ini must exist), but overall complete for a tool with 6 parameters and no annotations.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 0% description coverage; the description provides detailed explanations for all 6 parameters. Especially strong on tags (explaining AND/OR logic with example) and grep_pattern (behavior, preservation of headers). Fully compensates for missing schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool runs a CLI show command on multiple devices in parallel, with specific verbs ('run', 'batch') and resource ('CLI show command'). It distinguishes from siblings like run_show_command (single device) by emphasizing batch parallelism.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly explains when to use hostnames vs tags, including the intersection logic when both are provided, and the fallback to all routers when omitted. Provides concrete examples for tag filtering. Could mention when not to use (e.g., for single device), but overall clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
run_show_commandsA
Run multiple CLI show commands on the device in a single session.
Commands are executed in sequence and stop on the first failure. To run all commands regardless of individual errors, call run_show_command once per command instead.
Args: hostname: Target device hostname (must exist in config.ini) commands: List of CLI commands to execute output_format: Output format — "text" (default), "json", or "xml". Note: pipe stages (| match, | last, | count, etc.) are silently dropped regardless of output_format — PyEZ's Device.cli() sends the command over NETCONF RPC, which JunOS does not pipe-process. Run commands without pipes and filter client-side. run_show_command_batch's grep_pattern argument offers server-side-style filtering, but it only accepts one command at a time — it does not cover this tool's multi-command case, so it is not a drop-in workaround here. config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| commands | Yes | ||
| hostname | Yes | ||
| config_path | No | ||
| output_format | No | text |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It discloses that commands stop on first failure, that pipe stages are silently dropped regardless of output_format due to PyEZ's NETCONF mechanism, and explains the default behavior for config_path. This is comprehensive behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Well-structured with clear sections and front-loaded purpose sentence. While slightly long, every sentence adds value. Could be slightly tighter, but overall effective.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that an output schema exists (context signal), the description does not need to cover return values. It covers main behavior, parameter details, limitations, and when to use alternatives. Complete for a tool of this complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, but the description adds full meaning for all 4 parameters: hostname (target device requirement), commands (list of CLI commands), output_format (text/json/xml with pipe-dropping caveat), and config_path (empty string = default search). This goes well beyond the bare schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool runs multiple CLI show commands in a single session. It explicitly distinguishes from siblings like run_show_command and run_show_command_batch, which address single-command or alternative filtering scenarios.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit guidance on when to use this tool versus alternatives: use it when you want to run multiple commands and stop on first failure; use run_show_command per command to ignore individual errors. Also explains limitations with pipe stages and suggests client-side filtering, with note that run_show_command_batch's grep_pattern is not a drop-in workaround.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
schedule_rebootA
Schedule device reboot at a specified time.
Checks for existing reboot schedules. If one exists and force is False, the existing schedule is preserved.
Args: hostname: Target device hostname (must exist in config.ini) reboot_at: Reboot time in YYMMDDHHMM format (e.g., "2601020304" = 2026-01-02 03:04) dry_run: If True (default), show what would be done without scheduling force: If True, clear existing reboot schedule and set new one config_path: Path to config.ini (empty string uses default search)
| Name | Required | Description | Default |
|---|---|---|---|
| force | No | ||
| dry_run | No | ||
| hostname | Yes | ||
| reboot_at | Yes | ||
| config_path | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description effectively discloses key behaviors: it checks existing schedules, respects the force flag, and dry_run shows what would be done. The reboot_at format is specified. However, it does not mention success/failure outputs or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured with a clear opening and bullet-pointed args. It is slightly verbose but every sentence adds value. Could be trimmed slightly but remains efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that an output schema exists (not shown), the description need not explain returns. It covers input parameters and behavioral logic well. Missing minor details like post-scheduling confirmation, but overall complete for the tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, but the description adds rich meaning for all 5 parameters: hostname must exist in config.ini, reboot_at format, dry_run default and effect, force clears existing schedule, config_path path handling. This fully compensates for missing schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Schedule device reboot at a specified time.' The verb 'schedule' and resource 'device reboot' are specific, and no sibling tool offers similar scheduling, so it distinguishes well.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides context about existing schedules and force behavior but does not explicitly state when to use this tool versus alternatives or when not to use it. The usage is implied but lacks explicit exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
v0.22.0- Added
daily_brief_result - Added
daily_brief_start
9 tool updates
v0.16.2- Added
check_local_inventory - Added
check_reachability - Added
check_remote_packages - Added
collect_rsi - Added
collect_rsi_batch - Added
get_config_diff - Added
get_router_list - Added
install_package - Added
push_config
9 tool updates
v0.16.1- Removed
check_local_inventory - Removed
check_reachability - Removed
check_remote_packages - Removed
collect_rsi - Removed
collect_rsi_batch - Removed
get_config_diff - Removed
get_router_list - Removed
install_package - Removed
push_config
2 tool updates
v0.15.0- Changed
daily_brief1 field changed- added
Input schema / properties / route_baselineAdded value: +{ + "default": 0, + "title": "Route Baseline", + "type": "integer" +}
- Added
health_check
23 tool updates
v0.1.0- First observed
check_local_inventory - First observed
check_reachability - First observed
check_remote_packages - First observed
check_upgrade_readiness - First observed
collect_rsi - First observed
collect_rsi_batch - First observed
compare_version - First observed
copy_package - First observed
daily_brief - First observed
get_config - First observed
get_config_diff - First observed
get_device_facts - First observed
get_package_info - First observed
get_router_list - First observed
get_version - First observed
install_package - First observed
list_remote_files - First observed
push_config - First observed
rollback_package - First observed
run_show_command - First observed
run_show_command_batch - First observed
run_show_commands - First observed
schedule_reboot
TDQS
Scored across 26 tools
Most tools target clearly distinct operations (facts, version, config, upgrade, reboot, RSI), and the daily_brief/daily_brief_start/daily_brief_result trio is well differentiated as sync/async-start/async-poll. The main risk is the show-command family (run_show_command, run_show_commands, run_show_command_batch), where the singular/plural naming and overlapping purposes could cause misselection, though descriptions do draw boundaries. Overall mostly distinct with one ambiguous cluster.
Predominantly consistent snake_case verb_noun (get_config, push_config, collect_rsi, check_reachability, schedule_reboot). The one wrinkle is run_show_command vs run_show_commands, differing only by plural, which is a subtle and potentially confusing deviation. Still readable and largely predictable throughout.
26 tools is at the heavy end for a single MCP server, and several are near-duplicates that could be consolidated (three show-command variants, three daily_brief lifecycle tools). The breadth of the domain (health checks, upgrades, RSI, config) justifies most tools, but the count is borderline heavy.
The surface covers a full device lifecycle: discovery (router list, facts, version), reachability, config get/diff/push, firmware copy/install/rollback/schedule, RSI collection, and inventory checksum verification. Gaps are minor, e.g. no explicit rollback/delete for pushed config or per-interface targeted operations, but core workflows have no dead ends.
Maintenance
Related MCP Connectors
MCP server for AI agents to plan, verify, and deploy Cloudflare-native apps.
Cloud-hosted MCP server for secure AI access to enterprise data sources via CData Connect AI.
- ZapierOAuthcom.zapier
Hosted MCP server connecting AI assistants to 9,000+ apps and 40,000+ actions via Zapier.
An MCP server that provides an API to LLMs to manage their JumpCloud resources.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenanceMCP server for network operations that lets AI assistants interact with Cisco/Juniper network devices through safe, well-defined tools like compliance audits and configuration backups.MIT
- AlicenseAqualityCmaintenanceMCP server for managing Juniper Mist networks with AI assistants. Monitor, troubleshoot, and configure customer networks through natural language.10116 PyPIApache 2.0
- AlicenseAqualityDmaintenanceA comprehensive MCP server for network device management via SSH/Telnet. Supports multiple vendors such as Cisco IOS and BDCOM, enabling AI assistants to execute commands and manage routers, switches, and firewalls.4MIT
- AlicenseAqualityCmaintenanceMCP server for managing Nokia SR OS devices via gNMI (gRPC) from Claude Desktop.10MIT