Detect MCP tools hidden from tools/list that remain reachable via tools/call.
Three minimal tools with bare-bones definitions. All have descriptions (10-20 chars, below the 20-char floor), no parameter descriptions, and schemas lacking detail. 'echo' has one parameter but no description for it. 'ping' and 'whoami' have empty property objects. No output schemas documented. No error handling guidance. This is a demo/audit harness, not a production tool suite, it deliberately uses trivial, side-effect-free tools to test MCP server authorization boundaries, not to provide useful agent capabilities.
Return the supplied text unchanged.
Return 'pong'. No arguments, no side effects.
Return a fixed identity string. No side effects.
Parameter descriptions missing. 'echo' accepts 'text' parameter with no description of what it does or expected format. LLMs cannot infer parameter semantics from names alone.
Tool descriptions are under 20 characters (critical floor). 'ping' (29 chars), 'whoami' (43 chars), 'echo' (35 chars) lack context for LLM selection. Baseline for A+ tools is 194 chars average.
No output schemas documented. LLMs cannot plan downstream calls or extract structured data when return types are undeclared.
No error handling guidance. Tools raise ValueError but provide no recovery hints or error classification (retryable vs fatal).
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 36 | 2026-07-28+ | v2 |
Tool names lack action verbs. 'echo', 'ping', 'whoami' are generic/system-like rather than agent-intent-driven (e.g., 'return_text', 'test_connectivity', 'get_identity'). Baseline: 90% of A+ tools start with action verbs.