Skip to main content
Glama

bugzilla-mcp

An MCP server that lets AI agents query Firefox's bug tracker, bugzilla.mozilla.org, for bugs and related information: search, bug details, comment threads, change history, attachments (including Phabricator review links), dependency/regression/duplicate graphs, and product/component/field metadata.

Read-only. Works without credentials for public bugs; an optional API key unlocks private bugs you can see and user lookups.

Requirements

  • Node.js 20 or newer

Related MCP server: Bugsink MCP Server

Install

git clone <this repo> bugzilla-mcp
cd bugzilla-mcp
npm install
npm run build

The server binary is dist/index.js and speaks MCP over stdio.

Configure your MCP client

Cursor

~/.cursor/mcp.json (or .cursor/mcp.json in a project):

{
  "mcpServers": {
    "firefox-bugzilla": {
      "command": "node",
      "args": ["/absolute/path/to/bugzilla-mcp/dist/index.js"],
      "env": {
        "BUGZILLA_API_KEY": "optional"
      }
    }
  }
}

Claude Desktop

claude_desktop_config.json:

{
  "mcpServers": {
    "firefox-bugzilla": {
      "command": "node",
      "args": ["/absolute/path/to/bugzilla-mcp/dist/index.js"]
    }
  }
}

Claude Code

claude mcp add firefox-bugzilla -- node /absolute/path/to/bugzilla-mcp/dist/index.js

Environment variables

Variable

Default

Purpose

BUGZILLA_API_KEY

unset

API key from https://bugzilla.mozilla.org/userprefs.cgi?tab=apikey. Enables private bugs, user lookups, whoami, and higher rate limits.

BUGZILLA_URL

https://bugzilla.mozilla.org

Point at another Bugzilla 5+ instance.

BUGZILLA_TIMEOUT_MS

60000

Per-request timeout.

Tools

Tool

What it does

search_bugs

Search with Bugzilla quicksearch syntax and/or structured filters (product, component, status, resolution, type, priority, severity, keywords, whiteboard, summary, assignee, reporter, milestone, version, platform, OS, creation/last-change time). Supports boolean-chart advanced_filters for any field, order, paging, and count_only.

get_bug

Full metadata for one or more bugs by ID or alias: status/resolution, product/component, assignee, dependencies, regressions, duplicates, flags, see-also, keywords, whiteboard, timestamps. include_fields: ["_all"] returns every field including cf_* custom fields.

get_bug_comments

Comment thread with paging, newest-first ordering, new_since filtering, and per-comment truncation. Comment #0 is the description.

get_bug_history

Field-change history (status transitions, priority, assignee, flags, keywords…) with optional field filtering. CC churn is dropped by default.

get_bug_attachments

Attachment metadata for a bug. Phabricator review stubs are resolved to phabricator_url.

get_attachment

One attachment by ID. Text-based content (patches, logs, JSON, HTML…) is returned decoded; binaries as base64.

get_related_bugs

Resolves depends_on, blocks, regressed_by, regressions, duplicates, dupe_of, and same-instance see_also links into bug summaries in one call.

list_products

Products you can search or file in, with descriptions.

get_product

A product's components (descriptions, triage owners, teams), plus versions and milestones on request.

get_field_values

Legal values for a field (status, resolution, priority, severity, type, keywords, op_sys, platform, any cf_*).

get_user

Look up users by login, ID, or fuzzy match (requires BUGZILLA_API_KEY on bugzilla.mozilla.org).

whoami

Bugzilla instance, version, and the authenticated user if an API key is set.

A bugzilla://bug/{id} resource template is also exposed; it returns a bug's metadata plus its full comment thread as JSON.

Search tips for agents

  • Quicksearch only matches open bugs unless the query starts with ALL. Structured filters match all bugs unless status is given; use status: ["__open__"] or ["__closed__"].

  • Time filters accept ISO timestamps, dates, or relative shorthand like -7d, -2w, -1m.

  • advanced_filters map to Bugzilla's boolean charts. Useful fields: longdesc (comment text, slow; always narrow with product/status), cf_crash_signature, flagtypes.name (e.g. needinfo?), commenter, cc, attachments.mimetype, delta_ts with changedafter.

  • Discover valid component names with get_product before filtering on component.

Development

npm run dev        # tsc --watch
npm run typecheck
npm run inspect    # open the MCP Inspector against the built server

Source layout:

  • src/bugzilla.ts – minimal Bugzilla REST client (URL building, API-key header, timeouts, error mapping)

  • src/format.ts – shapes raw API objects into compact, agent-friendly JSON

  • src/tools.ts – MCP tool and resource registrations

  • src/index.ts – stdio server entry point

License

MIT

Available Tools

12 tools
get_attachmentGet attachmentA
Read-onlyIdempotent

Fetch a single attachment by ID. Text-based attachments (patches, logs, text, JSON, HTML, source code) are returned decoded as text; binary attachments are returned as base64 when include_content is set.

ParametersJSON Schema
NameRequiredDescriptionDefault
max_charsNoTruncate decoded text content to this many characters
attachment_idYes
include_contentNoInclude the attachment content

TDQS

A4.6/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish read-only, idempotent, non-destructive behavior. The description adds valuable beyond-annotation context: text attachments are decoded, binary attachments are base64 when include_content is set. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two compact sentences front-load the primary action and then add return-format behavior. Every clause earns its place with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers the main retrieval scope and return encoding behavior, and annotations handle safety semantics. Without an output schema, it leaves a minor gap around what is returned when include_content is false and around error behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The description maps 'by ID' to attachment_id and explains include_content's effect on binary content, adding meaning beyond the schema. It does not mention max_chars, though the schema already documents truncation; with 67% schema coverage, the description partially compensates.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States 'Fetch a single attachment by ID' — a specific verb and resource that clearly defines the operation. The text/binary return distinction further scopes behavior and differentiates it from the sibling get_bug_attachments list tool.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Clear that this is single-ID retrieval rather than listing attachments, so an agent can infer it is not for collection listing. However, it never explicitly names get_bug_attachments as the alternative or gives a when-not-to-use condition.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_bugGet bug detailsA
Read-onlyIdempotent

Fetch one or more bugs by ID or alias with full metadata (status, resolution, product/component, assignee, dependencies, regressions, duplicates, flags, see-also links, keywords, whiteboard, timestamps). Does not include comments; use get_bug_comments for those.

ParametersJSON Schema
NameRequiredDescriptionDefault
idsYesBug IDs or aliases
include_fieldsNoOverride the returned fields. Use ['_all'] for every field including custom cf_* fields. The CC list is only included when 'cc' or '_all' is requested explicitly (cc_count is always present).

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, and non-destructive behavior. The description adds behavioral context beyond that by stating the tool does not include comments and listing the exact fields returned, giving the agent a clearer expectation of the read outcome.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no filler. The action and primary purpose are front-loaded, the metadata list is compact yet informative, and the sibling-pointer to get_bug_comments is placed at the end without bloating the text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only tool with only two parameters and no output schema, this description is sufficiently complete. It explains what is returned, what is intentionally excluded, and where to go for the excluded data. The rich parameter descriptions in the schema cover the remaining input semantics.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 100%, and the schema already documents both 'ids' and 'include_fields' thoroughly. The description's mention of 'by ID or alias' aligns with the schema but adds no new semantic detail, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('Fetch'), a resource ('bugs'), and the retrieval key ('by ID or alias'). It also lists the metadata fields returned and explicitly notes what is not included, which differentiates it from get_bug_comments and other sibling tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly implies usage when you have bug IDs or aliases and explicitly routes comment retrieval to get_bug_comments. However, it does not mention when to use search_bugs for query-based lookup, so the guidance is present but not fully exhaustive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_bug_attachmentsList bug attachmentsA
Read-onlyIdempotent

List attachments (patches, screenshots, logs, test cases) on a bug with metadata. Attachment content is not included; use get_attachment to fetch a specific attachment's content.

ParametersJSON Schema
NameRequiredDescriptionDefault
bug_idYesBug ID or alias
include_obsoleteNoInclude attachments marked obsolete

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, so the safety profile is covered. The description adds valuable non-obvious behavior: attachment content is not included, and the tool only returns metadata. This goes beyond what annotations convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no wasted words. The primary action and scope are stated immediately, followed by the key limitation and direction to the sibling tool. Well-structured and front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple list tool with two parameters, full schema coverage, and strong annotations, the description covers the essential behavior, limitation, and alternative. It doesn't describe the exact metadata fields or pagination, but given the simplicity and openWorldHint, it is adequately complete for an agent to select and call correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, with clear descriptions for both bug_id and include_obsolete. The description doesn't add parameter-level detail beyond the schema, but the examples of attachment types (patches, screenshots, logs, test cases) give some extra context. Baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List') with a clear resource ('attachments on a bug') and scopes it to 'metadata'. It distinguishes itself from get_attachment by explicitly excluding attachment content, making the tool's role unambiguous among siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear usage context: it lists attachments and tells the agent to use get_attachment when content is needed. While it doesn't enumerate all possible when-not cases (e.g., searching attachments), it gives a direct alternative for the primary limitation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_bug_commentsGet bug commentsA
Read-onlyIdempotent

Fetch the comment thread for a bug. Comment #0 is the original description. Supports paging, newest-first ordering, filtering by time, and truncating long comments.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum comments to return
orderNooldest_first
bug_idYesBug ID or alias
offsetNoSkip this many comments (after ordering)
new_sinceNoOnly comments created at/after this time (ISO timestamp or relative like -7d)
include_descriptionNoInclude comment #0 (the bug description)
max_chars_per_commentNoTruncate each comment's text to this many characters

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark the tool as read-only, idempotent, and non-destructive. The description adds genuinely useful behavioral context beyond annotations: comment #0 is the original description, and the tool supports paging, newest-first ordering, time filtering, and truncation. This helps the agent understand behavior without contradicting annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the core action, and every sentence adds value. It mentions the distinctive 'comment #0' behavior and summarizes the main capabilities without wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only tool with seven parameters, the description covers the major behavioral options and the important 'comment #0' concept. There is no output schema, so return-field details are not explicitly provided, but this is a relatively simple fetch operation and the annotations cover the safety profile. The description is sufficiently complete for selection and invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is high (86%), and most parameters already have descriptive definitions. The description maps high-level features like paging, newest-first ordering, time filtering, and truncation to parameters, but it does not add significant new meaning beyond what the schema provides. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the operation ('Fetch the comment thread for a bug') and identifies the resource as bug comments. It is specific enough to distinguish from attachments or bug metadata, though it does not explicitly separate it from namesake siblings like get_bug_history.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The intended use is implied by the purpose: call this when you need the comment thread for a bug. However, there is no explicit guidance about when to prefer this over sibling tools such as get_bug_history or get_bug_attachments, nor any exclusion criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_bug_historyGet bug change historyA
Read-onlyIdempotent

Fetch the field-change history of a bug (status/resolution transitions, priority changes, assignee changes, flag changes, CC additions, etc.). Optionally filter to specific fields or a time window.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNo
bug_idYesBug ID or alias
fieldsNoOnly include changes to these fields, e.g. ['status', 'resolution', 'priority', 'assigned_to', 'flagtypes.name', 'keywords']
new_sinceNoOnly changes made at/after this time (ISO timestamp or relative like -30d)
exclude_ccNoDrop CC-list changes, which are usually noise

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint=false, so the safety profile is covered. The description adds useful scoping context (status/resolution, assignee, flag, CC changes) and optional time/field filtering, but it does not disclose return shape, pagination, or ordering, which keeps this at an adequate mid-range score.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the core action, and uses compact examples followed by 'etc.' to avoid unnecessary length. Every clause adds useful information without repetition or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only history tool with five parameters, most of which are schema-documented, and with safety annotations already present, the description is largely sufficient. It communicates the resource, the kind of data returned, and optional filtering, though it does not describe the response shape or ordering; this is a minor gap given the lack of an output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 80%, with bug_id, fields, new_since, and exclude_cc already described. The description reinforces the meaning of fields and time-window filtering and adds examples of relevant field categories, but it does not substantially go beyond the schema for the remaining parameters like limit.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb and resource: 'Fetch the field-change history of a bug' and enumerates concrete change types like status/resolution transitions, priority changes, assignee changes, and flag changes. It clearly differentiates from sibling tools such as get_bug (current state) and get_bug_comments (comments rather than field changes).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no explicit guidance about when to use this tool versus alternatives such as get_bug or get_bug_comments. It states what the tool fetches and mentions optional filters, but the agent must infer the selection logic from sibling names and general context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_field_valuesGet legal field valuesA
Read-onlyIdempotent

Get the legal values for a bug field (e.g. status, resolution, priority, severity, bug_type, keywords, platform, op_sys, or any cf_* custom field). Useful for building precise searches.

ParametersJSON Schema
NameRequiredDescriptionDefault
fieldYesField name, e.g. 'status', 'resolution', 'priority', 'severity', 'type', 'keywords', 'op_sys', 'platform', or a cf_* custom field
include_inactiveNo

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The readOnly, idempotent, and non-destructive annotations already cover the safety profile, and the word 'Get' aligns with them. The description adds the notion of legal values and search usage but does not explain behavior for include_inactive or whether the returned set is exhaustive/open-ended.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences front-load the action and scope, provide useful examples, and end with a practical usage note. No filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only enumeration with two parameters and no output schema, the description tells an agent what it returns (legal values) and why to call it (building precise searches). It could mention how inactive values are handled, but the overall context is adequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The 'field' parameter is already documented in the schema and the description reinforces it with examples and custom-field guidance. 'include_inactive' is not described beyond its name; because schema description coverage is only 50%, the description contributes only marginal extra meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Get') and resource ('legal values for a bug field') and enumerates representative fields plus cf_* custom fields, making the tool's role as a metadata lookup distinct from sibling retrieval/search tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

'Useful for building precise searches' gives a clear context and implies using this tool before composing search_bugs queries. It does not explicitly name alternatives or state when not to use it, but the intended use is evident.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_productGet product componentsA
Read-onlyIdempotent

Get a product's details including its components (with descriptions and triage owners), active versions, and milestones. Use this to find the right component name before filing or searching.

ParametersJSON Schema
NameRequiredDescriptionDefault
productYesProduct name, e.g. 'Firefox' or 'Core'
component_filterNoCase-insensitive substring to filter component names/descriptions
include_inactive_componentsNo
include_versions_and_milestonesNo

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark the call read-only and idempotent; the description adds useful return-content detail (triage owners, milestones). However, it claims the response includes active versions and milestones even though include_versions_and_milestones defaults to false, which is somewhat misleading about default behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no filler. The core behavior is front-loaded and the purpose/usage hint is in the second sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with four params and no output schema, the description names its return sections and gives a concrete workflow context, which is enough for most selections. It loses a point for not noting the opt-in defaults for inactive components and versions/milestones.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 50%; the description helps map 'active versions, and milestones' to the boolean parameter and explains why the product parameter matters. It does not address include_inactive_components or clarify that optional sections are off by default, leaving the remaining parameters under-explained.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Get a product's details') and enumerates the actual contents: components with descriptions and triage owners, active versions, and milestones. The last sentence ties it to finding a component before filing/searching, which separates it from bug-centric siblings and list_products.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a clear use case: 'Use this to find the right component name before filing or searching.' This tells an agent when to call it, but it does not explicitly name alternatives or state when not to use it, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_userLook up usersA
Read-onlyIdempotent

Look up Bugzilla users by login/email, numeric ID, or a fuzzy match on name/nickname (e.g. ':dholbert'). Note: bugzilla.mozilla.org only allows user lookups when authenticated with BUGZILLA_API_KEY.

ParametersJSON Schema
NameRequiredDescriptionDefault
idsNoNumeric user IDs
matchNoFuzzy match strings (matched against login, real name and nickname)
namesNoExact login names / emails

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish the read-only, idempotent, non-destructive safety profile, so the description's additional note about requiring BUGZILLA_API_KEY on bugzilla.mozilla.org adds valuable operational context. It also clarifies fuzzy matching semantics with the ':dholbert' example, going beyond the schema. No contradictions with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences: the first states the operation and accepted identifiers, the second adds a critical auth caveat. No filler, and the fuzzy-match example is placed where it helps most.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only user lookup with three optional, fully documented parameters, the description covers the lookup modes and the only significant environmental constraint (API key). It doesn't describe the return value shape, but the absence of an output schema and the low complexity keep this from being a serious gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3; the schema already documents ids, match, and names with their types and matching behavior. The description adds a nickname example but does not materially expand parameter semantics beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource ('Look up Bugzilla users') and enumerates the three identification modes: login/email, numeric ID, and fuzzy name/nickname match, including a concrete example. This clearly distinguishes the tool from bug-centric siblings like search_bugs and get_bug.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description establishes the tool's purpose and the authentication prerequisite for bugzilla.mozilla.org, providing clear context for when it can be invoked. It doesn't explicitly name alternatives or exclusion cases, but the resource-specific wording makes the use case unambiguous among the sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_productsList productsA
Read-onlyIdempotent

List Bugzilla products (e.g. Firefox, Core, Toolkit, DevTools, Fenix, GeckoView, Thunderbird, Web Compatibility). Returns names and descriptions; use get_product to see a product's components.

ParametersJSON Schema
NameRequiredDescriptionDefault
typeNoselectable = products you can search, enterable = products you can file bugs in, accessible = unionenterable
name_filterNoCase-insensitive substring to filter product names
include_inactiveNo

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false, so the agent knows it's a safe read operation. The description adds no behavioral details beyond listing output content (names and descriptions). It does not mention any filtering behavior, pagination, or other side effects, but since annotations cover safety, a 3 is appropriate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, concise and front-loaded with the list of example products, which gives immediate context. It efficiently adds the alternative get_product at the end. No redundant information is present.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is sufficient for a read-only listing tool with rich annotations and a moderately covered schema. It does not mention return format (e.g., structure of 'descriptions'), which could be useful, but given the output schema is absent and the tool is simple, this is a minor gap. A 3 is fair.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 67%, with the 'type' parameter having a detailed enum description and 'name_filter' described. The description itself does not explain the parameters beyond what the schema provides, but it implicitly suggests a listing with filtering capability. Since the schema covers most parameters, the baseline is 3, and the description adds minimal extra meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists Bugzilla products and provides examples of product names. It distinguishes itself from get_product by mentioning it returns names and descriptions and directs users to get_product for components, which differentiates it from that sibling. However, it could be more explicit about its role in the broader set of tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It implies when to use the tool (to see product names and descriptions) and suggests an alternative (get_product for components). It does not explicitly state when not to use it or mention other alternatives like search_bugs, but the context is clear enough for a listing tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_bugsSearch Bugzilla bugsA
Read-onlyIdempotent

Search bugzilla.mozilla.org for bugs. Combine free-text quicksearch with structured filters.

Quicksearch syntax highlights (https://bugzilla.mozilla.org/page.cgi?id=quicksearch.html):

  • Plain words search summary/comments/whiteboard; a leading ALL includes closed bugs, otherwise only open bugs are matched.

  • Prefix shortcuts: product:Firefox, component:"Address Bar", status:NEW, assignee:someone@mozilla.com, keyword:crash, whiteboard:[foo], flag:needinfo?, P1, S2, regression.

  • A bare bug number returns that bug.

Structured filters (product/component/status/...) apply to all bugs regardless of open/closed unless status is given. status accepts real statuses (UNCONFIRMED, NEW, ASSIGNED, REOPENED, RESOLVED, VERIFIED, CLOSED) or the pseudo-values __open__ / __closed__ / __all__. Time filters accept ISO timestamps (2024-01-01T00:00:00Z), dates (2024-01-01) or relative values like -7d, -2w, -1m, -1y. Use advanced_filters for anything not covered (e.g. {field: "cf_crash_signature", operator: "substring", value: "nsThread"}, {field: "flagtypes.name", operator: "substring", value: "needinfo?"}, {field: "delta_ts", operator: "changedafter", value: "-7d"}). Full-text comment searches (longdesc) are slow on bugzilla.mozilla.org; always narrow them with product/status filters. Set count_only to get just the number of matching bugs.

ParametersJSON Schema
NameRequiredDescriptionDefault
typeNoBug type(s)
limitNoMaximum bugs to return (default 25)
orderNoSort order, comma-separated field names with optional DESC, e.g. 'changeddate DESC' or 'priority,bug_id'. Bugzilla defaults to relevance/id.
offsetNoSkip this many results (for paging)
op_sysNo
statusNoStatus value(s) or __open__ / __closed__ / __all__
creatorNoReporter email/login
productNoProduct name(s), e.g. ['Firefox', 'Core', 'Toolkit', 'DevTools', 'Fenix']
summaryNoSubstring that must appear in the summary (case-insensitive)
versionNo
keywordsNoKeyword(s) the bug must have, e.g. ['regression', 'crash', 'good-first-bug']
platformNo
priorityNoPriority value(s): P1..P5 or '--'
severityNoSeverity value(s): S1..S4, N/A, or '--'
componentNoComponent name(s), e.g. ['Address Bar']
count_onlyNoReturn only the count of matching bugs
resolutionNoResolution(s), e.g. ['FIXED'], ['---'] for unresolved
whiteboardNoSubstring that must appear in the status whiteboard
assigned_toNoAssignee email/login; use 'nobody@mozilla.org' for unassigned
quicksearchNoFree-text quicksearch query, e.g. 'ALL crash on startup product:Firefox'
creation_timeNoOnly bugs created at/after this time (ISO date/time or relative like -30d)
include_fieldsNoBug fields to return. Defaults to a compact summary set. Use ['_default'] for Bugzilla's default field set or ['_all'] for everything.
advanced_filtersNoBugzilla boolean-chart filters (f1/o1/v1). All filters are AND-ed.
last_change_timeNoOnly bugs changed at/after this time (ISO date/time or relative like -7d)
target_milestoneNo
additional_paramsNoEscape hatch: raw query parameters passed straight to /rest/bug (e.g. {"cf_fx_points": "3"})

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Despite strong annotations (readOnlyHint, openWorldHint, idempotentHint, destructiveHint), the description adds substantial behavioral details: quicksearch matches only open bugs unless 'ALL' is prefixed, structured filters ignore open/closed status unless status is provided, full-text comment searches are slow and should be narrowed, and count_only returns just the number of matches. These go well beyond the annotations and materially help the agent predict tool behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is long but every section earns its place: quicksearch syntax, structured filter semantics, time formats, advanced filters, performance warning, and count_only. It is well-structured with line breaks and bullet-driven examples, and it fronts the core purpose before diving into syntax. No filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 26-parameter tool with no output schema, the description covers the critical usage nuances: searching open vs closed bugs, status pseudo-values, time formats, advanced filter construction, and the slow-longdesc warning. It also mentions count_only and additional_params escape hatch behavior. Combined with the schema, it is complete enough for correct invocation without missing key scenarios.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With igh schema coverage (85%), the baseline is 3, but the description significantly enriches parameter semantics. It explains quicksearch syntax, status pseudo-values (__open__/__closed__/__all__), time filter formats (ISO timestamps, dates, relative like -7d), and gives concrete advanced_filter examples. This goes far beyond the schema descriptions and directly improves invocation correctness.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'Search bugzilla.mozilla.org for bugs,' clearly identifying the specific verb and resource, and it goes further to explain that free-text quicksearch can be combined with structured filters. This distinguishes it from sibling tools like get_bug (which retrieves a specific bug) and get_bug_comments, since search_bugs is explicitly the discovery/search tool. The scope and action are unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context that this tool is for searching bugs, and the sibling list reinforces that it is the search/query tool versus retrieval tools like get_bug. However, it does not explicitly state when NOT to use it (e.g., 'if you already have a bug ID, use get_bug instead') or name an alternative tool. The context is clear but exclusions are left implicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

whoamiCurrent user / server infoA
Read-onlyIdempotent

Report which Bugzilla instance this server talks to, its version, and (if BUGZILLA_API_KEY is configured) the authenticated user.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly/openWorld/idempotent/non-destructive behavior. The description adds valuable context beyond annotations: results depend on server configuration and the user is reported conditionally based on BUGZILLA_API_KEY. This helps the agent predict variable output without contradicting the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single compact sentence with no filler. The main purpose (instance identity/version) is front-loaded, and the conditional auth detail is appended naturally.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter, read-only diagnostic tool with strong annotations, the description covers the key outputs (instance, version, optional user). It doesn't specify output format, but with no output schema and a simple informational result, this is a minor gap rather than a blocker.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and the schema coverage is 100%, so there is nothing for the description to clarify. Per the baseline for parameterless tools, a 4 is appropriate; the description still adds useful context about what is being reported.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Report') and clearly names the resource and scope: which Bugzilla instance the server talks to, its version, and the authenticated user. This is unambiguous and distinguishes the tool from the sibling search/get/list tools, none of which cover server/instance identity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description makes the tool's use case self-evident—checking the target instance, version, and auth state—and explicitly qualifies the user field with 'if BUGZILLA_API_KEY is configured.' It doesn't name alternatives, but no sibling offers this diagnostic information, so no exclusion is needed.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 12 tool updatesv0.1.0
    • First observedget_attachment
    • First observedget_bug
    • First observedget_bug_attachments
    • First observedget_bug_comments
    • First observedget_bug_history
    • First observedget_field_values
    • First observedget_product
    • First observedget_related_bugs
    • First observedget_user
    • First observedlist_products
    • First observedsearch_bugs
    • First observedwhoami

TDQS

A3.9/5.0

Scored across 12 tools

Disambiguation5/5

Each tool targets a clearly distinct resource or action: search, bug details, comments, history, attachments, related bugs, products, field values, user lookup, and instance info. Even related tools like get_bug and get_related_bugs are differentiated by descriptions: the former returns metadata with links, the latter resolves and summarizes the relationship graph.

Naming Consistency4/5

The vast majority of tools follow a consistent verb_noun snake_case pattern (search_bugs, get_bug, get_bug_comments, get_product). The only deviation is whoami, which breaks the pattern but is a recognizable standard command and self-explanatory.

Tool Count5/5

Twelve tools is well-scoped for a Bugzilla read/query server. Each tool covers a meaningful operation without redundancy, and the count is neither too thin nor bloated.

Completeness2/5

The toolset is comprehensive for reading and searching Bugzilla data but lacks the core lifecycle operations expected of a bug tracker: there is no create_bug, update_bug, add_comment, or attachment upload tool. The get_product description even mentions 'before filing,' implying filing should be possible, but no such tool exists, which would cause agent failures for write-oriented tasks.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • A
    license
    B
    quality
    F
    maintenance
    Enables AI assistants to query and analyze errors from Bugsink self-hosted error tracking instances. Supports listing projects, teams, issues, and viewing detailed error events with stacktraces.
    16
    604 npm
    17
    MIT
  • A
    license
    B
    quality
    D
    maintenance
    Provides AI agents with structured access to the OWASP Bug Logging Tool (BLT) ecosystem for logging bugs, triaging issues, and managing security workflows. It enables actions like submitting vulnerabilities, tracking contributor leaderboards, and awarding gamified bacon points through a unified interface.
    4
    9
    AGPL 3.0