MCP Server for remote document read/write operations by AI agents. Supports multi-tenant document collaboration with role-based access control, encryption, and commenting.
Server has 10 tools with basic schemas and descriptions in Chinese. All tools have input schemas with type definitions and descriptions present. However, descriptions are minimal (10-50 chars), lack context on WHEN to use tools, and do not explain prerequisites or error recovery. Parameter descriptions are present but terse. Output schemas are not documented, LLMs cannot predict return structure. No error handling guidance. Tool names follow verb_noun pattern (list_*, read_*, write_*, update_*, delete_*, add_*, reply_*) which is good, but descriptions lack the depth needed for reliable LLM selection. Security-sensitive tools (write_doc, update_doc, delete_doc) lack confirmation/dry-run patterns. No pagination support on list_* tools despite potential for large result sets.
对任意文档添加评论
删除文档(仅限自己的角色空间)
列出文档的所有评论(含回复,按时间正序)
列出指定项目下的所有文档(含所属角色)
列出此 token 可见的所有项目
列出指定项目下的所有角色空间
读取文档内容(自动解密)
Descriptions are too brief (10-50 chars) and lack context. They state WHAT the tool does but not WHEN to use it, prerequisites, or error recovery paths. LLMs cannot reliably select between similar tools (e.g., list_docs vs list_comments) without richer guidance.
Output schemas are not documented. Callers cannot predict return structure (e.g., does list_docs return role_name or role_id? Is updated_at a string or timestamp?). This forces LLMs to guess and wastes tokens on trial-and-error.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 55 | 2026-07-28+ | v2 |
回复某条评论
更新文档内容与/或标题(仅限自己的角色空间)
在自己的角色空间创建文档(自动加密)
Destructive tools (delete_doc) lack confirmation or dry-run patterns. Agents can accidentally delete documents without a safety gate. No error guidance on what to do if deletion fails.
List tools (list_programs, list_roles, list_docs, list_comments) do not support pagination (limit, offset, cursor). If a project has hundreds of documents, the entire list is returned, bloating context and risking token exhaustion.
Error messages in code (e.g., 'PermissionError("未认证")') are not actionable for LLMs. No guidance on recovery steps (e.g., 'Token expired, request a new one' or 'Try list_programs() first to verify access').