MCP server that inspects and enforces security guardrails on agentic tool call chains, evaluating risk levels and blocking potentially dangerous operations like data exfiltration
This server has critical structural and definition deficiencies. Tool definitions are inferred from class methods rather than explicitly registered via MCP protocol. The mcp_server.py file does not implement proper MCP tool registration, it only prints a JSON status message. The client.py file contains a Python class with hardcoded mock responses, not actual MCP tool handlers. Neither tool has a visible input schema in the MCP protocol sense. Tool descriptions exist but are vague. No error handling, no parameter validation, no output schema documentation. This is not a functional MCP server.
Execute a guardrail security enforcement action on an agentic call chain
Inspect an agent execution chain against security policies, evaluating each tool call for risk level and determining whether to allow, audit, or block execution
No MCP protocol implementation. mcp_server.py does not register tools via MCP; it only prints a static JSON message. Tools are not discoverable or callable via MCP.
No input schemas visible. Neither tool has a JSON Schema definition for inputs. inspect_agent_execution_chain shows a schema in the metadata but it is not registered in the MCP server code.
Hardcoded mock responses. client.py returns static evaluations regardless of input. This is not a real security enforcement tool, it is a stub that always returns the same result.
No error handling or recovery guidance. If a tool fails, there is no error message, classification (retryable/fatal), or next-step guidance for the LLM.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 21 | 2026-07-28+ | v2 |
Tool descriptions are vague and lack context. 'Execute a guardrail security enforcement action' does not explain what action, when to call it, or what it returns. Descriptions should be 50-200 chars with clear intent.