NetPilot-MCP has 7 tools with complete input schemas and descriptions in Chinese. However, critical gaps limit production readiness: (1) Output schemas are undocumented, tools return JSON strings but no schema is declared for what fields agents should expect; (2) Error handling lacks recovery guidance, errors are returned as JSON but do not tell the LLM what to do next or categorize errors as retryable vs fatal; (3) Parameter descriptions are present but lack constraints (enums, ranges, patterns), e.g., 'device_type' accepts 'cisco_ios/huawei_vrp/h3c_comware/ruijie_rgos/auto' but this is buried in description text, not an enum; (4) device_configure is marked IRREVERSIBLE but has no confirmation/dry-run pattern; (5) Credentials are passed as parameters (username, password, enable_password) rather than injected server-side, violating secret-injection pattern. Tool naming is clear (verb_noun style: device_connect, device_execute, device_get_info) and descriptions are adequate (50-150 chars), but lack LLM-optimized guidance on when to use each tool vs alternatives.

• Document output schemas for all tools. E.g., device_connect returns {success: bool, session_id: string, device_mode: string, device_type: string, hostname: string, protocol: string, message: string, security_notice?: string}. Include this in tool docstrings or a separate schema registry.
• Move credentials to server-side injection: read username, password, enable_password from environment variables or a secure vault. Remove them from tool parameters. Update device_connect to accept only host, port, protocol, device_type, timeout.
• Enhance error responses with actionable guidance. E.g., 'Connection failed: Host unreachable. Verify host is online and port 22 is open. Retry with a different port if needed.' Categorize errors: {error_type: 'retryable'|'user_fixable'|'fatal', message: '...', suggestion: '...'}.
• Convert parameter constraints to JSON Schema enums/patterns. E.g., device_type: {type: 'string', enum: ['cisco_ios', 'huawei_vrp', 'h3c_comware', 'ruijie_rgos', 'auto']}. Add min/max for numeric params (timeout: {type: 'integer', minimum: 1000, maximum: 60000}).
• Add dry-run support to device_configure: accept a 'dry_run: bool' parameter. When true, return the commands that would be executed without applying them. Require explicit confirmation before irreversible changes.

Inferred effective spec: <=2025-11-25.

• Relies on Logging (deprecated) - log to stderr or use OpenTelemetry