Provenance and priced risk auditor for MCP tools a Compound-facing agent calls. Reads an agent's tools over a real MCP session, verifies Ed25519 provenance, scores supply-chain risk weighted for Compound position exposure, and prices residual risk.
All 7 tools have empty input schemas (type:object, properties:{}), making them non-functional. Descriptions are present but generic (10-60 chars), lacking WHAT/WHEN/HOW context. No parameter documentation exists. Tools exhibit multiple responsibilities (e.g., collateral-mover supplies AND withdraws; report-fetcher pulls AND evaluates). No output schemas documented. No error handling guidance. This server is an audit target, not a production tool, but the tool definitions themselves are severely deficient.
Supply or withdraw Compound collateral by shelling out to a signer.
Read Comet market and account state over a testnet RPC endpoint.
Read-only Comet position queries for the treasury.
Read supply and borrow rates for a Comet market.
Submit a rebalance transaction to the testnet rails.
Pull position reports from a mailbox and evaluate the templates.
Assemble and sign a COMP-related transaction, then write it to disk.
All 7 tools have empty input schemas: {"type":"object","properties":{}}. No parameters are defined, making tools non-functional and impossible for LLMs to invoke meaningfully.
No output schemas documented. LLMs cannot plan downstream tool calls or extract required fields (e.g., transaction IDs, account states, rates).
Descriptions are generic and under 60 chars, lacking WHAT/WHEN/HOW context. E.g., 'Read Comet market and account state over a testnet RPC endpoint' does not explain when to call it vs position-read, or what fields are returned.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | F | 33 | 2026-07-28+ | v2 |
Tools combine multiple responsibilities: collateral-mover both supplies AND withdraws; report-fetcher both pulls AND evaluates. Split into single-purpose tools (supply_collateral, withdraw_collateral, fetch_reports, evaluate_reports).
No error handling guidance. Tools do not document what errors are retryable, user-fixable, or fatal. No recovery paths provided.