Loading ToolBench
Stateless MCP server exposing read-only Linux network and system diagnostics over stdio.
24 tools with consistent naming (verb_noun pattern: net.*, sys.*) and complete input schemas. Descriptions are present and adequate (avg ~80 chars), but lack LLM-optimized depth. Most parameters have types and descriptions, but many lack constraints (min/max, enums). Output schemas are not documented. Error handling is minimal, no recovery guidance or actionable error messages. Tool composition is sound (single responsibility), but descriptions don't explain WHEN to use each tool or dependencies between them.
Show interface addresses. Optionally restrict to one interface.
[Privileged: CAP_NET_ADMIN] Show connection tracking table.
Show DNS resolver status and configuration.
[Privileged: CAP_NET_ADMIN] Show ethtool driver and device information.
[Privileged: CAP_NET_ADMIN] Show firewall rules (iptables/nftables).
Show interface state and counters. Optionally restrict to one interface.
Show detailed link state. Optionally restrict to one interface.
Output schemas not documented. LLMs cannot plan downstream calls or extract required fields without knowing response structure.
Descriptions lack LLM-optimized depth. Most are 50-80 chars; should be 100-200 chars explaining WHAT, WHEN, and any prerequisites. E.g., 'net.ping' should explain it requires CAP_NET_RAW and when to use it vs net.route_get.
Inferred effective spec: 2026-07-28+.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 59 | 2026-07-28+ | v2 |
Tail systemd journal for network-related units.
Look up a MAC address in the bridge forwarding database.
Show ARP/neighbor state. Optionally restrict to one interface.
[Privileged: CAP_NET_RAW] Bounded ping connectivity check against a target host.
Show /etc/resolv.conf contents.
Resolve the route the kernel would use for a target host.
Show the routing table across all routing tables.
Show policy routing rules.
[Privileged: CAP_NET_ADMIN] Show open sockets and connections.
[Privileged: CAP_NET_RAW] Capture a small sample of packets on an interface.
[Privileged: CAP_NET_RAW] Bounded traceroute to a target host.
[Privileged: CAP_SYSLOG] Show kernel ring buffer.
List systemd units in failed state.
Show mounted filesystems and disk usage.
Show memory usage and statistics.
Show detailed status of a systemd unit.
Show system uptime and load average.
Numeric parameters lack min/max constraints. E.g., 'lines' in net.logs and sys.service_status have min/max (1-200) in schema but no description of the constraint. 'count' in net.ping (1-10) and net.tcpdump_sample (1-50) are constrained but descriptions don't explain why.
No error handling guidance. Tools return raw command output or errors with no recovery hints. E.g., if net.ping fails, LLM doesn't know whether to retry, check permissions, or try a different tool.
Tool descriptions don't explain dependencies or sequencing. E.g., net.route_get should mention it's useful after net.routes to drill into a specific route. net.neighbors should explain it complements net.addr.