An MCP server for secure file management operations including reading, writing, editing, moving, deleting, and organizing files with safety checks and user confirmation for destructive operations.
Server has 8 tools with explicit schemas and descriptions, but quality is significantly below production baseline. All descriptions are in Arabic (non-English), which limits LLM comprehension in English-first environments. Schemas are present but lack critical constraints (enums, ranges, patterns). Parameter descriptions are minimal (avg ~30 chars vs baseline 72). No output schemas documented. Error handling is present but not recovery-focused. Tool naming is reasonable (verb_noun pattern) but some names conflate multiple concerns (delete_file_or_folder, confirm_or_cancel_deletion). Security controls exist (path validation, forbidden roots) but are not declared in tool metadata. No tool annotations (readOnlyHint, destructiveHint, idempotentHint) despite high-risk operations.
تنفيذ الحذف إلى سلة المحذوفات إذا وافق المستخدم، أو إلغاء العملية تماماً إذا تراجع.
إنشاء مجلد جديد في أي مسار مصرح به.
طلب حذف ملف أو عدة ملفات ونقلها إلى سلة المحذوفات. لا يتم الحذف فوراً بل يُعرض السبب للمستخدم مع خيار (موافق) للتنفيذ أو (تراجع) للإلغاء.
استبدال وتعديل جزء محدد من النص داخل ملف نصي في أي مجلد مصرح به.
استعراض محتويات أي مجلد في النظام.
نقل ملف أو مجلد مع حماية الملفات الأصلية من الاستبدال التلقائي.
معاينة محتوى ملف نصي بحد أقصى للأسطر لتوفير التوكن والسياق.
All tool descriptions and parameter descriptions are in Arabic. LLMs trained primarily on English will struggle to understand intent, leading to incorrect tool selection and parameter mapping. Descriptions must be in English for cross-language LLM compatibility.
No output schemas documented. LLMs cannot predict what fields to expect from tool responses, forcing them to parse unstructured text and plan downstream calls blindly. Every tool must declare its return type structure.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 46 | 2026-07-28+ | v2 |
كتابة أو حفظ ملف نصي على القرص في أي مجلد مصرح به.
Tool 'delete_file_or_folder' combines two concerns (request deletion + handle confirmation). Should split into separate tools: 'request_file_deletion' and 'confirm_deletion'. Current design forces agents to reason about multi-step workflows that should be explicit.
No tool annotations (readOnlyHint, destructiveHint, idempotentHint) despite clear risk levels. write_file, edit_file_text, delete_file_or_folder are destructive and should be marked. read_file_preview and list_directory_contents are read-only and should be marked. Annotations enable safer agent planning.
Parameter descriptions are minimal (avg ~30 chars vs baseline 72 chars). E.g., 'file_path' described as 'اسم الملف أو مساره الكامل' (name or full path) lacks format guidance. Should specify: 'Absolute or relative path. Relative paths resolve from WORKSPACE_DIR. Must not contain .. or symlinks outside workspace.'