A gateway and agent system that exposes database capabilities through MCP (Model Context Protocol) and REST APIs, enabling secure database access with capability-based authorization
Critical gaps across all dimensions. Tool definitions are inferred from test files rather than explicit registration code, capping individual scores at 50. Descriptions are present but generic (10-50 chars). No input schemas visible in source, cannot verify parameter types, constraints, or structure. 'initialize' and 'ping' are protocol-level concerns, not user-facing tools. 'tools/call' accepts free-form 'arguments' object with no schema validation. No output schemas documented. Error handling and recovery guidance absent.
Initialize MCP protocol handshake, negotiate protocol version and server capabilities
Ping the MCP server to verify connectivity
Execute a database capability/tool through the agent with parameters
List all available tools/capabilities exposed by the gateway, filtered by API key permissions
No input schemas visible in source code. Cannot verify parameter types, constraints, enums, or descriptions.
Tool definitions inferred from test files (server_test.go, handlers_mcp.go) rather than explicit registration. Actual tool registration code not visible in provided source.
'initialize' and 'ping' are protocol-level handshake concerns, not user-facing tools. Should not be exposed as callable tools, they belong in the MCP protocol layer, not the tool registry.
'tools/call' accepts 'arguments' as a free-form object with no schema. LLMs cannot infer valid parameter names, types, or constraints. Requires per-capability schema documentation.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 35 | <=2025-11-25 | v2 |
No output schemas documented. LLMs cannot plan downstream tool calls or extract required fields. Responses from 'tools/list' and 'tools/call' are unstructured.