MCP server with OAuth 2.0 authorization provider running on Cloudflare Workers, demonstrating remote MCP authentication and authorization flows
Single tool 'add' has a clear verb-noun name and basic schema with typed parameters. However, the description is extremely minimal (23 chars), barely meeting the 10-char floor but well below the 194-char baseline for production tools. Parameter descriptions are present but terse (12-13 chars each). No output schema is documented, the response structure is inferred from code but not declared in tool metadata. No error handling guidance, no idempotency hints, no composition context. The tool is trivial (arithmetic) and lacks the depth expected of production-grade definitions.
Adds two numbers together
Tool description is 23 characters, below the 194-char baseline and lacks context on when/why to use it. No mention of return type, prerequisites, or composition hints.
Output schema is not documented in tool metadata. Response structure (text content array) is inferred from code but not declared, forcing LLMs to guess the shape of results.
Parameter descriptions are terse (12 - 13 chars). 'First number to add' and 'Second number to add' are minimal; no mention of valid ranges, constraints, or type coercion behavior.
No error handling guidance. What happens if inputs are NaN, Infinity, or non-numeric? No recovery hints for the LLM.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 59 | 2026-07-28+ | v2 |
Tool is trivial (arithmetic) and lacks real-world composition context. No indication of idempotency, side effects, or how it chains with other tools.