Linux-MCP has 19 tools with complete input schemas and descriptions, but quality is inconsistent. Tool names lack clear verb-noun structure (e.g., 'batch_cmd' vs 'execute_command', 'interactive_cmd' vs 'run_interactive_command'). Descriptions are present but minimal (10-50 chars), providing insufficient context for LLM selection. No output schemas documented. Critical security issue: passwords exposed as plaintext parameters. No error handling guidance, no idempotency markers, no pagination support. Composition is poor: 4 separate modify_host_* tools should consolidate; session management tools lack clear lifecycle documentation.

• Move password/credentials to server-side secret injection (environment variables or vault). Accept only uuid + host_id in add_host; retrieve credentials internally. Prevents secrets in logs and agent traces.
• Consolidate modify_host_ip, modify_host_user_pwd, modify_host_port into a single update_host(uuid, address=None, username=None, password=None, port=None) with optional fields. Reduces LLM reasoning overhead and follows single-responsibility principle.
• Expand all descriptions to 100-200 chars. Include WHEN to use (e.g., 'Use batch_cmd for non-interactive commands; use interactive_cmd for prompts requiring responses'), prerequisites, and return value summary. Example: 'Execute a non-interactive Linux command on a remote host via SSH. Returns command output and exit code. Use for read-only queries; for interactive prompts, use interactive_cmd instead.'
• Document output schemas for all tools. Define response structure: {status: 'success'|'error', result: {...}, error_code?: string}. For list tools, include pagination: {items: [...], total: number, next_cursor?: string}. Enables LLM to parse responses and chain calls.
• Add error classification to error responses. Return {status: 'error', error_code: 'RETRYABLE'|'USER_FIXABLE'|'FATAL', message: '...', suggestion: '...'}. Example: 'Host not found. Try list_hosts() to see available UUIDs.' Guides LLM recovery strategy.

Inferred effective spec: <=2025-11-25.

• Relies on Logging (deprecated) - log to stderr or use OpenTelemetry