# io.github.michal-lefler/secure-flows: tool descriptions scored

- tools/list taken: 2026-11-02 (UTC)
- From: [Official MCP Registry](https://registry.modelcontextprotocol.io/v0/servers/io.github.michal-lefler%2Fsecure-flows/versions/latest)
- Connected to: https://www.secure-flows.com/mcp?alias=secure-flows
- Homepage: https://www.secure-flows.com/
- Repository: https://github.com/michal-lefler/secure-flows
- Scoring rules: v2
- Tools: 18
- Average: 67.3 / 100 (Cloudy)
- Near-identical pairs: 3

This page shows how io.github.michal-lefler/secure-flows's tool descriptions scored, the issues found and the names of its tools and parameters. The descriptions are the server's own: read them where the copy came from.

Forecall asked the URL this server lists in the official MCP Registry for its tools/list once, on the date above, without calling any tool. The server may have changed since.

## Across the server

- Minor: The server has no instructions. Say there, once, what the server is for and when to use it: Claude Code and Gemini CLI read the instructions before the tool descriptions.

## Tools

- `post_sessions_revoke_session_id`: 60 / 100
  - Major: Arguments without a description: connection, auth, params, params.sessionId, query, body.
  - Minor: String arguments with no constraint or example: auth.userToken.
  - Minor: Says nothing about what it returns.
- `post_auth_logout`: 61 / 100
  - Major: Arguments without a description: connection, auth, params, query, body.
  - Minor: String arguments with no constraint or example: auth.sessionToken.
  - Minor: Says nothing about what it returns.
- `post_sessions_revoke`: 61 / 100
  - Major: Arguments without a description: connection, auth, params, query, body.
  - Minor: String arguments with no constraint or example: auth.sessionToken.
  - Minor: Says nothing about what it returns.
- `get_sessions_get_key`: 62 / 100
  - Minor: Arguments without a description: connection, auth, params, query, body.
  - Minor: String arguments with no constraint or example: auth.sessionToken.
  - Minor: Says nothing about what it returns.
- `get_docs_search`: 64 / 100
  - Minor: Arguments without a description: connection, auth, params, query, body.
- `auth_session_callback`: 67 / 100
  - Major: Arguments without a description: connection, auth, params, query, query.firebaseToken, query.client_redirect_uri, query.workspace_name, query.app_id, query.state, body.
  - Minor: String arguments with no constraint or example: query.firebaseToken, query.workspace_name, query.app_id, query.state.
- `get_sessions`: 68 / 100
  - Major: Arguments without a description: connection, auth, params, query, body.
  - Minor: String arguments with no constraint or example: auth.sessionToken.
- `get_sessions_identity`: 68 / 100
  - Major: Arguments without a description: connection, auth, params, query, body.
  - Minor: String arguments with no constraint or example: auth.sessionToken.
- `delete_sessions_delete_key`: 69 / 100
  - Minor: Arguments without a description: connection, auth, params, query, body.
  - Minor: String arguments with no constraint or example: auth.sessionToken.
  - Major: It may be destructive, but destructiveHint is not set.
- `post_sessions`: 69 / 100
  - Minor: Arguments without a description: connection, auth, params, query, body, body.app_id.
  - Minor: String arguments with no constraint or example: auth.firebaseToken.
- `post_sessions_get_or_create`: 69 / 100
  - Minor: Arguments without a description: connection, auth, params, query, body, body.app_id.
  - Minor: String arguments with no constraint or example: auth.firebaseToken.
- `post_sessions_renew_session_token`: 69 / 100
  - Minor: Arguments without a description: connection, auth, params, query, body.
  - Minor: String arguments with no constraint or example: auth.firebaseToken.
  - Major: It may be destructive, but destructiveHint is not set.
- `secureflows_build_login_url`: 69 / 100
  - Minor: The description mentions none of its 3 or more arguments.
  - Minor: No constraints, side effects, auth or rate limits described, and no annotations.
  - Minor: Required identifiers whose description does not say where the value comes from: appId. Name the tool or the place that returns it, or models look it up first.
- `get_auth_logout`: 70 / 100
  - Minor: Arguments without a description: connection, auth, params, query, body.
- `get_sessions_my`: 70 / 100
  - Minor: Arguments without a description: connection, auth, params, query, query.page, query.sort, query.dir, body.
  - Minor: String arguments with no constraint or example: auth.userToken.
- `post_sessions_set_key`: 70 / 100
  - Minor: Arguments without a description: connection, auth, params, query.
  - Minor: String arguments with no constraint or example: auth.sessionToken.
- `secureflows_build_logout_url`: 73 / 100
  - Minor: The description mentions none of its 3 or more arguments.
  - Major: It may be destructive, but destructiveHint is not set.
- `secureflows_lint_integration`: 73 / 100
  - Minor: Says nothing about what it returns.

Is your server listed here and you would rather it were not? Email support@forecall.dev, and we will take it off within 7 days.

[All scored servers](https://forecall.dev/en/servers)