Skip to main content
Glama
shigechika

io.github.shigechika/junos-mcp

by shigechika

junos-mcp

English | 日本語

MCP (Model Context Protocol) server for junos-ops.

Exposes Juniper Networks device operations to MCP-compatible AI assistants (Claude Desktop, Claude Code, etc.) via STDIO transport. While junos-ops is the CLI tool for humans, junos-mcp is the AI-facing interface to the same powerful engine.

Features

Device Information

Tool

Description

Connection

get_device_facts

Get basic device information (model, hostname, serial, version)

Yes

get_version

Get JUNOS version with upgrade status

Yes

get_router_list

List routers from config.ini (optionally filtered by tags)

No

health_check

Report server version + config status (router count, distinct tags). Lightweight; does NOT connect to any device

No

CLI Command Execution

Tool

Description

Connection

run_show_command

Run a single CLI show command (output_format: text/json/xml)

Yes

run_show_commands

Run multiple CLI commands in a single session (output_format: text/json/xml)

Yes

run_show_command_batch

Run a command on multiple devices in parallel (supports tag filter and grep_pattern)

Yes

Configuration Management

Tool

Description

Connection

get_config

Get device configuration (text/set/xml format)

Yes

get_config_diff

Show config diff against a rollback version

Yes

push_config

Push config with commit confirmed + health check

Yes

Upgrade Operations

Tool

Description

Connection

check_upgrade_readiness

Check if device is ready for upgrade

Yes

compare_version

Compare two JUNOS version strings

No

get_package_info

Get model-specific package file and hash

No

list_remote_files

List files on remote device path

Yes

copy_package

Copy firmware package via SCP with checksum

Yes

install_package

Install firmware with pre-flight checks (unlink flag for EX2300/EX3400)

Yes

rollback_package

Rollback to previous package version

Yes

schedule_reboot

Schedule device reboot at specified time

Yes

Diagnostics

Tool

Description

Connection

collect_rsi

Collect RSI/SCF with model-specific timeouts

Yes

collect_rsi_batch

Collect RSI/SCF from multiple devices in parallel (supports tag filter)

Yes

Pre-flight Checks

Equivalent to the junos-ops check subcommand modes. All three reuse the junos-ops display layer for table rendering.

Tool

Description

Connection

check_reachability

Probe NETCONF reachability + available disk space per host (fast: no facts, 5s TCP probe)

Yes

check_local_inventory

Verify local firmware checksums against config.ini inventory

No

check_remote_packages

Verify staged firmware checksum + available disk space on devices (post-SCP verification)

Yes

Daily Operations

Tool

Description

Connection

daily_brief

Morning health check across multiple devices in parallel — alarms, interface up/down, syslog alert patterns within a look-back window (since_hours, default 18 h), dual-RE faults ([RE_FAULT]; skipped on SRX chassis clusters, whose facts misreport RE status — a failed cluster node surfaces via chassis alarms instead), and an optional inet.0 route-count baseline (route_baseline, e.g. tags=["main"], route_baseline=152). Returns a CRITICAL/WARNING/OK Markdown summary.

Yes

Safety by Design

All destructive operations (push_config, copy_package, install_package, rollback_package, schedule_reboot) default to dry-run mode (dry_run=True). The AI assistant must explicitly set dry_run=False to make changes.

push_config provides additional safety features not found in other Junos MCP servers:

  • commit confirmed with configurable timeout (auto-rollback if not confirmed)

  • Fallback health check after commit (ping, NETCONF uptime probe, or any CLI command)

  • Automatic rollback if health check fails (commit is not confirmed, timer expires)

  • no_commit=True — issues commit confirmed but intentionally skips the final commit. JUNOS auto-rolls back after confirm_timeout minutes. Useful for restarting services that lack a request ...restart command (e.g. syslog daemon on EX3400 post-upgrade).

Related MCP server: juniper-mist-mcp

Requirements

Installation

pip install junos-mcp

Or for development:

git clone https://github.com/shigechika/junos-mcp.git
cd junos-mcp
python3 -m venv .venv
. .venv/bin/activate
pip install -e ".[test]"

CLI options

python -m junos_mcp --help

Option

Description

-V, --version

Print version and exit

--check

Load config.ini, list routers, and exit (exit code 1 on error)

--check-host HOSTNAME

With --check, also open a NETCONF session to verify reachability/auth

--transport {stdio,streamable-http}

Transport protocol (default: stdio)

--check is handy to verify JUNOS_OPS_CONFIG and config.ini are reachable before registering the server with an AI assistant. Combine with --check-host rt1 to also confirm that credentials actually authenticate against a real device.

Tag-based host filtering

run_show_command_batch, collect_rsi_batch, and get_router_list accept an optional tags argument. The grammar matches the junos-ops --tags CLI flag (since junos-mcp 0.9.0 / junos-ops 0.16.6):

  • Each list element is one tag group. Comma-separated tags inside a group AND together.

  • Multiple list elements OR together across groups.

  • When combined with hostnames on batch tools, the result is the intersection (tags filter further narrowed by names). An empty intersection returns an error.

# 1 group, 1 tag — hosts tagged "main"
run_show_command_batch(command="show route summary", tags=["main"])

# 1 group, 2 tags — AND within the group: tokyo AND edge
collect_rsi_batch(tags=["tokyo,edge"])

# 2 groups — OR across groups: main OR backup
get_router_list(tags=["main", "backup"])

# Mixed: (tokyo AND core) OR backup
run_show_command_batch(command="show version", tags=["tokyo,core", "backup"])

# Intersection: among backup-tagged hosts, only rt1/rt2
run_show_command_batch(
    command="show version",
    hostnames=["rt1.example.jp", "rt2.example.jp"],
    tags=["backup"],
)

See the junos-ops tag documentation for how to tag sections in config.ini and for the matching CLI grammar.

Structured output format

run_show_command and run_show_commands accept an optional output_format parameter:

Value

Description

"text"

Default. Plain-text CLI output (same as typing the command)

"json"

NETCONF JSON output — device returns a structured dict

"xml"

NETCONF XML output — device returns pretty-printed XML

Note: CLI pipe stages (| match, | last, | count, etc.) are silently dropped regardless of output_format. PyEZ's Device.cli() sends the command over NETCONF RPC, which JunOS does not pipe-process. Run the command without pipes and filter client-side instead. For a single command, run_show_command_batch's grep_pattern argument (see below) offers server-side-style filtering — even against a single host, by passing a one-element hostnames list — but it always fetches plain-text output internally (it cannot be combined with output_format="json"/"xml"), and it only accepts one command at a time, so it isn't a drop-in workaround for run_show_commands' multi-command case.

# Get structured BGP summary data
run_show_command("router-a", "show bgp summary", output_format="json")

Server-side output filtering

run_show_command_batch accepts an optional grep_pattern argument (Python re pattern). When set, only lines matching the pattern are kept from each host's output. Header lines (starting with #) are always preserved. Hosts with no matching lines show (no match).

This reduces large batch results — for example, 93 routers × show route summary — from hundreds of KB to a few hundred bytes by extracting just the relevant lines:

# Extract only the inet.0 destination count from 93 routers
run_show_command_batch(
    command="show route summary",
    tags=["main"],
    grep_pattern=r"inet\.0:\s+\d+ destinations",
)

Connection pool

junos-mcp maintains a per-host NETCONF connection pool. Reusing an idle Device avoids the TCP/NETCONF handshake on every tool call; the pool serialises concurrent operations on the same host through a per-host lock.

Environment variable

Default

Description

JUNOS_MCP_POOL

1 (enabled)

Set to 0 to disable the pool and open a fresh connection per call

JUNOS_MCP_POOL_IDLE

60

Idle timeout in seconds. Connections unused longer than this are closed on the next call. Set to 0 to disable eviction

Security note: pooled connections are long-lived SSH sessions. In environments where session duration is restricted by policy, set JUNOS_MCP_POOL_IDLE to a value shorter than the inactivity limit, or set JUNOS_MCP_POOL=0 to disable the pool entirely.

Configuration

This server uses the same config.ini as junos-ops. See junos-ops README for details.

Each tool accepts an optional config_path parameter. If omitted, the default search order is used:

  1. Environment variable JUNOS_OPS_CONFIG

  2. ./config.ini

  3. ~/.config/junos-ops/config.ini

config.ini is not optional in practice: every tool — including get_router_list and health_check, which never open a device connection — reads from it at startup, and there is no degrade-gracefully path if it can't be found. Put a working config.ini in one of the three locations above before registering the server with any MCP client.

Write operations

Five tools change device state. Everything else only reads. These are the same five that default to dry_run=True — see Safety by Design for the dry-run and commit-confirmed mechanics; this table is about what each one calls and the device-side privilege that gates it.

Tool

API call

Permission gate

push_config

jnpr.junos.utils.config.Config: lockload(format="set")diffcommit_checkcommit(confirm=confirm_timeout) → health check → final commitunlock

The config.ini account for the target host needs a JUNOS login class permitting configuration mode and commit — not a read-only/operator class. The exact class name is whatever was provisioned per device in config.ini.

copy_package

junos_ops.upgrade.copy() — SCPs the firmware package to the device with checksum verification and pre-copy storage cleanup

Same account needs file-copy / storage-write access (SCP to device flash).

install_package

junos_ops.upgrade.install() — version check, pending-rollback check, copy + checksum, clear reboot schedule, rescue-config save, then PyEZ SW.install() (or request system software add via the unlink CLI path on low-flash EX2300/EX3400)

Requires software-installation privilege — JUNOS maintenance-class or superuser login class.

rollback_package

junos_ops.upgrade.rollback() — equivalent of request system software rollback, only after confirming a pending version exists

Same elevated software-maintenance privilege as install_package.

schedule_reboot

Schedules request system reboot at <time>

Requires reboot/maintenance privilege on the device.

Provision the config.ini account for a host with a read-only/operator login class and these five tools fail against that host with a permission error; every other tool — show commands, config reads, diagnostics, daily_brief — keeps working. There is no separate plugin-level switch for this: the privilege boundary is entirely in the JUNOS login class assigned to the account in config.ini.

Usage

Claude Code (plugin)

This repository doubles as a single-plugin marketplace, so Claude Code can install the server for you:

/plugin marketplace add shigechika/junos-mcp
/plugin install junos-mcp@junos-mcp

The plugin launches uvx junos-mcp and reads the same environment variables described in Configuration; export JUNOS_OPS_CONFIG (or drop config.ini at ./config.ini or ~/.config/junos-ops/config.ini) before starting Claude Code.

uvx must be on the PATH of the process that runs Claude Code — a login shell usually has it, but a GUI-launched app may not; install uv system-wide if the plugin fails to start.

Claude Code (manual)

Register the MCP server with claude mcp add:

claude mcp add junos-mcp \
  -e JUNOS_OPS_CONFIG=~/.config/junos-ops/config.ini \
  -- python -m junos_mcp

The --scope (-s) option controls where the configuration is stored:

Scope

Description

Config location

local (default)

Current project, current user only

~/.claude.json

project

Current project, shared with team

.mcp.json in project root

user

All projects, current user only

~/.claude.json

Claude Desktop

Add to Claude Desktop config file:

OS

Config file

macOS

~/Library/Application Support/Claude/claude_desktop_config.json

Windows

%APPDATA%\Claude\claude_desktop_config.json

Linux

~/.config/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "junos-mcp": {
      "command": "python",
      "args": ["-m", "junos_mcp"],
      "env": {
        "JUNOS_OPS_CONFIG": "/path/to/config.ini"
      }
    }
  }
}

Restart Claude Desktop after editing.

Remote Access with OAuth (via mcp-stdio)

junos-mcp supports Streamable HTTP transport, enabling remote access from Claude Desktop or Claude Code through mcp-stdio as an OAuth proxy.

graph TB
    A[junos-mcp<br/>remote server] <-- "OAuth 2.1 + HTTPS" --> B[mcp-stdio<br/>proxy]
    B <-- "STDIO" --> C[Claude Desktop<br/>Claude Code]

Step 1: Start junos-mcp with Streamable HTTP on the remote server

JUNOS_OPS_CONFIG=~/.config/junos-ops/config.ini \
  python -m junos_mcp --transport streamable-http

The server listens on http://localhost:8000/mcp by default.

Step 2: Register mcp-stdio as the MCP server on your local machine

claude mcp add junos-mcp -- mcp-stdio https://your-server:8000/mcp

mcp-stdio handles OAuth 2.1 authentication (RFC 8414 discovery, RFC 7591 dynamic client registration, PKCE) and relays STDIO ↔ Streamable HTTP.

See mcp-stdio README for detailed configuration including OAuth provider setup.

MCP Inspector (development)

mcp dev junos_mcp/server.py

Testing

pytest tests/ -v

133 tests covering all 23 tools, the connection pool, helper functions, and edge cases.

Live smoke test

Those tests mock PyEZ, which is what makes them fast — and also what makes them blind to a tool that has stopped returning real data. scripts/smoke_test.py runs every registered tool against the configured devices and fails on empty, malformed or error answers:

# uses the same inventory file as the server (JUNOS_OPS_CONFIG)
uv run python scripts/smoke_test.py
uv run python scripts/smoke_test.py --only facts --traceback
  • Read-only. push_config, copy_package, install_package, rollback_package and schedule_reboot are skipped by name, and a test enforces that. collect_rsi / collect_rsi_batch are skipped too — they change nothing, but they are minutes of RE CPU and a file per device for an answer no assertion would read. The command-running tools are exercised with show system uptime: they accept operational commands in general, and a smoke test must not be the thing that types one that matters.

  • No payloads in the report. Tool names and statuses only; error text is redacted too, since these tools quote the device they were asked about and the payloads are configuration.

  • Nothing estate-specific in the specs. The device the per-host tools need is discovered at run time from the configured inventory, and the hardware model get_package_info needs comes from that device's own facts. Two tests keep it that way: one refuses those parameters as literals, the other bans anything address-shaped anywhere in the file, because this repository is public.

  • Every probe refuses the Error: ... / Connection error: ... lines these tools return in place of raising — otherwise an unreachable device would read as a successful call.

  • CI enforces the cheap half: a tool registered without a probe spec fails the build (tests/test_smoke_probes.py), so adding a tool forces the question "how would we know it works?".

  • scripts/smoke_harness.py is the engine and holds no JUNOS knowledge: it is kept identical across the servers that share it, so fix engine bugs once and sync the file rather than patching this copy.

Architecture

Stdout-safe by construction

Since junos-ops 0.14.1, core functions return structured dict values and never print to stdout; MCP tools render output via junos_ops.display.format_*(). No contextlib.redirect_stdout is needed, so the MCP STDIO JSON-RPC channel stays clean.

Global State Initialization

junos-ops uses common.args and common.config as global variables. The MCP server initializes these using the same pattern as the test fixtures in junos-ops (conftest.py).

Parallel Execution

Batch tools (run_show_command_batch, collect_rsi_batch) use ThreadPoolExecutor via junos-ops common.run_parallel() with configurable max_workers.

License

Apache License 2.0

Available Tools

24 tools
check_local_inventoryA

Verify local firmware checksums against the config.ini inventory.

Equivalent to junos-ops check --local. Iterates every <model>.file / <model>.hash pair in the DEFAULT section of config.ini and verifies the file on the staging server. No device connection required.

Args: model: Restrict to a single model (empty = all configured models) config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
modelNo
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries full responsibility. It explains the process of iterating model-file/hash pairs and verifying checksums on the staging server. However, it does not detail what happens on mismatch or the tool's side effects, leaving some uncertainty.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with a brief summary, command equivalent, and parameter documentation in a consistent format. It is appropriately sized for the tool's complexity and front-loads the main purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that an output schema exists (not shown), the description does not need to explain return values. It sufficiently covers purpose, parameters, and behavior, making it complete for the provided context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description adds meaning to both parameters beyond the input schema. It explains that empty model means all configured models and empty config_path uses default search. This is valuable since the schema itself provides no parameter descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool verifies local firmware checksums against config.ini inventory, with a specific verb and resource. It gives a command equivalent for context. However, it does not explicitly distinguish from sibling tools like check_remote_packages or check_upgrade_readiness.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description notes that no device connection is required, implying usage when offline verification is needed. It provides an equivalent command hint, but lacks explicit guidance on when to use this tool versus alternatives, and does not mention when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_reachabilityA

Probe NETCONF reachability for one or more devices.

Equivalent to junos-ops check --connect. Opens a fast NETCONF handshake (no full PyEZ facts gathering, 5-second TCP probe) and reports per-host status as a table.

Args: hostnames: List of target device hostnames (must exist in config.ini) tags: Tag filter. Each list element is one tag group (comma-separated tags AND together within a group); multiple list elements OR together across groups. Combined with hostnames the result is the intersection. max_workers: Maximum parallel threads (default 20, matches junos-ops) config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
tagsNo
hostnamesNo
config_pathNo
max_workersNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. It discloses it's a fast NETCONF handshake (5-second TCP probe), doesn't gather full facts, reports per-host status as table, and uses parallel threads. This is good transparency for a non-annotated tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is fairly long but well-structured with bullet points and a code-equivalent line. All sentences add value. Slight redundancy in explaining tags filter, but overall efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given sibling tools are network device management functions, the description covers the tool's purpose, parameters, and output (table). Output schema exists, so return values need not be detailed. Complete enough for selection and invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so description must add meaning. It explains all four parameters: hostnames (must exist in config.ini), tags (complex filter logic with AND/OR and intersection with hostnames), max_workers (default 20), config_path (empty string uses default). This exceeds schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it probes NETCONF reachability for devices, specifies it's a fast handshake without full PyEZ facts gathering, and distinguishes from siblings like get_device_facts or health_check by mentioning speed and specific protocol.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies it's for quick reachability checks (fast NETCONF handshake) but does not explicitly state when to use versus alternatives or when not to use. No exclusion criteria given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_remote_packagesA

Verify the staged firmware checksum on one or more devices.

Equivalent to junos-ops check --remote. Connects to each device via NETCONF and verifies the package file (<model>.file) sitting on the device against <model>.hash. Doubles as post-SCP copy verification. Per-host model resolution: model arg > config.ini [host].model > device facts.

Args: hostnames: List of target device hostnames (must exist in config.ini) tags: Tag filter. Each list element is one tag group (comma-separated tags AND together within a group); multiple list elements OR together across groups. Combined with hostnames the result is the intersection. model: Override model resolution for all hosts (empty = per-host resolution) max_workers: Maximum parallel threads (default 20) config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
tagsNo
modelNo
hostnamesNo
config_pathNo
max_workersNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description bears full burden. It discloses connection via NETCONF, checksum verification, and parallelism via 'max_workers'. It does not explicitly state non-destructiveness, but the verification purpose implies it. The description could mention that no changes are made to devices, but current detail is sufficient for a read-only check tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured: purpose first, then equivalent command, then details, then parameter docs. It is concise but contains slight redundancy (e.g., 'Per-host model resolution' echoes model arg). Overall, it's efficient and front-loaded, earning a 4.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 5 parameters, no annotations, and presence of output schema, the description is comprehensive. It covers the verification process, parameter details, and model resolution. It lacks error handling or prerequisites, but for a verification tool with output schema, it is sufficiently complete. Missing details like expected return values are covered by the output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so description must explain parameters. It does so thoroughly: 'hostnames' (target list), 'tags' (filter logic with AND/OR groups), 'model' (override), 'max_workers' (parallelism), 'config_path' (config file). Each parameter's role and default are clear, adding significant value beyond the raw schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('verify'), resource ('staged firmware checksum'), and scope ('on one or more devices'). It distinguishes the tool from siblings like 'install_package' or 'copy_package' by focusing on verification. The mention of equivalence to a CLI command further clarifies its role.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides context for usage, e.g., 'Doubles as post-SCP copy verification', and explains the model resolution hierarchy. However, it does not explicitly state when to avoid using this tool or compare it to alternatives like 'check_local_inventory'. While the context is helpful, explicit comparisons would improve clarity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

check_upgrade_readinessB

Check if a device is ready for upgrade.

Verifies whether the device is already running the target version, and performs a dry-run to check local/remote package availability.

Args: hostname: Target device hostname (must exist in config.ini) config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
hostnameYes
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, description carries full burden but only mentions dry-run and version check; lacks details on error handling, permissions, or side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Concise, front-loaded with purpose, and uses clear structure. No unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Describes core functionality and parameters, but missing usage context and output hints despite having an output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Adds meaning beyond schema: hostname must exist in config.ini, config_path default uses default search. Compensates for 0% schema description coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool checks if a device is ready for upgrade, verifying target version and package availability. However, it does not differentiate from sibling tools like check_remote_packages or compare_version.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus individual checks; it only implies comprehensive readiness without explicit context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

collect_rsiA

Collect RSI (Request Support Information) and SCF (Show Configuration) from a device.

Saves two files: {hostname}.SCF (show configuration) and {hostname}.RSI (request support information). Model-specific timeouts are applied automatically (e.g., SRX Branch: 1200s, Virtual Chassis: 1800s).

Args: hostname: Target device hostname (must exist in config.ini) output_dir: Directory to save output files (empty uses config RSI_DIR or current dir) config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
hostnameYes
output_dirNo
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Though no annotations are provided, the description discloses key behaviors: saving two files with specific naming, automatic model-specific timeouts, and default parameters. It does not mention whether the operation is safe/read-only or any potential side effects, but for a collection tool these are reasonable.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise and well-structured, starting with the purpose, then detailing output and arguments. It avoids unnecessary words while providing essential information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's moderate complexity (3 parameters, output schema exists), the description covers the core functionality, output, and special behavior (timeouts). It does not detail the return structure (but output schema may do so) or error cases, but is largely complete for effective use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has no descriptions (0% coverage), but the description explains each parameter beyond its name: hostname must exist in config.ini, output_dir defaults, config_path defaults. This adds significant meaning, though some details (e.g., hostname validation) are omitted.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool collects RSI and SCF from a device, identifies the output files, and distinguishes it from batch operations. It uses a specific verb ('Collect') and names the resources (RSI, SCF), making the purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance is provided on when to use this tool versus its sibling tools like 'collect_rsi_batch' or other diagnostic tools. The description implies it's for a single device but does not state prerequisites or scenarios.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

collect_rsi_batchA

Collect RSI/SCF from multiple devices in parallel.

Uses ThreadPoolExecutor for concurrent collection. Default 20 workers matches junos-ops CLI default for RSI collection. Either hostnames or tags selects the targets; if both are omitted, every router in config.ini is targeted. When both are given, the intersection is used.

Args: hostnames: List of target device hostnames tags: Tag filter. Each list element is one tag group (comma-separated tags AND together within a group); multiple list elements OR together across groups. Combined with hostnames the result is the intersection. output_dir: Directory to save output files (empty uses config RSI_DIR or current dir) max_workers: Maximum parallel threads (default 20) config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
tagsNo
hostnamesNo
output_dirNo
config_pathNo
max_workersNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses concurrency, default workers, and target intersection logic, but no annotation support and omits potential side effects or permissions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well-organized with summary, details, and parameter list, though slightly verbose; every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers essential aspects for a batch collection tool with 5 params and no annotations, though could mention error handling or output file details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Explains each parameter in detail despite 0% schema coverage, including complex tag filter logic and default behaviors, adding significant value beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it collects RSI/SCF from multiple devices in parallel using ThreadPoolExecutor, distinguishing it from singular collect_rsi and batch command tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Describes target selection via hostnames/tags and defaults, but lacks explicit when-to-use vs alternatives like singular collect_rsi.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compare_versionA

Compare two JUNOS version strings.

Returns whether left is greater than, equal to, or less than right. No device connection required.

Args: left: First JUNOS version string (e.g., "22.4R3-S6.5") right: Second JUNOS version string (e.g., "23.2R1.0")

ParametersJSON Schema
NameRequiredDescriptionDefault
leftYes
rightYes

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. It discloses that the operation is a pure string comparison, no device connection, and the output is a comparison result. This is sufficient for a simple, deterministic tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is brief, with only two sentences that directly explain purpose, usage, and no device requirement. It is front-loaded and every sentence provides essential information without waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has an output schema (not shown but present), so the description only needs to explain the high-level behavior, which it does. It covers purpose, parameters, and return value, making it complete for a simple comparison tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description compensates by providing example version strings (e.g., 22.4R3-S6.5) that clarify the expected format. This adds value beyond the basic schema types.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool compares two JUNOS version strings and returns the relational result. The verb 'compare' and resource 'JUNOS version strings' are specific, and the sibling tools (e.g., get_version, check_reachability) have distinct purposes, eliminating confusion.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says 'No device connection required,' indicating light-weight usage without network calls. While it doesn't list when not to use, the context is clear, and the sibling tools provide natural alternatives for version retrieval or device checks.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

copy_packageA

Copy firmware package to remote device via SCP with checksum verification.

Checks if copy is needed (already running target version, or package already present on device). Cleans up storage before copying.

Args: hostname: Target device hostname (must exist in config.ini) dry_run: If True (default), show what would be done without copying force: If True, skip version checks and force copy config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
forceNo
dry_runNo
hostnameYes
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description takes full responsibility. It discloses key behaviors: checksum verification, existence checks, storage cleanup, and the function of dry_run and force parameters. However, it lacks details on error handling or timeout behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with a summary line followed by bullet points. It is reasonably concise but includes some explanatory text that could be shortened without losing meaning.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 4 parameters and no annotations, the description covers purpose, behavior, and parameter semantics. An output schema exists but its content is not described; however, the description is sufficient for basic invocation. Minor gaps in error handling or output format remain.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description compensates for 0% schema coverage by detailing each parameter's meaning: hostname must exist in config.ini, dry_run defaults to true, force skips checks, config_path default search. This adds substantial value beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Copy firmware package to remote device via SCP with checksum verification', specifying a concrete action and resource. It differentiates from sibling tools like install_package or rollback_package by focusing on the copy step.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool by mentioning pre-checks (version, presence) and the force flag's effect, but it does not explicitly list conditions for use or caution against using when copy is unnecessary. No direct comparison with siblings is given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

daily_briefA

Run a morning health check across multiple devices in parallel.

Checks per host (Phase 1):

  • show system alarms / show chassis alarms

  • show interfaces descriptions — a physical interface is flagged [IF_DOWN] only when it has a description (Admin=up, Link=down) and its Last flapped time is within since_hours. Undescribed unused ports and chronically-down ports are suppressed (loopback / mgmt / internal logical units are also excluded).

  • show log messages | last 200 — alert patterns within since_hours

  • dual-RE redundancy — an explicit routing-engine fault is flagged [RE_FAULT] (skipped on SRX chassis clusters, whose facts misreport RE status; a failed cluster node raises chassis alarms instead)

  • route_baseline (optional) — when > 0, a device whose inet.0 destination count differs from this value is flagged [ROUTE_BASELINE]. Scope with tags (e.g. tags=["main"], route_baseline=152), since full-table routers carry far more routes than access routers.

Syslog patterns watched: BGP state change away from Established, STP port role change, OSPF neighbor down, ARP address conflict, IF_DOWN.

since_hours defaults to 18 (≈ previous 15:00 for a 09:00 morning run). Tags default to none (all routers); pass tags=["main"] to limit scope.

Output tiers:

  • CRITICAL — connection failure

  • WARNING — at least one anomaly found

  • OK — clean

Returns a Markdown summary with anomaly details for CRITICAL/WARNING hosts and a collapsed OK list.

ParametersJSON Schema
NameRequiredDescriptionDefault
tagsNo
hostnamesNo
config_pathNo
max_workersNo
since_hoursNo
route_baselineNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.2/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description exhaustively discloses behavioral traits: exact checks per host, syslog patterns, handling of dual-RE faults on SRX chassis clusters, route_baseline comparison logic, output tiering (CRITICAL/WARNING/OK), and Markdown summary format. With no annotations provided, the description fully compensates with rich behavioral details.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with headings (Phase 1, Syslog patterns, Output tiers) and front-loaded with the core purpose. It is detailed but not unnecessarily verbose; every sentence contributes meaningful information. Slight length is justified by complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is complete for the tool's purpose, covering behavior, parameters, edge cases, and output format. The presence of an output schema further enriches the context, making the overall definition fully actionable for an AI agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description adds meaning for tags, since_hours, route_baseline, and max_workers by explaining defaults and usage (e.g., tags for scoping). However, hostnames and config_path are not explained, leaving some ambiguity. Given 0% schema coverage, more parameter detail would be beneficial.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Run a morning health check across multiple devices in parallel,' with a specific verb and resource. It distinguishes from sibling tools by detailing the exactly checks performed, making it unique among tools like health_check or run_show_command.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides implicit usage context through defaults (since_hours=18 for morning runs, tags=none for all routers) and scoping advice for route_baseline. However, it lacks explicit when-to-use or when-not-to-use guidance compared to sibling tools, leaving the agent to infer optimal scenarios.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_configB

Get device configuration.

Args: hostname: Target device hostname (must exist in config.ini) output_format: Output format - "text" (default), "set", or "xml" config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
hostnameYes
config_pathNo
output_formatNotext

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

B3.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It does not disclose that the operation is read-only, whether authentication is required, or any side effects. The statement 'Get device configuration' implies a safe operation but is not explicit.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is brief and well-organized with a purpose line followed by a parameter list. It avoids redundancy and focuses on key information, though the parameter descriptions could be integrated more naturally.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with an output schema, the description does not need to detail return values. However, it lacks behavioral context (e.g., read-only) and usage scenario, which are important for an agent to use it correctly, making it only minimally complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema coverage, the description adds necessary meaning: hostname must exist, output_format options (text/set/xml), and config_path default behavior. This compensates well for the empty schema descriptions, though it could specify format details.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Get device configuration' using a specific verb and resource. It distinguishes itself from siblings like get_config_diff and get_version by focusing on the full configuration retrieval.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives. The description does not provide context for when not to use it or mention any prerequisites, leaving the agent to infer usage from the tool name alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_config_diffA

Show configuration difference compared to a rollback version.

Args: hostname: Target device hostname (must exist in config.ini) rollback_id: Rollback version to compare against (0-49, default 1) config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
hostnameYes
config_pathNo
rollback_idNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description carries the burden. It mentions constraints (hostname must exist in config.ini, rollback_id 0-49) indicating a read-only 'show' operation. However, it does not disclose error behavior, authentication needs, or rate limits, which are important for a tool with no annotation safety hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with no redundant sentences. It uses clear section headers (Args) and effectively front-loads the purpose. Every sentence provides necessary context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given a relatively simple tool and the presence of an output schema (reducing need to describe return values), the description covers purpose, parameters, and key constraints. It could be improved by briefly noting expected behavior if rollback version does not exist or if device is unreachable, but it's largely sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage, the description adds significant meaning beyond the schema: it explains that hostname must exist in config.ini, rollback_id range (0-49, default 1), and config_path behavior (empty uses default). This clarifies constraints and defaults not evident from types alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Show configuration difference compared to a rollback version' with a specific verb and resource. It distinguishes from siblings like 'get_config' (which retrieves current config) and 'compare_version' (generic comparison) by specifying rollback comparison.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for comparing current config to a rollback version but does not explicitly state when to use this tool versus alternatives like 'compare_version' or 'get_config'. No exclusions or conditions are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_device_factsA

Get basic device information (model, hostname, serial, version, etc.).

Args: hostname: Target device hostname (must exist in config.ini) config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
hostnameYes
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A3.5/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden. It mentions hostname must exist in config.ini but does not describe behavior on failure (e.g., error handling, return format), or what happens if config_path is invalid. This is insufficient for a read operation that could fail.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is relatively short (one sentence + Args block) and front-loaded with the purpose. Every sentence adds value, though the Arg descriptions could be integrated into a more fluent structure without losing clarity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given low parameter count (2), presence of an output schema (which will describe return values), and no nested objects, the description adequately explains what the tool does and the key parameters. It could mention what 'basic device information' includes beyond the examples, but the output schema likely covers that.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, but description adds meaning beyond schema: hostname must correspond to a device in config.ini, config_path uses default search if empty. This clarifies the source of the hostname and the optional file path.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Get basic device information (model, hostname, serial, version, etc.)' which is a specific verb+resource combination. It distinguishes from siblings like get_version and get_router_list by focusing on a broad set of facts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus siblings (e.g., get_version for just version, get_router_list for inventory). The description only notes prerequisites (hostname must exist in config.ini) but lacks usage context or alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_package_infoA

Get package file name and expected hash for a specific device model.

Retrieves model-specific package information from config.ini. No device connection required.

Args: hostname: Target device hostname (must exist in config.ini) model: Device model name (e.g., "EX2300-24T") config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
modelYes
hostnameYes
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full burden. It discloses that the tool reads from config.ini and requires no device connection, implying safety. Missing details about error behavior if config or hostname missing, but overall it is honest and clear about its behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with a clear purpose statement up front, followed by a structured Args list. Every sentence provides necessary information without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (3 params, no enums, output schema exists), the description covers the essential aspects: what it does, parameters, and that it's safe. It lacks error conditions but is generally sufficient for an agent to use correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must explain parameters. The Args section provides meaning: hostname must exist, model includes an example, config_path default path. This adds value beyond the schema, though could be more detailed on constraints.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states 'Get package file name and expected hash for a specific device model.' It clearly identifies the action (get) and the resource (package info). It also notes 'No device connection required,' distinguishing it from tools that require connectivity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains the function and parameters but does not provide explicit guidance on when to use this tool versus its many siblings (e.g., check_remote_packages, install_package). It mentions no device connection, which hints at appropriate contexts, but lacks clear when/not-to-use advice.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_router_listA

List routers defined in config.ini, optionally filtered by tags.

Returns section names from config.ini, which represent the hostnames that can be used with other tools. No device connection required.

Args: tags: Tag filter. Each list element is one tag group (comma-separated tags AND together within a group); multiple list elements OR together across groups. E.g. ["tokyo,core", "backup"] means (tokyo AND core) OR backup. None/empty returns all. config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
tagsNo
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Given no annotations, the description discloses that the tool reads a local config file and returns section names without connecting to devices, which is transparent for a read-only listing.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with a concise summary followed by an Args section, though it could be slightly more streamlined without losing clarity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the tool's input, behavior, and output sufficiently, and with an output schema present, no further detail on return values is needed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description provides a detailed explanation of the tags parameter with logical grouping (AND within group, OR across groups) and clarifies the config_path default behavior, compensating for the 0% schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the tool lists routers from config.ini with optional tag filtering, distinguishing it from sibling tools that perform other operations like package management or device commands.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Describes the purpose as returning hostnames for use with other tools and notes no device connection required, providing clear context for when to use it, though it does not explicitly state alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_versionA

Get JUNOS version information with upgrade status.

Shows running version, planning version, pending version, local/remote package status, and reboot schedule.

Args: hostname: Target device hostname (must exist in config.ini) config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
hostnameYes
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without annotations, the description carries the full burden. It discloses the output categories (running, planning, pending, package status, schedule), implying a read-only operation. However, it does not address potential side effects, authentication needs, or error behavior (e.g., missing hostname), leaving some behavioral gaps.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the primary purpose and lists version details compactly. The Args section is clear but somewhat redundant with the schema. Overall, it is efficient with minimal waste, earning a 4.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema (not shown), the description reasonably covers the returned information. It does not explain error conditions or usage context relative to sibling tools. For a simple retrieval tool, it is adequate but could be more thorough about prerequisites and edge cases.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 0% description coverage, so the description compensates by adding meaning: hostname must exist in config.ini, config_path defaults to empty string for default search. These enrich the bare schema types, though further details (e.g., format of hostname) are omitted.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states 'Get JUNOS version information with upgrade status,' clearly identifying the verb (Get) and resource (JUNOS version information). It lists specific details like running, planning, and pending versions, which distinguishes it from sibling tools such as get_device_facts or compare_version.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives. The description only specifies the required parameter (hostname) and default for config_path, but does not mention any prerequisites, exclusion criteria, or comparisons with sibling tools like check_upgrade_readiness or get_device_facts.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

health_checkA

Report server version and config status — without connecting to any device.

Call this at session start (or after a tool-call timeout) to confirm the MCP is up, see which version is running, and verify that config.ini loads and how many routers it defines. Lightweight by design: junos-mcp fans out to many Juniper devices, so this check ONLY loads config.ini and counts hosts — it opens NO NETCONF/SSH connection to any device.

Always returns the same keys: status (healthy / error), service, version, config_path (the resolved config.ini path it would use), router_count (number of host sections in config.ini), tags (sorted list of distinct tags across configured hosts), and config (ok / error / missing). On an error result, detail carries the reason. There is no degraded state: this check either loads config.ini or it does not.

Args: config_path: Path to config.ini (empty string uses default search).

ParametersJSON Schema
NameRequiredDescriptionDefault
config_pathNo

TDQS

A5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, but the description fully discloses behavior: lightweight design, only loads config.ini, no network connections, guaranteed return keys, and error states. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well-structured with a headline summary, usage guidance, detailed return fields, and parameter documentation. Every sentence adds value without verbosity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Without an output schema, the description enumerates all return keys (status, service, version, etc.) and explains error handling. It compensates fully for missing structured metadata.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 0% description coverage, but the description adds a full parameter explanation: 'config_path: Path to config.ini (empty string uses default search).' This provides essential meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Report server version and config status — without connecting to any device.' It identifies the specific verb and resource, and distinguishes from sibling tools that connect to devices.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly advises 'Call this at session start (or after a tool-call timeout)' and specifies when not to use it: 'opens NO NETCONF/SSH connection to any device,' contrasting with other tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

install_packageA

Install firmware package on device with pre-flight checks.

Full upgrade flow: version check -> rollback pending if needed -> copy (with checksum) -> clear reboot schedule -> rescue config save -> request system software add (with validation).

Args: hostname: Target device hostname (must exist in config.ini) dry_run: If True (default), show what would be done without installing force: If True, skip version checks and force install unlink: If True, run request system software add <pkg> unlink via CLI instead of PyEZ SW.install(). Use for low-flash devices (EX2300 / EX3400, ~1.3 GB /dev/gpt/junos) where major version upgrades fail with "ERROR: insufficient space" because PyEZ does not expose the unlink parameter. The CLI path frees ~330 MB by unlinking the source tgz during extraction. config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
forceNo
unlinkNo
dry_runNo
hostnameYes
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It discloses pre-flight checks, the full upgrade flow, and explains the effect of dry_run, force, and unlink including the rationale for CLI path.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with a purpose sentence, a bulleted upgrade flow, and detailed parameter descriptions. Every sentence adds value with no redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity of 5 parameters and no annotations, the description provides complete behavioral and parameter information. The return value is not explained but an output schema exists, which per rules is sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, but the description provides detailed explanations for each parameter: hostname must exist in config.ini, dry_run default viewing mode, force skipping checks, unlink for low-flash devices, config_path default.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Install firmware package on device with pre-flight checks' and details the full upgrade flow, distinguishing it from sibling tools like rollback_package and copy_package.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides context for when to use force (skip version checks) and unlink (low-flash devices), but does not explicitly compare to siblings or state when not to use this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_remote_filesA

List files on the remote device path (/var/tmp by default).

Args: hostname: Target device hostname (must exist in config.ini) config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
hostnameYes
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A3.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description bears full burden for behavioral disclosure. It fails to mention side effects, authorization needs, or behavior in error cases (e.g., invalid hostname, missing path). The default path is mentioned but the absence of a path parameter is confusing.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with no wasted words. It uses a clear 'Args:' structure to document parameters. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given an output schema exists, return values need not be explained. However, the description omits behavior for invalid inputs, error handling, and how the default path is used. It is minimally complete for a simple list operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description adds needed meaning. It explains that hostname must exist in config.ini and that config_path is the path to config.ini with a default search behavior. This goes beyond the schema's type/default definitions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists files on a remote device path, specifying the default path '/var/tmp'. It uses a specific verb and resource, distinguishing it from sibling tools like 'check_local_inventory' or 'run_show_command'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides context that hostname must exist in config.ini, but does not specify when to use this tool over others or when not to use it. No alternatives are mentioned, leaving usage guidance implicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

push_configA

Push configuration to a device with commit confirmed and health check.

Supports two input methods (exactly one required):

  • config_file: Path to a .set or .j2 file containing set commands

  • set_commands: List of set command strings (inline)

Safety features (not available in Juniper's official MCP server):

  • dry_run mode (default True): shows diff without committing

  • commit confirmed: auto-rollback if not confirmed within timeout

  • health check: auto-rollback on connectivity failure after commit

Commit flow (normal): lock -> load -> diff -> commit_check -> commit confirmed -> health check -> confirm -> unlock

Commit flow (no_commit=True — intentional auto-rollback): lock -> load -> diff -> commit_check -> commit confirmed -> unlock (health check and final confirm are skipped; JUNOS rolls back automatically after confirm_timeout minutes)

Args: hostname: Target device hostname (must exist in config.ini) config_file: Path to .set or .j2 file (mutually exclusive with set_commands) set_commands: List of set commands (mutually exclusive with config_file) dry_run: If True (default), show diff only without committing confirm_timeout: Minutes before auto-rollback (default 1, used with commit confirmed) no_commit: If True, issue commit confirmed but intentionally skip the final commit so JUNOS auto-rolls back after confirm_timeout minutes. Useful for triggering service restarts (e.g. syslog on EX3400) where no request ...restart command exists. dry_run=True takes precedence over no_commit (diff is shown but nothing is committed). health_check: Fallback health check commands tried in order after commit. Passes if ANY command succeeds. Supports "ping ..." (checks packets received), "uptime" (NETCONF RPC probe), or any CLI command (success if no exception). Default: ["uptime"] — uses the existing NETCONF session and does not depend on ICMP reachability. (Changed from broadcast ping in junos-mcp 0.11.0 to match junos-ops 0.16.8+.) Ignored when no_commit=True. config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
dry_runNo
hostnameYes
no_commitNo
config_fileNo
config_pathNo
health_checkNo
set_commandsNo
confirm_timeoutNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries full burden. It fully discloses the commit flows (normal and no_commit), dry_run precedence, health check behavior, and mutual exclusivity of inputs. All behavioral traits are transparently documented.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with clear sections (main purpose, input methods, safety features, commit flows, Args list). It is fairly long but every sentence adds value. Slightly verbose, but the structure compensates.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 8 parameters, 0% schema coverage, and no annotations, the description is highly complete. It covers all parameters, explains two commit flows, and provides edge cases (e.g., no_commit for restarts). No gaps are evident.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, but the description provides detailed explanations for each parameter, including mutual exclusivity, defaults, and behavior. It adds substantial meaning beyond the schema, such as the no_commit use case and health check command list.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Push configuration to a device with commit confirmed and health check.' It uses a specific verb and resource, and distinguishes from sibling tools like get_config, run_show_command, etc., which are read-only or have different purposes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains when to use the tool (push configuration), details two mutually exclusive input methods, and describes safety features. It also provides a specific use case for no_commit (service restarts). However, it does not explicitly state when NOT to use it, but the clarity of purpose is sufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

rollback_packageA

Rollback to previously installed package version.

Checks pending version first. If no pending version exists, rollback is skipped.

Args: hostname: Target device hostname (must exist in config.ini) dry_run: If True (default), show what would be done without rolling back config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
dry_runNo
hostnameYes
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It discloses key behaviors: checking pending version, skipping rollback if absent, and dry_run defaulting to true. It could mention more about side effects (e.g., if rollback triggers a reboot).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is multi-line with an Args section, but every sentence adds value. It is not overly verbose and avoids redundancy, though it could be slightly more compact.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has an output schema (not shown) and 3 parameters. The description covers behavioral aspects and parameter roles well. It lacks information about return values, but the output schema likely fills that gap. Overall, it is adequately complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage, the description adds essential meaning: hostname must exist in config.ini, dry_run shows what would be done, config_path uses default search if empty. These details compensate for the missing schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Rollback to previously installed package version', which is a specific verb+resource pair. It also distinguishes from siblings like install_package and copy_package by focusing on rollback functionality.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains that the tool checks a pending version first and skips if none exists, providing clear context for when the tool is effective. However, it does not explicitly state when not to use it or mention alternative tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

run_show_commandA

Run a CLI show command on the device and return output.

Args: hostname: Target device hostname (must exist in config.ini) command: CLI command to execute (e.g., "show bgp summary") output_format: Output format — "text" (default), "json", or "xml". Note: pipe stages (| match, | last, | count, etc.) are silently dropped regardless of output_format — PyEZ's Device.cli() sends the command over NETCONF RPC, which JunOS does not pipe-process. Run the command without pipes; for line filtering, use run_show_command_batch's grep_pattern argument instead (works for a single host too — pass a one-element hostnames list). That workaround always fetches text output internally, so it cannot be combined with output_format="json"/"xml" — for structured output you must filter the result client-side instead. config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
commandYes
hostnameYes
config_pathNo
output_formatNotext

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It discloses critical behaviors: pipe stages are silently dropped due to PyEZ's NETCONF RPC, and explains the workaround. It does not mention destructive behavior, but 'show' commands are inherently read-only.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is lengthy but well-structured with clear argument descriptions and important caveats. Every sentence adds value, though some redundancy could be trimmed. It is front-loaded with the core action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite no annotations and an output schema not shown, the description covers all necessary context: parameter details, behavioral quirks (pipe dropping), and alternative tools. It is fully adequate for an agent to correctly invoke the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description must explain all parameters. It does so thoroughly: hostname (must exist in config.ini), command (example given), output_format (text/json/xml with pipe-drop warning), and config_path (empty default). Each parameter adds meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description begins with 'Run a CLI show command on the device and return output,' which is a specific verb+resource statement. It clearly distinguishes itself from siblings like run_show_command_batch by mentioning batch usage for filtering.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use this tool vs alternatives, including details about pipe-stage dropping, recommending run_show_command_batch with grep_pattern for filtering, and warning that structured output cannot be combined with batch filtering. This provides clear usage context and exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

run_show_command_batchA

Run a CLI show command on multiple devices in parallel.

Uses ThreadPoolExecutor for concurrent execution. Either hostnames or tags selects the targets; if both are omitted, every router in config.ini is targeted. When both are given, the intersection is used.

Args: command: CLI command to execute on all devices hostnames: List of target device hostnames (must exist in config.ini) tags: Tag filter. Each list element is one tag group (comma-separated tags AND together within a group). Multiple list elements OR together across groups. E.g. ["tokyo,core", "backup"] means (tokyo AND core) OR backup. Combined with hostnames the result is the intersection. grep_pattern: Optional Python re pattern. When set, only lines matching the pattern (via re.search) are kept from each host's output. Header lines (starting with #) are always preserved. Hosts with no matching lines show (no match). Reduces large batch outputs to the essential lines. This tool always fetches text output internally (there is no output_format parameter here) — grep_pattern filters plain-text lines and cannot be combined with structured JSON/XML output. max_workers: Maximum parallel threads (default 5) config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
tagsNo
commandYes
hostnamesNo
config_pathNo
max_workersNo
grep_patternNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. Discloses ThreadPoolExecutor, concurrency, default max_workers, grep behavior (preserving headers, '(no match)' display), and that output is always text (no structured format). Lacks details on error handling or timeouts, but sufficient for typical usage.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well-structured with a brief intro followed by an Args section. Each sentence adds unique value, though length could be trimmed slightly. No redundant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers all input parameters thoroughly. Output schema exists (not shown), so omission of return details is acceptable. Does not mention error scenarios or prerequisites (e.g., config.ini must exist), but overall complete for a tool with 6 parameters and no annotations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema has 0% description coverage; the description provides detailed explanations for all 6 parameters. Especially strong on tags (explaining AND/OR logic with example) and grep_pattern (behavior, preservation of headers). Fully compensates for missing schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool runs a CLI show command on multiple devices in parallel, with specific verbs ('run', 'batch') and resource ('CLI show command'). It distinguishes from siblings like run_show_command (single device) by emphasizing batch parallelism.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly explains when to use hostnames vs tags, including the intersection logic when both are provided, and the fallback to all routers when omitted. Provides concrete examples for tag filtering. Could mention when not to use (e.g., for single device), but overall clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

run_show_commandsA

Run multiple CLI show commands on the device in a single session.

Commands are executed in sequence and stop on the first failure. To run all commands regardless of individual errors, call run_show_command once per command instead.

Args: hostname: Target device hostname (must exist in config.ini) commands: List of CLI commands to execute output_format: Output format — "text" (default), "json", or "xml". Note: pipe stages (| match, | last, | count, etc.) are silently dropped regardless of output_format — PyEZ's Device.cli() sends the command over NETCONF RPC, which JunOS does not pipe-process. Run commands without pipes and filter client-side. run_show_command_batch's grep_pattern argument offers server-side-style filtering, but it only accepts one command at a time — it does not cover this tool's multi-command case, so it is not a drop-in workaround here. config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
commandsYes
hostnameYes
config_pathNo
output_formatNotext

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description carries full burden. It discloses that commands stop on first failure, that pipe stages are silently dropped regardless of output_format due to PyEZ's NETCONF mechanism, and explains the default behavior for config_path. This is comprehensive behavioral disclosure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Well-structured with clear sections and front-loaded purpose sentence. While slightly long, every sentence adds value. Could be slightly tighter, but overall effective.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that an output schema exists (context signal), the description does not need to cover return values. It covers main behavior, parameter details, limitations, and when to use alternatives. Complete for a tool of this complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, but the description adds full meaning for all 4 parameters: hostname (target device requirement), commands (list of CLI commands), output_format (text/json/xml with pipe-dropping caveat), and config_path (empty string = default search). This goes well beyond the bare schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool runs multiple CLI show commands in a single session. It explicitly distinguishes from siblings like run_show_command and run_show_command_batch, which address single-command or alternative filtering scenarios.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit guidance on when to use this tool versus alternatives: use it when you want to run multiple commands and stop on first failure; use run_show_command per command to ignore individual errors. Also explains limitations with pipe stages and suggests client-side filtering, with note that run_show_command_batch's grep_pattern is not a drop-in workaround.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

schedule_rebootA

Schedule device reboot at a specified time.

Checks for existing reboot schedules. If one exists and force is False, the existing schedule is preserved.

Args: hostname: Target device hostname (must exist in config.ini) reboot_at: Reboot time in YYMMDDHHMM format (e.g., "2601020304" = 2026-01-02 03:04) dry_run: If True (default), show what would be done without scheduling force: If True, clear existing reboot schedule and set new one config_path: Path to config.ini (empty string uses default search)

ParametersJSON Schema
NameRequiredDescriptionDefault
forceNo
dry_runNo
hostnameYes
reboot_atYes
config_pathNo

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description effectively discloses key behaviors: it checks existing schedules, respects the force flag, and dry_run shows what would be done. The reboot_at format is specified. However, it does not mention success/failure outputs or side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with a clear opening and bullet-pointed args. It is slightly verbose but every sentence adds value. Could be trimmed slightly but remains efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that an output schema exists (not shown), the description need not explain returns. It covers input parameters and behavioral logic well. Missing minor details like post-scheduling confirmation, but overall complete for the tool's complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, but the description adds rich meaning for all 5 parameters: hostname must exist in config.ini, reboot_at format, dry_run default and effect, force clears existing schedule, config_path path handling. This fully compensates for missing schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: 'Schedule device reboot at a specified time.' The verb 'schedule' and resource 'device reboot' are specific, and no sibling tool offers similar scheduling, so it distinguishes well.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides context about existing schedules and force behavior but does not explicitly state when to use this tool versus alternatives or when not to use it. The usage is implied but lacks explicit exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 9 tool updatesv0.16.2
    • Addedcheck_local_inventory
    • Addedcheck_reachability
    • Addedcheck_remote_packages
    • Addedcollect_rsi
    • Addedcollect_rsi_batch
    • Addedget_config_diff
    • Addedget_router_list
    • Addedinstall_package
    • Addedpush_config
  2. 9 tool updatesv0.16.1
    • Removedcheck_local_inventory
    • Removedcheck_reachability
    • Removedcheck_remote_packages
    • Removedcollect_rsi
    • Removedcollect_rsi_batch
    • Removedget_config_diff
    • Removedget_router_list
    • Removedinstall_package
    • Removedpush_config
  3. 2 tool updatesv0.15.0
    • Changeddaily_brief1 field changed
      • addedInput schema / properties / route_baseline
        Added value: +{
        +  "default": 0,
        +  "title": "Route Baseline",
        +  "type": "integer"
        +}
    • Addedhealth_check
  4. 23 tool updatesv0.1.0
    • First observedcheck_local_inventory
    • First observedcheck_reachability
    • First observedcheck_remote_packages
    • First observedcheck_upgrade_readiness
    • First observedcollect_rsi
    • First observedcollect_rsi_batch
    • First observedcompare_version
    • First observedcopy_package
    • First observeddaily_brief
    • First observedget_config
    • First observedget_config_diff
    • First observedget_device_facts
    • First observedget_package_info
    • First observedget_router_list
    • First observedget_version
    • First observedinstall_package
    • First observedlist_remote_files
    • First observedpush_config
    • First observedrollback_package
    • First observedrun_show_command
    • First observedrun_show_command_batch
    • First observedrun_show_commands
    • First observedschedule_reboot

TDQS

A4/5.0

Scored across 24 tools

Disambiguation5/5

Each tool targets a distinct operation: firmware lifecycle (copy, install, rollback), configuration (push, get, diff), health checks (daily_brief, check_reachability, etc.), and command execution (single/multi/batch). Despite some similar names like check_reachability vs check_local_inventory, their purposes and arguments are clearly differentiated.

Naming Consistency5/5

Tools follow a consistent verb_noun snake_case pattern (e.g., copy_package, run_show_command, collect_rsi_batch). Minor exceptions like 'daily_brief' are still intuitive. Batch variants are suffixed with '_batch', maintaining a predictable structure.

Tool Count4/5

With 24 tools, the server covers firmware, config, health checks, and batch operations for Juniper devices. The count is slightly high but justified by the breadth of functionality. Each tool serves a specific purpose, and no tool seems redundant.

Completeness4/5

The tool surface covers the full firmware upgrade lifecycle, configuration management (push, get, diff), health checks (including daily brief, reachability, inventory), and command execution. Minor gaps like a dedicated 'delete_package' or 'backup_config' are mitigated by existing tools (e.g., copy_package overwrites, collect_rsi includes config). Overall, very comprehensive.

Maintenance

ActivityActive
ResponsivenessResponsive

Related MCP Connectors

Related MCP Servers