IA-QA Security — 30 tools: tool descriptions scored io.github.JcJamet/ia-qa-security

tools/list taken: 2026-11-02 (UTC)
From: Official MCP Registry
Connected to: https://www.ia-qa.com/mcp/security
Repository: github.com/ia-qa-com/mcp
Scoring rules: v2
Removal: support@forecall.dev

Scores, issues and names only

This page shows how IA-QA Security — 30 tools (io.github.JcJamet/ia-qa-security)'s tool descriptions scored, the issues found and the names of its tools and parameters. The descriptions are the server's own: read them where the copy came from.

Forecall asked the URL this server lists in the official MCP Registry for its tools/list once, on the date above, without calling any tool. The server may have changed since.

servers/io.github.JcJamet/ia-qa-security

Average score: 67.7 / 100Cloudy
Tools: 30
Near-identical descriptions: 0

Across the server

Minor
30 tools. Above 25, models start to tell tools apart less well.many_tools
Minor
The server's instructions are 2129 characters. Claude Code reads only the first 2,048 by default (Codex 0.154.0 reads them whole). Put what the server is for first.instructions_long

Tools

generate_hmac

54 / 100Cloudy

Purpose: 20 / 20
When to use: 0 / 20
Arguments: 19 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 0 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context
Minor
String arguments with no constraint or example: message, secret.loose_string_param

validate_url

57 / 100Cloudy

Purpose: 17 / 20
When to use: 0 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 0 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context

redact_pii

58 / 100Cloudy

Purpose: 17 / 20
When to use: 0 / 20
Arguments: 18 / 25
Return value: 8 / 15
Constraints and side effects: 10 / 10
Examples: 5 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context
Minor
The description mentions none of its 3 or more arguments.params_not_in_description

mcp_schema_lint

60 / 100Cloudy

Purpose: 17 / 20
When to use: 5 / 20
Arguments: 23 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 0 / 10

No issues.

parse_http_headers

61 / 100Cloudy

Purpose: 20 / 20
When to use: 0 / 20
Arguments: 18 / 25
Return value: 8 / 15
Constraints and side effects: 10 / 10
Examples: 5 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context

shield_analyze

61 / 100Cloudy

Purpose: 17 / 20
When to use: 0 / 20
Arguments: 12 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context
Minor
Arguments without a description: rules[].type, rules[].value, rules[].label.param_no_description
Minor
String arguments with no constraint or example: rules[].type, rules[].value, rules[].label.loose_string_param

bias_detect

62 / 100Cloudy

Purpose: 17 / 20
When to use: 0 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 5 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context

function_call_validate

64 / 100Cloudy

Purpose: 20 / 20
When to use: 0 / 20
Arguments: 12 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context
Minor
Arguments without a description: allowed_functions[].name, allowed_functions[].required_args, allowed_functions[].optional_args.param_no_description
Minor
String arguments with no constraint or example: allowed_functions[].name.loose_string_param
Minor
The description mentions none of its 3 or more arguments.params_not_in_description

detect_secrets

65 / 100Cloudy

Purpose: 20 / 20
When to use: 0 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 5 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context

mcp_server_health_check

65 / 100Cloudy

Purpose: 20 / 20
When to use: 5 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 0 / 10

No issues.

web_security_audit

65 / 100Cloudy

Purpose: 20 / 20
When to use: 0 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 5 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context

guardrail_test

66 / 100Cloudy

Purpose: 20 / 20
When to use: 5 / 20
Arguments: 16 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 0 / 10

Minor
Arguments without a description: rules[].type.param_no_description
Minor
String arguments with no constraint or example: rules[].label.loose_string_param

ssl_certificate_check

67 / 100Cloudy

Purpose: 17 / 20
When to use: 5 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 5 / 10

No issues.

cookie_security_audit

68 / 100Cloudy

Purpose: 20 / 20
When to use: 0 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 5 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context

latency_benchmark

68 / 100Cloudy

Purpose: 20 / 20
When to use: 0 / 20
Arguments: 23 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 0 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context

secret_scan

68 / 100Cloudy

Purpose: 20 / 20
When to use: 0 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 5 / 10

Major
Says nothing about when to use it, or when not to.no_usage_context

cors_checker

70 / 100Clear

Purpose: 20 / 20
When to use: 5 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 5 / 10

No issues.

generate_password

70 / 100Clear

Purpose: 20 / 20
When to use: 10 / 20
Arguments: 20 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 5 / 10

Minor
No `required` list, so every argument is optional.no_required

http_status_lookup

70 / 100Clear

Purpose: 17 / 20
When to use: 5 / 20
Arguments: 23 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

No issues.

prompt_injection_scan

70 / 100Clear

Purpose: 20 / 20
When to use: 10 / 20
Arguments: 20 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 5 / 10

No issues.

toxicity_scan

70 / 100Clear

Purpose: 20 / 20
When to use: 5 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 5 / 10

Minor
String arguments with no constraint or example: text.loose_string_param

validate_agent_trajectory

71 / 100Clear

Purpose: 20 / 20
When to use: 15 / 20
Arguments: 18 / 25
Return value: 8 / 15
Constraints and side effects: 10 / 10
Examples: 0 / 10

Minor
Arguments without a description: assertions, assertions[].id.param_no_description
Minor
String arguments with no constraint or example: assertions[].id, assertions[].before, assertions[].after.loose_string_param

validate_mcp_response

71 / 100Clear

Purpose: 20 / 20
When to use: 5 / 20
Arguments: 19 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 5 / 10

No issues.

decode_jwt

73 / 100Clear

Purpose: 20 / 20
When to use: 10 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 0 / 10

No issues.

hash_text

73 / 100Clear

Purpose: 20 / 20
When to use: 20 / 20
Arguments: 18 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 0 / 10

Minor
String arguments with no constraint or example: input.loose_string_param

cors_test

75 / 100Clear

Purpose: 20 / 20
When to use: 5 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

No issues.

find_tool

75 / 100Clear

Purpose: 20 / 20
When to use: 10 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 7 / 10
Examples: 5 / 10

No issues.

security_headers_check

77 / 100Clear

Purpose: 17 / 20
When to use: 10 / 20
Arguments: 15 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 10 / 10

Minor
No `required` list, so every argument is optional.no_required

mcp_server_evaluate

78 / 100Clear

Purpose: 20 / 20
When to use: 10 / 20
Arguments: 18 / 25
Return value: 15 / 15
Constraints and side effects: 10 / 10
Examples: 5 / 10

No issues.

rate_tool

78 / 100Clear

Purpose: 20 / 20
When to use: 15 / 20
Arguments: 18 / 25
Return value: 8 / 15
Constraints and side effects: 7 / 10
Examples: 10 / 10

No issues.

What static scoring cannot tell

This score reads only the text of each description and schema: it says what is written, not what a model will do. Short tools whose names already say what they do, such as browser_close, score low here even when models use them well, and in our measurements current models chose the right tool in one step even from one-line descriptions, as long as the names and schemas differed. What the text cannot show, such as what happens over several steps and whether an added sentence helps or misleads, is what an evaluation measures, on the Pro and Team plans.

Is your server listed here and you would rather it were not? Email support@forecall.dev, and we will take it off within 7 days.

All scored servers