OpenCLI Browser Bridge (shim) + HTTP/MCP Gateway exposing 173+ site adapters to external agents
Server has 7 tools with basic schemas and descriptions, but significant quality gaps. Tool names lack consistent verb-noun structure (e.g., 'run_command' is vague; 'browser' is a noun). Descriptions are present but generic (avg ~60 chars, well below 194-char baseline). Parameter descriptions exist but lack detail on constraints, formats, and valid ranges. No output schemas documented. Error handling and recovery guidance absent. Security concerns: 'run_command' and 'browser' accept arbitrary arguments without validation. No pagination support visible. Tools like 'login' and 'video_download' lack idempotency guarantees.
Execute browser commands via Camofox (screenshot, navigate, click, etc.)
List all available OpenCLI adapter sites with command counts
Authenticate to a site and obtain login credentials/session
Execute an OpenCLI adapter command for a given site with arguments
Search a site using its search adapter with query, limit, and optional extra parameters
Get help and command documentation for a specific site
Download videos from URLs with specified quality (720p, 1080p, 480p, etc.)
Tool names lack action verbs or are nouns. 'browser' and 'run_command' are vague; LLMs cannot infer intent from names alone. Should be 'execute_browser_command', 'execute_adapter_command'.
No output schemas documented. LLMs cannot plan downstream calls or extract required fields. Each tool must declare return type structure (e.g., search returns array of {id, title, url, ...}).
Parameter descriptions lack constraints and formats. 'args' in run_command and browser accept arbitrary objects with no validation guidance. Should specify: 'Command-specific key-value pairs; see site_help for valid keys per site.'
Inferred effective spec: 2026-07-28+.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 48 | 2026-07-28+ | v2 |
No error handling or recovery guidance. Tools lack descriptions of failure modes, retryability, or next steps. E.g., login timeout should suggest 'Increase timeout parameter or check site availability.'
Destructive operations (video_download, login, run_command with write risk) lack idempotency guarantees or confirmation patterns. Agents cannot safely retry without risk of duplicate downloads or state changes.