Loading ToolBench
FastMCP server implementation that provides Qlik Cloud functionality through MCP (Model Context Protocol) tools. Allows MCP clients to build and unbuild Qlik applications, discover and list applications, search through app catalogs, manage spaces, handle authentication contexts for multi-tenant environments, and perform app lifecycle operations like export, import, copy, and publish.
Server has 15 tools with reasonable naming (verb_noun pattern) and descriptions present for all tools. However, critical gaps exist: input schemas are not visible in the provided source code (only parameter names and descriptions are shown in the tool list, not actual JSON Schema definitions). Parameter descriptions lack specificity on constraints, ranges, and formats. No output schemas documented. Error handling guidance is absent. Security concerns: qlik_context_create accepts API keys as parameters (pattern:secret-injection violation). Tool descriptions are verbose (200+ chars) but lack actionable constraints. No evidence of idempotency hints, confirmation patterns for destructive ops, or recovery guidance.
Execute qlik app build command to construct Qlik applications from source files. Builds a Qlik application from source files including connections, scripts, dimensions, measures, objects, variables, bookmarks, and app properties with optional data loading and reload control.
Copy Qlik application to create a duplicate with optional data inclusion and permission copying. Creates a copy of an existing Qlik application with a new name, optionally in a different space, with options to include or exclude data and copy permissions.
Export Qlik application to local file for backup, migration, or version control. This tool exports a Qlik application to various formats (QVF, JSON, XLSX) for backup, migration between environments, or version control purposes. It supports exporting with or without data and provides progress feedback for large exports. The exported files can be used for app lifecycle management, DevOps workflows, and collaboration between teams.
Get detailed information about a specific Qlik application. Retrieves comprehensive details about a specific Qlik application including metadata, ownership, space information, and technical properties.
API key exposed as tool parameter in qlik_context_create. Credentials must use server-side secret injection via environment variables or vault, not tool parameters. Agent traces log all parameters, secrets leak into logs and prompt history.
Input schemas not visible in source code. Only parameter names and descriptions provided in tool list; actual JSON Schema definitions with type constraints, enums, and ranges not shown. Cannot verify schema completeness or validation rules.
No output schemas documented. LLMs cannot plan downstream tool calls or extract required fields without knowing response structure. Missing documented return types for all tools.
Destructive operations (qlik_app_export, qlik_app_import, qlik_app_copy, qlik_app_publish, qlik_app_build, qlik_app_unbuild) lack confirmation or dry-run patterns. Agents can accidentally overwrite or delete apps without safeguards.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 49 | <=2025-11-25 | v2 |
Import Qlik application from local file to create new app in tenant. Imports a Qlik application from a local file (QVF format) to create a new application in the Qlik Cloud tenant. Supports optional app naming, space targeting, and validation before import.
List available Qlik applications with filtering options. Lists all available Qlik applications in the tenant with optional filtering by space, collection, or owner, and pagination support.
Publish Qlik application from development space to managed space for production use. Publishes a Qlik application from a development or personal space to a managed space for production deployment, with optional name customization and replacement of existing published versions.
Search for Qlik applications by name, description, or tags. Searches for Qlik applications using a query string that matches against app names, descriptions, and tags, with optional filtering by space or owner.
Execute qlik app unbuild command to decompose Qlik applications into source files. Unbuilds a Qlik application into separate source files (connections, script, objects, etc.) for version control and collaborative development.
Create a new Qlik context with API key authentication. Creates a new authentication context for connecting to a Qlik Cloud tenant using API key credentials, enabling multi-tenant support.
Get information about the current active Qlik context. Retrieves details about the currently active authentication context.
List all available Qlik contexts. Lists all configured Qlik authentication contexts and identifies the currently active context.
Remove a Qlik context. Removes an authentication context from the configuration, preventing its use for future operations.
Switch to a specific Qlik context. Activates a specific authentication context for subsequent Qlik operations in multi-tenant environments.
List available Qlik spaces with optional type filtering. Lists all available Qlik spaces in the tenant with optional filtering by space type (personal, shared, or managed).
Parameter descriptions lack actionable constraints. E.g., 'format' in qlik_app_export lists options but no enum constraint visible; 'limit' in qlik_app_list has no min/max bounds; 'app_identifier' accepts ID or name but no guidance on resolution order.