A remote MCP server with OAuth 2.0 authentication provider, built on Cloudflare Workers. Demonstrates MCP tool registration and OAuth authorization flows.
Single tool 'add' has a clear, concise description (27 chars) and properly typed input schema with Zod validation. However, the description is below the 50-char baseline for production tools and lacks context about when/why to use it. No output schema is documented, LLMs cannot predict the response structure. Parameter descriptions are minimal (12-13 chars each), below the 72-char baseline. No error handling guidance, no examples of edge cases (e.g., very large numbers, non-numeric input). The tool is READ_ONLY but lacks explicit idempotent/readonly annotations in the MCP schema. Overall, this is a minimal proof-of-concept tool, not production-grade.
Adds two numbers together
Output schema not documented. LLMs cannot predict response structure or chain this tool with others.
Tool description is 27 characters, below 50-char minimum for production tools. Lacks context on when/why to use it vs alternatives.
Parameter descriptions are 12 - 13 characters each, far below 72-char baseline. 'First number to add' and 'Second number to add' are generic; no guidance on valid ranges, precision, or edge cases.
No error handling guidance. What happens if inputs are NaN, Infinity, or exceed JavaScript number limits? LLM has no recovery path.
Tool marked READ_ONLY but lacks explicit MCP schema annotations (readOnlyHint, idempotentHint). Clients cannot auto-detect safety properties.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 58 | 2026-07-28+ | v2 |