thinkneo-control-plane
OfficialThe ThinkNEO MCP Server is an Enterprise AI Control Plane for governance, cost management, security, and compliance across AI providers. It supports both authenticated and public tools:
Authenticated Tools
Check AI Spend (
thinkneo_check_spend): Track cost breakdowns by provider, model, team, or project across configurable time periodsEvaluate Guardrails (
thinkneo_evaluate_guardrail): Pre-flight check prompts against workspace guardrail policies to detect violations and optionally block unsafe requests before sending to an AI providerCheck Policy Compliance (
thinkneo_check_policy): Verify whether a specific model, provider, or action is permitted under workspace governance policiesGet Budget Status (
thinkneo_get_budget_status): View budget utilization, spend vs. limits, alert thresholds, and projected overagesList Alerts (
thinkneo_list_alerts): Retrieve active alerts and incidents (budget, policy, guardrail, provider issues), filterable by severityGet Compliance Status (
thinkneo_get_compliance_status): Assess audit readiness against SOC 2, GDPR, HIPAA, or general AI governance frameworks
Public Tools (no authentication required)
Provider Status (
thinkneo_provider_status): Check real-time health, latency, error rates, and availability of AI providers (OpenAI, Anthropic, Google, Mistral, etc.)Read Project Memory: Access Claude Code project memory files
Schedule a Demo (
thinkneo_schedule_demo): Book a discovery call with the ThinkNEO team
Compatible with Claude, ChatGPT, Copilot, Gemini, and any MCP-compatible client. Can be self-hosted via Docker.
Enables real-time monitoring of provider health, tracking of AI expenditures, and enforcement of safety guardrails and compliance policies for OpenAI models.
ThinkNEO MCP Server
Open MCP server with built-in defense layer (ThinkShield). Part of the ThinkNEO Platform — enterprise AI governance.
What This Is
An open-source MCP server providing 72 tools for AI governance, observability, and security:
ThinkShield — Production defense layer: detection engine, 5 rule packs, runtime middleware. 145 tests, p99 < 1ms.
72 MCP Tools — Governance, guardrails, FinOps, smart routing, observability, compliance, outcome validation, and more.
24 A2A Skills — Bidirectional MCP-A2A bridge for Google's Agent-to-Agent Protocol (v0.3.0, Linux Foundation).
Apache-2.0 — Use it, fork it, contribute.
Related MCP server: Compliance Scanner MCP
What This Is Not
Not the full ThinkNEO Platform. Governance orchestration, cryptographic audit chain, tenant management, and enterprise integrations are proprietary and run at thinkneo.ai.
Not a standalone security product. ThinkShield is the defense component of a larger governed platform.
Why Open
We open-source our defense layer because real security doesn't depend on hidden rules — it depends on tested, audited, continuously improved detection plus a strong governance moat around it.
Snort. Suricata. Falco. OWASP CRS. The security industry runs on open detection. We follow that tradition.
The detection is open. The governance is proprietary. That's where the moat is.
Architecture
Open Source (this repo) Proprietary (thinkneo.ai)
┌─────────────────────────────────┐ ┌──────────────────────────────────┐
│ │ │ │
MCP Clients ────>│ 72 MCP Tools │ │ Governance Orchestration │
(Claude, Cursor, │ ├── Guardrails & Safety │────>│ ├── Policy Engine (AIRGP) │
ChatGPT, etc.) │ ├── FinOps & Smart Routing │ │ ├── Cryptographic Audit Chain │
│ ├── Observability │ │ ├── Tenant Management │
A2A Agents ─────>│ ├── Compliance & Validation │ │ ├── Enterprise Integrations │
(Google A2A) │ └── MCP-A2A Bridge (24 skills) │ │ └── SLA & Support │
│ │ │ │
│ ThinkShield Defense Layer │ │ SHA-256 Hash Chain (949K+ rows) │
│ ├── Detection Engine │ │ Stripe Billing │
│ ├── 5 Rule Packs │ │ Resend Email │
│ └── ASGI Middleware │ │ Multi-tenant Auth │
│ │ │ │
└─────────────────────────────────┘ └──────────────────────────────────┘
Apache-2.0 License Commercial LicenseQuickstart
# Clone
git clone https://github.com/thinkneo-ai/mcp-server.git
cd mcp-server
# Install
pip install -r requirements.txt
# Run
python -m uvicorn src.server:app --host 0.0.0.0 --port 8081
# Test
python -m pytest tests/ -qOr with Docker:
cd deploy
docker compose up -dConnect from Claude Desktop, Cursor, or any MCP client:
https://mcp.thinkneo.ai/mcpFree tier: 500 calls/month, auto-provisioned API key. All 72 tools available.
Components
Directory | Description | License |
| 72 MCP tools — governance, security, FinOps, observability | Apache-2.0 |
| Defense layer — detection engine, 5 rule packs | Apache-2.0 |
| ThinkShield test suite — 145 tests + attack/benign fixtures | Apache-2.0 |
| A2A Agent Card — 24 skills bridged from MCP | Apache-2.0 |
ThinkShield Rule Packs
Pack | Detects |
| SQL injection, XSS, command injection, path traversal |
| Credential stuffing, brute force, token replay, privilege escalation |
| Rate abuse, resource exhaustion, API scraping |
| Path probing, tool enumeration, method probing, fingerprinting |
| Header anomalies, spoofing, missing security headers |
MCP Tools (72)
Governance (6) | Guardrails (3) | FinOps (4) | Smart Router (4) | Trust Score (2) | Registry (5) | Bridge (4) | Observability (5) | Business Value (6) | A2A Control (4) | Optimization (1) | Outcome Validation (4) | Policy Engine (4) | Benchmarking (3) | Compliance (2) | Agent SLA (4) | Audit Export (3) | Cache (3) | Security (5) | Tokens (1) | Memory (2) | Scheduling (1) | Alerts (1)
Full tool reference: docs/quickstart.md
MCP Spec Compliance
Complete Model Context Protocol 2024-11-05 implementation. Forward-compatible with MCP 2025-03-26.
Capability | Status | Details |
tools | 72 tools, full annotations | destructiveHint, readOnlyHint, idempotentHint, openWorldHint |
resources | 2 resources | Getting Started guide, Supported Providers |
prompts | 2 prompts with completions | governance_audit, policy_preflight |
logging | logging/setLevel | 8 levels, per-session, audit trail |
completions | completion/complete | workspace (auth-scoped), provider, model (provider-aware) |
Ecosystem
This repo is part of the ThinkNEO ecosystem:
Project | Description |
Enterprise AI governance platform | |
AI Runtime Governance Protocol — open standard | |
A2A Security & Trust Conformance | |
Business applications for SMBs | |
Robot fleet governance dashboard |
Security
See SECURITY.md for vulnerability reporting.
Contributing
See CONTRIBUTING.md.
Related
Server | Description | Tools |
Enterprise AI Control Plane (this repo) | 72 tools | |
SMB standalone products — self-serve via TNC credits | 37 tools |
License
Apache-2.0 — see LICENSE.
About
ThinkNEO AI Technology Co., Ltd. — Hong Kong CR No. 2296774.
Built by the team behind the ThinkNEO Enterprise AI Control Plane, AIRGP protocol, and A2ASTC conformance suite.
Available Tools
8 toolsthinkneo_check_policyBRead-onlyIdempotent
Check if a specific model, provider, or action is allowed by the governance policies configured for a workspace. Requires authentication.
| Name | Required | Description | Default |
|---|---|---|---|
| workspace | Yes | Workspace name or ID whose governance policies to check against | |
| model | No | AI model name to check (e.g., gpt-4o, claude-sonnet-4-6, gemini-2.0-flash) | |
| provider | No | AI provider to check (e.g., openai, anthropic, google, mistral) | |
| action | No | Specific action to check (e.g., create-completion, use-tool, fine-tune) |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and idempotentHint=true. The description adds the authentication requirement, which is valuable behavioral context not present in the annotations. No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with zero waste. The first sentence front-loads the core purpose and scope; the second states the auth requirement. Every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the low complexity (4 simple parameters), 100% schema coverage, existing annotations, and presence of an output schema, the description is complete. It does not need to detail return values since the output schema exists, and the auth requirement is noted.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema description coverage, the baseline is 3. The description references the parameter concepts (model, provider, action) but does not add semantic details beyond the schema's examples (e.g., gpt-4o, openai) or explain parameter interaction logic.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb (Check) and the specific resource (governance policy allowance for models/providers/actions). It implicitly distinguishes from siblings like check_spend or get_budget_status through specificity, though it doesn't explicitly name alternatives.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description mentions 'Requires authentication' as a prerequisite, but provides no guidance on when to use this tool versus siblings like thinkneo_get_compliance_status or thinkneo_evaluate_guardrail, nor when to check specific parameter combinations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
thinkneo_check_spendBRead-onlyIdempotent
Check AI spend summary for a workspace, team, or project. Returns cost breakdown by provider, model, and time period. Requires authentication.
| Name | Required | Description | Default |
|---|---|---|---|
| workspace | Yes | Workspace name or ID (e.g., 'prod-engineering', 'finance-team') | |
| period | No | Time period for the report: today, this-week, this-month, last-month, or custom | this-month |
| group_by | No | Dimension to group costs by: provider, model, team, or project | provider |
| start_date | No | Start date for a custom period in ISO format (YYYY-MM-DD). Only used when period='custom' | |
| end_date | No | End date for a custom period in ISO format (YYYY-MM-DD). Only used when period='custom' |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish readOnlyHint=true and idempotentHint=true, so the description doesn't need to repeat safety traits. It adds value by disclosing the authentication requirement and summarizing the return structure (cost breakdown by provider/model/period). However, it omits rate limits, caching behavior, or error conditions (e.g., invalid workspace).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is three sentences with zero waste. It front-loads the core action ('Check AI spend summary'), follows with return value description, and ends with the auth requirement. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of an output schema (not shown but indicated) and 100% input schema coverage, the description appropriately provides a high-level summary rather than detailed field documentation. However, it lacks differentiation from financial siblings (particularly thinkneo_get_budget_status) and doesn't clarify the operational scope limitations (workspace-only filtering).
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema description coverage, the schema itself documents all five parameters comprehensively (including the conditional logic for start_date/end_date). The description mentions 'workspace, team, or project' which loosely maps to the workspace parameter and group_by options, but doesn't add syntax details, format examples, or clarify the relationship between period and date parameters beyond what's in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool 'Check[s] AI spend summary' with specific breakdown dimensions (provider, model, time period). However, it slightly conflates filtering scope by mentioning 'team, or project' as targets when the schema only supports workspace-level filtering with team/project as grouping dimensions (group_by parameter), and doesn't differentiate from the similar sibling thinkneo_get_budget_status.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description notes 'Requires authentication' as a prerequisite but provides no guidance on when to use this tool versus alternatives like thinkneo_get_budget_status (which also deals with financial data) or when to use custom date ranges versus preset periods. No exclusions or prerequisites beyond auth are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
thinkneo_evaluate_guardrailARead-onlyIdempotent
Evaluate a prompt or text against ThinkNEO guardrail policies before sending it to an AI provider. Returns risk assessment, violations found, and recommendations. Requires authentication.
| Name | Required | Description | Default |
|---|---|---|---|
| text | Yes | The prompt or text content to evaluate for policy violations (max 32,000 characters) | |
| workspace | Yes | Workspace whose guardrail policies to apply for this evaluation | |
| guardrail_mode | No | Evaluation mode: 'monitor' (log violations only) or 'enforce' (block the request on violation) | monitor |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already establish read-only and idempotent safety. The description adds valuable behavioral context not in annotations: the authentication requirement and a summary of return values (risk assessment, violations, recommendations). It appropriately doesn't contradict the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three tightly constructed sentences with zero waste. Front-loaded with the core action, followed by return value description, and ending with the authentication requirement. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of a complete input schema (100% coverage), output schema, and annotations, the description provides sufficient additional context (authentication needs, return summary, workflow timing) without needing to duplicate schema details. Adequately complete for the tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema description coverage, the baseline is appropriately met. The description implicitly clarifies the 'text' parameter by calling it a 'prompt or text' and provides workflow context ('before sending to AI provider') that adds semantic meaning to the evaluation process without redundantly listing parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action (evaluate), resource (prompt/text against ThinkNEO guardrail policies), and scope. It distinguishes from siblings by specifying 'guardrail policies' versus general 'policy' checks or other operations, though it doesn't explicitly contrast with thinkneo_check_policy.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides important temporal context ('before sending it to an AI provider') implying when to invoke it in a workflow. However, it lacks explicit guidance on when to use this versus thinkneo_check_policy or other policy-related siblings, and doesn't mention prerequisites beyond authentication.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
thinkneo_get_budget_statusBRead-only
Get current budget utilization and enforcement status for a workspace. Shows spend vs limit, alert thresholds, and projected overage. Requires authentication.
| Name | Required | Description | Default |
|---|---|---|---|
| workspace | Yes | Workspace name or ID to retrieve current budget status for |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=true. Description adds 'Requires authentication' which is critical behavioral context not in annotations, and previews returned data concepts (spend vs limit, thresholds). Does not contradict annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with zero waste. Front-loaded with main action ('Get current budget...'), followed by specific capabilities ('Shows spend vs limit...') and requirements ('Requires authentication'). Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Appropriate for a read-only status tool with existing output schema and annotations. Description covers authentication requirement and nature of returned data without needing to replicate output schema details. Sufficient for tool complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with the 'workspace' parameter fully documented in schema ('Workspace name or ID to retrieve current budget status for'). Description does not add parameter-specific semantics beyond schema, which meets baseline for high coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear verb 'Get' and specific resource 'budget utilization and enforcement status'. Lists specific data points (spend vs limit, thresholds, overage) that implicitly distinguish from simple spend checking, though does not explicitly differentiate from sibling thinkneo_check_spend.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use versus alternatives like thinkneo_check_spend. While the specific capabilities listed (enforcement status, projections) imply appropriate use cases, there is no explicit when-to-use or when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
thinkneo_get_compliance_statusARead-onlyIdempotent
Get compliance and audit readiness status for a workspace. Shows governance score, pending actions, and compliance gaps. Requires authentication.
| Name | Required | Description | Default |
|---|---|---|---|
| workspace | Yes | Workspace name or ID to evaluate compliance readiness for | |
| framework | No | Compliance framework to assess: soc2 (SOC 2 Type II), gdpr (GDPR), hipaa (HIPAA), or general (ThinkNEO AI governance) | general |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate read-only/idempotent behavior, and the description is consistent with 'Get' and 'Shows'. It adds valuable context beyond annotations by noting the authentication requirement and previewing specific output content (governance score, pending actions, compliance gaps), helping the agent understand what data will be returned even though an output schema exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences efficiently structured: purpose statement first, followed by output preview, then authentication requirement. Every sentence provides distinct value without redundancy or unnecessary elaboration. Appropriate length for the tool's complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of complete schema annotations (100% coverage), output schema, and safety hints (readOnly/idempotent), the description provides sufficient high-level context. It appropriately focuses on purpose and prerequisites rather than duplicating structured data, though it could slightly improve by hinting at relationship to sibling governance tools.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema description coverage, the baseline is 3. The description does not explicitly discuss the parameters (workspace, framework) or their semantics, relying entirely on the schema's detailed descriptions. No additional parameter guidance (e.g., format hints, examples) is provided in the description text.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool retrieves 'compliance and audit readiness status' and specifies the target resource (workspace). It distinguishes itself from siblings like check_policy or check_spend by specifying outputs unique to compliance (governance score, compliance gaps), though it doesn't explicitly name sibling alternatives.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description notes 'Requires authentication' as a prerequisite but provides no guidance on when to use this tool versus siblings like thinkneo_check_policy or thinkneo_evaluate_guardrail. There are no explicit when-to-use or when-not-to-use conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
thinkneo_list_alertsARead-only
List active alerts and incidents for a workspace. Includes budget alerts, policy violations, guardrail triggers, and provider issues. Requires authentication.
| Name | Required | Description | Default |
|---|---|---|---|
| workspace | Yes | Workspace name or ID to list active alerts for | |
| severity | No | Filter alerts by severity level: critical, warning, info, or all | all |
| limit | No | Maximum number of alerts to return (1–100) |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The annotation declares readOnlyHint: true, and the description aligns with this ('List'). The description adds valuable behavioral context beyond the annotation: it specifies 'active' status (scope/temporal filtering), lists content categories to expect, and notes authentication requirements. It does not contradict the read-only nature.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description consists of three sentences with zero waste: sentence one establishes core purpose, sentence two specifies content types (high value add), and sentence three states authentication requirements. Information is front-loaded appropriately with the primary action stated first.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the existence of an output schema (covering return values), 100% parameter schema coverage, and readOnly annotations, the description provides sufficient context. It adequately explains what the tool returns (the four alert types) without needing to detail return structure. It meets completeness requirements for a standard list operation with three parameters.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, providing detailed descriptions for workspace, severity, and limit parameters. The description mentions 'workspace' in the first sentence, reinforcing the required parameter's role, but does not elaborate further on parameter semantics. With full schema coverage, the baseline score of 3 is appropriate as the description does not need to compensate for missing schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('List') with clear resource ('active alerts and incidents') and scope ('for a workspace'). It effectively distinguishes from siblings (check_policy, check_spend, evaluate_guardrail, etc.) by positioning this as an aggregation endpoint that covers 'budget alerts, policy violations, guardrail triggers, and provider issues'—implicitly contrasting with the specific deep-check operations of sibling tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides implied usage guidance by enumerating the specific alert types included (budget, policy, guardrail, provider), which helps identify when to use this tool versus specific check/evaluate siblings. However, it lacks explicit guidance such as 'use this for overview, use check_policy for specific policy validation' or explicit when-not conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
thinkneo_provider_statusARead-only
Get real-time health and performance status of AI providers routed through the ThinkNEO gateway. Shows latency, error rates, and availability. No authentication required.
| Name | Required | Description | Default |
|---|---|---|---|
| provider | No | Specific provider to check: openai, anthropic, google, mistral, xai, cohere, or together. Omit to get status for all providers. | |
| workspace | No | Workspace context for provider routing configuration (optional) |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
While annotations declare readOnlyHint=true, the description adds valuable behavioral context: it specifies the authentication requirements ('No authentication required') and details what metrics are returned (latency, error rates, availability). This goes beyond the binary read-only flag to explain what data the agent can expect.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three well-structured sentences with zero waste: first establishes purpose, second details output metrics, third states authentication requirements. Information is front-loaded and every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of an output schema and readOnly annotations, the description provides sufficient context without redundancy. It adequately covers the tool's purpose, return value categories, and invocation prerequisites for a simple monitoring tool with two optional parameters.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema description coverage, the schema fully documents both parameters including specific provider enum values (openai, anthropic, etc.) and the optional workspace context. The description relies on the schema for parameter semantics, which is appropriate given the comprehensive schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses specific verbs ('Get', 'Shows') and clearly identifies the resource (health and performance status of AI providers) and scope (routed through ThinkNEO gateway). It effectively distinguishes from siblings like check_spend, check_policy, and get_compliance_status by focusing on provider infrastructure rather than financial or policy domains.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides one usage constraint ('No authentication required'), which is helpful for invocation prerequisites. However, it lacks explicit guidance on when to use this tool versus sibling status-checking tools like thinkneo_get_budget_status or thinkneo_check_spend, leaving the selection criteria implied rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
thinkneo_schedule_demoA
Schedule a demo or discovery call with the ThinkNEO team. Collects contact information and preferences. No authentication required.
| Name | Required | Description | Default |
|---|---|---|---|
| contact_name | Yes | Full name of the person requesting the demo | |
| company | Yes | Company or organization name | |
| Yes | Business email address to receive follow-up from the ThinkNEO team | ||
| role | No | Contact's role: cto, cfo, security, engineering, or other | |
| interest | No | Primary area of interest: guardrails, finops, observability, governance, or full platform | |
| preferred_dates | No | Preferred meeting dates, times, and timezone (e.g., 'Tuesdays or Thursdays, 9-11am EST') | |
| context | No | Additional context such as current AI providers used, request volume, or specific use case |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate this is a non-read-only, non-idempotent operation (write). The description adds valuable behavioral context that no authentication is required, which is critical for a write operation. It also clarifies the data collection nature of the tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three efficient sentences: the first states the core action, the second describes the data collection behavior, and the third provides the auth requirement. Every sentence earns its place with no redundancy or waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the 100% schema coverage, existing output schema, and annotations covering the safety profile, the description provides complete contextual value by adding the authentication requirement (not in annotations) without needing to repeat parameter or return value details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema description coverage, the schema fully documents all seven parameters. The description broadly mentions 'contact information and preferences' but does not add semantic details, formats, or relationships beyond what the structured schema already provides, warranting the baseline score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Schedule') with a clear resource ('demo or discovery call with the ThinkNEO team'), and effectively distinguishes from operational siblings (check_policy, check_spend, etc.) by indicating this is for booking meetings rather than querying system state.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear context that this is for scheduling demos and includes the important usage constraint 'No authentication required.' However, it lacks explicit when-to-use guidance contrasting with the seven sibling monitoring tools, though the functional distinction is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
8 tool updates
- First observed
thinkneo_check_policy - First observed
thinkneo_check_spend - First observed
thinkneo_evaluate_guardrail - First observed
thinkneo_get_budget_status - First observed
thinkneo_get_compliance_status - First observed
thinkneo_list_alerts - First observed
thinkneo_provider_status - First observed
thinkneo_schedule_demo
TDQS
Tools are generally distinct with clear domains: policy (permissions), guardrail (content safety), spend (analytics), budget (limits), compliance (audit), alerts (incidents), and provider health. Minor semantic overlap exists between check_spend and get_budget_status (both financial), and between check_policy and evaluate_guardrail (both validation), but descriptions clarify their distinct scopes.
Consistent snake_case prefixing (thinkneo_) and mostly verb_noun structure (check, evaluate, get, list, schedule). Minor deviation with provider_status which lacks a verb prefix, breaking the pattern established by get_budget_status and get_compliance_status. Verbs vary (check/evaluate/get) but remain readable.
Eight tools is a reasonable count for an AI governance control plane, covering policy, cost, compliance, and operational monitoring. The inclusion of schedule_demo (a sales/marketing function) is slightly incongruous with the operational focus of the other seven tools, but doesn't bloat the set.
Strong observability coverage (read-only status checks, spend analysis, alert listing) but lacks expected control plane capabilities: no tools to create/update policies, set budgets, configure guardrails, or manage/acknowledge alerts. The surface is adequate for monitoring but incomplete for 'control' operations implied by the server name.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Enterprise AI Control Plane: governance, guardrails, spend tracking, compliance & smart routing.
Pre-spend firewall for AI agents. Approves, blocks, flags transactions against policy rules.
Zero-secret MCP gateway for AI agents: risk-scored, audited calls with human-in-the-loop approval.
Compliance frameworks (SOC 2, ISO 27001, CMMC, NIST, more) delivered to AI agents as MCP tools.
1
Related MCP Servers
- FlicenseNot gradedqualityCmaintenanceProvides AI security guardrails through Javelin's platform to detect harmful content, prompt injection attempts, and language policies. Enables comprehensive content safety analysis with trust & safety detection, prompt injection protection, and language identification.-
- FlicenseNot gradedqualityDmaintenanceAnalyzes security compliance documents (ISMS-P, NIST, CIS Benchmark) in PDF/TXT format, extracts requirements, recommends AWS services, and evaluates implementation difficulty and timelines through structured JSON output.-
- AlicenseBqualityDmaintenanceProvides a comprehensive suite of 76 tools for AWS cloud resource optimization, cost management, and infrastructure monitoring. It enables users to identify unused resources, analyze cost trends, right-size capacity, and maintain security compliance through natural language.76MIT
- FlicenseNot gradedqualityFmaintenanceA secure middleware that intercepts AI agent tool calls to evaluate risks and manage human-in-the-loop approvals via durable Inngest workflows. It ensures compliance with standards like the EU AI Act by pausing high-risk actions until authorized by a human reviewer.1-
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/thinkneo-ai/mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server