CLI and daemon for managing MCP servers, tools, and client profiles with allow-list based access control
Six tools with clear verb-noun naming (server_tool_ls, profile_tool_allow, etc.) and consistent structure. All have descriptions (avg ~80 chars) and input schemas with typed parameters. However, descriptions are terse and lack WHEN/WHY guidance. Parameter descriptions are minimal (often single phrases). No output schemas documented. Error handling and recovery guidance absent. Missing idempotency hints on write operations. No examples of chaining IDs across tool responses.
Choose which tools a profile passes on (profile-level allow list, cannot widen global rules)
Show why a profile lets one tool through or does not, including machine-wide and profile-specific verdicts
List tools for a profile, showing which are offered and which are blocked by global or profile rules
Choose which of a server's tools are offered at all (machine-wide allow list)
Show one tool and why each layer (global, profiles, clients) lets it through or blocks it
List cached tools from configured servers, optionally ranked by a search query
No output schemas documented. LLMs cannot predict response structure or plan downstream calls. E.g., server_tool_ls returns a list but field names, types, and pagination are undocumented.
Descriptions lack WHEN/WHY context. E.g., 'List cached tools from configured servers' does not explain when to call this vs inspect, or what 'cached' means. Descriptions average ~80 chars but lack actionable guidance.
Write operations (server_tool_allow, profile_tool_allow) lack idempotency hints and confirmation/dry-run patterns. No guidance on whether repeated calls are safe or have side effects.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 51 | 2026-07-28+ | v2 |
Parameter descriptions are minimal. E.g., 'server' is described as 'Optional server name' but does not explain what happens if omitted, or how to discover valid server names.
No error handling guidance. If a server or profile name is invalid, or if a tool is blocked, the response structure and recovery steps are undocumented.