Local MCP server that compresses file reads, command outputs and web content before they enter the agent context — with an honest BPE token counter and a safety verifier.
tokendiet-mcp provides 4 tools with clear, action-oriented names (read, run, search, fetch) and reasonable descriptions (100-150 chars each). All tools have input schemas with typed parameters and enums where appropriate. However, output schemas are not documented in the visible code, parameter descriptions lack depth (e.g., 'mode' enum values not explained), and error handling guidance is absent. The 'run' tool poses security risks (IRREVERSIBLE, shell execution) with no dry-run or confirmation pattern. Tool composition is sound (each does one thing), but descriptions could better explain WHEN to use each tool vs. alternatives.
Fetches and compresses web content from URLs
Reads and compresses file content with optional outline/symbol extraction modes
Executes shell commands and compresses output
Searches files by regex/glob pattern and compresses results
Output schemas not documented. LLMs cannot plan downstream calls or extract fields without knowing what each tool returns.
'run' tool executes arbitrary shell commands (IRREVERSIBLE) with no dry-run, confirmation, or permission gate. Agents can cause data loss or system damage.
Parameter descriptions lack actionable detail. 'mode' enum values (auto, full, outline, symbol) are not explained, LLMs must guess when to use each.
No error handling guidance. Tools do not document what errors are retryable, user-fixable, or fatal, or how to recover.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 49 | 2026-07-28+ | v2 |
Tool descriptions do not explain WHEN to use each tool vs. alternatives. 'read' vs 'search' distinction unclear; 'fetch' vs 'read' for remote content unclear.