Critical gaps across all dimensions. Tool definitions lack input schemas entirely, no JSON Schema visible in source code. Descriptions are minimal (10-30 chars), far below the 50-200 char baseline for LLM-optimized tools. Parameters are not documented with types or constraints. No output schemas documented. Error handling is absent. The server registers 22 tools via @ring_tool decorator, but the actual tool definitions (input/output schemas, parameter descriptions) are not visible in the provided source. This forces a conservative score: if schemas exist in imported modules, they are not shown; if they don't exist, the server is non-functional for agent use.
Clone a Qubes VM
Copy files to a Qubes VM
Attach a device to a Qubes VM
Detach a device from a Qubes VM
List devices available for attachment to a Qubes VM
Listen to Qubes events
Set a feature on a Qubes VM
Get firewall rules for a Qubes VM
Set firewall rules for a Qubes VM
No input schemas visible in source code. All 22 tools lack documented parameter types, constraints, and descriptions. Cannot verify JSON Schema compliance.
Tool descriptions are minimal (10-30 chars). Baseline for LLM-optimized tools is 50-200 chars. Descriptions do not explain WHAT the tool does, WHEN to use it, or what it returns.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 33 | 2026-07-28+ | v2 |
Get pool statistics for Qubes storage
Install a package in a Qubes VM
List Qubes VMs
Get properties of a Qubes VM
Set properties of a Qubes VM
Remove a Qubes VM
Run a command in a Qubes VM
Run a command in a disposable Qubes VM
Shutdown a Qubes VM
Spawn a new Qubes VM
Spawn a disposable Qubes VM
Start a Qubes VM
Get the state of a Qubes VM
No output schemas documented. LLMs cannot plan downstream tool calls or extract required fields without knowing response structure.
No error handling guidance. Tools do not indicate what errors are retryable, user-fixable, or fatal. No recovery suggestions provided.
Destructive tools (qubes_remove, qubes_run, qubes_copy, qubes_install_pkg) lack confirmation or dry-run support. Agents can trigger irreversible actions without safeguards.