Skip to main content
Glama
xiaobenyang-com

Advertising-Analysis

广告注入MCP服务器 Advertising Analysis

一个用于在LLM响应中注入广告的MCP服务器演示项目,展示广告注入中间件的风险。 A demonstration project of an MCP server for injecting advertisements into LLM responses, showcasing the risks of advertising injection middleware.## 工具列表 Tool List

本MCP服务封装下列工具,可让模型通过标准化接口调用以下功能。 本MCP服务封装下列工具,可让模型通过标准化接口调用以下功能。

工具 Tool

描述 Description

get_completion

analyze_code

developer_tip

gc

ac

tip

检查服务 ## Inspector

工具在线测试: https://mcp.xiaobenyang.com/inspector/1777316659317763

Online Tool test https://mcp.xiaobenyang.com/inspector/1777316659317763

Related MCP server: Damn Vulnerable Model Context Protocol (DVMCP)

服务配置 MCP Server Config

如何获取 XBY-APIKEY ? How to get XBY-APIKEY ?

访问小笨羊科技网站 https://xiaobenyang.com,注册用户即可获得APIKEY Visit XiaoBenYang website https://xiaobenyang.com, register and get the APIKEY.

SSE

{
  "mcpServers": {
    "广告注入MCP服务器": {
      "headers": {
        "XBY-APIKEY": "<YOUR_XBY_APIKEY>"
      },
      "type": "sse",
      "url": "https://mcp.xiaobenyang.com/1777316659317763/sse"
    }
  }
}

STREAMABLE HTTP

{
  "mcpServers": {
    "广告注入MCP服务器": {
      "headers": {
        "XBY-APIKEY": "<YOUR_XBY_APIKEY>"
      },
      "type": "streamable_http",
      "url": "https://mcp.xiaobenyang.com/1777316659317763/mcp"
    }
  }
}

STDIO

{
    "mcpServers": {
        "广告注入MCP服务器": {
          "command": "npx",
          "args": [
            "-y",
            "xiaobenyang-mcp"
          ],
          "env": {
            "XBY_APIKEY": "<YOUR_XBY_APIKEY>",
            "mcpId": "1777316659317763",
          },
          "transport": "stdio"
        }
      }
}

Available Tools

6 tools
acacD

ac

ParametersJSON Schema
NameRequiredDescriptionDefault
codeYes

TDQS

D1.1/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. The description 'ac' reveals nothing about the tool's behavior, such as whether it performs read/write operations, requires authentication, has side effects, or handles errors. It fails to compensate for the lack of annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

While the description is extremely brief, this brevity results from under-specification rather than effective conciseness. The single word 'ac' fails to convey necessary information, making it inefficient and poorly structured for tool selection.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has one parameter with 0% schema coverage, no annotations, no output schema, and multiple sibling tools, the description is completely inadequate. It provides no context to understand the tool's function, usage, or behavior, making it insufficient for effective agent operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 0%, and the description 'ac' adds no information about the single required parameter 'code'. It does not explain what 'code' represents, its format, or its purpose, leaving the parameter completely undocumented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. There is no mention of context, prerequisites, or exclusions, leaving the agent with no information to make an informed decision among the sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

analyze_codeanalyze_codeD

analyze_code

ParametersJSON Schema
NameRequiredDescriptionDefault
codeYes

TDQS

D1.1/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure but completely fails to deliver. It doesn't indicate whether this is a read-only or mutating operation, what permissions might be required, whether it has rate limits, what format the analysis output takes, or any other behavioral characteristics. This is inadequate for a tool with unknown behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

While technically concise with just the tool name repeated, this is an example of harmful under-specification rather than effective brevity. The single word doesn't earn its place by providing any useful information. True conciseness would balance brevity with sufficient information content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complete lack of annotations, 0% schema description coverage, and no output schema, the description is woefully inadequate. It provides no information about what the tool does, how to use it, what parameters mean, or what to expect as output. This fails to meet even basic completeness requirements for a functional tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 0%, meaning the input schema provides no descriptions for the single 'code' parameter. The tool description adds absolutely no information about what the 'code' parameter should contain, its expected format, constraints, or examples. This leaves the parameter completely undocumented and unusable.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides absolutely no guidance about when to use this tool versus the sibling tools (ac, developer_tip, gc, get_completion, tip). There's no indication of appropriate contexts, prerequisites, or alternatives. This leaves the agent with no information to make informed tool selection decisions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

developer_tipdeveloper_tipD

developer_tip

ParametersJSON Schema
NameRequiredDescriptionDefault
topicNo

TDQS

D1.1/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden for behavioral disclosure but offers none. It doesn't indicate whether this is a read or write operation, what permissions might be required, what side effects exist, or what the response format might be.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

While technically concise with a single word, this represents under-specification rather than effective brevity. The description doesn't contain enough information to be useful, so its conciseness is detrimental rather than beneficial.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with one parameter, no annotations, no output schema, and 0% schema description coverage, the description is completely inadequate. It provides no meaningful information about the tool's purpose, behavior, or usage, leaving the agent unable to effectively select or invoke this tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 0% description coverage for its single parameter 'topic', and the description provides no information about what this parameter represents, its expected format, or how it influences the tool's behavior. The description fails to compensate for the complete lack of schema documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description offers no guidance on when to use this tool versus alternatives. It doesn't mention any context, prerequisites, or exclusions, leaving the agent with no information about appropriate usage scenarios.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

gcgcD

gc

ParametersJSON Schema
NameRequiredDescriptionDefault
promptYes

TDQS

D1.1/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. The description 'gc' reveals nothing about whether this is a read/write operation, its effects, permissions needed, rate limits, or response format. It fails to provide any behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

While extremely brief, this is under-specification rather than true conciseness. The single word 'gc' doesn't provide enough information to be useful, so it doesn't earn a high score for efficiency. Every sentence (or word) should earn its place, and this doesn't.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 1 parameter with no schema documentation, no annotations, no output schema, and sibling tools with similar-sounding names, the description is completely inadequate. It provides no context about what the tool does, how to use it, or what to expect, making it insufficient for agent understanding.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 1 parameter with 0% description coverage, meaning the parameter 'prompt' is undocumented in the schema. The description 'gc' adds no information about what the 'prompt' parameter is for, its format, or semantics, failing to compensate for the lack of schema documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives like 'get_completion' or 'analyze_code'. The description offers no context, prerequisites, or exclusions for usage.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_completionget_completionD

get_completion

ParametersJSON Schema
NameRequiredDescriptionDefault
promptYes

TDQS

D1.1/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden for behavioral disclosure but offers none. It doesn't indicate whether this is a read/write operation, what permissions might be needed, what side effects exist, or what the response format might be. This is completely inadequate for a tool with unknown behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

While technically concise with just the tool name, this represents severe under-specification rather than effective brevity. The single word doesn't earn its place by providing any useful information, making it ineffective despite its minimal length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is completely inadequate for a tool with one parameter and no annotations or output schema. The description provides no information about purpose, behavior, parameters, or usage context. Given the complexity implied by sibling tools like 'analyze_code' and 'developer_tip', this description fails to provide even basic contextual understanding.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, meaning the single 'prompt' parameter is completely undocumented in the schema. The description provides no parameter information whatsoever - no explanation of what the prompt should contain, its format, or its purpose. This fails to compensate for the complete lack of schema documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides absolutely no guidance about when to use this tool versus alternatives. There's no mention of context, prerequisites, or comparisons to sibling tools like 'ac', 'gc', or 'tip', leaving the agent with no usage direction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

tiptipD

tip

ParametersJSON Schema
NameRequiredDescriptionDefault
topicNo

TDQS

D1.1/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure but fails completely. It doesn't indicate whether this is a read or write operation, what permissions might be required, what the output looks like, or any other behavioral traits. The single-word description offers zero transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

While technically concise with a single word, this is a case of under-specification rather than effective brevity. The description is so minimal that it fails to communicate any useful information, making it inefficient for the agent's understanding despite its short length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 1 parameter with no schema documentation, no annotations, and no output schema, the description is completely inadequate. It provides no context about what the tool does, how to use it, or what to expect, failing to compensate for the lack of structured information.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 1 parameter with 0% description coverage, meaning the parameter 'topic' is entirely undocumented in the schema. The description 'tip' adds no information about what this parameter means, its expected format, or how it influences the tool's behavior, leaving the agent with no guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose1/5

Does the description clearly state what the tool does and how it differs from similar tools?

Tautological: description restates name/title.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines1/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. There are sibling tools like 'developer_tip' that might serve similar purposes, but the description offers no context, exclusions, or comparisons to help the agent make an informed selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 6 tool updatesv1.0.0
    • First observedac
    • First observedanalyze_code
    • First observeddeveloper_tip
    • First observedgc
    • First observedget_completion
    • First observedtip

TDQS

D1.3/5.0

Scored across 6 tools

Disambiguation1/5

The tool set has severe ambiguity, with multiple tools appearing to serve identical or overlapping purposes. For example, 'ac' and 'analyze_code' likely refer to the same action, and 'tip' and 'developer_tip' are indistinguishable in function. This makes it nearly impossible for an agent to reliably select the correct tool without additional context.

Naming Consistency2/5

Naming conventions are inconsistent and chaotic. There is a mix of abbreviated names like 'ac' and 'gc' with full names like 'analyze_code' and 'get_completion', and no discernible pattern in verb usage or structure. This lack of consistency reduces predictability and increases cognitive load for agents.

Tool Count3/5

With 6 tools, the count is reasonable and not excessive, but it feels borderline due to the apparent redundancy and lack of clear scope. The server's purpose is ambiguous from the tool names, making it hard to assess if this number is optimal, but it doesn't fall into extreme categories like having only 1 or over 25 tools.

Completeness1/5

The tool surface is severely incomplete for an 'Advertising-Analysis' domain. There are no tools for core advertising functions such as ad creation, campaign management, performance metrics, or audience targeting. The tools present seem focused on code analysis and developer assistance, which is a significant mismatch and leaves major gaps for agent workflows.

Maintenance

ActivityInactive
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers