mcp tool schema audit derived

{
  "input": {
    "body": {
      "toolset": {
        "tools": [
          {
            "name": "search",
            "inputSchema": {
              "type": "object",
              "properties": {
                "q": {}
              }
            }
          },
          {
            "name": "purgeEverything",
            "description": "Remove all records.",
            "inputSchema": {
              "type": "object",
              "required": [
                "confirm",
                "scope"
              ],
              "properties": {
                "confirm": {
                  "type": "boolean"
                }
              }
            }
          },
          {
            "name": "read_file",
            "annotations": {
              "readOnlyHint": true,
              "destructiveHint": true
            },
            "description": "Read a file from disk and return its contents as text.",
            "inputSchema": {
              "type": "array"
            }
          }
        ]
      }
    },
    "type": "http",
    "method": "POST",
    "bodyType": "json"
  },
  "output": {
    "type": "json",
    "example": {
      "valid": false,
      "limits": {
        "maxCalls": 1000,
        "maxTools": 400,
        "maxServers": 20,
        "maxFindings": 500,
        "confusableOverlap": 0.6
      },
      "passed": false,
      "complete": true,
      "findings": [
        {
          "code": "ARGUMENT_TYPE_MISSING",
          "tool": "search",
          "detail": "search: argument q declares no type or enum, so an agent cannot tell what to send.",
          "argument": "q"
        },
        {
          "code": "ARGUMENT_UNDESCRIBED",
          "tool": "search",
          "detail": "search: argument q has no description, which is what an agent reads to fill it.",
          "argument": "q"
        },
        {
          "code": "TOOL_UNDESCRIBED",
          "tool": "search",
          "detail": "search has no description, which is the main thing an agent uses to choose it."
        }
      ],
      "request_id": "example-request",
      "service_id": "mcp_tool_schema_audit",
      "assumptions": [
        "An agent chooses and fills a tool from its name, description and argument schemas, so a missing description is a functional defect rather than a documentation preference.",
        "Mutation hints are reported as absent when a name or description reads as state-changing. That is a statement about the manifest, not a judgement that the tool is dangerous.",
        "A naming convention is only asserted when most tools follow one; otherwise outliers are not reported."
      ],
      "limitations": [
        "Structural and declarative audit of the manifest supplied. No tool is called and no server is contacted, so whether a tool behaves as described is not assessed.",
        "valid is true only when the whole toolset was read and nothing an agent needs was missing."
      ],
      "observed_at": "2026-10-02T00:00:00.000Z",
      "not_examined": [],
      "finding_count": 8,
      "naming_counts": {
        "other": 1,
        "dotted": 0,
        "camelCase": 1,
        "kebab-case": 0,
        "snake_case": 1
      },
      "read_tool_count": 3,
      "service_version": "1.0.0",
      "findings_by_code": {
        "TOOL_UNDESCRIBED": 1,
        "CONTRADICTORY_HINTS": 1,
        "ARGUMENT_UNDESCRIBED": 2,
        "ARGUMENT_TYPE_MISSING": 1,
        "MUTATION_HINTS_ABSENT": 1,
        "INPUT_SCHEMA_NOT_OBJECT": 1,
        "REQUIRED_ARGUMENT_NOT_DECLARED": 1
      },
      "naming_convention": null,
      "supplied_tool_count": 3,
      "tools_without_description": 1,
      "tools_without_output_schema": 3
    }
  }
}