Loading ToolBench
A Next.js application for bill tracking, payment monitoring, and financial alerts with email synchronization and push notifications
This is a Next.js application exposing API routes as MCP tools, not a proper MCP server. Tool definitions are inferred from route handlers rather than explicitly registered via MCP protocol. No tool schemas are visible in the source code, parameter descriptions exist in the rubric but actual JSON Schema definitions are absent. Descriptions are present but generic (avg ~80 chars). All 9 tools are WRITE operations with security concerns (cron endpoints accept Bearer tokens as parameters, violating secret-injection pattern). No error recovery guidance, no output schemas documented, no pagination support. This server cannot function as an MCP server without explicit tool registration and schema definitions.
Mark an alert as dismissed by updating the is_dismissed flag to true for a specific alert belonging to the authenticated user
Exchange OAuth authorization code for a session and store Gmail tokens for email synchronization
Mark an alert as read by updating the is_read flag to true for a specific alert belonging to the authenticated user
Send push notifications for upcoming bills based on user reminder preferences and update bill status to due_soon or overdue. Triggered by cron job with Bearer token authentication
Send weekly email digests to users with upcoming bills and recent alerts based on their notification preferences. Triggered by cron job with Bearer token authentication
Sign out the authenticated user and redirect to login page
No JSON Schema definitions visible for any tool input parameters.
Bearer tokens exposed as tool parameters (send_email_digest, send_bill_reminders, sync_all_email_accounts). Violates secret-injection pattern, credentials must never appear in parameters as they are logged in traces.
No output schemas documented for any tool. LLMs cannot plan downstream calls or extract required fields without knowing response structure.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 22 | 2026-07-28+ | v2 |
Subscribe an authenticated user to push notifications by storing their push subscription and enabling push notifications
Sync all active email accounts to extract bills and billers. Triggered by cron job with Bearer token authentication
Sync all active email accounts for the authenticated user to extract bills and billers
No error recovery guidance in any tool description. Errors return generic messages ('Unauthorized', 'Invalid input') without actionable next steps for the LLM.
Tools are inferred from Next.js route handlers, not explicitly registered via MCP protocol. No evidence of MCP server implementation, this is a Next.js app, not an MCP server.