Tap
The Tap server is a browser automation platform that lets you run pre-built web automations (taps), forge new ones with AI, interact with web pages, and monitor changes — all through an MCP-compatible interface.
Run & Manage Taps
tap_list— List available taps (start here)tap_run— Execute pre-built taps deterministically at zero AI runtime costtap_watch— Monitor a tap for changes over time (price tracking, new listings, etc.)tap_doctor— Health-check taps, get root-cause diagnostics, and auto-heal broken onestap_logs— View execution historytap_reload— Push updated taps to connected runtimes without restarting
Forge New Automations
forge_inspect— Analyze a page to detect frameworks, APIs, and generate extraction strategiesforge_verify— Test extraction logic live before savingforge_save— Compile and save a.tap.jsprogram to disk; runs forever at $0 after saving
Browser Interaction
tap_nav— Navigate to a URLtap_click— Click elements by text or CSS selectortap_type— Type into inputs (supports standard, contentEditable, CodeMirror, Draft.js, ProseMirror)tap_eval— Execute arbitrary JavaScripttap_find— Find elements by visible text; returns position, selector, bounding boxtap_pressKey— Simulate key presses with optional modifierstap_upload— Upload files to file inputstap_screenshot— Capture the page as JPEG or PNGtap_cookies— Retrieve cookies for the current sitetap_wait— Pause execution for a specified duration
Page Inspection
inspect_page— Get URL, title, and meta tagsinspect_dom— Get DOM structure (optionally scoped to a selector)inspect_a11y— Get the accessibility treeinspect_element— Inspect a specific element by selectorinspect_networkStart/inspect_networkDump— Capture and dump network requests/responses including API bodiesinspect_download— Download and parse content from a URL
Tab & Network Management
tab_list— List all open browser tabsintercept_on/intercept_off— Enable or disable request interception with URL patterns
Allows searching and retrieving metadata for scientific papers from arXiv.
Enables retrieval of trending topics and hot searches from Baidu.
Allows interaction with Bilibili to access trending videos, search content, and retrieve video details and comments.
Provides access to trending content and posts on the Bluesky social network.
Enables fetching of top stories and popular technical posts from the dev.to community.
Allows access to trending content and hot topics on Douban.
Provides tools to track trending repositories and interact with GitHub content.
Enables access to trending search data via Google Trends.
Allows retrieval of popular and trending technical articles from Juejin.
Provides tools to browse hot stories and community discussions on Lobste.rs.
Enables searching for articles and fetching trending stories from Medium.
Allows access to ranking data and popular illustrations on Pixiv.
Provides tools to discover hot products and trending launches on Product Hunt.
Enables retrieval of information about top and popular Python packages on PyPI.
Allows searching content, fetching hot posts, and submitting comments on Reddit.
Provides access to hot and trending questions within the Stack Overflow community.
Enables tracking of top-selling games and trending content on the Steam store.
Allows for the programmatic publishing of articles via Telegra.ph.
Provides tools to browse hot topics and community discussions on the V2EX platform.
Enables searching for articles and accessing detailed content from the WeChat platform.
Allows retrieval of most-read articles and trending content from Wikipedia.
Provides comprehensive tools to browse hot notes, search content, view post details, and publish new notes.
Enables access to trending videos and content on YouTube.
Allows for searching, fetching hot topics, and viewing detailed question and comment data on Zhihu.
Your agent's closed-loop action layer for the browser — the login-gated, exception-heavy, compliance-critical last 20% that clean APIs and cloud agents can't reach. Driven in your own Chrome, captured once, replayed forever at zero LLM tokens.
As APIs get walled off and metered, the work that survives lives behind logins, OTP walls, and human-gesture gates — the exceptions, approvals, and compliance steps a cloud agent architecturally can't touch. Taprun is the action layer for exactly that: your agent drives your real, already-logged-in Chrome, closes the loop (act → verify the effect → re-run on drift), and hands you a deterministic replay you own.
Every other browser agent re-runs a live LLM — and re-burns tokens — on every execution. Taprun's AI agent inspects the page once and emits a deterministic .flow.json program; every replay after that is pure data dispatch — same result every call, $0 in tokens, no agent in the loop. It runs in your real Chrome, so cookies and login sessions stay on your machine by architecture. tap verify catches breakage before your data goes stale.
Works with Claude Code, CodeBuddy, Cursor, Cline, Windsurf, and any MCP host — install straight from the chat window. Forge a tap from any URL on demand — no catalog needed.
Capture: AI inspects the site → compiles a .flow.json program (one-time cost)
Run: The program executes instantly, same result every time ($0, zero AI)
Verify: tap verify checks the snapshot equivalence predicate (catches drift)
Repair: re-run capture against the same site/name; the next (only when needed)
verify rebaselines after human reviewHow Taprun Compares
Taprun | AI Browser Agents | Traditional Scrapers | |
AI cost per run | $0 (compile once) | Tokens every run | Free |
Accuracy | Deterministic | Varies per run | Deterministic |
Silent failure detection | Per-tap CEL | None | None |
Breakage diagnostics |
| None | Manual spot checks |
Detection risk | Low (real browser sessions) | High | High |
Runtimes | 2 (Chrome extension + Playwright) | 1 | 1 |
Code inspectable | .flow.json — bare JSON, 18-op closed vocabulary, git diff | Black box / ephemeral | Fragile scripts |
MCP native | Yes (authoring layer only — execution is zero tokens) | No | No |
Related MCP server: Puppeteer MCP Server
Get Started
1. Attach to your agent — from the chat window
Claude Code / CodeBuddy — paste two lines into the chat, nothing else:
/plugin marketplace add LeonTing1010/taprun
/plugin install tap@taprunThat installs the Taprun MCP server plus the skills that teach your agent when to use it and the hook that routes walled fetches to Taprun — no terminal, no config file. (CodeBuddy wires plugin MCP servers at startup only, so fully restart it once after installing; Claude Code picks them up with /reload-plugins.)
Any other MCP host (Cursor · VS Code · Claude Desktop) — one command writes the config for you:
npx -y @taprun/cli embed cursor # or: vscode | claude-desktop | claude-code | codebuddy | qwenThe binary self-copies to ~/.tap/bin and your agent's MCP config is written. Re-check anytime with tap embed --verify.
Using a coding agent that isn't in that list?
tap embedtargets are data, not code: drop a row into~/.tap/embed-targets.jsonand the new agent works immediately — no engine release. Each row names one of four install kinds (cc-pluginfor Claude-Code-plugin hosts,cli-mcp-addfor CLIs with a<cli> mcp add,ide-deeplink,desktop-bundle), e.g.[{"id":"kode","kind":"cc-plugin","display":"Kode CLI","tier":1,"cli":"kode"}]. Same doctrine as the rest of Taprun — the engine stays closed and mechanical; you extend it in local data.
Now pick your runtime — the extension is only needed to reuse your live logged-in Chrome:
Public pages / open APIs / CI — nothing more to install. The MCP server runs over
npx; you're done. Append--no-extensionfor a fully in-chat Playwright runtime with its own isolated profile (no browser gesture, no click).Logged-in sites (your bank / internal dashboard / Xiaohongshu / Zhihu) — just tell your agent "set up tap for logged-in sites" right in the chat. The tap-setup skill drives the whole bridge from the chat: it materializes the stable binary (from the engine
npxalready downloaded — no second download) and registers the native-messaging manifest, then opens the extension page. The single Add to Chrome click is the only step that isn't a chat action — it is the trust gate that lets Taprun reuse your existing login, and the in-flight call resumes automatically once it lands.Claude Desktop: download
tap.mcpband double-click.
brew install LeonTing1010/tap/taprun # Homebrew (macOS / Linux)
curl -fsSL https://taprun.dev/install.sh | sh # permanent binary
npx -y @taprun/cli --version # zero-install (any Node host)Manual MCP config, if you'd rather write it yourself:
{ "mcpServers": { "tap": { "command": "npx", "args": ["-y", "@taprun/cli", "mcp", "stdio"] } } }Platform | Download |
macOS (Apple Silicon) | |
macOS (Intel) | |
Linux | |
Windows |
2. Prove it works (~2 minutes, no login)
Run the first entry of the claims ledger — the exact verification its nightly CI runs:
mkdir -p ~/.tap/flows/github
curl -fsSL https://raw.githubusercontent.com/LeonTing1010/tap-skills/main/claims/2026-07-11-github-trending-has-no-api/plan.json \
-o ~/.tap/flows/github/trending-no-api.flow.json
tap github/trending-no-api"state": "committed" plus today's trending repos at zero tokens = your install works and the claim holds.
3. Forge your own
tap capture https://news.ycombinator.com hn/front --intent "front-page stories with points"
tap hn/front # replay forever, $0Or just ask your AI agent:
You: What's trending on GitHub today?
Agent: Here are today's top repos — React compiler hit 734 stars...
You: Capture a tap for Douban top 250 movies
Agent: Done. Run `tap douban/top250` anytime — $0 per run.Optional: Drive the binary from your own code (TypeScript / Python)
Skip MCP — call the tap binary from your own loop:
tap capture <url> hackernews/top --intent "front-page top stories"
tap hackernews/top --args '{}' # JSON-on-stdout, exit 0 on success
tap verify hackernews/top # 3-arm verdict (live / drifted / unreachable)The CLI emits ToolResult<T> envelopes as JSON — same shape the MCP surface returns — so any language with a subprocess library can drive it. See tap --help for the full verb list.
Have an existing Playwright / Puppeteer / Stagehand script?
Don't rewrite. Convert with one of the open-source adapters — drop your existing source in, get a Taprun-compatible .flow.json plan out:
# Existing Playwright script (47M weekly npm downloads — most likely the one you have)
npm install @taprun/from-playwright @taprun/spec
node -e "import('@taprun/from-playwright').then(m => console.log(m.playwrightToTap(require('fs').readFileSync('tests/login.spec.ts','utf8'), {site:'example', name:'login'})))"
# Or scaffold a new starter from scratch
npx create-tap-script github/trending https://github.com/trendingAdapter | Source format | Coverage |
| 8 page.* APIs (goto/click/fill/type/press/waitForSelector/waitForTimeout/screenshot) | |
| 7 page.* APIs + page.keyboard.press | |
| Hybrid: deterministic page.* mapped to plan ops; NL | |
(none — scaffolder) | Generates a starter |
The format itself is documented at @taprun/spec — the public protocol surface package: TypeScript types for the v2 Plan (18-op closed union + discriminated read/write Plan union) + JSON Schema 2020-12 with $id resolvable at taprun.dev/spec/plan-v1/schema.json, bidirectionally drift-guarded against the TS types. Third-party tooling (IDE $schema autocomplete, ajv-equivalent validators in Python/Ruby/Go, governance layers, alternative runtimes, MCP hosts with plan-aware permission scoping) builds against this package without depending on the proprietary Taprun engine. Plan-v1 reference: taprun.dev/spec/plan-v1. Source for all five packages: packages/ (see packages/README.md for the workspace overview).
What Can You Do?
Read — Extract data from any website
tap reddit/hot # Reddit front page
tap bilibili/trending # Bilibili trending
tap arxiv/search --keyword "LLM" # arXiv papersWrite — Operate any website
tap xiaohongshu/publish --title "My Note" --images photo.jpg
tap zhihu/publish --title "My Article" --content "..."Watch — Monitor changes
tap verify github/trending # spot drift; schedule via cron / launchdCompose — Chain like Unix pipes
tap github/trending | tap filter --field stars --gt 500 | tap tableForge — Create new automations with AI
tap capture https://news.ycombinator.com hackernews/hot --intent "top stories" # API detected — compiled without AI
tap capture https://example.com mysite/home --intent "..." # BYOK Claude / GPT for the long tailBring your own model — works with Claude, OpenAI, DeepSeek, or any OpenAI-compatible endpoint including local Ollama / LM Studio for fully offline forge:
tap config set ai.baseUrl http://localhost:11434/v1
tap config set ai.key ollama
tap config set ai.model llama3.1
tap capture https://arxiv.org/list/cs.AI/recent arxiv/recent --intent "recent papers" # 0 bytes leave your machineHow It Works
┌─ Chrome extension (your real browser sessions)
You → AI → Taprun ──────┤
capture └─ Playwright (headless, server, CI/CD)You describe what you want (URL × natural-language intent)
AI compiles it into a
.flow.jsonprogram — bare JSON, 18-op closed vocabulary, version-controlledTaprun runs the program on either runtime — forever, at $0
Every successful compilation makes the next one faster. Need a tap for a new site? Your agent forges one on demand with capture — no catalog required.
Verified Claims
tap-skills is no longer a skills catalog — it's a claims ledger: dated, falsifiable claims about the live web, each vendoring its own deterministic plan, re-verified nightly by CI at zero LLM tokens. A claim that drifts flips to 🟡 publicly, the same night.
Verify the first claim yourself (~2 minutes, no login, no browser):
mkdir -p ~/.tap/flows/github
curl -fsSL https://raw.githubusercontent.com/LeonTing1010/tap-skills/main/claims/2026-07-11-github-trending-has-no-api/plan.json \
-o ~/.tap/flows/github/trending-no-api.flow.json
npx -y @taprun/cli github/trending-no-apiYou get the exact verification the nightly CI gets — deterministic replay, same result. The 140-skill v1 catalog is preserved untouched on the v1-archive branch; pre-built catalogs only rot, so plans are forged on demand with capture instead.
tap verify <site>/<name> # Snapshot equivalence — catches silent failures before your data goes stale
tap list # See everything available
tap show <site>/<name> # Print the saved tap's plan as JSONLocal-first by architecture
Zero-token replay is the headline; local-first is the guarantee underneath it. Taprun runs in your browser — the Chrome extension reuses your live login sessions, so cookies, auth tokens, and credentials never leave your machine. A structural choice, not a marketing claim:
Concern | Cloud-first browser SDKs | Taprun (local-first) |
Where do logged-in cookies live? | On the cloud vendor's servers | Only in your local browser |
What does the AI see? | The full session + your data | Only the page DOM during forge time |
Compliance with | Vendor signs ToS for you | Your account, your terms |
Internal / intranet sites | Need VPN tunneling | Just open the page |
Decommission risk | Vendor goes down → your scrapers stop | Local code keeps running |
Layer | Protection |
Sandbox | Programs run with zero permissions — no file, network, or system access |
Static Analysis | CI blocks dangerous patterns before they reach users |
Local-only | Your data, sessions, and API keys never leave your machine — architecturally |
See SECURITY.md for the full threat model.
Contributing
The easiest way to contribute: forge a new tap. One .flow.json file is all it takes.
See CONTRIBUTING.md for details.
Roadmap
Community skills catalog — retired 2026-07 in favor of the claims ledger (v1 catalog archived)
2 runtimes — Chrome extension + Playwright (headless / CI)
Unix pipes —
tap A | tap BWatch mode — monitor changes over time
Verify —
tap verifysnapshot-equivalence check with a 4-arm drift verdict (equivalent / drifted / first_snapshot / unreachable)Single-command MCP server —
tap mcp stdio(ortap mcp http) for any MCP hostAndroid runtime
iOS runtime
Concurrency control — deterministic coordination for M agents operating shared accounts in parallel
Support
GitHub Discussions — Q&A, ideas, show & tell
support@taprun.dev — licensing, private feedback, consulting
Issues — bug reports
Privacy
Taprun is local-first by architecture. It drives your own browser on your own machine — credentials, cookies, and page data never leave it. The engine ships no telemetry and makes no outbound network calls except the ones your own saved taps explicitly direct (op:fetch). Saved taps, secrets, and traces live under ~/.tap/ on your machine only.
Full policy: taprun.dev/privacy.
License
Chrome Extension & docs: MIT. Claims ledger: MIT.
Star History
Available Tools
11 toolsforge_draftAInspect
Load a tap into memory and optionally verify it live. Accepts a structured plan (TapAnnotation — preferred; verify runs it via the plan runtime) or legacy code (.tap.js source). When url is provided, auto-runs verification and returns {score, rows}. Without url, just stashes the draft.
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | URL to verify against. When provided, draft loads + runs live verification in one step. | |
| code | No | Legacy .tap.js source — still supported for rollback; auto-migrated on save. | |
| path | No | Path to .tap.js file. Ignored when plan or code is provided. | |
| plan | No | TapAnnotation envelope — W3C Annotation with body:tap:ExecutionPlan. Preferred over code. | |
| description | No | Short summary of what this verifies (e.g. 'HN posts with rank, title, points') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=false and openWorldHint=true, implying mutation and external access. The description confirms live verification when url is provided and mentions returning {score, rows}. However, it does not disclose side effects like memory consumption, potential overwrites, or access requirements beyond what annotations hint. The description adds some value but lacks depth for a tool that modifies state.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, starting with a clear action-oriented purpose. All critical information (input modes, behavior modes) is included without redundancy. Every phrase adds value, making it highly efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 parameters (none required), no output schema, and complex two-mode behavior, the description covers the main scenarios: with url (verification) and without (stashing). It explains the two input options and their relationship. However, it could be more complete by clarifying what 'stashes the draft' means in terms of state persistence or lifetime.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% coverage; each parameter is described. The description adds context about the preferred usage of plan over code and explains the url behavior. However, it does not significantly enhance understanding beyond the schema, and the parameter 'description' is mentioned without additional semantic value. Baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool loads a tap into memory and optionally verifies it live. It specifies two input modes (plan and code) and differentiates behavior based on url presence. However, it does not explicitly differentiate from sibling tools like tap_run or tap_list, leaving some ambiguity about when to use this tool over others.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use url (auto-run verification) and when not (stash draft). It also indicates a preference for the plan parameter over legacy code. While it doesn't explicitly mention alternatives or when-not-to-use, the context of the tool (loading draft) is reasonably clear from the description.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
forge_inspectARead-onlyInspect
Analyze a page for tap forging: detects framework, SSR state, APIs, and generates extraction strategies. Also use this to re-forge a broken tap — inspect the page again to find what changed. Pass probe_writes:true to discover write actions without triggering them (zero side effects).
AUTHORING PRINCIPLE: Prefer API > SSR > DOM. handle.fetch (cookie-aware) and handle.ssrState beat handle.eval(querySelectorAll); handle.find / handle.copyAll beat hand-rolled selectors. Read existing_taps first — if one already covers part of the need, compose with it inside handle.pipe rather than re-extracting.
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | ||
| detail | No | Comma-separated extra sections to include: network,ssr,auth,a11y,annotations,structure,deep. 'structure' adds per-candidate anti-scraping diagnostics (Flexbox order, custom fonts, canvas, ::before/::after content, homoglyphs) + href stability score. 'deep' additionally computes readable_ratio (expensive). Use 'all' for the full payload. Default returns top candidates + confidence + status only. | |
| probe_writes | No | Discover write actions (POST/PUT/PATCH/DELETE) without executing them. Captures endpoints + payloads via abort intercept. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations are readOnlyHint=true, destructiveHint=false, openWorldHint=true. Description adds detail that probe_writes has zero side effects and emphasizes discovery without execution. No contradictions, and description complements annotations well.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured, starting with the primary purpose, then secondary use, parameter tip, and authoring principle. It is front-loaded and informative, though slightly lengthy. Still earns a 4.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's purpose (analysis), the description covers main outputs, parameter usage, and authoring principles. No output schema, but the description mentions default return values. Adequate for the complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 67% (probe_writes and detail have descriptions; url does not). The description adds context for probe_writes and detail, but does not significantly extend beyond what the schema provides for those parameters. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool analyzes pages for tap forging, detects framework/SSR/APIs, and generates extraction strategies. It also distinguishes between initial analysis and re-forging broken taps, making the purpose specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to re-forge (broken taps) and how to use probe_writes. It mentions reading existing_taps first, but does not fully distinguish this tool from all siblings like inspect, though context implies it's for page analysis.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
forge_saveADestructiveInspect
Save the tap to disk as .tap.json and auto-commit to git. Accepts either a structured plan (W3C Annotation wrapping an ExecutionPlan body — preferred) or code (legacy .tap.js source, migrated to a plan on write). Falls back to code from the active forge.draft session when neither is passed. After saving, tap.run can execute it forever with zero AI.
Optional verify_examples runs the just-saved tap against the supplied examples and asserts row-shape contracts (min_rows, non_empty, max_elapsed_ms). When all examples pass, the response includes doctor (verdict from running tap.doctor on the saved tap). When any example fails, the response includes regenerated_inspect — a fresh forge.inspect on the same URL — so the agent can re-forge in one round-trip instead of three. When omitted, behavior is unchanged and the response carries doctor: "indeterminate".
| Name | Required | Description | Default |
|---|---|---|---|
| code | No | Optional — legacy .tap.js source; auto-migrated to a plan on save | |
| name | Yes | ||
| plan | No | TapAnnotation envelope — W3C Annotation with body:tap:ExecutionPlan. Preferred over code. | |
| site | Yes | ||
| verify_examples | No | Optional auto-verify hook (issue #31). Each example runs the just-saved tap with `args` and asserts the result against `expect`. On any failure the response gains `ok:false` and `regenerated_inspect` (a fresh forge.inspect on the saved URL). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate destructive hint (true), and description elaborates: 'auto-commit to git', 'migrated to a plan on write', and post-save execution capability. Describes conditional behavior with verify_examples: on success returns doctor, on failure returns regenerated_inspect. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is front-loaded with core action, then modes, then verification details. Each sentence adds value. Slightly lengthy due to detailed verify_examples explanation, but that is necessary for completeness. Could be trimmed slightly without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description covers return values thoroughly: doctor on success, regenerated_inspect on failure, and default indeterminate. Explains fallback behavior and migration. Covers all aspects of the tool's behavior, making it self-contained for agent use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 60%, and description adds meaning for plan, code, and verify_examples with usage details. Site and name are not elaborated in description but are straightforward required identifiers. The explanation of verify_examples' sub-fields (min_rows, non_empty, max_elapsed_ms) compensates for nested complexity. Could describe site/name more, but adequate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the tool's purpose: saving a tap to disk as .tap.json with auto-commit to git. Distinguishes from siblings like forge_draft (which presumably creates drafts) and forge_inspect (which inspects) by focusing on persistence. Mentions two input modes (plan preferred, code legacy) and fallback to draft session.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use each parameter: 'plan (W3C Annotation...preferred)' vs 'code (legacy .tap.js source...)', and fallback to active forge.draft session. Also explains when to use verify_examples and its outcomes, enabling the agent to make informed decisions about error handling and round-trip optimization.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
inspectARead-onlyInspect
Inspect the current page. Use target to choose what to inspect: page (url/title/meta), dom (HTML structure), a11y (accessibility tree), element (single element detail, requires selector), network (captured traffic — auto-starts capture on first call, dumps on subsequent). Default: page.
| Name | Required | Description | Default |
|---|---|---|---|
| bodies | No | Include response bodies (target=network only) | |
| target | No | What to inspect | page |
| selector | No | CSS selector (required for target=element, optional for target=dom to scope) | |
| url_filter | No | Filter network entries by URL substring (target=network only) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate read-only and non-destructive behavior. The description adds useful behavioral detail for the 'network' target, specifying auto-start and dump behavior. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences with front-loaded purpose. Every part adds value, no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers main targets and network behavior, but lacks details on output format. Given no output schema, this is a minor gap. Overall, it provides a solid understanding for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers all parameters with descriptions. The tool description adds extra meaning by summarizing what each target inspects and noting that 'element' requires a selector, enhancing understanding beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool inspects the current page and lists target options. However, it does not differentiate from the sibling tool 'forge_inspect', which may serve a similar purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for each target option and explains default behavior. It does not explicitly state when not to use the tool or mention alternatives, but the guidance for target selection is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_doctorARead-onlyInspect
Health check for taps. Runs each tap's examples against its health contract. Returns {ok, annotations[], issues[], suggestions[]}. Each annotation is a W3C Web Annotation (motivation:'assessing') with body.tap:verdict in {healthy, broken, stale, layer-mismatch}. Use when tap.run returns empty/error rows, or after forge.save to validate. ALWAYS specify site+name — unscoped checks scan all user taps and are expensive. PIPE TAPS: annotations include recursive sub-tap diagnosis via body.children[]. Use tap.explain for static analysis without running.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Tap name within site (optional — omit to check all taps for the site) | |
| site | No | Site to check. Always specify — omitting scans all user-forged taps. | |
| timeout | No | Timeout per tap in ms |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, and destructiveHint. Description adds rich behavioral context: return format with W3C Web Annotations, verdicts, and recursive sub-tap diagnosis for pipe taps via body.children[]. It also warns about expensive unscoped scans. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise but packs information: purpose, return format, usage guidance, caveat, and pipe-specific behavior. Each sentence adds value. Could be slightly more structured but is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description fully details the return structure including the annotation format and verdicts. It covers pipe taps with recursive diagnosis. It also references a sibling (tap.explain) for static analysis. Given the tool's complexity, the description is complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for all 3 parameters. Description adds meaningful context beyond schema: reinforces that site and name should always be specified, and explains that omitting them scans all user taps (expensive). This adds value over the bare schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Health check for taps. Runs each tap's examples against its health contract. Returns {ok, annotations[], issues[], suggestions[]}.' It gives specific return structure and verdicts. It distinguishes from siblings like tap_run (runs the tap) and tap_explain (static analysis).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use: 'Use when tap.run returns empty/error rows, or after forge.save to validate.' Also gives a strong caveat: 'ALWAYS specify site+name — unscoped checks scan all user taps and are expensive.' Provides an alternative: 'Use tap.explain for static analysis without running.'
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_envARead-onlyIdempotentInspect
Check tap runtime environment: binary version, TAP_HOME directory, installed skills count, Playwright availability, daemon status, and OS info. Zero side effects — no browser needed. Use for initial troubleshooting or CI health gates.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide safety hints (readOnlyHint, destructiveHint, idempotentHint). The description adds 'Zero side effects — no browser needed,' reinforcing and adding context beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with main purpose, then usage guidance. No redundant or unnecessary information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no parameters, no output schema, but rich annotations, the description is complete: it explains what the tool checks and when to use it. No missing context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, and schema coverage is 100% (trivial). Per guidelines, 0 parameters baseline is 4; description does not need to add parameter meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool checks tap runtime environment, listing specific items (binary version, TAP_HOME, skills count, etc.) and explicitly distinguishes from siblings by noting zero side effects and no browser needed.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says 'Use for initial troubleshooting or CI health gates,' providing clear context. While it doesn't explicitly mention when not to use or alternative tools, the purpose is well-defined among siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_expand_toolsAInspect
Expand this session's MCP tool set. Call when the default Layer-1 set (run/list/doctor/fix/forge.*/inspect) is insufficient — e.g. need manual browser actions (click/type/fill/scroll), write-tap operations, or diagnostic probes that aren't exposed yet. Levels: 2 = creative (forge supplements + diagnostics), 3 = manual (raw browser control: tap.click, tap.type, tap.eval, tap.find, tap.upload, tap.nav, tap.wait, tap.cookies, tap.pressKey). After calling, the server sends notifications/tools/list_changed; clients that honor it will re-query tools/list automatically. Higher-level calls subsume lower ones — calling with level:3 exposes both Layer 2 and Layer 3.
| Name | Required | Description | Default |
|---|---|---|---|
| level | Yes | Target tier. 2: creative. 3: full manual. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description fully discloses the behavioral impact: after calling, the server sends notifications/tools/list_changed, and clients that honor it will re-query tools/list automatically. This explains the dynamic nature of the tool set expansion. The annotation 'openWorldHint: true' aligns with the description, confirming that the tool can change available tools. There is no contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single paragraph that is generally concise and front-loaded with the main action. Every sentence adds value, but it could be slightly more streamlined. For example, the list of level-3 tools is helpful but somewhat lengthy. Overall, it is well-structured and informative without being verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with only one parameter, no output schema, and complex behavior (expanding the tool set with side effects), the description covers all essential aspects: purpose, when to use, level details, server notification, and client behavior. It is complete enough for an agent to decide correctly whether and how to invoke this tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Although the schema provides an enum for the 'level' parameter with values 2 and 3, the description adds significant meaning by explaining that level 2 is 'creative (forge supplements + diagnostics)' and level 3 is 'manual (raw browser control: tap.click, tap.type, etc.)'. It also clarifies that higher-level calls subsume lower ones, which is not evident from the schema alone. With 100% schema coverage, the description goes beyond the baseline 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: to expand the MCP tool set. It specifies the context when the default Layer-1 set is insufficient, and explicitly lists the types of operations (e.g., browser actions, write-tap operations, diagnostics) that warrant its use. This distinguishes it from sibling tools like 'tap_run' or 'inspect' by focusing on tool set expansion rather than individual tool execution.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use the tool ('when default Layer-1 set is insufficient') and gives concrete examples of needed actions. It explains the two levels (2 and 3) and what each exposes, including the condition that higher levels subsume lower ones. The description also notes the side effect of server notification and client re-query, which helps agents understand the invocation context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_fixARead-onlyInspect
Diagnose and repair a broken tap. Runs tap.doctor first, then collects page-level diagnostics (current DOM vs expected selectors, auth wall detection, redirect analysis). Returns the same shape as tap.doctor plus repair-specific fields: {diagnostics:{currentSnapshot, expectedSelectors, authWall, suggestions[]}, patches[]}. Free tier gets diagnostics only; Pro tier gets AI-generated fix proposals. Use when tap.doctor returns verdict=broken.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Tap name | |
| site | Yes | Site | |
| timeout | No | Timeout in ms |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate readOnlyHint=true, but the description says 'repair' which implies mutation, creating a contradiction. The description also does not clarify whether the repair is actually applied or just proposed. This lack of clarity is problematic.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise: four sentences, no wasted words. The first sentence states purpose, front-loading key information. Structure is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains the process and return shape partially, but given no output schema, it should provide more detail on the structure of diagnostics and patches. It also omits what 'repair' actually does, which is critical given the annotation contradiction.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds context about the process (runs tap.doctor) and return shape but does not provide additional meaning for individual parameters like name, site, or timeout beyond what the schema already gives.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('diagnose and repair') and resource ('broken tap'), and distinguishes from sibling tool tap_doctor by indicating it builds on it.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use when tap.doctor returns verdict=broken.' This tells when to use. It also mentions tier differences (free vs Pro) affecting capabilities. Missing explicit when-not-to-use or alternatives, but the guidance is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_listARead-onlyIdempotentInspect
Discover available taps. Default (no args) returns a compact site-grouped summary for orientation. Pass {query:'...'} for substring search across site/name/description (ranked by relevance). Pass {site} for full schema (columns, args) of one site; {site, name} for a single tap. If a matching tap exists, use tap.run — it executes with zero AI, faster and more stable than manual tap operations. NEVER bypass a tap by using manual tap.* calls to replicate what a tap already does.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Optional tap name. Requires site. Returns full schema for the single matching tap. | |
| site | No | Optional site filter. When provided, returns full schema (columns, args) for matching taps. | |
| query | No | Substring search across site/name/description. Returns flat ranked results. Use this when you know WHAT you want but not the tap name (e.g. 'reddit comments', 'extract bounties'). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnly, idempotent, non-destructive. Description adds behavioral context: default returns compact site-grouped summary, query returns flat ranked results, site/name returns full schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is fairly concise given the complexity of three modes. Front-loaded with main purpose. Some redundancy in explaining when to use tap_run but overall efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description covers return formats for each mode (compact summary, full schema columns/args, flat ranked). Includes examples and usage guidance, making it complete for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%. Description adds meaning beyond schema for each parameter: name requires site, query is for substring search with ranking, site filters and returns schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool discovers available taps and explains three distinct modes (default summary, query search, site/name schema). It distinguishes itself from sibling tools like tap_run which executes taps.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly advises when to use each argument pattern: default for orientation, query for search, site/name for schema. Also warns against bypassing with manual tap calls and recommends tap_run for existing taps.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_runAInspect
Run a pre-built tap. Preferred over tap.* tools — deterministic, zero AI at runtime. Returns {columns, rows, count, timing, cache_hit}. Read-intent taps are memoized for 5 minutes per process; identical calls return cached data with cache_hit:true. Pass {fresh:true} to bypass cache. Write-intent taps are never cached. If rows contain login/error page content or are empty on a site that requires login → call tap.runtime(runtime:'chrome') first, then retry. If rows is empty on a public site, use tap.doctor(site, name) for structured diagnosis. On transient failure (timeout, connection), RETRY tap.run — do not fall back to manual tap.* operations.
| Name | Required | Description | Default |
|---|---|---|---|
| args | No | Tap arguments | |
| name | Yes | Tap name | |
| site | Yes | Site name | |
| fresh | No | Bypass the 5-minute per-process result cache. Use when you need current data despite a recent identical call. | |
| envelope | No | Response shape. 'bare' (default) returns {rows, columns, count, elapsed_ms}; 'annotation' wraps the result in a W3C Web Annotation with target + body:tap:RunResult + prov:wasDerivedFrom — useful for provenance chains and signing. Does NOT affect sub-tap composition or pipe bindings (those read the internal flat shape). | bare |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds significant behavioral context beyond annotations: read-intent taps are memoized for 5 minutes, identical calls return cached data with cache_hit:true, fresh:true bypasses cache, write-intent taps never cache, and error handling for login/error pages and transient failures. Annotations are readOnlyHint=false, destructiveHint=false, openWorldHint=true, and description does not contradict them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized, front-loads the core purpose, and every sentence serves a purpose: stating purpose, caching behavior, error handling, and retry logic. No redundant content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 parameters, full schema coverage, sibling tools, and absence of output schema, the description covers return shape ({columns, rows, count, timing, cache_hit}), caching behavior, error recovery mechanisms, and when to use sibling tools. It is complete and self-contained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds value by explaining fresh:true bypasses cache, envelope parameter differences between 'bare' and 'annotation', and implicit context for site and name. While schema already describes parameters, the description clarifies their behavioral impact.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool runs a pre-built tap, emphasizes it is preferred over tap.* tools, and distinguishes sibling tools by highlighting deterministic behavior with zero AI at runtime.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit usage guidance: when to use this tool, when to use fresh:true to bypass cache, when to fall back to tap.runtime for login/error pages, when to use tap.doctor for empty rows on public sites, and how to handle transient failures by retrying tap.run. It also specifies caching rules and alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_runtimeAIdempotentInspect
Switch browser runtime mid-session. Default is headless (no login). Use 'chrome' when you need the user's real browser with login sessions (Xiaohongshu, Zhihu, etc.) or for write operations (publish, comment). Use 'headless' to switch back. (Unrelated to tap mcp connect, which registers the Tap MCP server with an AI host.)
| Name | Required | Description | Default |
|---|---|---|---|
| runtime | Yes | chrome = user's real Chrome browser (login sessions available). headless = Playwright (fast, no login). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate idempotentHint=true and destructiveHint=false. The description adds behavioral context: switching runtime affects login availability (chrome provides user sessions, headless does not). No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with purpose, highly concise with no wasted words. Clearly structured and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple runtime switch tool with no output schema, the description covers behavior, usage scenarios, and distinguishes from unrelated commands. No gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter has a clear enum and schema description. The tool description adds value by contextualizing when to use each value (chrome for login, headless otherwise), going beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Switch browser runtime mid-session.' It specifies the two runtime options (chrome and headless) and what each is used for, making the action unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly advises when to use each runtime: chrome for login sessions or write operations, headless to switch back. It also distinguishes from `tap mcp connect`, providing clear usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
5 tool updates
v0.29.1- Added
forge_draft - Added
tap_doctor - Added
tap_fix - Added
tap_list - Added
tap_runtime
5 tool updates
v0.27.0- Removed
forge_draft - Removed
tap_doctor - Removed
tap_fix - Removed
tap_list - Removed
tap_runtime
11 tool updates
v0.15.14- Added
forge_draft - Added
forge_inspect - Added
forge_save - Added
inspect - Added
tap_doctor - Added
tap_env - Added
tap_expand_tools - Added
tap_fix - Added
tap_list - Added
tap_run - Added
tap_runtime
11 tool updates
v0.15.8- Removed
forge_draft - Removed
forge_inspect - Removed
forge_save - Removed
inspect - Removed
tap_doctor - Removed
tap_env - Removed
tap_expand_tools - Removed
tap_fix - Removed
tap_list - Removed
tap_run - Removed
tap_runtime
1 tool update
v0.15.5- Added
tap_doctor
1 tool update
v0.14.2- Removed
tap_doctor
1 tool update
v0.14.7- Added
tap_doctor
TDQS
Tools have mostly distinct purposes, but forge_inspect and inspect both deal with page inspection, and tap_doctor/tap_fix overlap in diagnosis/repair. Descriptions help disambiguate, but some overlap exists.
Naming follows consistent verb_noun pattern with 'forge_' and 'tap_' prefixes. 'inspect' stands alone without prefix, and 'tap_expand_tools' is slightly wordy but still consistent with the prefix pattern.
11 tools is well-scoped for the tap automation domain, covering forging, running, diagnosing, fixing, inspecting, and environment checks without being overwhelming or sparse.
Covers the core lifecycle: draft, save, run, list, inspect, diagnose, fix, and runtime switching. Missing explicit delete or view detailed tap schema, but most critical operations are present.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Pre-action attestation perimeter for AI agents — 8 primitives, signed C18 receipt per call.
The independent agent-commerce protocol for AI-agent checkout on any online store.
The cloud for agents. Tools for AI agents to register, build, and deploy other agents. Zero human required.
AI agent infrastructure for discovery, authorization, execution, identity, and signed receipts.
Related MCP Servers
- AlicenseBqualityDmaintenanceEnables automation of browser tasks using Playwright by interacting via Claude Desktop for executing user-defined prompts and operations.1212MIT
- AlicenseAqualityBmaintenanceEnables browser automation with Puppeteer, supporting navigation, form interactions, and connection to active Chrome instances for comprehensive web page interaction.82,359482MIT
- AlicenseAqualityBmaintenanceA Model Context Protocol server that provides real-time web search capabilities to AI assistants through pluggable search providers, currently integrated with the Brave Search API.516MIT
- AlicenseAqualityDmaintenanceA Model Context Protocol server that enables web scraping, crawling, and content extraction capabilities through integration with Firecrawl.840,1392MIT
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/LeonTing1010/tap'
If you have feedback or need assistance with the MCP directory API, please join our Discord server