Single-tool server with critical gaps in schema documentation and parameter descriptions. The tool 'get_clerk_user_data' has a basic description but lacks any input schema definition, parameter documentation, and output structure specification. No validation guidance, no error handling documentation, and no indication of what the response format contains. The tool is registered with name and description only, but the core schema infrastructure that LLMs need to invoke it safely is missing entirely.
Gets data about the Clerk user that authorized this request
No input schema defined for get_clerk_user_data. The tool is registered with only name and description; there is no visible JSON Schema declaring what parameters the tool accepts, their types, constraints, or descriptions. This violates the fundamental requirement that every tool must have a documented input schema.
No input parameters documented. The tool appears to rely on 'authInfo' from context (via mcpAuthClerk middleware), but this is not declared as a tool parameter in the schema. LLMs cannot discover or understand what inputs this tool accepts. Input must be explicitly declared via JSON Schema with type and description for each parameter.
No output schema documented. The tool returns a content array with text, but the structure of 'userData' is never specified. LLMs need to know: what fields does the user object contain? Is there pagination? Can they rely on specific fields for downstream operations? The response is opaque.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-22 | F | 46 | 2026-07-28+ | v2 |
| 2026-03-09 | F | 36 | - | v1 |
Tool description is too brief (66 characters). While it states the action, it lacks context about when to use it, what data it returns, or any prerequisites.
No error handling guidance. What happens if the user is not found, if Clerk API times out, or if the authInfo is missing? There is no error response documentation telling the LLM what to do next or how to interpret failures.
Unclear authentication flow. The tool depends on mcpAuthClerk middleware and authInfo context, but the MCP tool registration does not expose this dependency. LLMs have no way to know they must authenticate first or what scope/permissions are required.