Loading ToolBench
Create-only filesystem MCP server for ChatGPT, Codex, and other MCP clients.
PC FileBridge demonstrates solid definition quality with clear, action-oriented tool names (list_, create_, read_, search_, stat_) and comprehensive parameter schemas. All 7 tools have descriptions (avg 118 chars) and input schemas with type definitions. Parameters include regex patterns, length constraints, and byte limits. However, output schemas are not documented in the visible code, and error handling guidance is minimal. Tool descriptions are functional but lack dependency hints and recovery guidance. The server correctly implements create-only semantics with idempotent operations (exclusive create mode), which is a strong security pattern.
Create exactly one new directory below an allowed root. The parent must exist. Existing paths are never replaced or reused.
Create one new UTF-8 text file using OS-level exclusive create mode. If the target exists, the call fails without changing it.
List entries inside an allowed root using a relative path. Sensitive names and links are omitted server-side.
List the configured filesystem roots and whether each permits bounded reads and create-only writes.
Read a bounded UTF-8 prefix from one allowed file. Known credential patterns are redacted and binary files are rejected.
Recursively search names, not file contents, below an allowed relative path. Results and traversal are strictly bounded.
Output schemas not documented. LLMs cannot plan downstream tool calls or extract required fields (e.g., file metadata, directory listings) without knowing response structure.
Error handling lacks recovery guidance. Descriptions do not explain what to do if a path is invalid, a file is binary, or credentials are detected. LLMs receive no actionable next steps.
Tool descriptions lack dependency hints. E.g., read_text_file does not mention 'Call list_directory first to discover available files' or 'Call stat_path to check file size before reading'.
Inferred effective spec: 2025-06-18+.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 64 | 2025-06-18+ | v2 |
Read bounded metadata for one existing relative path without opening file content.
search_file_names description does not specify result limit or pagination behavior. LLMs cannot predict whether results will be truncated or how to handle large result sets.
read_text_file description mentions 'known credential patterns are redacted' but does not explain which patterns are detected or what the redacted output looks like. LLMs cannot reason about partial/masked responses.