Ghost Cloud MCP stdio bridge — agents propose; humans approve in Ghost UI. Narrow MCP tool surface for read/plan/approve/execute-approved workflows.
Ghost MCP has 22 tools with clear naming (verb_noun pattern) and risk classifications. However, critical gaps undermine quality: input schemas are visible but many lack parameter descriptions; tool descriptions exist but are often terse (10-50 chars, below the 50-200 char baseline for LLM optimization); no documented output schemas; no error handling guidance; no parameter constraints (enums, ranges, formats). The server conflates two distinct domains (Cloud workflows + Tauri desktop automation) without clear separation. STDIO transport caps protocol readiness at 50, further limiting production viability.
Get run status, per-step outcomes, and approval state. Use this to see when a run is awaiting human approval.
Preview a workflow and its latest version steps (typed plan). Does not execute anything.
List past runs newest-first (id, zone, counts, sealed/finished, status) for review; read-only, optional 'limit'
Create a deterministic Organizer plan (no execution)
Execute a plan approved in Ghost desktop UI; returns stopped_early / stop_reason / verifications + receipt
Execute an unchanged routine approved in Ghost via Action Plan runtime; returns stopped_early / stop_reason / redacted verifications + receipt — requires plan-hash token
17 of 22 tools (ghost.* namespace) have NO visible input schemas in source.
Tool descriptions are terse (10-60 chars) and lack LLM-optimization guidance. Baseline is 50-200 chars with WHAT/WHEN/WHY context. E.g. 'ghost.status' is 'Ghost app status, trust pipeline, and how macOS semantic/vision ops are exposed (approval-bound only)', unclear when to call it or what it returns.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 49 | 2026-07-28+ | v2 |
Explain how Ghost plans Organizer actions
Check approval status for a pending plan
Get the current plan for a Zone
Get run summary, halt fields (stopped_early / stop_reason / verifications), and receipt
List saved routine names only (no recorded input or typed text)
List user-approved Zones (metadata only)
Preview redacted compressed steps, compiled Action Plan (incl. semantic UI reliability), and policy — no execution, no AX/OCR/capture
Request desktop approval (opens Ghost UI)
Request local Ghost review for an exact saved routine
Scan a Zone and return file metadata (read-only)
Ghost app status, trust pipeline, and how macOS semantic/vision ops are exposed (approval-bound only)
Undo an eligible completed run
Re-run policy checks on a Zone plan
List runs awaiting human approval in this org. Read-only — tell the user to approve in the Ghost UI. Agents cannot approve.
List workflows in the current organization (id, name, description, archived). Safe metadata only.
Enqueue a run of a workflow's latest version. Sensitive steps still halt for human approval in the Ghost UI — this tool cannot approve them.
No output schemas documented for any tool. LLMs cannot plan downstream calls or extract required fields (e.g. does get_workflow return step_ids for chaining to other tools?). Baseline: 100% of A+ tools document return types.
No error handling guidance. Tools like start_run and execute_approved_plan are irreversible (WRITE/IRREVERSIBLE risk) but provide no recovery hints, retry classification, or actionable error messages. Agents cannot self-correct on failure.
Parameter descriptions missing or minimal. E.g. list_workflows has 'includeArchived' with description 'When true, include archived workflows. Default false.', lacks context on when to use it or what 'archived' means in Ghost's domain. Baseline: 100% of A+ tools have param descriptions.