Skip to content

CompletionKit

by completionkit.com · remote · no sign-in to list tools · v1.0.0 · published by com.completionkit

Prompt evals over MCP: run a prompt on your dataset, score each output 1-5 with an LLM judge.

Deletes · 8Final · 2Changes · 26

54 tools: 8 can delete or cancel things, 2 do something that can't be undone, 26 change things and 18 only read.

Scanned Oct 21, 2026

5 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http evals https://completionkit.com/mcp --header 'Authorization: <your-authorization>'

Findings

Matches of fixed checks, with the text they matched.

5 info

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

54 tools

Deletes or cancels 8Claude Code: deny
  • datasets_deleteDelete a datasetNo findings

    Why it is in this group

    • The name "datasets_delete" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete a dataset
  • metric_groups_deleteDelete a metric groupNo findings

    Why it is in this group

    • The name "metric_groups_delete" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete a metric group
  • metric_versions_dismissDestroy a draft MetricVersion (use for either source: 'edit' or source: 'suggestion').No findings

    Why it is in this group

    • The name "metric_versions_dismiss" says "dismiss": a word for a change.
    • The description's first verb is "destroy": a word for removing or ending something.
    Description, as the server wrote it
    Destroy a draft MetricVersion (use for either source: 'edit' or source: 'suggestion'). Published versions are refused. To demote a published version, publish a different one as current instead.
  • metrics_deleteDelete a metricNo findings

    Why it is in this group

    • The name "metrics_delete" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete a metric
  • prompts_deleteDelete a promptNo findings

    Why it is in this group

    • The name "prompts_delete" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete a prompt
  • provider_credentials_deleteDelete a provider credential1 finding

    Why it is in this group

    • The name "provider_credentials_delete" says "delete": a word for removing or ending something.

    Findings

    Description, as the server wrote it
    Delete a provider credential
  • runs_deleteDelete a runNo findings

    Why it is in this group

    • The name "runs_delete" says "run": a word for a change.
    • The description's first verb is "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete a run
  • tags_deleteDelete a tag.No findings

    Why it is in this group

    • The name "tags_delete" says "delete": a word for removing or ending something.
    Description, as the server wrote it
    Delete a tag. Removes the tag from every linked metric, prompt, run, and dataset.
Can't be undone 2Claude Code: ask
  • metric_versions_publishPublish a MetricVersion as the live version of its metric.No findings

    Why it is in this group

    • The name "metric_versions_publish" says "publish": a word for a change that another call does not undo.
    Description, as the server wrote it
    Publish a MetricVersion as the live version of its metric. Works for both 'draft → published' and 'revert to an older published version → current'. Transactionally flips current, demotes peers, and writes the version's instruction + rubric_bands back onto the metric so the judge grades against it.
  • prompts_publishPublish a prompt version, making it the current versionNo findings

    Why it is in this group

    • The name "prompts_publish" says "publish": a word for a change that another call does not undo.
    Description, as the server wrote it
    Publish a prompt version, making it the current version
Changes things 26Claude Code: ask
  • agreements_createUpsert an agreement for (run, response, metric, created_by).No findings

    Why it is in this group

    • The name "agreements_create" says "create": a word for a change.
    Description, as the server wrote it
    Upsert an agreement for (run, response, metric, created_by). Verdict is one of agree, disagree, borderline. corrected_score (1..5) is required when verdict is 'disagree'.
  • datasets_createCreate a dataset with CSV data.No findings

    Why it is in this group

    • The name "datasets_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a dataset with CSV data. First row is the header. Two column names are recognized specially: "expected_output" is each row's answer key (ground truth) given to the judge and to checks that compare against the row's expected value, and "actual_output" is a pre-made output to score in a prompt-less run. Both are overridable per run (expected_column / output_column). Every column is also available to the prompt as a variable.
  • datasets_create_from_urlCreate a dataset by downloading CSV from a URL instead of inlining it.No findings

    Why it is in this group

    • The name "datasets_create_from_url" says "create": a word for a change.
    Description, as the server wrote it
    Create a dataset by downloading CSV from a URL instead of inlining it. Use this for large datasets: pass a public http(s) URL and the server fetches the CSV directly, so the data never has to pass through the tool-call arguments. The URL is SSRF-checked and the download is capped at 10MB. First row is the header; the "expected_output" (answer key) and "actual_output" (pre-made output) columns are recognized specially, overridable per run.
  • datasets_updateUpdate a datasetNo findings

    Why it is in this group

    • The name "datasets_update" says "update": a word for a change.
    Description, as the server wrote it
    Update a dataset
  • judges_replayCreate a scoring run for the current judge over a dataset's existing outputs (wraps runs_create with prompt_id omitted and output_column supplied).No findings

    Why it is in this group

    • The description's first verb is "create": a word for a change.
    Description, as the server wrote it
    Create a scoring run for the current judge over a dataset's existing outputs (wraps runs_create with prompt_id omitted and output_column supplied). This only sets up the run; call runs_generate to actually re-judge the outputs so you can compare against human verdicts.
  • metric_groups_createCreate a metric groupNo findings

    Why it is in this group

    • The name "metric_groups_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a metric group
  • metric_groups_updateUpdate a metric groupNo findings

    Why it is in this group

    • The name "metric_groups_update" says "update": a word for a change.
    Description, as the server wrote it
    Update a metric group
  • metrics_createCreate a metric with evaluation criteria.No findings

    Why it is in this group

    • The name "metrics_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a metric with evaluation criteria. For a deterministic check set metric_type:"check" and check_config. Per-kind required keys: value (contains/not_contains/equals/list_overlap/numeric_equals), pattern (regex), json_path+expected (json_path_equals), min and/or max (length_bounds/numeric_bounds); valid_json takes no extra keys. target_path is required when target is json_path; a target_path sent with no target sets target to json_path, and one sent with any other target is refused. target_path walks array indices, as in items.0.name; any path may start at the root with $., as in $.items.0.name. list_overlap grades a list-valued field and stores a fraction rather than a verdict: score_by is recall, precision, f1 or jaccard (recall by default), and min is the fraction that counts as a pass (1, a perfect score, by default). numeric_bounds and numeric_equals read a number, ignoring the thousands commas and currency symbol a figure is written with; a comma counts only as a thousands separator, with three digits after it and no decimal point before it, so 1,5 is not a number; numeric_equals takes a tolerance, either a plain number for a fixed amount or a percentage string such as 2% for a share of the expected value. A check with no case_sensitive matches case-insensitively, regex and list_overlap included; send case_sensitive: true to match case exactly. Before 0.29.0 a regex check read a missing case_sensitive as case-sensitive. Set compare_to:"expected" on contains, not_contains, equals, json_path_equals, list_overlap, numeric_equals to grade against each row's own expected_output (ground truth) instead of a constant; drop value (or expected, for json_path_equals) and add expected_path to dig into the answer key when it is JSON.
  • metrics_suggest_variantsAsk the model to rewrite the metric's judge instruction in N variants targeted at the recent disagreements.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Ask the model to rewrite the metric's judge instruction in N variants targeted at the recent disagreements. Each variant is saved as a draft MetricVersion with source="suggestion". Returns the persisted drafts. Stripe-metering hooks fire via ActiveSupport::Notifications under completion_kit.judge_suggestion.generated.
  • metrics_updateUpdate a metric.No findings

    Why it is in this group

    • The name "metrics_update" says "update": a word for a change.
    Description, as the server wrote it
    Update a metric. For a deterministic check set metric_type:"check" and check_config. Per-kind required keys: value (contains/not_contains/equals/list_overlap/numeric_equals), pattern (regex), json_path+expected (json_path_equals), min and/or max (length_bounds/numeric_bounds); valid_json takes no extra keys. target_path is required when target is json_path; a target_path sent with no target sets target to json_path, and one sent with any other target is refused. target_path walks array indices, as in items.0.name; any path may start at the root with $., as in $.items.0.name. list_overlap grades a list-valued field and stores a fraction rather than a verdict: score_by is recall, precision, f1 or jaccard (recall by default), and min is the fraction that counts as a pass (1, a perfect score, by default). numeric_bounds and numeric_equals read a number, ignoring the thousands commas and currency symbol a figure is written with; a comma counts only as a thousands separator, with three digits after it and no decimal point before it, so 1,5 is not a number; numeric_equals takes a tolerance, either a plain number for a fixed amount or a percentage string such as 2% for a share of the expected value. A check with no case_sensitive matches case-insensitively, regex and list_overlap included; send case_sensitive: true to match case exactly. Before 0.29.0 a regex check read a missing case_sensitive as case-sensitive. Set compare_to:"expected" on contains, not_contains, equals, json_path_equals, list_overlap, numeric_equals to grade against each row's own expected_output (ground truth) instead of a constant; drop value (or expected, for json_path_equals) and add expected_path to dig into the answer key when it is JSON.
  • promptfoo_importImport a promptfooconfig.yaml.No findings

    Why it is in this group

    • The name "promptfoo_import" says "import": a word for a change.
    Description, as the server wrote it
    Import a promptfooconfig.yaml. Creates a prompt, a dataset from the test vars, and metrics from the assert blocks (llm-rubric/g-eval become judge metrics; contains/equals/regex/is-json become deterministic check metrics). Returns a summary of what mapped and what was skipped and why; nothing is dropped silently.
  • prompts_createCreate a promptNo findings

    Why it is in this group

    • The name "prompts_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a prompt
  • prompts_suggest_improvementSuggest an improved version of a prompt, grounded in a run's test results and judge feedback.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Suggest an improved version of a prompt, grounded in a run's test results and judge feedback. Analyzes the run's responses, scores, and reviews, then returns reasoning plus a rewritten template (preserving {{variables}}) and persists it as a Suggestion. Requires a run that has a prompt (not a scoring-only run).
  • prompts_updateUpdate a prompt.No findings

    Why it is in this group

    • The name "prompts_update" says "update": a word for a change.
    Description, as the server wrote it
    Update a prompt. If the prompt already has runs, this creates a new DRAFT version (current=false) rather than editing in place or publishing. Promote it with prompts_publish, so an agent's edits don't go live without a gate. If it has no runs, it is updated in place.
  • provider_credentials_createCreate a provider credential1 finding

    Why it is in this group

    • The name "provider_credentials_create" says "create": a word for a change.

    Findings

    Description, as the server wrote it
    Create a provider credential
  • provider_credentials_updateUpdate a provider credential.1 finding

    Why it is in this group

    • The name "provider_credentials_update" says "update": a word for a change.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "Update a provider credential. Changing provider or api_endpoint on a..."

      What this check looks for
    Description, as the server wrote it
    Update a provider credential. Changing provider or api_endpoint on a credential with a stored key requires api_key in the same call, so a stored key never moves to a new provider or endpoint.
  • runs_createCreate a run.No findings

    Why it is in this group

    • The name "runs_create" says "run": a word for a change.
    Description, as the server wrote it
    Create a run. Omit prompt_id and provide output_column to score existing outputs by grading a pre-existing dataset column instead of generating new ones.
  • runs_generateStart a run.No findings

    Why it is in this group

    • The name "runs_generate" says "run": a word for a change.
    Description, as the server wrote it
    Start a run. Required for every run, including score-only runs (no prompt): generates responses with the prompt when there is one, otherwise copies the graded dataset column and grades it.
  • runs_getGet a run by ID, including "metric_averages": a per-metric breakdown with each metric's average score (or pass rate for checks), how many rows it graded, and how many scored low.No findings

    Why it is in this group

    • The name "runs_get" says "run": a word for a change.
    Description, as the server wrote it
    Get a run by ID, including "metric_averages": a per-metric breakdown with each metric's average score (or pass rate for checks), how many rows it graded, and how many scored low. Use this to find the metric dragging a prompt down without listing responses.
  • runs_listList all runsNo findings

    Why it is in this group

    • The name "runs_list" says "run": a word for a change.
    Description, as the server wrote it
    List all runs
  • runs_regradeRe-grade a run's existing responses with its currently attached metrics, without regenerating.No findings

    Why it is in this group

    • The name "runs_regrade" says "run": a word for a change.
    Description, as the server wrote it
    Re-grade a run's existing responses with its currently attached metrics, without regenerating. Use after attaching or editing metrics on an already-generated run.
  • runs_rerunCreate and start a fresh copy of a run with the same prompt, dataset, metrics, and settings.No findings

    Why it is in this group

    • The name "runs_rerun" says "run": a word for a change.
    Description, as the server wrote it
    Create and start a fresh copy of a run with the same prompt, dataset, metrics, and settings. Use when the judge changed and you want a clean run instead of mixing versions.
  • runs_retry_failuresRe-run only the failed responses of a run, optionally limited to specific response ids via "only".No findings

    Why it is in this group

    • The name "runs_retry_failures" says "run": a word for a change.
    Description, as the server wrote it
    Re-run only the failed responses of a run, optionally limited to specific response ids via "only".
  • runs_updateUpdate a runNo findings

    Why it is in this group

    • The name "runs_update" says "run": a word for a change.
    Description, as the server wrote it
    Update a run
  • tags_createCreate a tag.No findings

    Why it is in this group

    • The name "tags_create" says "create": a word for a change.
    Description, as the server wrote it
    Create a tag. Color is auto-assigned.
  • tags_updateRename a tag.No findings

    Why it is in this group

    • The name "tags_update" says "update": a word for a change.
    Description, as the server wrote it
    Rename a tag.
Only reads 18Claude Code: allow
  • agreements_listList agreements.No findings

    Why it is in this group

    • The name "agreements_list" says "list": a word for reading.
    Description, as the server wrote it
    List agreements. Filter by run_id, response_id, metric_id, or created_by.
  • datasets_getGet a dataset by IDNo findings

    Why it is in this group

    • The name "datasets_get" says "get": a word for reading.
    Description, as the server wrote it
    Get a dataset by ID
  • datasets_listList all datasetsNo findings

    Why it is in this group

    • The name "datasets_list" says "list": a word for reading.
    Description, as the server wrote it
    List all datasets
  • judges_compareCompare two versions of one metric's agreement stats side by side.No findings

    Why it is in this group

    • The name "judges_compare" says "compare": a word for reading.
    Description, as the server wrote it
    Compare two versions of one metric's agreement stats side by side. Requires metric_id, metric_version_a_id, and metric_version_b_id (both versions must belong to that metric). Unavailable for check metrics.
  • metric_groups_getGet a metric group by IDNo findings

    Why it is in this group

    • The name "metric_groups_get" says "get": a word for reading.
    Description, as the server wrote it
    Get a metric group by ID
  • metric_groups_listList all metric groupsNo findings

    Why it is in this group

    • The name "metric_groups_list" says "list": a word for reading.
    Description, as the server wrote it
    List all metric groups
  • metric_versions_listList every MetricVersion (drafts + published) for a metric, newest first.No findings

    Why it is in this group

    • The name "metric_versions_list" says "list": a word for reading.
    Description, as the server wrote it
    List every MetricVersion (drafts + published) for a metric, newest first. Each row carries version_number, state, source, current flag, and timestamps.
  • metrics_getGet a metric by IDNo findings

    Why it is in this group

    • The name "metrics_get" says "get": a word for reading.
    Description, as the server wrote it
    Get a metric by ID
  • metrics_listList all metricsNo findings

    Why it is in this group

    • The name "metrics_list" says "list": a word for reading.
    Description, as the server wrote it
    List all metrics
  • prompts_getGet a prompt by IDNo findings

    Why it is in this group

    • The name "prompts_get" says "get": a word for reading.
    Description, as the server wrote it
    Get a prompt by ID
  • prompts_listList all promptsNo findings

    Why it is in this group

    • The name "prompts_list" says "list": a word for reading.
    Description, as the server wrote it
    List all prompts
  • provider_credentials_getGet a provider credential by ID (API key is not exposed)1 finding

    Why it is in this group

    • The name "provider_credentials_get" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "Get a provider credential by ID (API key is not exposed)"

      What this check looks for
    Description, as the server wrote it
    Get a provider credential by ID (API key is not exposed)
  • provider_credentials_listList all provider credentials (API keys are not exposed)1 finding

    Why it is in this group

    • The name "provider_credentials_list" says "list": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "List all provider credentials (API keys are not exposed)"

      What this check looks for
    Description, as the server wrote it
    List all provider credentials (API keys are not exposed)
  • responses_getGet a specific responseNo findings

    Why it is in this group

    • The name "responses_get" says "get": a word for reading.
    Description, as the server wrote it
    Get a specific response
  • responses_listList responses for a run, in row order.No findings

    Why it is in this group

    • The name "responses_list" says "list": a word for reading.
    Description, as the server wrote it
    List responses for a run, in row order. Returns {total, limit, offset, returned, responses}. Defaults to 50 rows because full payloads are large: use "fields" to drop the bodies, "min_score"/"max_score" to isolate low scorers, and sort "score_asc" to read the worst rows first. For per-metric averages of the whole run use runs_get instead of aggregating here.
  • tags_getGet a tag by IDNo findings

    Why it is in this group

    • The name "tags_get" says "get": a word for reading.
    Description, as the server wrote it
    Get a tag by ID
  • tags_listList all tagsNo findings

    Why it is in this group

    • The name "tags_list" says "list": a word for reading.
    Description, as the server wrote it
    List all tags
  • usage_getGet this organization's plan usage and limits for the current billing period: runs and prompt fetches used, their limits, how many remain, and when the period resets.No findings

    Why it is in this group

    • The name "usage_get" says "get": a word for reading.
    Description, as the server wrote it
    Get this organization's plan usage and limits for the current billing period: runs and prompt fetches used, their limits, how many remain, and when the period resets. Call this to pre-check quota before starting runs. Runs are hard-blocked once the run limit is reached (with a small grace band), so a run over the limit will fail with run_limit_reached.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http evals https://completionkit.com/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__evals__prompts_list",
      "mcp__evals__prompts_get",
      "mcp__evals__responses_list",
      "mcp__evals__responses_get",
      "mcp__evals__datasets_list",
      "mcp__evals__datasets_get",
      "mcp__evals__metrics_list",
      "mcp__evals__metrics_get",
      "mcp__evals__metric_groups_list",
      "mcp__evals__metric_groups_get",
      "mcp__evals__metric_versions_list",
      "mcp__evals__provider_credentials_list",
      "mcp__evals__provider_credentials_get",
      "mcp__evals__tags_list",
      "mcp__evals__tags_get",
      "mcp__evals__agreements_list",
      "mcp__evals__judges_compare",
      "mcp__evals__usage_get"
    ],
    "ask": [
      "mcp__evals__prompts_create",
      "mcp__evals__prompts_update",
      "mcp__evals__prompts_publish",
      "mcp__evals__prompts_suggest_improvement",
      "mcp__evals__runs_list",
      "mcp__evals__runs_get",
      "mcp__evals__runs_create",
      "mcp__evals__runs_update",
      "mcp__evals__runs_generate",
      "mcp__evals__runs_regrade",
      "mcp__evals__runs_rerun",
      "mcp__evals__runs_retry_failures",
      "mcp__evals__datasets_create",
      "mcp__evals__datasets_update",
      "mcp__evals__datasets_create_from_url",
      "mcp__evals__metrics_create",
      "mcp__evals__metrics_update",
      "mcp__evals__metrics_suggest_variants",
      "mcp__evals__metric_groups_create",
      "mcp__evals__metric_groups_update",
      "mcp__evals__metric_versions_publish",
      "mcp__evals__provider_credentials_create",
      "mcp__evals__provider_credentials_update",
      "mcp__evals__tags_create",
      "mcp__evals__tags_update",
      "mcp__evals__agreements_create",
      "mcp__evals__judges_replay",
      "mcp__evals__promptfoo_import"
    ],
    "deny": [
      "mcp__evals__prompts_delete",
      "mcp__evals__runs_delete",
      "mcp__evals__datasets_delete",
      "mcp__evals__metrics_delete",
      "mcp__evals__metric_groups_delete",
      "mcp__evals__metric_versions_dismiss",
      "mcp__evals__provider_credentials_delete",
      "mcp__evals__tags_delete"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as evals. Review it before you use it.