OSINT graph enrichment server with FastAPI and MCP adapters. Builds investigation graphs by chaining transforms (DNS, WHOIS, breach data, geolocation, etc.) across multiple data sources.
Critical gaps across naming, descriptions, and schemas. Tool names lack action verbs (domain_to_subdomains, ipv4_to_geo are transformation names, not imperative actions). Descriptions are in German and extremely brief (10-30 chars), violating the 10-1024 char guideline and providing minimal LLM guidance. Input schemas are minimal: only a single 'value' parameter with basic string type, no enums, ranges, or validation hints. No output schemas documented. Error handling absent, no recovery guidance or categorization. The dynamically generated tools (via _make_tool) have inferred definitions not explicitly visible in registration, capping their scores at 50. list_transforms, get_graph, and clear_graph are better-defined but still lack output schema documentation.
Leert den Graphen (neue Ermittlung starten).
Loest eine Domain zu IPv4-Adressen auf (A-Records).
Liefert die Mailserver einer Domain (MX-Records).
Liefert die Nameserver einer Domain (NS-Records).
Findet Subdomains ueber Certificate-Transparency-Logs (crt.sh).
Liefert TXT-Records (SPF, Verifizierungen, ...).
Datenlecks zu einer E-Mail (Have I Been Pwned). Braucht HIBP_API_KEY.
Tool names use transformation notation (domain_to_subdomains) instead of imperative action verbs (resolve_subdomains, lookup_subdomains). LLMs infer intent from verb-noun patterns; transformation names obscure the action.
Descriptions are in German and critically brief (10-30 chars). Baseline is 194 chars; these violate the 10-1024 guideline. No context for when/why to use each tool. LLMs cannot determine tool selection without adequate descriptions.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 34 | 2026-07-28+ | v2 |
Gravatar-Avatar/Profil zu einer E-Mail (kostenlos, passiver GET).
Gibt den aktuellen Ermittlungs-Graphen im Cytoscape-Format zurueck.
Geolocation, Land/Stadt und ASN/ISP einer IP (ipwho.is, kostenlos).
Reverse-DNS-Lookup (PTR): welcher Hostname zeigt auf diese IP?
Listet alle verfuegbaren Transforms mit Input-Typ und Beschreibung.
Input schemas minimal: single 'value' parameter with no enums, ranges, format constraints, or validation hints. No output schemas documented. LLMs cannot plan downstream calls or validate results without schema clarity.
No error handling or recovery guidance. Tools fail silently or return generic errors. No categorization of retryable vs fatal errors. Agents cannot self-correct or adapt.
Dynamically generated tools (9 of 12) have inferred definitions not explicitly visible in source.