wandb-mcp-server: Skill for Codex

Develop W&B MCP Tools

Establish the contract

1. Read CONTRIBUTING.md and the relevant tool, registration, and tests before editing.
2. Prefer extending an existing tool. Add a new public tool only when the request explicitly requires a distinct capability.
3. Record the intended public contract before coding:
   • input schema and validation;
   • read, write, or read/write behavior;
   • idempotency and ambiguous-timeout behavior;
   • canonical tool group, tool profile, access mode, prerequisite, and risk metadata;
   • bounded request, iteration, and response behavior;
   • stable error codes and retry guidance.
4. Keep caller-supplied GraphQL out of normal tools. Use documented SDK APIs or fixed, application-owned query-only projections.

Implement through shared boundaries

• Put tool behavior in src/wandb_mcp_server/mcp_tools/ and register it through register_tools().
• Add every public tool exactly once to src/wandb_mcp_server/runtime-contract.json; generate release evidence and documentation from that packaged contract rather than copying manifests.
• Treat WANDB_MCP_TOOL_PROFILE as the deployment capability envelope and WANDB_MCP_ACCESS_MODE=read-only as a monotonic subtraction. Neither replaces call-time authorization.
• Reuse the shared API configuration, URL resolution, error sanitizer, response budget, deadline, and InstrumentedFastMCP boundary.
• Classify the tool in admission.py; an unclassified tool is deliberately treated as heavy.
• Preserve public links on WANDB_BASE_URL; never expose a server-side route.
• Never log raw arguments, prompts, queries, filters, credentials, resource identifiers, or upstream response bodies.
• Add only bounded, low-cardinality telemetry dimensions.
• Do not retry non-idempotent writes. Return an explicit unknown outcome when a timeout makes write completion ambiguous.
• For optional external services, require an explicit reviewed profile and typed endpoint configuration, validate the endpoint, bound input and polling, disable redirects when credentials could cross origins, and keep the group out of managed profiles until its entitlement boundary is approved.
• For credential-forwarding HTTP tools, stream through a finite byte cap before JSON decoding, reject unexpected redirects or encodings, and bound the request by the active MCP tool deadline.