This is a tracing/middleware library, not a production MCP server with complete tool definitions. Both tools ('add' and 'createUser') are defined in example/streamable-http-server.ts with Zod schemas, but parameter descriptions are entirely missing (null values in Input schema). Tool descriptions exist but are minimal (9-12 words). The library itself provides tracing infrastructure, not well-defined tool interfaces. Per the hard rules: parameters lack descriptions → schema score capped at 30 max per tool. Missing param descriptions is a critical gap that prevents LLMs from understanding what each parameter controls.

• Add non-empty descriptions to all input parameters. Example for 'add': 'a: {type: "number", description: "First operand (integer or decimal)"}, b: {type: "number", description: "Second operand (integer or decimal)"}'. Follow baseline of 72 chars average per parameter.
• Expand tool descriptions to 50-150 characters. Example: 'add' → 'Adds two numbers together and returns the result. Use for arithmetic calculations.' 'createUser' → 'Creates a new user account with provided personal information. Email must be unique. Password is hashed server-side. PII (email, phone, SSN) is redacted from traces.'
• Remove plain-text 'password' parameter from 'createUser'. Instead, either (a) auto-generate a temporary password server-side and return it, or (b) accept a 'send_welcome_email' flag and email the password to the user. Never expose password as a tool parameter.
• Document output schemas. Example for 'add': 'Returns {"content": [{"type": "text", "text": "<number result>"}]}'. Example for 'createUser': 'Returns {"content": [{"type": "text", "text": "User created successfully with ID: <id>"}], "user": {"id": "<id>", "name": "<name>", "email": "<email>", "createdAt": "<ISO 8601>"}}'.
• Add error handling descriptions. Example: 'createUser errors: (a) email format invalid → 'Invalid email format. Must be name@domain.com.' (b) email already exists → 'Email already registered. Use different email or call search_users() to verify.' (c) password too weak → 'Password must be 8+ chars with uppercase, lowercase, and number.'

Inferred effective spec: <=2025-11-25.

• Relies on Logging (deprecated) - log to stderr or use OpenTelemetry