Loading ToolBench
Model Context Protocol bridge for Docmost that enables Cursor and other MCP clients to interact with Docmost API for managing spaces, pages, users, comments, workspaces, and groups
31 tools with consistent naming (verb_noun pattern) and basic schemas. All tools have descriptions (10-50 chars, below ideal 50-200 baseline). Input schemas present but minimal, most parameters lack detailed constraints, enums, or format guidance. No output schemas documented. Error handling absent. Security concerns: workspaceId/userId passed as parameters throughout; no permission gates or audit logging visible. Composition is sound (single responsibility per tool), but parameter descriptions are generic ('ID of the X') rather than actionable. No tool annotations (readOnlyHint, destructiveHint) despite clear risk levels (DESTRUCTIVE, WRITE, READ_ONLY). Pagination support present (page/limit) but inconsistent.
Create a new comment
Delete a comment
Get a comment
List comments on a page
Update a comment
Add a member to a group
Create a new group
Delete a group
STDIO transport only, not remotely accessible. Cannot be used by hosted MCP clients or production agent platforms. Requires local stdio connection.
No output schemas documented. LLMs cannot predict response structure for downstream tool chaining. E.g., space_create returns what fields? Does it include space_id for use in page_create?
Descriptions are 30-50 chars (below 50-200 baseline). Generic text like 'Create a new space' lacks context for LLM selection. Missing WHEN to use, prerequisites, or side effects. E.g., space_delete should warn it is irreversible.
No tool annotations (readOnlyHint, destructiveHint, idempotentHint). Risk levels are known (READ_ONLY, WRITE, DESTRUCTIVE) but not exposed to LLM. LLM cannot reason about safety or retry logic.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 39 | <=2025-11-25 | v2 |
Get a group
List groups in a workspace
Remove a member from a group
Update a group
Create a new page
Delete a page
List pages in a space
Move a page to a different parent or space
Update a page
Create a new space
Delete a space
List all spaces
Update a space
Get a user's details
List users in a workspace
Update a user
Add a member to a workspace
Create a new workspace
Delete a workspace
Get workspace details
List all workspaces
Remove a member from a workspace
Update a workspace
Security: workspaceId, userId, spaceId passed as parameters throughout. No server-side permission gates visible. No audit logging. Agents can invoke delete_workspace without authorization checks. Credentials (MCP_API_KEY) injected via env but not validated per-request.