A Spring Boot-based MCP server demonstrating tool registration and SSH credential management
Single tool with minimal definition quality. Tool name 'getSshCredentialByIp' uses camelCase (Java convention) rather than snake_case verb_noun pattern expected by LLMs. Description is only 23 characters ('Get SSH credential by IP'), below the 50-200 char baseline for LLM-optimized descriptions. Input schema present but parameter description is minimal (7 chars: 'IPv4 address'). No output schema documented. No error handling guidance. Tool returns hardcoded credentials, raising security concerns. Overall definition lacks the depth needed for reliable agent selection and execution.
Get SSH credential by IP
Tool name uses camelCase instead of snake_case verb_noun pattern. LLMs expect 'get_ssh_credential_by_ip' to parse intent from the name alone. camelCase is Java convention but breaks agent tool discovery heuristics.
Tool description is only 23 characters ('Get SSH credential by IP'), well below the 50-200 char baseline. Missing context on WHEN to use this tool, WHAT it returns, and any prerequisites. LLMs cannot reliably select this tool without richer description.
No output schema documented. Tool returns SshCredential record with fields (ip, user, password, port) but LLMs have no visibility into this structure. Agents cannot plan downstream tool calls or extract the right data without documented return types.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 39 | 2026-07-28+ | v2 |
Hardcoded credentials returned ('admin'/'admin'). Tool always returns the same password regardless of IP, indicating either a mock implementation or a critical security flaw. Production tools must never return plaintext passwords; use secret injection patterns instead.
Parameter description 'IPv4 address' is only 12 characters and lacks format constraints. No mention of valid CIDR ranges, private vs public IPs, or what happens if the IP is not found. LLMs will pass invalid IPs without guidance on correction.