Skip to main content
Glama

Api Ninjas

by io.github.pipeworx-io

Scan Dependency

scan_dependency
Read-onlyIdempotent

Composite "should I add this npm package to my project" check in ONE call — fans out across deps.dev (license + advisories + version history) and bundlephobia (gzipped/minified bundle size, dependency count, ESM/tree-shake support). Use whenever an agent asks "is X safe / popular / small" or "what does adding lodash cost me". Returns a summary block (is_latest, license, published_at, advisory_count, bundle_kb_min, bundle_kb_gz, dependency_count, has_esm, tree_shakeable), per-advisory detail, links, and a list of recent alternative versions. NPM ecosystem only in v1; PyPI / Maven / Cargo / Go fall under deps.dev:version directly. Partial failures degrade gracefully — bundlephobia's first measurement on a new version can take 5-30s; sources_failed will list it if it times out, the rest still returns.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
packageYesnpm package name. Scoped packages (e.g. "@types/node") are accepted.
versionNoSpecific version to check (e.g., "18.3.1"). Defaults to the latest published version when omitted.

Schema Changelog

Changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. First observed

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark it as read-only, idempotent, and non-destructive. The description adds significant behavioral context: fans out to multiple services, partial failures degrade gracefully, bundlephobia timing, and sources_failed listing. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single well-structured paragraph. Every sentence adds essential information—purpose, scope, usage, return details, error behavior—with no wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, but the description thoroughly covers return values: summary block fields, per-advisory details, links, alternatives. Also addresses error handling and partial failures. Complete for a composite analysis tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, but the description adds meaningful context beyond the schema: scoped packages accepted, version defaults to latest. Adds value without redundancy.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it's a composite check for npm packages covering license, advisories, version history, and bundle size. It uses specific verbs like 'scan' and 'check' and distinguishes from siblings by explicitly noting NPM ecosystem only.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use: when agent asks 'is X safe/popular/small' or 'what does adding lodash cost me'. Also clarifies NPM only and that other ecosystems use deps.dev directly.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All Api Ninjas toolsInspect
Try in Browser
RayrunBuild, deploy, and operate MCP servers without becoming an infrastructure team.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

TDQS

A4.1/5.0
Disambiguation3/5

Most tools have distinct roles, but there is meaningful overlap among the question-answering family (ask_pipeworx, ask_pipeworx_beta, ask_pipeworx_grounded, deep_research) and among the Polymarket analysis tools (bet_research, polymarket_arbitrage, polymarket_edges, polymarket_fill_risk). The long descriptions help separate them, but the boundaries are still subtle enough that an agent could easily pick the wrong variant.

Naming Consistency4/5

The naming is mostly snake_case and generally follows a verb_noun pattern (ask_pipeworx, compare_entities, resolve_entity, scan_dependency, validate_claim). Deviations like entity_profile, recent_alerts, recent_changes, and bare verbs (forget, recall, remember, subscribe, unsubscribe) are minor and do not seriously harm predictability.

Tool Count3/5

31 tools is heavy for a single server and suggests the surface is a bundled platform (data queries, prediction markets, memory, subscriptions, AI-visibility checks) rather than one tightly scoped domain. Each tool has a rational purpose, but the sheer count plus several meta/didactic tools makes the set feel somewhat oversized.

Completeness4/5

Core workflows are well covered: entity resolution, profiles, comparisons, grounded lookup, fact-checking, deep research, memory CRUD, and subscription lifecycle. Gaps are minor. There are no update operations for subscriptions, and some optional data sources degrade softly, but agents can accomplish the intended research, monitoring, and memory tasks without dead ends.

Resources