Discovery SDK for MCP servers — search, approve, connect. Wraps PharosClient and exposes discovery operations as MCP tools with support for visual approval and OAuth flows via MCP Apps.
Server exposes 12 tools with basic descriptions but critical gaps in schema completeness and parameter documentation. Tool names follow verb_noun convention (pharos_search, pharos_install, pharos_remove, pharos_list, pharos_publish) but lack clarity on A/B variants. Input schemas visible for most tools but parameter descriptions are minimal (1-2 sentences). No output schemas documented. Error handling is absent from tool definitions. The 'filters' parameter in search tools is typed as generic 'object' with no structure guidance. Destructive tools (pharos_remove, pharos_remove_apps) lack confirmation/dry-run patterns. No tool annotations (readOnlyHint, destructiveHint) despite clear risk classifications in metadata.
Get detailed information about a specific MCP server
Get detailed information about a specific MCP server with MCP Apps UI rendering
Install an MCP server locally
Install an MCP server locally with MCP Apps approval UI
List all installed MCP servers
List all installed MCP servers with MCP Apps UI rendering
Publish an MCP server to the PHAROS registry
Output schemas not documented. No tool returns a documented structure, LLMs cannot plan downstream calls or extract required fields (e.g., server_id for chaining install after search).
Destructive tools (pharos_remove, pharos_remove_apps) lack confirmation/dry-run pattern. No error guidance on recovery. Agents can delete servers without approval.
Generic 'filters' parameter (type: object) in search tools has no schema or structure guidance. LLMs cannot determine valid filter keys, types, or constraints.
Inferred effective spec: 2026-07-28+.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 49 | 2026-07-28+ | v2 |
Publish an MCP server to the PHAROS registry with MCP Apps approval UI
Remove an installed MCP server
Remove an installed MCP server with MCP Apps approval UI
Search for MCP servers in the PHAROS registry
Search for MCP servers with MCP Apps UI rendering
Tool annotations missing. Despite clear risk classifications (READ_ONLY, WRITE, DESTRUCTIVE), no readOnlyHint, destructiveHint, or idempotentHint metadata present in tool definitions.
A/B tool naming (pharos_search vs pharos_search_apps) creates ambiguity. LLMs must reason about which variant to call; no clear guidance on when to use CLI vs Apps mode.