Model Context Protocol servers demonstrating authentication patterns for Autodesk Platform Services (APS), including local stdio, remote HTTP with Auth0, and remote HTTP with OAuth proxy
Five tools with consistent naming (list_*, get_*) and basic descriptions. All tools are READ_ONLY, which is good for safety. However, descriptions are minimal (10-50 chars), parameter descriptions are absent or trivial, and output schemas are not documented. Input schemas are present but sparse. No error handling guidance, no pagination info despite list tools, and no chaining IDs documented. Follows basic verb_noun convention but lacks LLM-optimization depth.
Gets all versions of a specified item
Lists all folders within a specified project
Lists all hubs accessible to the authenticated user
Lists all items within a specified folder
Lists all projects within a specified hub
Descriptions are too short (10-50 chars) and lack context. 'Lists all hubs accessible to the authenticated user' does not explain when to call this vs other discovery tools, what structure is returned, or prerequisites.
Parameter descriptions are missing or trivial. 'hub_id' is described as 'The hub ID to list projects from' but does not explain format, constraints, or how to obtain a hub_id if the user only has a hub name.
Output schemas are not documented. LLMs cannot plan downstream calls or extract chaining IDs (e.g., project_id from list_projects result) without knowing the response structure.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 46 | <=2025-11-25 | v2 |
List tools lack pagination guidance. No mention of limit, offset, page_size, or result count. Large result sets will blow context windows without pagination support.
No error handling guidance. Descriptions do not explain what happens if a hub_id is invalid, if the user lacks permissions, or how the LLM should recover.