MCP server providing policy-governed tools for CloudOps workflows including ticket creation, access approval requests, cost summaries, and runbook search.
Four tools with basic schemas and descriptions, but significant gaps in parameter documentation and output schema clarity. All tools have descriptions (10-80 chars, below the 194-char baseline), and input schemas are present but sparse. No tool annotations (readOnlyHint/destructiveHint). Error handling and recovery guidance absent. Naming is verb-forward (create_, request_, lookup_, search_) but descriptions lack WHEN/WHY context and output structure documentation. No evidence of pagination, result limits, or chaining IDs in responses.
Create a local support ticket payload for the governed CloudOps workflow.
Return a local cost summary payload for the governed CloudOps workflow.
Create an approval request for temporary read-only production access.
Search a small local runbook corpus for incident triage.
Output schemas not documented. No description of what create_ticket, request_temporary_read_only_access, lookup_cost_summary, or search_runbook return. LLMs cannot plan downstream calls or extract required fields without knowing response structure.
Tool descriptions are too brief (30-40 chars vs 194-char baseline). 'Create a local support ticket payload' lacks WHEN to use, prerequisites, and side effects. 'Return a local cost summary payload' does not explain what fields are included or how to interpret them.
No tool annotations (readOnlyHint, destructiveHint, idempotentHint). create_ticket and request_temporary_read_only_access are marked WRITE risk but lack destructiveHint annotation. LLMs cannot infer retry safety or confirmation requirements.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 48 | 2026-07-28+ | v2 |
Parameter descriptions are minimal or missing context. 'team' in create_ticket has no description of valid values, format, or how to discover available teams. 'reason' in request_temporary_read_only_access lacks guidance on required detail level.
No error handling or recovery guidance. Tools return success/failure but do not explain what to do on failure (retry? ask user? call another tool?). No actionable error messages documented.