A stateless MCP routing gateway that acts as a secure facade for AI agents, managing multiple backend MCP servers and routing tool calls with conflict resolution and virtual tool support.
Two tools with minimal descriptions and incomplete schemas. list_tools has empty input schema (correct for no-param tool) but description is generic. call_tool has a basic schema with two parameters but lacks critical details: no enum constraints on tool names, no description of what 'arguments' object structure should be, no guidance on error cases. Neither tool documents output structure. Descriptions are under 200 chars but lack actionable context for LLM selection. No error handling guidance, no parameter validation rules, no security warnings about routing untrusted calls.
Routes tool calls from AI agents to the appropriate backend MCP server. Performs routing resolution based on gateway configuration (explicit_routing, virtual_tools, namespaced tools) and forwards the call with arguments unchanged to the target backend server.
Returns the filtered and virtualized list of tools available through the gateway, as presented to AI agents. Tools are filtered based on gateway configuration (blocked_tools, virtual_tools, explicit_routing).
call_tool lacks parameter descriptions and constraints. 'arguments' parameter has no description of expected structure, format, or validation rules. LLM cannot infer what object shape is valid.
call_tool 'name' parameter has no enum constraint or validation guidance. LLM cannot know which tool names are valid without calling list_tools first, forcing discovery overhead.
No output schema documented for either tool. LLMs cannot plan downstream operations or extract structured data from responses.
call_tool description does not explain error cases, routing failures, or what happens when a tool name is invalid or backend is unreachable.
Inferred effective spec: 2026-07-28+.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 43 | 2026-07-28+ | v2 |
No security guidance in tool descriptions. call_tool routes arbitrary tool calls to backend servers, description should warn about input validation, injection risks, and permission requirements.