Loading ToolBench

Reading the current corpus…

mcp-football-data MCP server · D · ToolBench

← Browse

mcp-football-data

github.com/pipeworx-io/mcp-football-data

Soccer competitions, matches, standings, and team data from Football-Data.org API

2026-07-28+5 tools

57/100

Definition Quality75

Protocol Readiness35

Supportability43

Spec posture

Inferred effective spec 2026-07-28+·current baseline 2026-07-28

Static source inference · medium confidence

Current-spec patterns detected

Summary

Football-Data MCP has well-structured tool definitions with clear naming (verb_noun pattern) and reasonable descriptions (avg 150 chars). All 5 tools have input schemas with type definitions. However, parameter descriptions are sparse or missing context (e.g., 'Match status filter' lacks enum values; 'YYYY-MM-DD' format stated but not in schema constraints). No output schemas documented. Error handling exists but lacks recovery guidance. Missing tool annotations (readOnlyHint, idempotentHint). API key injection via _apiKey parameter violates secret-injection pattern.

Tools (5)

get_competition_matchesread onlyauthsource verified73/100

List matches in a competition. Filter by status (SCHEDULED, LIVE, IN_PLAY, PAUSED, FINISHED, POSTPONED, SUSPENDED, CANCELLED), date range, matchday, stage, or season year.

get_competition_standingsread onlyauthsource verified73/100

League table for a competition season. Returns total / home / away tables.

get_teamread onlyauthsource verified77/100

Team detail by ID — current squad, coach, competitions, venue.

get_team_matchesread onlyauthsource verified70/100

A team's matches across competitions. Filter by status, date range, competitions, season, or venue.

list_competitionsread onlyauthsource verified82/100

List competitions accessible on your plan. Free tier: 12 majors. Use the returned `code` (e.g., "PL", "PD", "CL") for downstream calls.

Issues (5)

CRITICALsecret-injection ↗

API key exposed as tool parameter (_apiKey). Credentials must use server-side secret injection via environment variables or vault. Agent traces log all parameters, secrets leak into logs and prompt history.

list_competitionsget_competition_matchesget_competition_standingsget_teamget_team_matches

HIGHconstrained-input ↗

Enum constraints missing from parameters. 'status' accepts 8 values (SCHEDULED, LIVE, etc.) but is declared as free-form string. 'venue' accepts HOME|AWAY but lacks enum. LLMs hallucinate invalid values without formal constraints.

get_competition_matchesget_team_matches

HIGHresponse-shaper ↗

Output schemas not documented. Callers cannot plan downstream tool calls or extract required fields (e.g., team_id from competition response). fdFetch returns raw API response without shaping.

list_competitionsget_competition_matchesget_competition_standingsget_teamget_team_matches

Recommendations

Move API key to server-side environment variable (FOOTBALL_DATA_API_KEY). Remove _apiKey parameter. Inject credentials in callTool() before fdFetch().
Add enum constraints to schema: status: {enum: ['SCHEDULED', 'LIVE', 'IN_PLAY', 'PAUSED', 'FINISHED', 'POSTPONED', 'SUSPENDED', 'CANCELLED']}, venue: {enum: ['HOME', 'AWAY']}.
Document output schemas for each tool. E.g., list_competitions returns {count: number, competitions: [{id, code, name, type, area, plan, emblem, current_season_start, current_season_end, current_matchday}]}.
Enhance parameter descriptions with constraints and examples. E.g., 'date_from: ISO 8601 date (YYYY-MM-DD), e.g., 2025-01-15. Must be ≤ date_to.'
Add tool annotations to McpToolDefinition: readOnlyHint: true, idempotentHint: true for all tools. Enables LLM to safely retry and reason about side effects.

Score history

Overall score trend

First recorded score · v2 rubric

57/100

Scored	Grade	Overall	Spec posture	Rubric
2026-09-23	D	57	2026-07-28+	v2