Skip to main content
Glama
gomixo

OpenWrt Network Diagnostics MCP

by gomixo

OpenWrt Network Diagnostics MCP

面向 OpenWrt、Nikki 与 Mihomo 的只读诊断 MCP。它向 Agent 提供路由器侧 Observation、机械 Correlation 和证据缺口;故障判断与修复决策仍由 Agent 结合客户端证据完成。

0.2 只支持已经实机验证的组合:FriendlyElec NanoPi R5S、ImmortalWrt 25.12、Nikki、Mihomo 与 firewall4/nftables。所有 Evidence bundle 使用 schema_version: 2

准备

  • Windows 工作站安装 Node.js 24 和 OpenSSH Client。

  • SSH config 存在可免交互登录的 Host openwrt

  • 路由器安装 conntracktcpdumpyqipnftubus

  • Mihomo external controller 在路由器 loopback 的 9090 端口可用。

  • MIHOMO_SECRET 只通过 MCP 子进程环境变量提供。

SSH config 示例:

Host openwrt
  HostName 192.0.2.1
  User root
  IdentityFile C:/Users/<you>/.ssh/openwrt_ed25519

完成标准:以下命令输出设备信息且不要求密码。

ssh -o BatchMode=yes openwrt "ubus call system board"

Related MCP server: Linux MCP Server

安装与检查

cd D:\Workspace\OpenWrt-MCP
npm ci
npm run check

npm run check 会编译项目并运行 Node.js 内置测试。构建输出位于 dist/,不提交到 Git。

启动

$env:MIHOMO_SECRET = Read-Host "Mihomo secret" -MaskInput
npm run build
npm start

MCP 使用 stdio:stdout 只承载协议,审计摘要写入 stderr。正常退出会关闭 Mihomo SSH 隧道。

Codex 注册与验证步骤见 Codex 客户端配置示例

Agent 取证流程

  1. 先调用 snapshot_network 建立系统、接口、路由、防火墙与能力基线。默认 detail=summary;只有需要完整但仍有界的规范化证据时才使用 detail=full

  2. 按问题范围调用 inspect_config_statetrace_dns。把 generated config 与 runtime state 视为不同来源。

  3. 用户准备复现时调用 observe_client,窗口为 5–60 秒。双栈设备可显式提供 client_ipv6;MCP 不自动认定 IPv4/IPv6 属于同一设备。

  4. 已知客户端与目标后调用 inspect_flow,关联 DNS、Mihomo、同地址族转发路由、nftables 与严格过滤的 conntrack;必要时可显式使用 detail=full

  5. 现有证据不足时由 Agent 显式调用 capture_flow。默认 30 秒,接口自动按客户端回程路由选择;同一时间只运行一个长观察或抓包。

  6. 修改前后分别运行 snapshot_network,再用 compare_snapshots 计算字段差异。

MCP 不返回 verdict、confidence、root cause 或修复建议。没有捕获到连接表示证据缺失,不表示静态规则实际命中或未命中。

工具

工具

返回的路由器侧事实

snapshot_network

系统、网络、服务、监听、路由、nftables 与能力快照

inspect_config_state

Nikki 生成配置摘要、文件身份、Mihomo runtime 与 provider 摘要

trace_dns

router-local、Mihomo、LAN listener、bootstrap DNS 与地址属性

observe_client

指定客户端窗口内的新连接、Mihomo 日志与 conntrack 事件

inspect_flow

指定流的 DNS、实际代理链、转发路由、nftables 与 conntrack

capture_flow

有界 tcpdump 包元数据和 TCP/UDP/DNS 机械摘要

inspect_subscriptions

Nikki 缓存文件身份、更新时间与 Mihomo provider 状态

read_logs

按来源、窗口、条数和文本过滤的脱敏日志

compare_snapshots

当前 MCP 进程内两个快照的字段级差异

实机 smoke test

smoke test 会从指定 LAN 客户端建立真实 Google HTTPS/TLS 流量,验证九个工具、同流量关联、脱敏以及长任务清理。

$env:MIHOMO_SECRET = Read-Host "Mihomo secret" -MaskInput
npm run smoke:live -- 192.0.2.20

完成标准:进程退出码为 0,九个工具均返回 schema v2;必需 Observation 成功,不支持的 bootstrap endpoint 被明确标记;summary 小于 full;并输出 secret_leaked: false

安全边界

  • 只执行固定、校验后的 SSH 命令与 Mihomo GET 请求。

  • 不提供任意 shell、原始 BPF、配置写入、服务重启、策略切换、连接删除或软件安装。

  • 不返回订阅 URL、认证字段、节点凭据、私钥、完整配置或 PCAP。

  • 抓包不落盘,最多 60 秒、200 条包元数据、snaplen 256,并受字节上限和取消信号约束。

  • 快照只保存在当前 MCP 进程内,进程退出后失效。

更完整的需求与边界见 0.1 实施规格0.2 开发规格

Available Tools

9 tools
capture_flowCapture bounded packet metadataC
Read-only

Run an explicitly requested, non-persistent packet capture using a generated restricted filter.

ParametersJSON Schema
NameRequiredDescriptionDefault
portNo
domainNo
durationNo
protocolNo
client_ipYes
interfaceNoauto
client_ipv6No
destination_ipNo

TDQS

C2.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false. The description adds 'non-persistent' and 'generated restricted filter,' which are behavioral details not captured by the annotations, giving the agent a clearer sense of what the tool does and its side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence that states the core action and key constraints without wasted words. It is concise, though it sacrifices completeness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness1/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has 8 parameters and no output schema, but the description fails to explain what the capture returns, what 'bounded' means, or how parameters map to the filter. This is inadequate for an agent to use the tool correctly and safely.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters1/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage and 8 parameters, the description provides no explanation of how parameters like client_ip, port, domain, or protocol shape the generated filter. This is a critical gap for a tool with so many parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool runs a packet capture, which is a specific verb+resource, and the title adds 'bounded packet metadata.' However, it doesn't explicitly distinguish from sibling tools like observe_client or inspect_flow, though 'non-persistent' and 'generated restricted filter' hint at a unique approach.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives. The phrase 'explicitly requested' implies on-demand use, but there are no explicit scenarios, prerequisites, or exclusions provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

compare_snapshotsCompare two in-memory network snapshotsA
Read-only

Return mechanically computed field changes between snapshots from the current MCP process.

ParametersJSON Schema
NameRequiredDescriptionDefault
after_idYes
before_idYes

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint=true and destructiveHint=false, covering the safety profile. The description adds that the computation is mechanical and restricted to the current MCP process, but it does not disclose behavior for invalid/missing snapshot IDs or return format expectations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single, front-loaded sentence with no filler words. It immediately conveys the action and object, making it highly scannable for an agent.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, so the description should explain the return structure, but it only says 'field changes' without specifying format or error handling. The tool is simple and annotations cover safety, but given the missing output schema, the description is not fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description only says 'between snapshots,' leaving before_id and after_id semantics to be inferred from names. It does not clarify which parameter is the baseline or their temporal order, so the description fails to compensate for the lack of schema documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'Return mechanically computed field changes between snapshots from the current MCP process' – a specific verb (return) and resource (field changes between snapshots). It distinguishes itself from sibling tools like snapshot_network (which creates snapshots) and read_logs.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly indicates that the tool operates on in-memory snapshots from the current MCP process, implying a prerequisite that snapshots must have been captured. However, it does not explicitly name alternatives or state when not to use this tool, so there are no exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

inspect_config_stateInspect Nikki and Mihomo configuration stateA
Read-only

Compare whitelisted Nikki generated startup fields with Mihomo runtime General state and provider summaries.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, so the safety profile is known. The description adds the specific comparison scope but does not disclose return format, pagination, or any potential side effects—though for a read-only compare, this is acceptable. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, efficient sentence that is front-loaded with the core action. Every word contributes meaning, with no fluff or repetition of the title.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no parameters and strong read-only annotations, the description is mostly complete. It clearly states what is compared, but the term 'whitelisted' and the nature of 'provider summaries' remain undefined, and there is no output schema to clarify the result format. Still, it covers essential points.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, and schema coverage is 100% (vacuously). Per the baseline rule for 0 params, a score of 4 is appropriate. The description doesn't need to explain parameters but does add context about what is being compared, slightly enhancing understanding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool compares whitelisted Nikki-generated startup fields with Mihomo runtime General state and provider summaries. It uses a specific verb ('Compare') and identifies the exact resources, distinguishing it from sibling tools like inspect_flow or snapshot_network.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives, notably 'compare_snapshots', which also involves comparison. There are no explicit exclusions or context cues to help the agent choose between these related tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

inspect_flowInspect one target flowB
Read-only

Correlate live Mihomo, routing, aggregated nftables, and conntrack evidence for a client and destination.

ParametersJSON Schema
NameRequiredDescriptionDefault
portNo
detailNosummary
domainNo
protocolNo
client_ipYes
client_ipv6No
destination_ipNo

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint true and destructiveHint false, so the description's focus on 'evidence' aligns without adding much safety-relevant context. It does not disclose potential performance costs, required permissions, or interpretation details, which would exceed what annotations provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, well-structured sentence that front-loads the primary verb and resources. It is concise and free of filler, though the heavy jargon ('Mihomo', 'nftables', 'conntrack') may hinder quick comprehension for unfamiliar agents.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 7 parameters, no output schema, and complex multi-source correlation, the one-sentence description lacks essential context. It does not describe what the returned evidence looks like, how to interpret the correlation, or how to use parameters like 'detail' or 'protocol'.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0%, so the description carries the full burden for explaining parameters. It mentions 'client and destination' (client_ip, destination_ip) but fails to clarify port, detail, domain, protocol, or client_ipv6. This is insufficient given the 7-parameter schema with enums and defaults.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Correlate live Mihomo, routing, aggregated nftables, and conntrack evidence for a client and destination.' It uses a specific verb ('correlate') and resource list, and the focus on a client/destination differentiates it from sibling tools like inspect_config_state or trace_dns.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives no explicit guidance on when to use this tool versus alternatives. It implies a targeted investigation of a flow, but there is no mention of exclusions or alternative tools like capture_flow or trace_dns, leaving the agent to infer the appropriate context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

inspect_subscriptionsInspect subscription control-plane stateA
Read-only

Return safe Nikki cache metadata and Mihomo provider summaries without URLs or credentials.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, and the description adds significant context: it returns 'safe' metadata and explicitly excludes 'URLs or credentials'. This goes beyond the annotations by clarifying what content the tool will and will not expose, which is valuable for an agent. No additional behavioral traits (e.g., error behavior) are disclosed, but the annotation coverage lowers the bar.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence that efficiently conveys the tool's purpose, scope, and safety guarantee. There is no redundant or filler content; every word contributes to understanding.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has no parameters, no output schema, and strong annotations, the description provides enough information for an agent to select and invoke it correctly. It explains what the tool returns and what it deliberately excludes, making it complete for this low-complexity tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the description carries no burden for explaining parameter meaning. The baseline for 0 params is 4, and the description does not add or need to add parameter-related details.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Return') and resource ('Nikki cache metadata and Mihomo provider summaries'), and explicitly notes what is excluded ('without URLs or credentials'). This clearly distinguishes it from sibling inspection tools like inspect_config_state and inspect_flow, which focus on other aspects of state.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies that this tool is for reviewing subscription-related metadata and provider summaries, but it provides no explicit guidance on when to use it versus sibling tools. There are no stated prerequisites, exclusions, or alternative tool recommendations, so it falls into 'implied usage' rather than clear context or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

observe_clientObserve one LAN clientB
Read-only

Observe bounded Mihomo connection/log activity and conntrack state associated with one client address.

ParametersJSON Schema
NameRequiredDescriptionDefault
durationNo
client_ipYes
client_ipv6No

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, so the read-only nature is covered. The description adds the 'bounded' aspect (likely referring to the duration limit) and specifies the observed data types, but it does not disclose additional behavioral traits such as output format, side effects, or timing behavior beyond what the schema implies.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, well-structured sentence that starts with the action verb and packs the essential scope into minimal words. There is no fluff or repetition, making it easy for an agent to quickly parse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the lack of an output schema, the description should explain what the tool returns or how results are presented. It mentions 'connection/log activity and conntrack state' as the observed data, which gives an idea of the output domain, but it does not specify the format, structure, or whether results are aggregated or streamed. The 'bounded' hint suggests a time-limited observation, but this is not fully elaborated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, so the description must compensate. It only vaguely references 'one client address' and 'bounded' activity, without explaining the distinct roles of client_ip vs client_ipv6 or clarifying how duration (default 60, min 5, max 60) influences the observation. This under-specification is a significant gap for a three-parameter tool.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Observe') and clearly identifies the resource ('Mihomo connection/log activity and conntrack state') scoped to one client address. It distinguishes from broader sibling tools like snapshot_network or inspect_flow by emphasizing the single-client focus, though 'bounded' is somewhat ambiguous without referencing the duration parameter.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'one client address' implies this tool is for observing a specific LAN client, providing a clear use case. However, it offers no explicit guidance on when to use it over alternatives (e.g., inspect_flow for general flow inspection) and no exclusions or conditions indicating when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

read_logsRead bounded router-side logsA
Read-only

Read filtered and redacted OpenWrt, Nikki, or newly observed Mihomo logs.

ParametersJSON Schema
NameRequiredDescriptionDefault
sourceYes
containsNo
durationNo
max_recordsNo

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate a safe read-only operation, and the description adds valuable behavioral context: logs are filtered and redacted, and Mihomo logs are 'newly observed'—implying a checkpoint mechanism. This goes beyond the structured annotations and clarifies output expectations, though it still leaves the exact redaction and 'newly observed' semantics somewhat vague.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence that immediately states the action and scope. Every word contributes meaning, with no filler or redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

While the tool is simple and annotations cover safety, the description omits important behavioral details such as the meaning of 'bounded' (from the title), return format, and the semantics of 'newly observed'. With no output schema, this leaves moderate ambiguity. It is adequate but not thorough.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and the description provides no parameter-level explanations. It mentions 'filtered' which loosely aligns with `contains`, but does not clarify duration, max_records, or the source enum's differences. The agent must infer parameter behavior from names and constraints alone, which is insufficient.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific action (Read) with a defined scope (filtered and redacted logs from OpenWrt, Nikki, or Mihomo). It distinguishes itself from sibling tools, none of which are log-readers, and mentions filtering and redaction which add precision.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives. The description implies it is for reading router-side logs, but does not explicitly state scenarios, prerequisites, or exclusions. Sibling tools exist for network inspection but no comparison is offered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

snapshot_networkSnapshot OpenWrt network stateA
Read-only

Collect a bounded router-side network snapshot and retain it in memory for later comparison.

ParametersJSON Schema
NameRequiredDescriptionDefault
detailNosummary

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds useful behavioral context beyond the annotations: it reveals that the snapshot is 'bounded' (resource-limited) and that it is 'retained in memory' (a stateful side effect), which the read-only and non-destructive annotations do not convey. It does not contradict the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, well-structured sentence that front-loads the core action and purpose, with no unnecessary words or repetition of annotations.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description adequately covers the tool's purpose and memory retention behavior, but it omits parameter semantics and does not explain how the retained snapshot is retrieved or used by sibling tools like compare_snapshots. Given the simplicity of the tool and the presence of annotations, the description is minimally viable but has clear gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The only parameter, 'detail', is documented in the schema with an enum (summary/full) and a default, but the description does not explain what the difference between these values is or how they affect the snapshot. With schema coverage at 0%, the description's silence on the parameter leaves its meaning ambiguous.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function with a specific verb ('Collect') and resource ('bounded router-side network snapshot'), and explicitly mentions its purpose ('retain it in memory for later comparison'), distinguishing it from siblings like compare_snapshots (which performs the comparison) and capture_flow (which captures traffic).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage before comparison by stating 'retain it in memory for later comparison', but it does not explicitly state when to use this tool versus alternatives such as capture_flow or inspect_config_state, nor does it provide exclusion criteria or prerequisites.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

trace_dnsCollect router-side DNS evidenceA
Read-only

Compare OpenWrt and Mihomo DNS observations, generated DNS settings, Fake-IP addresses, and listeners.

ParametersJSON Schema
NameRequiredDescriptionDefault
qtypeNoA
domainYes
serverNo

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false. The description adds behavioral context by listing the compared elements (observations, generated settings, Fake-IP addresses, listeners), which clarifies what the tool actually inspects. No contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence, front-loaded with the verb and object, with no wasted words. It communicates scope effectively in under 20 words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only compare tool with 3 parameters and no output schema, the description gives a high-level overview but lacks details on return value format, how to interpret comparisons, or parameter effects. It is adequate but not comprehensive.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0%, and the description does not mention domain, qtype, or server parameters. It gives an indirect hint that a domain is needed (DNS observations), but qtype and server semantics remain undocumented. The description fails to compensate for the missing schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the specific verb 'Compare' and identifies the exact resources: OpenWrt and Mihomo DNS observations, generated DNS settings, Fake-IP addresses, and listeners. This clearly distinguishes it from sibling tools like snapshot_network or read_logs.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies a diagnostic comparison use case but does not explicitly state when to prefer this tool over alternatives or mention exclusions. It provides clear context (router-side DNS evidence) but lacks direct guidance on selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 9 tool updatesv0.2.0
    • First observedcapture_flow
    • First observedcompare_snapshots
    • First observedinspect_config_state
    • First observedinspect_flow
    • First observedinspect_subscriptions
    • First observedobserve_client
    • First observedread_logs
    • First observedsnapshot_network
    • First observedtrace_dns

TDQS

A3.7/5.0
Disambiguation4/5

Most tools target clearly distinct diagnostic aspects (snapshot, config, DNS, client, flow, capture, subscriptions, logs). The only potential overlap is between observe_client and inspect_flow, but their descriptions clarify different scopes (client-level vs. flow-level).

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern in snake_case (e.g., snapshot_network, inspect_config_state, capture_flow). Even with repeated verbs like 'inspect', the nouns clearly differentiate the tools.

Tool Count5/5

9 tools is well-scoped for a specialized network diagnostics server, covering both data collection and analysis without unnecessary bloat or missing core functionality.

Completeness4/5

The tool set covers major diagnostic workflows: snapshots, config comparison, DNS tracing, client observation, flow inspection, packet capture, subscription metadata, and logs. Minor gaps exist such as an explicit connectivity test or snapshot management, but core capabilities are solid.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    Not graded
    quality
    B
    maintenance
    A read-only MCP server for Linux and macOS system administration, diagnostics, and troubleshooting, supporting remote SSH execution and multi-host management.
    Apache 2.0
  • F
    license
    A
    quality
    C
    maintenance
    A secure, read-only MCP server for AI-powered system monitoring. It provides real-time OS metrics, config discovery, and safe log tailing to enable autonomous infrastructure audits without shell access risks.
    4
    -
  • F
    license
    Not graded
    quality
    C
    maintenance
    MCP server for managing OPNsense firewalls, providing read-only tools for firewall rules, aliases, interface statistics, and gateway status with multi-instance support.
    -

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/gomixo/openwrt-network-diagnostics-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server