MCP server for file certification on MultiversX blockchain via xProof API
Single tool 'certify' has a reasonable description (89 chars, within 10-1024 range) but critical schema deficiencies. Input schema lacks type declarations for parameters, 'file' and 'author_name' are both strings but have no 'type' field visible in the schema definition. No output schema is documented. The tool description does not explain what the function returns, when to use it vs alternatives, or error recovery paths. Parameter descriptions are present but minimal (file: 'Path to the file to certify', author_name: 'Optional author name'). No error handling guidance, no idempotency guarantees, no mention of prerequisites (XPROOF_API_KEY env var). The bash script implementation is visible but tool registration mechanism is not, cannot verify if this is properly registered in an MCP server wrapper.
Certify a file on MultiversX blockchain via xProof. Computes SHA-256 locally (file never leaves your machine).
Input schema lacks explicit type declarations. Parameters 'file' and 'author_name' have descriptions but no 'type' field visible, violating JSON Schema requirements.
No output schema documented. Tool description does not specify what fields are returned (proof_id, verify_url, tx_hash, explorer_url, badge URL). LLMs cannot plan downstream actions without knowing response structure.
Credentials exposed as environment variable dependency (XPROOF_API_KEY). While not a parameter, the tool description should document this prerequisite and recommend server-side secret injection per pattern:secret-injection.
No error handling guidance. Script exits with generic 'Error (HTTP $HTTP_CODE): $BODY' on failure. LLM receives raw HTTP response and cannot determine if error is retryable, user-fixable, or fatal.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 41 | 2026-07-28+ | v2 |
Tool registration mechanism not visible in source. Only bash script provided; no evidence of MCP server wrapper, tool registration call, or capabilities negotiation. Cannot verify if tool is properly exposed to MCP clients.