Every tool description in a registered MCP server is sent to the LLM on every turn. I published mcp-scorecard on PyPI to grade that surface across four layers: passive token footprint, use-case scoping, security own rules, and name safety. Here's the reasoning behind each layer.
MCP Scorecard: 4-Layer Pre-flight Check Before You Publish a Server
