Loading ToolBench
MCP server that provides access to Nextcloud instance features including WebDAV file storage, CalDAV calendars, Deck Kanban boards, and user management via OCS API. Includes human-in-the-loop (HITL) protection for destructive operations.
Server has 16 well-named tools with consistent verb_noun patterns (execute_, list_, create_, update_, delete_, read_, write_, get_). All tools have descriptions (avg ~80 chars, within baseline 34-392). Input schemas are present and typed (string, number). However, descriptions are terse and lack actionable context for LLM selection. Parameter descriptions are minimal, many lack format/constraint guidance. Output schemas are undocumented. Error handling is not visible in the provided code. HITL protection is mentioned but not formalized in tool annotations. No tool annotations (readOnlyHint, destructiveHint, idempotentHint) despite clear risk classifications.
Create a new event in Nextcloud CalDAV calendar using iCalendar (.ics).
Create a new Kanban card in Nextcloud Deck.
Create a new folder in Nextcloud storage. (HITL protected)
Delete an event from a Nextcloud CalDAV calendar.
Delete a Kanban card in Nextcloud Deck.
Delete a file or folder from Nextcloud storage. (HITL protected)
Output schemas are not documented. LLMs cannot infer what fields each tool returns, forcing them to guess downstream field names and breaking tool chaining.
Tool annotations (readOnlyHint, destructiveHint, idempotentHint) are missing despite clear risk classifications (READ_ONLY, WRITE, DESTRUCTIVE). Agents cannot distinguish safe from dangerous operations without explicit hints.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 66 | 2026-07-28+ | v2 |
Execute a destructive action that was previously blocked by HITL.
Retrieve user storage quota, display name, and details via Nextcloud OCS API.
List events from a Nextcloud CalDAV calendar.
List all Nextcloud Deck Kanban boards available to the user.
List all stacks (columns) in a Nextcloud Deck board.
List files and folders in a Nextcloud directory via WebDAV PROPFIND.
Check Nextcloud instance health, version, status.php and WebDAV availability.
Read textual content of a file from Nextcloud storage.
Update an existing Kanban card in Nextcloud Deck (e.g. to move it to another stack/column).
Create or overwrite a file in Nextcloud storage. (HITL protected)
Parameter descriptions lack format/constraint guidance. E.g., 'path' parameter has no guidance on leading slashes, special characters, or max length. 'limit' has no min/max bounds stated in description (only in code comment).
Tool descriptions are terse (avg ~60 chars) and lack actionable context. E.g., 'Check Nextcloud instance health' does not explain WHEN to call it or what to do with the result. Descriptions should be 50-200 chars with clear intent.
Error handling strategy is not visible in provided code. No evidence of recovery guidance, error categorization (retryable vs fatal), or actionable error messages. Agents need clear guidance on what to do when a tool fails.