Local MCP server that proxies any Claude Messages API-compatible upstream as a unified MCP tool.
Single tool 'ask_model' has a clear verb-noun name and reasonable description (127 chars, within 10-1024 range). Input schema is well-defined with Zod validation covering all parameters: prompt (required, min 1 char), system (optional string), model (optional string with min 1 char), maxTokens (optional number, 1-65536, default 1024). However, output schema is not documented, the tool returns a JSON-stringified object with model, stop_reason, usage, and text fields, but this structure is not declared in the tool definition. Parameter descriptions are present but minimal (e.g., 'Optional model identifier' lacks guidance on format or valid values). No error handling guidance for LLMs (timeouts, API failures, malformed responses). Tool is read-only and idempotent, but these properties are not annotated.
Call a model via the local MCP server. Sends a prompt to an upstream service compatible with the Claude Messages API and returns the text response.
Output schema not documented. Tool returns a structured object (model, stop_reason, usage, text) but this is not declared in the tool definition. LLMs cannot plan downstream calls or extract fields reliably.
Parameter descriptions lack actionable constraints. 'Optional model identifier' does not explain valid format, fallback behavior, or relationship to CLAUDE_MCP_MODEL env var. 'Maximum tokens in response' omits why the 65536 ceiling exists.
No error recovery guidance. Tool throws errors for timeouts, malformed responses, and upstream failures, but does not guide LLMs on retry strategy, fallback models, or user-fixable issues.
Tool is read-only and idempotent but lacks annotations. MCP supports readOnlyHint and idempotentHint to signal these properties to clients, enabling optimizations and safety guarantees.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 56 | 2026-07-28+ | v2 |
API key and base URL exposed via environment variables without validation or rotation guidance. No mention of secret injection best practices or audit logging.