squire
Squire is a CLI/MCP tool for running short validation, analysis, and compute jobs in clean remote runtimes across a variety of languages and tools.
Help & Discovery: Browse the full command catalog or get usage for a specific command (
--help,--help --json)Identity & Quotas: Check authenticated identity, trust tier, feature flags, and server-side quotas (
whoami)Runtime Verification: Run inline code snippets or scripts in fresh Linux containers for bash, Python, or Node across multiple target environments (
verify)Dependency Validation: Validate dependency manifests in clean environments — currently disabled on the public service due to zero-egress policy (
deps)SQL Sandboxing: Run SQLite or Postgres schema, queries, and migrations in a disposable database sandbox (
sql)Testing: Execute test suites (pytest, npm test, etc.) in clean runtimes across a target matrix for Python, Node, or Bash (
test)Linting & Static Analysis: Run ruff, eslint, or clippy in fresh toolchains to eliminate local environment drift (
lint)Security Auditing: Scan for secrets and run local-config static analysis; dependency audit and remote Semgrep are disabled publicly (
audit)Build Checks: Run offline packaging and build sanity checks for Python or Node, with optional artifact download (
build)Benchmarking: Run short timing/benchmark jobs in clean runtimes for Python, Bash, or Go (
bench)Headless Browser: Run offline headless Chromium, capture screenshots, and download artifacts — no remote URL fetching allowed (
browser)Compilation: Cross-compile Go or Rust code against multiple targets in clean toolchains (
compile)Constraint Solving: Run bounded Z3 or MiniZinc solver jobs in a fresh sandbox (
solve)Quantum Simulation: Run offline Qiskit Aer quantum simulations with optional artifact download (
quantum_simulate)Data Processing: Execute Python data jobs with pandas, polars, and pyarrow in a disposable remote runtime, with optional artifact download (
data)Media Processing: Run Python media/ffmpeg jobs in a disposable runtime with optional artifact download (
media)MCP Integration: Optional MCP stdio wrapper for agent integration with anonymous access
Target environment for cross-environment validation jobs, allowing verification of scripts and applications on specific Debian versions (e.g., debian-12) in clean remote runtimes.
Enables offline media processing and transformation tasks (video/audio manipulation) through the squire media command in ephemeral sandboxes.
Supports data processing workflows using pandas DataFrames through the squire data command for jobs involving CSV and tabular data transformations.
Supports high-performance data processing workflows using Polars through the squire data command for efficient DataFrame operations on large datasets.
Enables running Python test suites using pytest in isolated remote environments via the squire test command for clean validation loops.
Comprehensive support for Python across multiple subcommands (verify, test, lint, build, data, audit) allowing validation, testing, and packaging on various Python versions and target environments.
Provides offline quantum circuit simulation capabilities using Qiskit Aer through the squire quantum simulate command for quantum algorithm validation.
Enables fast Python linting and static analysis using the Ruff tool through the squire lint command.
Supports cross-compilation of Rust code to multiple target architectures (e.g., linux/amd64, linux/arm64) through the squire compile command.
Enables SQL validation and querying against SQLite databases through the squire sql command for database schema and query verification.
Target environment for cross-environment validation jobs, allowing verification of scripts and applications on specific Ubuntu versions (e.g., ubuntu-24.04) in clean remote runtimes.
Squire
Squire is a transparent local execution and verification layer for coding agents. It keeps common repository reads hot and continuously maintains whether the current declared workspace state is verified.
The agent keeps using ordinary terminal commands. Before Codex starts a local read-only command, Squire checks current state and either replays a proven mmap observation or executes a small bounded operation over hash-verified current file bytes. A valid hit returns the exact stdout, stderr, and exit status. Every miss follows Codex's original native execution path.
Install
curl -fsSL https://raw.githubusercontent.com/reidgoodbar/squire/main/install.sh | bashThe installer verifies matching Squire and Squire-Codex release archives and
installs the driver, Codex runtime helper, and host-native Squire runtime to
~/.local/bin. It does not change Codex authentication or configuration.
Supported hosts are macOS and Linux on amd64 or arm64.
Check the installation:
squire doctordoctor exits nonzero when any required driver, helper, runtime, or ABI
component is missing.
Related MCP server: mcp-k8s-ephemeral-job
Use
Start from any directory:
squire codexThat is the complete user path. There is no setup command, global shell shim, prompt change, MCP tool, preload injection, or VM provisioning step. If Codex moves into a repository later, Squire discovers and prepares that repository from the command's actual cwd.
squire-codex is also installed as a direct convenience command.
Inspect the current repository and runtime:
squire status
squire status --json
squire explain -- git status --shortContinuous Verification
Squire Green runs declared tests, lint, typechecks, and builds natively in the background after repository edits settle. Each result is bound to the exact declared input bytes, check configuration, environment, and executable. A later relevant edit makes that result stale; unrelated edits do not.
# .squire/checks.toml
[[check]]
name = "tests"
command = ["go", "test", "./..."]
inputs = ["**/*.go", "go.mod", "go.sum"]
timeout = "10m"Repository-provided commands never run silently on first use. Review the file and trust its exact hash once:
squire green trust
squire verifyAny config change revokes trust. squire codex then schedules trusted checks
automatically; no second daemon or warm command is required. See
docs/GREEN.md for configuration and proof semantics.
What It Accelerates
Production lanes are bounded but cover the common read-only command surface:
Git metadata: supported
git rev-parseforms and branch discovery.Repository reads: supported
git status,git ls-files, andgit diffforms, including path-scoped diffs andgit diff --check, plus boundedgit log -N --oneline -- <literal paths>history.File and search reads: bounded
cat, ordered single- or multi-rangesed -n,head,tail,nl -ba,file, fixed-stringgrep/rg, demand-prepared bounded repositoryrgsearches, and tightlsforms.Environment discovery: supported version probes,
which/command -v, safeprintenv,whoami,id,hostname, andunameforms.Compositions: complete read-only plans over supported sources and filters, including pipes, sequences, redirection to
/dev/null,head,tail, boundedsed -n,grep -F,wc -l, andsort.
No operation is removed. Builds, tests, edits, installs, mutating Git commands,
expansions, unknown shell syntax, sensitive probes, and unsupported variants
immediately follow Codex's unchanged native path. A safe cold miss does the
same while requesting exact preparation in the background. rg --files
remains outside the bounded preparation policy and follows the native path.
Supported commands compile into typed bounded plans rather than exact command templates. Source proof and execution are separate: one proven file snapshot can serve different line selections, filters, and compositions without a cache entry for each command string. The same plan representation is implemented by the Go engine and native runtime, keeping future read operators additive while differential tests enforce parity at the ABI boundary.
Why Hits Are Current
Squire caches observations, not authority. A foreground replay either
recomputes the inputs that can affect that command or reuses a cryptographic
fingerprint while a complete kqueue/inotify guard reports no dependency
change. The prepared epoch must still match. Proof inputs include the normalized
command and cwd, Git refs/index/config and external behavior files, relevant
workspace state, canonical paths, content hashes, command-specific environment
proof, and executable identity. Guard failure always invalidates the resident
proof.
For bounded file reads, an epoch mismatch may instead use the current-file lane: Squire retains the exact bytes read while computing the foreground SHA-256 proof and applies only its fixed byte grammar to those bytes. This requires no rewarm and does not persist the file or result. The cache may still contain stale records, but they are never replayed after a proof mismatch. Missing state, corruption, unsupported syntax, an ABI mismatch, or an unprofitable proof all become native fallback.
The invalidation suite changes file bytes without changing size or mtime, mutates the Git index and untracked set, changes same-size diffs, edits Git config, commits, renames branches, changes loose and packed object namespaces, changes environment inputs, and probes outside-workspace symlinks. Returning old bytes or an unsafe hit fails the release.
See SQUIRE_CONTRACT.md for the complete invariants.
Current Runtime Check
On July 16, 2026, a 500-command randomized production-ABI run recorded 421
exact hits, 79 safe fallbacks, 468 native comparisons, zero mismatches, and
zero unsafe hits. Hit p50/p95/p99 was 0.315/0.630/0.933ms; the same commands
ran natively at 8.084/27.692/51.820ms. A separate 500-query repository-search
differential had 500 exact or order-equivalent hits and zero semantic
mismatches. Bounded path history was 28/28 exact at 0.333ms p50 and 0.492ms
p99 versus 20.060ms native p50. All 2,048 steady calls were exact with
0.433ms wall p99. Under eight-way load, CPU p99 was 0.334ms; scheduler-
contended wall p99 was 3.242ms.
Fresh live gpt-5.6-luna treatments independently replayed 2/3 Express calls
(66.7%), 5/5 Flask calls (100%), and 4/5 fmt calls (80%). Every treatment
passed the 50% all-terminal-call gate with valid accounting and zero
diagnostic mismatches. These small live samples validate coverage, not causal
whole-task wall time; model trajectories diverged before seeing tool results.
A deterministic 40-pair Codex attribution test held model responses, commands,
workspace, and terminal payloads fixed. Six serial calls fell from 374.876ms
to 103.600ms, saving 271.277ms (72.4%, paired 95% interval
265.630-276.540ms). Two parallel batches saved 52.6%. AB and BA orders both
remained positive, while interleaved A/A and B/B intervals included zero.
Full methodology and historical tables: docs/BENCHMARKS.md.
Architecture and backend notes: docs/ADVANCED.md.
Available Tools
16 toolsauditSquire AuditA
Run the supported security-focused audit surfaces against staged local files. On the public service this currently means secret scanning and local-config static analysis.
| Name | Required | Description | Default |
|---|---|---|---|
| config | No | Static analysis config as a staged local file path. | |
| files | No | Local file paths to stage. | |
| language | No | Audit language. Dependency audit is currently disabled publicly. | |
| paths | No | Local directory paths to stage recursively. | |
| secrets | No | Run the built-in secret scanner. | |
| static | No | Run static analysis. | |
| targets | No | Audit targets as an array or CSV string. | |
| timeout | No | Audit timeout in seconds. | |
| tool | No | Audit tool, such as semgrep. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full disclosure burden. Successfully conveys prerequisite that files must be 'staged' and operational constraints of public service. Missing output format, failure modes, and whether audits are read-only vs. generating reports. Adequate but incomplete behavioral picture.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two tightly constructed sentences with zero redundancy. First sentence establishes core operation; second sentence provides critical deployment context. Front-loaded with actionable verb and scope.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 9-parameter security tool with no output schema, description establishes the core conceptual model (staging, audit surfaces) and current limitations. Absence of output description or detailed prerequisite chain prevents higher score despite good annotations in schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 100% coverage (baseline 3). Description adds valuable conceptual framing, mapping 'secrets' and 'static' parameters to 'security-focused audit surfaces' and explaining the 'staged local files' concept that ties together 'files', 'paths', and 'config' parameters. Elevates beyond raw schema documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear verb+resource combination ('Run... security-focused audit surfaces against staged local files'). Specifies exact capabilities (secret scanning, local-config static analysis) and target (staged local files). Distinguishes from siblings like 'lint' or 'test' through explicit security focus and specific techniques mentioned.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides implicit guidance through public service limitations ('currently means secret scanning...'), constraining expectations about available features. However, lacks explicit comparison to sibling tools like 'lint' or 'deps' (noted as disabled) to guide selection, or prerequisites for staging files.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
benchSquire BenchB
Run small, short-lived benchmark jobs in clean runtimes to compare simple timing behavior without turning Squire into a full performance platform.
| Name | Required | Description | Default |
|---|---|---|---|
| files | No | Local file paths to stage. | |
| iterations | No | Number of benchmark iterations. | |
| language | Yes | Benchmark language: python, bash, or go. | |
| paths | No | Local directory paths to stage recursively. | |
| targets | No | Benchmark targets as an array or CSV string. | |
| timeout | No | Benchmark timeout in seconds. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full disclosure burden. It mentions 'clean runtimes' (isolation) and 'short-lived' (duration constraints), but omits critical behavioral details like resource limits, file cleanup after execution, blocking behavior, or what output/return format to expect.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence that is appropriately front-loaded with the core action ('Run... benchmark jobs'). The trailing negative clause ('without turning...') slightly reduces efficiency but does not significantly waste space.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 6-parameter execution tool with no output schema and no annotations, the description covers primary purpose and isolation model but lacks completeness regarding return values (timing metrics), cleanup behavior, or prerequisite setup requirements.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% (all 6 parameters documented), establishing a baseline of 3. The description adds minimal parameter-specific context beyond the schema, though 'small, short-lived' implicitly contextualizes the 'timeout' and 'iterations' parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool runs 'small, short-lived benchmark jobs' to 'compare simple timing behavior' using 'clean runtimes'—specific verb, resource, and scope. The 'without turning Squire into a full performance platform' clause helps distinguish its limited scope, though it doesn't explicitly contrast with siblings like 'test'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides implicit constraints ('small, short-lived', 'without turning... into a full performance platform') that suggest when to use it versus heavy profiling platforms, but lacks explicit 'when to use' guidance or comparison to related sibling tools like 'test'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
browserSquire BrowserA
Run headless Chromium in a constrained offline sandbox and optionally download screenshots or other generated browser artifacts locally.
| Name | Required | Description | Default |
|---|---|---|---|
| browser | No | Browser engine, currently chromium. | |
| download_artifacts_dir | No | Optional local directory to download screenshots or other browser artifacts into. | |
| files | No | Local file paths to stage. | |
| paths | No | Local directory paths to stage recursively. | |
| screenshot | No | Optional screenshot filename to produce. | |
| script | No | Path to a browser automation script to stage. | |
| timeout | No | Browser timeout in seconds. | |
| url | No | Offline URL to open, such as a file:// URL. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden. It successfully discloses key traits (headless, offline, sandboxed, optional artifact download) but fails to clarify the execution model, persistence, or what the tool returns (success codes, paths, console output?).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single, well-structured sentence front-loaded with the core action. Every clause earns its place: engine type (headless Chromium), environment (constrained offline sandbox), and side effects (artifact downloads). No redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Adequate for a tool with 8 parameters and no output schema, covering the sandbox environment and artifact generation. However, given the lack of annotations and output schema, it should disclose return values or execution results to be complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, establishing baseline 3. The description adds semantic context by linking 'download screenshots' to the screenshot and download_artifacts_dir parameters, and 'offline' to the url parameter's file:// restriction, but does not elaborate beyond schema definitions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the specific action (Run headless Chromium), environment (constrained offline sandbox), and capabilities (download screenshots/artifacts). It distinguishes from siblings by specifying browser automation in a sandboxed, offline context.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The 'offline sandbox' constraint implies boundaries (file:// URLs only), but there is no explicit guidance on when to use this versus alternatives, prerequisites for the script parameter, or warnings about the timeout behavior.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
buildSquire BuildA
Run offline packaging and build sanity checks in clean environments and optionally pull the resulting artifacts back locally.
| Name | Required | Description | Default |
|---|---|---|---|
| download_artifacts_dir | No | Optional local directory to download build artifacts into. | |
| files | No | Local file paths to stage. | |
| language | Yes | Build language: python or node. | |
| paths | No | Local directory paths to stage recursively. | |
| targets | No | Build targets as an array or CSV string. | |
| timeout | No | Build timeout in seconds. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description must carry the full burden. It disclose the side effect of downloading artifacts locally and mentions 'clean environments,' but omits critical behavioral details: whether the operation is destructive to local files, environment lifecycle/cleanup, authentication requirements, or what the return value/response contains.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single, well-structured sentence (20 words) that is front-loaded with the core action. Every clause earns its place: 'offline packaging' defines mode, 'build sanity checks' defines purpose, 'clean environments' defines isolation, and 'optionally pull... locally' defines the download behavior. No redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 100% schema coverage, the description appropriately focuses on workflow intent rather than repeating parameter definitions. However, with no output schema provided, the description should ideally explain what success returns (e.g., build logs, artifact locations, status), which it omits. Adequate but has a clear gap in return value documentation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, establishing a baseline of 3. The description adds conceptual context for 'download_artifacts_dir' by mentioning pulling artifacts back locally, and implies staging via the build context, but does not augment the schema's descriptions of 'targets,' 'timeout,' or the specific semantics of the staging parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the action ('Run offline packaging and build sanity checks') and context ('clean environments'), plus the optional artifact retrieval. However, it does not explicitly distinguish from the 'compile' sibling tool, which may also perform build operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides implicit context through terms like 'offline' and 'clean environments' suggesting isolated builds, but lacks explicit guidance on when to use this versus 'compile' or other build-related siblings, and omits prerequisites or exclusion criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
compileSquire CompileA
Run target-specific Go or Rust compilation checks in clean toolchains without turning Squire into a full CI or release system.
| Name | Required | Description | Default |
|---|---|---|---|
| files | Yes | Local file paths to stage for compilation. | |
| language | Yes | Compile language: go or rust. | |
| targets | No | Compile targets as an array or CSV string. | |
| timeout | No | Compile timeout in seconds. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description bears full disclosure burden. Adds useful context about 'clean toolchains' (isolated environments) and 'checks' (verification purpose), but omits critical behavioral details like whether outputs are preserved, if the operation modifies source directories, or specific toolchain side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single dense sentence that front-loads the action ('Run...'). Every clause earns its place: 'target-specific' modifies the action, 'clean toolchains' describes the environment, and the negative constraint efficiently differentiates scope without wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Adequate for a 4-parameter tool with complete schema documentation and simple types. However, given the lack of annotations and output schema, gaps remain in behavioral disclosure regarding output handling and side effects that would be necessary for an agent to fully trust the operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% description coverage, establishing a baseline score of 3. The description mentions 'target-specific' and 'Go or Rust' which align with the 'targets' and 'language' parameters, but does not add substantial semantic detail, validation rules, or format syntax beyond what the schema already documents.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Uses specific verb phrase 'Run...compilation checks' and identifies specific resources 'Go or Rust'. Explicitly distinguishes from the sibling 'build' tool via the scope constraint 'without turning Squire into a full CI or release system', clarifying this is for verification, not artifact generation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear scope boundaries by stating what the tool is NOT for (full CI/release system), which implicitly guards against inappropriate use for release builds. However, lacks explicit naming of the 'build' sibling as the alternative for those use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dataSquire DataA
Run Python data-processing jobs in a disposable remote runtime with pandas, polars, and pyarrow available.
| Name | Required | Description | Default |
|---|---|---|---|
| download_artifacts_dir | No | Optional local directory to download generated data artifacts into. | |
| input | No | Path to an input file for multipart upload. | |
| script | Yes | Path to the Python script to execute. | |
| stdin_text | No | Small inline input payload to send over stdin mode. | |
| timeout | No | Job timeout in seconds. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It successfully conveys 'disposable remote runtime' (indicating ephemeral state) and available libraries, but lacks critical behavioral details for a code-execution tool: isolation guarantees, side effects, network access, or how outputs are captured (beyond the schema parameters).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single 16-word sentence that front-loads the action ('Run Python...') and efficiently packs in the runtime characteristics ('disposable remote') and capabilities ('pandas, polars, and pyarrow'). Zero waste, every word earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter code execution tool with no output schema and no annotations, one sentence is minimally sufficient. It covers the execution environment and available libraries, but lacks completeness regarding safety model, artifact lifecycle, or execution guarantees that would be expected for arbitrary code execution.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, establishing a baseline of 3. The description adds crucial semantic context for the 'script' parameter by specifying the available data-processing libraries (pandas/polars/pyarrow), which informs the agent what kind of Python code can successfully execute. However, it does not elaborate on input/output mechanics despite the schema being present.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description provides a specific verb ('Run') plus resource ('Python data-processing jobs') and clearly distinguishes from siblings like 'sql', 'solve', and 'quantum_simulate' by specifying the pandas/polars/pyarrow data-processing environment. It establishes both the action and the specific domain.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit when-to-use or alternatives are listed, but the mention of pandas, polars, and pyarrow provides implied usage guidance—suggesting this tool is for DataFrame-based data manipulation rather than general computation or SQL queries. However, it lacks explicit guidance for choosing between this and siblings like 'sql' or 'solve'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
depsSquire DepsA
Validate whether dependency manifests install in a clean environment. The CLI surface exists, but the public zero-egress service currently rejects deps jobs.
| Name | Required | Description | Default |
|---|---|---|---|
| file | Yes | Path to the dependency manifest to upload. | |
| language | Yes | Dependency language: python or node. | |
| targets | No | Dependency targets as an array or CSV string. | |
| timeout | No | Dependency install timeout in seconds. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. Adds 'clean environment' execution context and crucial service availability status (rejects jobs) that is not in the schema. Does not describe output format or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with zero waste. First establishes purpose, second states critical operational limitation. No redundant information. Front-loaded with the core validation purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Appropriate for 4-parameter tool with full schema coverage. Mentions key service limitation and execution environment ('clean'). Missing output description but no output schema exists to require it. No annotations to supplement.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% (file, language, targets, timeout all documented). Description adds context that the file is a 'dependency manifest' but does not elaborate on parameter interactions or syntax beyond what the schema provides. Baseline 3 appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clear specific verb 'Validate' with resource 'dependency manifests' and scope 'clean environment'. Identifies the domain (dependencies) which distinguishes from siblings like 'build' or 'test', though could explicitly differentiate from 'verify'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides critical limitation that 'public zero-egress service currently rejects deps jobs', which functions as a when-not-to-use warning. However, lacks explicit guidance on when to choose this over siblings like 'verify', 'build', or 'test' for validation tasks.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
helpSquire HelpA
Show the top-level Squire command catalog or help for a specific command. This is the canonical discovery surface for humans and agents before choosing a command.
| Name | Required | Description | Default |
|---|---|---|---|
| command | No | Optional command path, such as verify or quantum simulate. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full disclosure burden. It explains conceptual behavior well (discovery surface) but omits technical details like return format (text vs structured), caching behavior, or output length limits. Adequate for a low-risk help tool but lacks richness expected when annotations are absent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with zero waste. First sentence defines functionality; second sentence establishes workflow position ('canonical discovery surface...'). Every word earns its place—efficiently front-loaded with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Appropriately complete given low complexity (1 optional string param) and lack of output schema. Sufficiently explains the tool's role in the ecosystem. Minor gap: does not describe output format (human-readable text? JSON?) which would help given no output schema exists.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 100% description coverage ('Optional command path, such as verify or quantum simulate'). With high schema coverage, baseline is 3. The description adds minimal semantic detail beyond the schema, merely reinforcing the 'help for a specific command' use case.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Explicitly states what the tool does: 'Show the top-level Squire command catalog or help for a specific command.' Uses specific verb 'Show' with clear resources (catalog/help). References sibling commands 'verify' and 'quantum simulate' in the description, distinguishing this discovery tool from the operational siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Strong contextual guidance: 'This is the canonical discovery surface for humans and agents before choosing a command.' Clearly positions when to use it (before choosing other commands). Lacks explicit 'when not to use' guidance or specific alternative comparisons, falling short of a perfect 5.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lintSquire LintA
Run fixed lint and static-analysis tools in a fresh toolchain so local environment drift does not affect the result.
| Name | Required | Description | Default |
|---|---|---|---|
| files | Yes | Local file paths to stage for the lint run. | |
| language | Yes | Lint language: python, js, ts, or rust. | |
| targets | No | Lint targets as an array or CSV string. | |
| timeout | No | Lint timeout in seconds. | |
| tool | Yes | Lint tool: ruff, eslint, or clippy. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. Adds valuable context about 'fresh toolchain' isolation, but omits critical safety profile (read-only vs destructive/fixing), output format, or failure behavior. The word 'fixed' is ambiguous (pre-configured vs auto-fix).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single 19-word sentence with zero waste. Front-loaded with action verb, every clause earns its place explaining both what it does and why (environment drift prevention).
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For 5 parameters with full schema coverage, description adequately explains execution context (isolation) but lacks output behavior disclosure and safety profile given no annotations or output schema exist.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, providing complete parameter documentation. Description does not add parameter-specific semantics (e.g., path formats, target globs) beyond what the schema already defines, earning baseline score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb 'Run' with clear resources 'lint and static-analysis tools'. The phrase 'fresh toolchain' effectively distinguishes from siblings like build, compile, test, and verify by emphasizing isolated environment execution.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies clear usage context: use when you need to avoid 'local environment drift' affecting results. While it doesn't explicitly name alternatives, the value proposition (fresh toolchain vs local) guides selection. Lacks explicit prerequisites or 'when not to use' guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mediaSquire MediaA
Run Python media jobs in a disposable remote runtime with ffmpeg installed and optionally download the generated files locally.
| Name | Required | Description | Default |
|---|---|---|---|
| download_artifacts_dir | No | Optional local directory to download generated media artifacts into. | |
| input | No | Path to an input file for multipart upload. | |
| script | Yes | Path to the Python script to execute. | |
| stdin_text | No | Small inline input payload to send over stdin mode. | |
| timeout | No | Job timeout in seconds. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, description carries full burden and discloses key traits: 'disposable' implies temporary/isolated execution, 'ffmpeg installed' declares dependencies, and 'optionally download' clarifies persistence behavior. However, it omits critical execution details like timeout enforcement behavior, cleanup guarantees for undownloaded files, or security boundaries.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence of ~20 words with zero waste. Information is front-loaded ('Run Python media jobs'), followed by environment constraints ('disposable remote runtime with ffmpeg'), and closes with side effects ('optionally download').
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 5-parameter remote execution tool without output schema or annotations, description adequately covers the job lifecycle (execution environment, optional artifact retrieval). Minor gaps remain regarding return value structure and failure modes, but sufficient for tool selection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, establishing baseline 3. Description adds semantic value by mapping 'Python media jobs' to the required 'script' parameter and clarifying that 'download_artifacts_dir' corresponds to generated artifacts from the job, connecting the high-level operation to specific schema elements.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description provides specific verb ('Run') with clear resource type ('Python media jobs'), environment context ('disposable remote runtime with ffmpeg'), and implicitly distinguishes from siblings like 'compile', 'build', or 'data' via the 'ffmpeg' and 'media' specificity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides implied usage context through 'ffmpeg installed' (suggests media processing workloads) and 'optionally download' (indicates persistence choice), but lacks explicit guidance on when to prefer this over 'data' or 'compile' siblings, or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
quantum_simulateSquire Quantum SimulateB
Stage a small Python/Qiskit file set, run the entry file inside an offline Qiskit Aer image, and optionally download generated artifacts locally.
| Name | Required | Description | Default |
|---|---|---|---|
| backend | No | Quantum backend. v1 supports only aer_simulator. | |
| download_artifacts_dir | No | Optional local directory to download generated quantum artifacts into. | |
| files | Yes | Local file paths to stage. The first file is the Python entry script. | |
| shots | No | Shot count passed to the simulation. | |
| timeout | No | Simulation timeout in seconds. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full disclosure burden. It successfully conveys environmental isolation ('offline...image'), temporary staging, and artifact generation. However, it omits critical behavioral details: what the tool returns upon completion (execution logs? results JSON?), cleanup behavior of the staged files, and any side effects on the local system beyond the optional download.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Dense but efficient single sentence with zero waste. Progresses logically from staging to execution to artifact handling, front-loading the core action. Each clause maps directly to a parameter or critical environmental constraint.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of an output schema and annotations, the description should explain the return value (simulation results, exit codes, logs), but it only mentions side-effect artifacts. While parameters are well-covered by the schema, the execution lifecycle (cleanup, timeouts, error states) remains undocumented.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema coverage, the baseline is 3. The description adds valuable domain context beyond the schema: 'small' reinforces size constraints, 'Python/Qiskit' clarifies the expected file types for the 'files' parameter, and 'Qiskit Aer image' explains why 'backend' is limited to aer_simulator. This framing helps agents correctly map intent to parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description provides specific verbs (stage, run, download) and identifies the unique resource (Python/Qiskit files, Qiskit Aer image). It distinguishes this from generic build/compile siblings by specifying the quantum stack. However, it stops short of explicitly positioning against hypothetical general-purpose execution tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description contains implicit constraints ('small' file set) but provides no explicit guidance on when to use this tool versus alternatives, prerequisites (e.g., Qiskit knowledge), or when to avoid it (e.g., for production-scale quantum jobs).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
solveSquire SolveA
Run bounded solver jobs for Z3 or MiniZinc in a fresh disposable sandbox.
| Name | Required | Description | Default |
|---|---|---|---|
| data | No | Optional MiniZinc .dzn data file. | |
| file | Yes | Path to the solver input file. | |
| solver | Yes | Solver: z3 or minizinc. | |
| timeout | No | Solver timeout in seconds. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses execution environment ('fresh disposable sandbox') and scope ('bounded'), but lacks critical behavioral details required in absence of annotations: output format, sandbox lifecycle, side effects, or failure modes. No indication of what constitutes job success/failure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence of 10 words with high information density. Every element serves a purpose: verb, scope, technology constraints, and execution environment. No redundancy or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (execution tool, 4 params, no annotations/output schema), the description covers the essentials but leaves gaps. Adequate for invocation, but missing behavioral details regarding return values, persistence, or sandbox teardown that would make it complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema coverage, baseline is 3. The description adds valuable domain context: 'Z3 or MiniZinc' clarifies valid 'solver' values, 'bounded' contextualizes the timeout parameter, and 'jobs' frames the file/data parameters' purpose.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specifies exact action ('Run'), resource type ('solver jobs'), and valid inputs ('Z3 or MiniZinc'). The 'fresh disposable sandbox' adds execution context. However, it does not explicitly differentiate from potentially related siblings like 'verify' or 'quantum_simulate'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage context through 'bounded' (suggesting time/resource constraints) and specific solver technologies. However, lacks explicit when-to-use/when-not-to-use guidance or comparison to alternatives like 'compile' or 'verify'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sqlSquire SQLA
Run SQLite or Postgres schema, query, and migration validation in a fresh disposable database sandbox.
| Name | Required | Description | Default |
|---|---|---|---|
| dialect | Yes | SQL dialect: sqlite or postgres-16. | |
| explain | No | Request an execution plan when the dialect supports it. | |
| file | No | Path to a SQL file containing statements to apply. | |
| query | No | Inline SQL query to execute after schema setup. | |
| query_file | No | Path to a query file to execute after schema setup. | |
| schema | No | Path to a schema file to apply before the query. | |
| timeout | No | SQL timeout in seconds. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It successfully conveys the sandbox nature ('fresh disposable database'), implying isolation and safety for destructive operations. However, it omits details about return values, error handling behavior, and whether the sandbox persists across calls.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single dense sentence with zero waste. Front-loaded with the action verb 'Run', covers dialects (SQLite/Postgres), operations (schema/query/migration), and environment (sandbox) efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 7 parameters and no output schema, the description is minimally adequate. The 'sandbox' disclosure is essential for a SQL execution tool, but gaps remain regarding output format, error behavior, and clarification of the migration 'validation' process versus actual application.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, establishing a baseline of 3. The description mentions 'SQLite or Postgres' and 'schema, query' which map to parameter names, but doesn't add semantic details like parameter relationships (e.g., that query executes after schema) or valid file formats beyond the schema definitions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses specific verbs ('Run') and resources ('schema, query, and migration validation') with clear scope ('SQLite or Postgres'). It distinguishes from siblings like 'browser', 'media', or 'audit' by specifying database-specific operations and the sandbox environment.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage through keywords like 'validation' and 'sandbox' (suggesting testing/isolation use cases), but lacks explicit when-to-use guidance or comparisons to siblings like 'data' or 'verify' that might overlap in functionality.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
testSquire TestA
Run small or medium test jobs in clean runtimes with a target matrix for Python, Node, or Bash.
| Name | Required | Description | Default |
|---|---|---|---|
| command | No | Restricted test command such as pytest -q or npm test. | |
| files | Yes | Local file paths to stage for the test run. | |
| language | Yes | Test language: python, node, or bash. | |
| targets | No | Runtime targets as an array or CSV string. | |
| timeout | No | Test timeout in seconds. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full disclosure burden. It valuably mentions 'clean runtimes' (isolation) and 'target matrix' (execution model), but fails to disclose critical execution traits like side effects/destructiveness, blocking behavior, or what constitutes success/failure return values.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single 16-word sentence with zero waste. Every phrase earns its place: 'small or medium' defines scope, 'clean runtimes' defines environment, 'target matrix' defines execution pattern, and the language list defines supported platforms. Front-loaded with the primary action.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Adequate for a 5-parameter tool with complete schema coverage, but the lack of output schema means the description should ideally hint at return behavior (test results, pass/fail signaling). The description successfully covers input intent and execution environment but omits output/completion semantics.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Despite 100% schema coverage (baseline 3), the description adds significant semantic context: 'target matrix' explains the execution model for the 'targets' parameter, 'clean runtimes' describes the execution environment, and 'Python, Node, or Bash' reinforces valid language inputs. This contextual layer meaningfully augments the schema definitions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Run' and resource 'test jobs' with specific scope modifiers ('small or medium', 'clean runtimes') and supported languages ('Python, Node, or Bash'). It implicitly distinguishes from siblings like 'build' or 'compile', though it doesn't explicitly differentiate from similar testing tools like 'verify' or 'bench'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides scope guidance ('small or medium test jobs') implying suitability boundaries, but lacks explicit when-not-to-use guidance or named alternatives. With siblings like 'verify', 'bench', and 'audit' present, the absence of explicit differentiation guidance is a notable gap.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
verifySquire VerifyA
Run small inline snippets or staged scripts in fresh Linux containers across the supported target images.
| Name | Required | Description | Default |
|---|---|---|---|
| code | No | Inline code snippet to verify. | |
| file | No | Path to a local script file to upload. | |
| language | Yes | Language to execute: bash, python, or node. | |
| targets | No | Target matrix as an array or CSV string. | |
| timeout | No | Per-target timeout in seconds. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses the 'fresh Linux containers' execution environment implying isolation, but lacks details on container lifecycle (cleanup/persistence), side effects, output format, or resource constraints. 'Fresh' adds some behavioral context but coverage is incomplete for a code execution tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single, efficient sentence with zero waste. Front-loaded with verb 'Run'. Every word ('small', 'fresh', 'across') adds specific meaning about scope and environment. Length is appropriate for the parameter complexity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 parameters with 100% schema coverage but no annotations and no output schema, the description adequately covers the execution model but leaves gaps regarding return values, success/failure indicators, and interaction patterns between 'code' and 'file' parameters.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, establishing baseline 3. The description maps 'inline snippets' to 'code', 'staged scripts' to 'file', and 'target images' to 'targets', providing conceptual framing, but does not add syntax details, constraints, or mutual exclusivity rules beyond what the schema already documents.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description provides specific verb ('Run'), resource ('small inline snippets or staged scripts'), and execution context ('fresh Linux containers across supported target images'). It clearly distinguishes from siblings like 'test', 'build', or 'compile' by emphasizing lightweight, containerized verification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'small inline snippets' implies lightweight, quick verification use cases, but there is no explicit guidance on when to choose 'verify' over similar siblings like 'test', 'bench', or 'run'. No alternatives or exclusions are named.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
whoamiSquire WhoAmIA
Return the current public or authenticated identity, trust tier, feature flags, token metadata, and server-side quotas.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, description carries full burden. Lists return payload categories but omits operational traits: no mention of side effects (logging), authentication requirements, rate limits, or cache behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, densely packed with specific return value categories. No redundancy, immediately front-loaded with actionable information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Absent output schema and annotations, the description compensates by enumerating return value domains (identity metadata, quotas, flags). Sufficient for a parameter-less identity tool, though structured return schema details would strengthen completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Zero parameters present per schema. Baseline score 4 applies as there are no parameters requiring semantic clarification.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Specific verb 'Return' plus exact resource inventory (identity, trust tier, feature flags, token metadata, quotas). Clearly distinguishes from operational siblings like build/sql/compile by focusing on introspection/identity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Describes what data categories are returned, implying use for authentication/authorization checks, but lacks explicit when-to-use guidance versus sibling 'audit' or session initialization patterns.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
16 tool updates
v1.0.0- First observed
audit - First observed
bench - First observed
browser - First observed
build - First observed
compile - First observed
data - First observed
deps - First observed
help - First observed
lint - First observed
media - First observed
quantum_simulate - First observed
solve - First observed
sql - First observed
test - First observed
verify - First observed
whoami
TDQS
Scored across 16 tools
Most tools are clearly separated by domain (sql, lint, build, browser, quantum, data), but 'verify' and 'test' both run code in clean sandboxes and could cause misselection. 'build' vs 'compile' and 'data' vs 'media' also share enough conceptual overlap that an agent might need to rely on descriptions.
Tool names mostly follow a consistent, simple lowercase command style with clear domain nouns. The only real inconsistency is 'quantum_simulate' using an underscore-and-verb structure while nearly every other tool is a single word, but the overall pattern remains predictable.
At 16 tools, the server sits just above the ideal 3-15 range, but each tool addresses a distinct sandboxed domain. The count is slightly heavy rather than bloated, and the individual tools each appear to earn their place.
The tool surface comprehensively covers execution, validation, build, compile, lint, test, browser, and specialized sandbox domains. Minor gaps exist: 'deps' is explicitly non-functional on the public service, and there is no generic job-status or artifact-cleanup tool, but agents can still complete most intended workflows.
Maintenance
Related MCP Connectors
Hosted runtime for persistent agent teams, durable workflows, memory, schedules, and goals.
On-demand GPU nodes for agents: create nodes, run commands, and submit jobs, billed by the minute.
The governed runtime for agent skills. Search the catalog and inspect a skill before running it.
Remote shell and detached long-running jobs on your own machines — no SSH, open ports or VPN.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceExecute scientific scripts (R, Python, GMT, LaTeX, Octave, Julia, etc.) in isolated, disposable containers with no host filesystem access.1Apache 2.0
- AlicenseNot gradedqualityCmaintenanceEnables running ephemeral Kubernetes Jobs/pods with caller-chosen images and commands, returning results and artifacts while automating cleanup. Supports synchronous and background execution, repository cloning, and strict security controls.MIT
- FlicenseNot gradedqualityBmaintenanceA local runtime for persistent, isolated replicas of services such as GitHub, GitLab, Bitbucket, Jira, Linear, and YouTrack, providing MCP surfaces for agents to interact with software-company resources.-
- AlicenseAqualityBmaintenanceRuns builds, tests, and benchmarks on a remote compute node via Tailscale and SSH, syncing projects with rsync.226 npm1MIT