Lighthouse for MCP servers — grade any public Model Context Protocol server against 10 spec-bound readiness criteria (dual-stack protocol entry, tool quality, safety annotations, anti-ghost content, token efficiency, honest errors) + a Claude/ChatGPT directory pre-flight, then hand off to SaSame's free Capability Control Beta. Legacy Gold Rush v1 commands remain compatibility-only. Zero deps, runs anywhere with npx.
This is an MCP server that audits OTHER MCP servers, not a domain-specific tool server. The 4 tools are legacy Gold Rush v1 commands for package management. All tools have descriptions (10-60 chars, below the 50-200 char LLM-optimized baseline). Input schemas are present but minimal: gold_rush_start has 2 params with descriptions; others have 1 param each. No output schemas documented. Tool names use verb_noun pattern (gold_rush_*) but are domain-specific jargon ('gold_rush_package_status', 'gold_rush_agent_run') that lack clarity for general LLM use. Error handling not visible in source. No tool annotations (readOnlyHint/destructiveHint) despite risk labels in metadata. Descriptions are functional but terse, e.g. 'read append-only package state' (28 chars) lacks context on when/why to call. Parameters lack format constraints or examples. This server is primarily an audit/CLI tool; the MCP interface is a secondary compatibility layer.
advance the package one deterministic safe step (no payment)
read append-only package state
produce the Visibility Report
create or identify a Gold Rush package for an MCP URL
Descriptions are terse (25-35 chars) and lack LLM-optimized context. 'read append-only package state' does not explain when to call this tool, what it returns, or how it differs from gold_rush_start.
No output schemas documented. LLMs cannot infer what fields to expect from gold_rush_start, gold_rush_package_status, or gold_rush_report responses.
Tool names use domain jargon ('gold_rush_*') that is not self-documenting. An LLM seeing 'gold_rush_agent_run' cannot infer it advances a package state without reading the description.
Inferred effective spec: 2026-07-28+.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 51 | 2026-07-28+ | v2 |
Risk metadata (READ_ONLY, WRITE) is present in server config but not exposed as tool annotations (readOnlyHint, destructiveHint). LLMs cannot see which tools are safe to retry.
Parameters lack format constraints, enums, or examples. 'mcp_url' and 'package_id' are free-form strings with no validation hints for the LLM.