Enterprise-grade MCP server for Biopharma software infrastructure, FDA 21 CFR Part 11 audit logging, CDISC SDTM exports, 4PL curves, and HIPAA PII redaction.
Server has 10 tools with complete schemas and descriptions, but quality is uneven. Tool names lack action verbs (e.g., 'calculate_4pl_curve' vs 'fit_4pl_curve'), descriptions are domain-specific but sometimes vague on LLM intent, and parameter descriptions are present but sparse. Output schemas are partially documented in code but not formally exposed. Error handling is minimal, no recovery guidance or actionable error messages. Security concerns: PII redaction is mentioned but implementation is opaque. Composition is reasonable (single-responsibility tools), but no pagination, batch operations, or chaining support.
Computes shared slope and asymptotes consistency via F-Test and TOST metrics.
Fits and resolves 4-Parameter Logistic non-linear regression sigmoidal dose-response fields.
Calculates Limit of Detection (LOD) and Limit of Quantitation (LOQ) from background blanks.
Validates microplate HTS metrics from positive and negative control data series.
Employs Grubbs and IQR mathematical boundaries to filter anomalous microplate artifacts.
Converts unstructured JSON payload records into CDISC SDTM / Allotrope compliant models.
Tool names lack action verbs. Names like 'calculate_4pl_curve', 'assess_parallelism', 'detect_assay_outliers' are descriptive but do not start with clear action verbs (fit_, compute_, identify_). LLMs infer intent from verb-noun patterns; weak verbs reduce clarity.
Parameter descriptions are minimal (10-30 chars). E.g., 'Array of concentration values (must be positive)' lacks context on units, expected range, or when to use. Descriptions should be 50-150 chars and explain WHAT, WHEN, and WHY.
No output schema documentation. Tools return structured objects (e.g., 'status', 'parameters', 'fit_quality') but these are not formally documented in tool definitions. LLMs cannot plan downstream calls without knowing return fields.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 66 | 2026-07-28+ | v2 |
Records immutably hashed operation logs to maintain compliance with FDA 21 CFR Part 11.
Scales observed calculations dynamically across dilution ratios back to original stock concentration.
Memory-safe stream parser for 96-well or 384-well microplate layout string rows.
Fault-tolerant Circuit Breaker query for ChEBI or PubChem compound resolution.
Error handling is absent. No recovery guidance, no actionable error messages. E.g., 'resolve_biological_entity_safe' has a Circuit Breaker but returns 'UNKNOWN_OFFLINE' without telling the LLM what to do next. Errors should guide retry, fallback, or user escalation.
PII redaction is called on all responses ('redactPatientPii()') but implementation is opaque. No documentation of what is redacted, when, or how. Security-critical tools (audit logs, CDISC exports) need transparent redaction policies.