Prompt routing and firewall decisions from Prompt Compass over MCP.
Single tool with clear naming (compass_check_prompt), explicit input schema with constraints (minLength 1, maxLength 262144), and documented output schema. Description is adequate (145 chars) but could be more LLM-optimized. Tool annotations present and accurate (readOnlyHint: false reflects quota metering). No parameter descriptions visible in schema, only the prompt parameter itself. Error handling delegates to API layer without recovery guidance. Test coverage demonstrates basic functionality.
Return a decision-only recommendation for whether prompt text should stay local, go to a cloud model, or be blocked for PII or jailbreak risk. This tool never sends the prompt to an AI model.
Input parameter 'prompt' lacks description in schema. Only type and length constraints are visible; no guidance on what constitutes valid prompt text or when to call this tool vs alternatives.
Error responses from API are not documented. Tool description does not explain what errors are possible (e.g., invalid API key, quota exceeded, malformed prompt) or how the LLM should recover.
Output schema fields lack descriptions. LLMs cannot infer meaning of 'decision' enum values (LOCAL_SAFE, CLOUD_COMPLEX, BLOCK_PII, JAILBREAK), 'confidence' range, or 'windows' semantics without explicit field documentation.
Tool description does not clarify when to call compass_check_prompt vs other routing/firewall tools, or what downstream actions follow each decision type. Dependency hints are missing.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 69 | 2025-06-18+ | v2 |
STDIO-only transport prevents remote accessibility and integration with hosted MCP clients. Limits deployment scenarios significantly.