MCP server for secure per-agent key management with a local file-based keystore
Server has 8 tools with mixed quality. Most tools lack descriptions entirely (get_key_info, list_algorithms, list_keys, rotate_key, sign_message have no visible descriptions). Only 2 tools (check_keypair, delete_key) have descriptions. Input schemas are partially visible but incomplete, many tools lack documented parameter descriptions. No output schemas documented. Error handling not evident in source. Tool naming follows verb_noun pattern (good), but lack of descriptions and parameter documentation severely limits LLM usability. This is a typical community server with structural gaps.
Check if a key pair exists for the given key ID
Delete a key pair from the keystore
6 of 8 tools lack descriptions entirely (get_key_info, list_algorithms, list_keys, generate_key, rotate_key, sign_message). LLMs cannot determine when to select these tools without descriptions.
Input schemas not visible in source for most tools. Only check_keypair and delete_key show parameter definitions. Cannot verify if other tools have typed parameters, descriptions, or constraints.
No output schemas documented. LLMs cannot plan downstream tool calls or extract required fields (e.g., key_id from generate_key, algorithm from list_algorithms).
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 36 | 2025-06-18+ | v2 |
delete_key has secureWipe parameter with default=true. Destructive operations should require explicit confirmation or dry-run, not silent defaults that could cause data loss.
No error handling guidance visible. Tools do not document what errors can occur, whether they are retryable, or what the LLM should do next (e.g., 'key not found, try list_keys first').