A Spring Boot backend MCP server that provides tools for searching development-related items, querying vulnerability information, managing action proposals for CVE fixes, and accessing user interests and radar data.
dev_radar has 7 tools with mostly complete schemas and descriptions. Naming follows verb_noun convention (search, get, check, propose, query). Descriptions are present and reasonably detailed (avg ~120 chars), meeting the 10-1024 char baseline. However, several tools lack parameter descriptions (e.g., get_user_interests and query_radar have empty input objects with no documentation), and output schemas are not explicitly documented in the source. Error handling is minimal, no recovery guidance or actionable error messages visible. Tool composition is reasonable but some tools (checkRepoForVulnerability, propose_pr_for_cve) perform multiple steps internally without exposing intermediate results, limiting agent composability.
For the current user, scan their linked GitHub repositories for files (pom.xml, package.json) that reference the given package at the given version. Returns affected repos and records action proposals (Auto-PR opportunities) the user can approve.
Get the full details (title, description, url, author, source_name, posted_at) of one source_item by id.
Returns ingested items from the last N days that match the authenticated user's interests. Capped at 20 items.
Returns the authenticated user's interest tags.
Execute a previously proposed CVE-fix PR on the user's GitHub repo. Requires WRITE scope.
Returns the latest READY radar for the authenticated user, or an empty payload if none exist.
Two tools (get_user_interests, query_radar) have empty input schemas with no parameter descriptions.
Output schemas are not documented in source code. LLMs cannot plan downstream tool calls or extract required fields without knowing what fields to expect. No evidence of structured response documentation.
No error handling guidance visible. Tools do not return actionable error messages telling LLMs what to do next (retry, ask user, or fail). No recovery guides or error classification.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 69 | 2026-07-28+ | v2 |
Find recent ingested items matching the given interest tag slugs (case-sensitive). Returns the most recent N items.
propose_pr_for_cve performs multiple steps (lookup proposal, execute PR) internally without exposing intermediate results. Limits agent composability and prevents fine-grained error recovery.
checkRepoForVulnerability and propose_pr_for_cve are WRITE operations but lack confirmation/dry-run patterns. Agents could accidentally trigger PRs without explicit user approval.