Server has 9 tools with explicit schemas and descriptions in Chinese. Naming follows verb_noun pattern (send_email, read_emails, search_emails, delete_email, reply_email, list_folders, find_email_folder, get_correspondence, web_login). However, descriptions are minimal (10-80 chars, well below the 194-char baseline), parameter descriptions lack depth, output schemas are undocumented, and error handling is absent. No tool annotations (readOnlyHint/destructiveHint). Schemas are present but sparse, many parameters lack type constraints, enums, or validation guidance. The web_login tool exposes authentication flow as a tool parameter (smsCode), which is a security concern. Overall structure is functional but falls short of production quality.
永久删除指定邮件(直接删除,不是移入回收站)
搜索邮件并显示其所在的文件夹
获取与指定邮箱地址的所有往来邮件(收发双向)
列出邮箱中所有文件夹及其邮件数量
读取收件箱或指定文件夹的邮件
回复邮件
全文搜索邮件(支持发件人、收件人、主题、正文、附件名)
Output schemas completely undocumented. No tool returns a documented schema, LLMs cannot predict response structure, forcing them to guess field names and types for downstream tool chaining.
Descriptions are minimal (10 - 80 chars, avg ~35 chars vs. 194-char baseline). 'read_emails' = '读取收件箱或指定文件夹的邮件' (22 chars) lacks context on when to use it vs. search_emails, what fields are returned, or pagination behavior.
Parameter descriptions are sparse or missing. 'folder' param in read_emails has description '文件夹名称(默认 INBOX)' but no guidance on valid folder names, whether custom folders are supported, or how to discover available folders.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 47 | 2026-07-28+ | v2 |
发送邮件
发起网易 Web 登录;如需短信验证,收到验证码后再次调用并传入 smsCode
No error handling or recovery guidance. Tools do not document what errors can occur, whether they are retryable, or what the LLM should do next. E.g., delete_email offers no guidance if messageId is invalid or folder does not exist.
web_login exposes SMS verification code as a tool parameter (smsCode). This couples authentication state to tool invocation and risks logging credentials in agent traces. Should use server-side session management instead.