Natural-language analytics over sensitive data, behind a differential-privacy trust boundary. Answers aggregate queries under differential privacy (Laplace mechanism) with calibrated noise, charged against a persistent privacy budget.
Noisegate DP defines 5 tools with clear privacy-focused descriptions and reasonable parameter schemas. Tool names follow verb_noun convention (count, sum, avg, histogram, get_budget). Descriptions are domain-specific and explain the differential privacy guarantee. However, parameter schemas lack depth: 'filters' is typed as array but has no item schema or validation rules; column/group_by parameters lack enum constraints despite the code mentioning 'must be published in schema'. Output schemas are not documented. Error handling is mentioned in code comments but not surfaced in tool definitions. The server is STDIO-only, which caps protocol readiness at 50 regardless of definition quality.
Average a numeric column with optional filters under differential privacy
Count rows matching optional filters under differential privacy
Check remaining privacy budget for this identity and epoch
Histogram of a categorical column with optional filters under differential privacy
Sum a numeric column with optional filters under differential privacy
Filter parameter lacks item schema and validation. 'filters' is typed as array but has no description of filter structure, valid operators, or column constraints. Code references 'build_filter_model' but schema does not expose it.
Column and group_by parameters lack enum constraints. Code comment states 'must be published in schema' but schema shows bare string type. LLM cannot discover valid columns without calling a separate discovery tool.
Output schemas not documented. Tool definitions do not specify what fields are returned (e.g., does count return {count: int, margin: float}? Does histogram return {bins: [...]}?). LLM cannot plan downstream operations.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 57 | 2026-07-28+ | v2 |
Error handling not surfaced in tool definitions. Code mentions validation rejections, budget refusals, and recovery guidance, but tool schemas do not document error cases or recovery paths for LLM.
STDIO transport only. Server is not remotely accessible and cannot be used by hosted MCP clients. Limits deployment to local Claude Desktop only.