io.github.michal-lefler/secure-flows: tool descriptions scored

tools/list taken: 2026-11-02 (UTC)
From: Official MCP Registry
Connected to: https://www.secure-flows.com/mcp?alias=secure-flows
Homepage: www.secure-flows.com
Repository: github.com/michal-lefler/secure-flows
Scoring rules: v2
Removal: support@forecall.dev

Scores, issues and names only

This page shows how io.github.michal-lefler/secure-flows's tool descriptions scored, the issues found and the names of its tools and parameters. The descriptions are the server's own: read them where the copy came from.

Forecall asked the URL this server lists in the official MCP Registry for its tools/list once, on the date above, without calling any tool. The server may have changed since.

servers/io.github.michal-lefler/secure-flows

Average score: 67.3 / 100Cloudy
Tools: 18
Near-identical descriptions: 3

Across the server

Minor
The server has no instructions. Say there, once, what the server is for and when to use it: Claude Code and Gemini CLI read the instructions before the tool descriptions.instructions_missing

Tools whose descriptions are nearly the same

3 of 3 pairs shown, highest description similarity first.
Tool	Tool	Description similarity	Name similarity
get_sessions	delete_sessions_delete_key	0.61	0.25
get_sessions	get_sessions_get_key	0.49	0.67
get_sessions	get_sessions_my	0.39	0.67

Tools

post_sessions_revoke_session_id

60 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 10 / 25
Return value: 0 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Major
Arguments without a description: connection, auth, params, params.sessionId, query, body.param_no_description
Minor
String arguments with no constraint or example: auth.userToken.loose_string_param
Minor
Says nothing about what it returns.no_return_info

post_auth_logout

61 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 11 / 25
Return value: 0 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Major
Arguments without a description: connection, auth, params, query, body.param_no_description
Minor
String arguments with no constraint or example: auth.sessionToken.loose_string_param
Minor
Says nothing about what it returns.no_return_info

post_sessions_revoke

61 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 11 / 25
Return value: 0 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Major
Arguments without a description: connection, auth, params, query, body.param_no_description
Minor
String arguments with no constraint or example: auth.sessionToken.loose_string_param
Minor
Says nothing about what it returns.no_return_info

get_sessions_get_key

62 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 12 / 25
Return value: 0 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Minor
Its description is nearly the same as get_sessions's (similarity 0.49); only the names and schemas tell them apart. Say in this description when to use get_sessions instead.confusable_pair
Minor
Arguments without a description: connection, auth, params, query, body.param_no_description
Minor
String arguments with no constraint or example: auth.sessionToken.loose_string_param
Minor
Says nothing about what it returns.no_return_info

get_docs_search

64 / 100Cloudy

Purpose: 17 / 20
When to use: 15 / 20
Arguments: 12 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Minor
Arguments without a description: connection, auth, params, query, body.param_no_description

auth_session_callback

67 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 10 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Major
Arguments without a description: connection, auth, params, query, query.firebaseToken, query.client_redirect_uri, query.workspace_name, query.app_id, query.state, body.param_no_description
Minor
String arguments with no constraint or example: query.firebaseToken, query.workspace_name, query.app_id, query.state.loose_string_param

get_sessions

68 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 11 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Major
Arguments without a description: connection, auth, params, query, body.param_no_description
Minor
Its description is nearly the same as delete_sessions_delete_key's (similarity 0.61); only the names and schemas tell them apart. Say in this description when to use delete_sessions_delete_key instead.confusable_pair
Minor
Its description is nearly the same as get_sessions_get_key's (similarity 0.49); only the names and schemas tell them apart. Say in this description when to use get_sessions_get_key instead.confusable_pair
Minor
Its description is nearly the same as get_sessions_my's (similarity 0.39); only the names and schemas tell them apart. Say in this description when to use get_sessions_my instead.confusable_pair
Minor
String arguments with no constraint or example: auth.sessionToken.loose_string_param

get_sessions_identity

68 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 11 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Major
Arguments without a description: connection, auth, params, query, body.param_no_description
Minor
String arguments with no constraint or example: auth.sessionToken.loose_string_param

delete_sessions_delete_key

69 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 12 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Major
It may be destructive, but destructiveHint is not set.destructive_unmarked
Minor
Its description is nearly the same as get_sessions's (similarity 0.61); only the names and schemas tell them apart. Say in this description when to use get_sessions instead.confusable_pair
Minor
Arguments without a description: connection, auth, params, query, body.param_no_description
Minor
String arguments with no constraint or example: auth.sessionToken.loose_string_param

post_sessions

69 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 12 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Minor
Arguments without a description: connection, auth, params, query, body, body.app_id.param_no_description
Minor
String arguments with no constraint or example: auth.firebaseToken.loose_string_param

post_sessions_get_or_create

69 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 12 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Minor
Arguments without a description: connection, auth, params, query, body, body.app_id.param_no_description
Minor
String arguments with no constraint or example: auth.firebaseToken.loose_string_param

post_sessions_renew_session_token

69 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 12 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Major
It may be destructive, but destructiveHint is not set.destructive_unmarked
Minor
Arguments without a description: connection, auth, params, query, body.param_no_description
Minor
String arguments with no constraint or example: auth.firebaseToken.loose_string_param

secureflows_build_login_url

69 / 100Cloudy

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 20 / 25
Return value: 7 / 15
Constraints and side effects: 0 / 10
Examples: 5 / 10

Minor
The description mentions none of its 3 or more arguments.params_not_in_description
Minor
No constraints, side effects, auth or rate limits described, and no annotations.no_constraints
Minor
Required identifiers whose description does not say where the value comes from: appId. Name the tool or the place that returns it, or models look it up first.id_source_missing

get_auth_logout

70 / 100Clear

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 13 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Minor
Arguments without a description: connection, auth, params, query, body.param_no_description

get_sessions_my

70 / 100Clear

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 13 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Minor
Its description is nearly the same as get_sessions's (similarity 0.39); only the names and schemas tell them apart. Say in this description when to use get_sessions instead.confusable_pair
Minor
Arguments without a description: connection, auth, params, query, query.page, query.sort, query.dir, body.param_no_description
Minor
String arguments with no constraint or example: auth.userToken.loose_string_param

post_sessions_set_key

70 / 100Clear

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 13 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Minor
Arguments without a description: connection, auth, params, query.param_no_description
Minor
String arguments with no constraint or example: auth.sessionToken.loose_string_param

secureflows_build_logout_url

73 / 100Clear

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 21 / 25
Return value: 7 / 15
Constraints and side effects: 3 / 10
Examples: 5 / 10

Major
It may be destructive, but destructiveHint is not set.destructive_unmarked
Minor
The description mentions none of its 3 or more arguments.params_not_in_description

secureflows_lint_integration

73 / 100Clear

Purpose: 17 / 20
When to use: 20 / 20
Arguments: 23 / 25
Return value: 0 / 15
Constraints and side effects: 3 / 10
Examples: 10 / 10

Minor
Says nothing about what it returns.no_return_info

What static scoring cannot tell

This score reads only the text of each description and schema: it says what is written, not what a model will do. Short tools whose names already say what they do, such as browser_close, score low here even when models use them well, and in our measurements current models chose the right tool in one step even from one-line descriptions, as long as the names and schemas differed. What the text cannot show, such as what happens over several steps and whether an added sentence helps or misleads, is what an evaluation measures, on the Pro and Team plans.

Is your server listed here and you would rather it were not? Email support@forecall.dev, and we will take it off within 7 days.

All scored servers