REVIEW 3 major objections 4 minor 9 cited by
MCP-Bench: Benchmarking Tool-Using LLM Agents with Complex Real-World Tasks via MCP Servers
T0 review · 3 major / 4 minor · reviewed 2026-08-05 · deepseek-v4-flash
Pith's one-line read This paper introduces MCP-Bench, a benchmark of 104 multi-step tasks over 28 live MCP servers and 250 tools, and claims that even frontier LLM agents score below 0.75 overall, with long-horizon planning as the main bottleneck.
desk verdict MCP-Bench is a real scale-up for MCP tool-use evaluation, but the headline numbers aren't reproducible from the method as written, and the judge's low-score default makes the absolute 'far from proficient' claim hard to read. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
The load-bearing machinery is the combination of a genuine MCP server ecosystem and a two-tier evaluation. Each task runs against 28 production MCP servers, and 10 distractor servers are attached per instance so tool retrieval happens in a large heterogeneous space. An LLM-guided task synthesis pipeline first discovers dependency chains from tool input/output signatures, filters tasks for solvability and utility, then rewrites them into fuzzy conversational instructions that hide tool names and execution steps. Evaluation combines rule-based checks for tool name validity, schema compliance, runtime success, and dependency order with an LLM-as-a-judge rubric that scores task completion, tool
What would settle it
Independently re-score a random sample of raw execution traces from the 104 tasks, either with human annotators using the paper's own rubrics or with a judge from a different model family, and compare the resulting model ordering to o4-mini's. Also check that each task admits a reference trajectory using only tools in its allowed set. If the ordering flips or many tasks lack a solvable trajectory, the central difficulty claim fails.
Extended reading notes
Core claim
The central discovery MCP-Bench is built to expose is that modern LLM agents handle the mechanics of tool use well and the orchestration poorly. Across 20 models, valid tool name rates are mostly above 95% and strong models exceed 98% schema compliance, but overall task scores top out at 0.749, and the largest model-to-model gaps appear in dependency awareness and parallelism, not execution fidelity. The paper interprets this as evidence that basic tool execution has largely converged while long-horizon planning, cross-server coordination, and evidence grounding remain the differentiators. The claim is not that agents cannot call tools; it is that they cannot reliably chain many complementar
Load-bearing premise
The rankings stand on the o4-mini judge's rubric scores being accurate measures of completion, grounding, and planning across the 104 tasks, but the judge was validated only on a separate 50-task set and belongs to the same model family that generated the tasks.
Editorial extensions
If this is right
- If planning is the main differentiator, progress on tool-using agents should come from dependency-aware planning and long-horizon coordination rather than better schema parsing.
- Multi-server settings expose a robustness gap: weaker models degrade noticeably in dependency awareness and parallelism, while strong models stay stable, making cross-server orchestration a distinct capability to measure.
- Fuzzy task descriptions that hide tool names can be reused by other MCP-based benchmarks to test tool discovery and retrieval under underspecification.
- Prompt shuffling and score averaging reduce judge variance, with coefficient of variation dropping from 16.8% to 15.1%, suggesting the evaluation pipeline is more stable despite relying on an LLM judge.
- The top overall score still below 0.75 indicates that no tested model comes close to mastering complex, multi-server tool use, leaving clear headroom for future agent designs.
Reading between the lines
- A natural next test would be to re-score the 104 tasks with a judge from a different model family or with human gold labels, since o4-mini both synthesized the tasks and judged them, so rankings could partly reflect judge-model affinity.
- Because MCP-Bench runs on live servers, tool outputs change over time; freezing a snapshot of tool responses would make leaderboards reproducible across later runs.
- The paper's tool-call efficiency data suggest a Pareto frontier metric combining task score with number of rounds or calls could make efficiency a first-class evaluation axis.
- The fuzzy-instruction format could connect directly to tool-retrieval ranking problems, where the task is to select the right tools from a large action space before any execution happens.
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. MCP-Bench introduces a benchmark for LLM agents that use Model Context Protocol (MCP) servers. It comprises 104 tasks built from 28 real MCP servers and 250 tools, with tasks synthesized by an LLM pipeline that first discovers tool dependency chains, filters for solvability/utility, and rewrites instructions into fuzzy, natural-language requests. Agents are evaluated with a two-tier system: rule-based metrics for tool-name validity, schema compliance, execution success, and dependency order; and an LLM-as-a-judge rubric for task completion, tool usage, and planning effectiveness, with prompt shuffling and score averaging. Experiments over 20 LLMs report high schema compliance and execution success but substantially lower planning and task-completion scores, leading the authors to conclude that planning and reasoning are the main differentiators among current agents.
Significance. If the evaluation is trustworthy, MCP-Bench is a useful, more realistic complement to existing tool-use benchmarks: it covers multiple coordinated servers, fuzzy instructions, information grounding, and cross-domain orchestration, and it ships with code and data. The rule-based metrics (valid tool, schema compliance, execution success) are objective and reproducible, and the scale of the model comparison (20 models) is a strength. However, the headline leaderboard and the central 'planning is the key differentiator' claim rest on the LLM-judge scores, and the manuscript's own validation of that judge is performed on a different, simpler task set. Given that the judge prompt also contains explicit low-score calibration anchors, the absolute proficiency numbers and some comparative conclusions are currently fragile. The paper is worth publishing after the judge is validated on the actual benchmark and after the score aggregation is made transparent and reproducible.
major comments (3)
- [§5.2, Table 3] The reported Overall Scores are not reproducible from the aggregation described in §5.2. The text says sub-dimensions are averaged within each axis and the final judgment score is the average of axis-level scores. For gpt-5, the six sub-scores in Table 3 are 0.677, 0.828, 0.767, 0.749, 0.649, 0.339; both the average of the six sub-scores and the average of the three implied axis means are 0.668, not the reported 0.749. For o3 the corresponding average is 0.625, not 0.715. Since Overall Score is the headline leaderboard quantity used for the paper's main conclusions, the exact formula must be stated and the tables/text corrected, or the discrepancy resolved.
- [§6.4 and Appendix A.4] The LLM judge is validated only on a separate 50-task WebSearch/Time set, not on the 104 MCP-Bench tasks. The reported human agreement of 1.43/2 is moderate, and the ablation shows only a modest CV reduction (16.8% to 15.1%). Meanwhile, the judge prompt in Appendix A.4 contains explicit low-score anchors: 'Default to 4–5 unless you have strong evidence for higher', 'Most real-world executions should score 4–6', and 'Scores of 8+ should be EXCEPTIONAL'. These instructions compress the score scale, so the absolute statement that even gpt-5 (0.749) is 'far from proficient' is at least partly a property of the rubric rather than a measured property of the agent. The authors should validate the judge on MCP-Bench tasks (e.g., with human annotations on a representative sample), report per-axis agreement and score distributions, and show that the main rankings and the planning-differentiator co
- [§4.2, §5.2, Appendix A.4] The same model family (o4-mini) is used both for task synthesis and as the default judge, and the judge is given the dependency analysis produced during synthesis. This is not derivation-level circularity, but it creates a shared-bias risk: if o4-mini's dependency analysis is inaccurate or favors a particular reasoning style, the judge may systematically reward models that happen to follow that style. The paper should provide a robustness check with at least one independent judge family (e.g., a Claude or Gemini model) on a subset of tasks, and report agreement across judges and across model families. It would also strengthen the benchmark to report how many of the 104 tasks were independently human-verified for solvability, rather than relying only on the LLM-based quality filter.
minor comments (4)
- [§4.2] Typo: 'disgarded' should be 'discarded'.
- [§6.4] The text says 'As shown in Table 1' for the ablation results; the correct reference is Table 7.
- [§2 / References] The benchmark name is spelled inconsistently as 'MCP-RADER' in the introduction and 'MCP-RADAR' in the related-work section; please unify.
- [§5.2 / Table 3] The table header 'Schema Understanding' combines valid-tool name and schema compliance; the relationship between these rule-based columns and the LLM-judge axes should be clarified in the caption, especially since the 'Overall Score' appears to be a different aggregation than the six listed sub-scores.
Circularity Check
No circularity: benchmark scores are empirical measurements, not fitted inputs or self-citation-derived claims.
full rationale
MCP-Bench is an empirical benchmark rather than a derived prediction chain. The leaderboard and capability conclusions come from rule-based trajectory metrics plus LLM-as-a-judge rubric scores; no parameter is fitted to a subset of data and then reported as a prediction, and no result is defined in terms of the claim it is supposed to establish. The judge is given the dependency analysis and concrete task reference produced during synthesis, but this serves as a gold-standard evaluation specification, not as an input that forces the reported scores. Rule-based metrics (valid tool name rate, schema compliance, execution success) independently support the claim that basic execution has converged, while the planning-differentiator conclusion relies on judge sub-scores that are not statistically forced by the rubric's calibration anchors ('Default to 4–5', 'Most real-world executions should score 4–6'); those anchors affect absolute levels but do not determine the comparative ordering across 20 models. No load-bearing self-citation, imported uniqueness theorem, or ansatz-smuggled-by-citation appears. The apparent inconsistency between the Overall Score aggregation described in Section 5.2 and the reported values in Table 3 is a reproducibility defect, not circularity. The use of o4-mini for both task synthesis and judging raises validity concerns, but this is not a case where the result is equivalent to its input by construction, so it does not change the circularity verdict.
Assumptions & free parameters
free parameters (5)
- solvability threshold =
9.0/10
- utility threshold =
5.0/10
- max execution rounds T_max =
20
- number of judge shuffles =
5
- distractor servers per task =
10
assumptions (4)
- domain assumption o4-mini-generated dependency analyses and tasks labeled solvable (>=9/10) are genuinely solvable and realistic.
- domain assumption LLM-as-a-judge rubric scores are valid measures of task completion, grounding, tool appropriateness, and planning quality.
- domain assumption Live MCP servers return correct and sufficiently stable data across evaluation runs.
- ad hoc to paper The dependency analysis given to the judge is correct and is the right reference for scoring.
Cite this review
Pith. "Pith review of MCP-Bench: Benchmarking Tool-Using LLM Agents with Complex Real-World Tasks via MCP Servers." pith.science (2026). https://pith.science/paper/4TSBJ2Q3
@misc{pith2026250820453,
author = {Pith},
title = {Pith review of: MCP-Bench: Benchmarking Tool-Using LLM Agents with Complex Real-World Tasks via MCP Servers},
year = {2026},
howpublished = {\url{https://pith.science/paper/4TSBJ2Q3}},
note = {Machine review of arXiv:2508.20453}
}
read the original abstract
We introduce MCP-Bench, a benchmark for evaluating large language models (LLMs) on realistic, multi-step tasks that demand tool use, cross-tool coordination, precise parameter control, and planning/reasoning for solving tasks. Built on the Model Context Protocol (MCP), MCP-Bench connects LLMs to 28 representative live MCP servers spanning 250 tools across domains such as finance, traveling, scientific computing, and academic search. Unlike prior API-based benchmarks, each MCP server provides a set of complementary tools designed to work together, enabling the construction of authentic, multi-step tasks with rich input-output coupling. Tasks in MCP-Bench test agents' ability to retrieve relevant tools from fuzzy instructions without explicit tool names, plan multi-hop execution trajectories for complex objectives, ground responses in intermediate tool outputs, and orchestrate cross-domain workflows - capabilities not adequately evaluated by existing benchmarks that rely on explicit tool specifications, shallow few-step workflows, and isolated domain operations. We propose a multi-faceted evaluation framework covering tool-level schema understanding and usage, trajectory-level planning, and task completion. Experiments on 20 advanced LLMs reveal persistent challenges in MCP-Bench. Code and data: https://github.com/Accenture/mcp-bench.
Forward citations
Cited by 9 Pith papers
-
DynamicMCPBench: A Trace-Grounded, Effect-Scored Benchmark for LLM Agents over Live MCP Servers
A trace-grounded, effect-scored benchmark framework shows that even the strongest LLM agents solve only ~half of live MCP tasks, with accuracy collapsing on longer tool chains.
-
ClawBench: Can AI Agents Complete Everyday Online Tasks?
ClawBench is a benchmark of 153 live-web tasks where AI agents achieve low success rates, e.g. 33.3% for Claude Sonnet 4.6.
-
SciVisAgentBench: A Benchmark for Evaluating Scientific Data Analysis and Visualization Agents
SciVisAgentBench provides 108 expert-crafted tasks and a mixed LLM-plus-deterministic evaluation pipeline for benchmarking AI agents that perform scientific visualization workflows.
-
GABench: A Comprehensive Benchmark for Evaluating LLM Agents on Graph Analysis Tasks
GABench provides the first agentic graph-analysis benchmark with 10,400 executable tasks, and finds existing LLM agents succeed on under 40% of complex graph tasks.
-
Messier: A High-Resolution Corpus for Cross-Benchmark Agent Evaluation
A unified corpus of 957k trial outcomes shows frontier progress is uneven and strict all-pass aggregation obscures capability and can reorder agents.
-
SpecBox: Speculative Sandbox Scheduling for Efficient LLM Agent Serving
SpecBox overlaps LLM agent sandbox preparation with token generation and predicts future tool sandboxes, cutting P99 latency by 2.9× and peak memory by 45.9% in its prototype.
-
Impatient Users Confuse AI Agents: High-fidelity Simulations of Human Traits for Testing Agents
Contrastive activation vectors can steer LLM user simulators into impatient, confused, skeptical, or incoherent personas, and the resulting τ-Trait benchmark shows large performance drops in frontier tool-calling agents.
-
Schema-Bound LLM Control of Scientific Instrumentation through Model Context Protocol Skills
A schema-bound MCP server with a vendor-neutral adapter contract, live-job lifecycle, and prompt-registered skills lets local LLMs drive a simulated microscope with bounded execution.
-
Toward Efficient Agents: Memory, Tool learning, and Planning
A survey that organizes efficiency techniques for LLM agents into memory, tool learning, and planning, and consolidates benchmarks and metrics for measuring cost-performance trade-offs.
Reference graph
Works this paper leans on
-
[1]
Assess if the original task is fully completed
-
[2]
If not complete, decide if another round would provide significant value
-
[3]
If continuing, plan PARALLEL tool executions for this round PARALLEL EXECUTION PLANNING (if continuing): • Plan ALL tool calls for this round to execute in PARALLEL • ALL tools in this round will run simultaneously without dependencies • EARLYEXECUTIONPRINCIPLE: Plan all necessary tool calls that don’t require dependencies • AVOID REDUNDANT CALLS:Don’t re...
-
[4]
ALL tasks MUST be self-contained and executableWITHOUT any external dependencies
-
[5]
NEVER reference external resourceslike: • URLs (like "https://api.example.com" or any external API) • Local files (like "user-management.yaml" or "config.json") • Databases or external systems • "Our API", "our system", "our database"
-
[6]
ALL data must come from either: • The provided tools themselves (what they can generate/fetch/calculate) • Concrete values you specify in the task (numbers, names, parameters)
-
[7]
NEVER use vague references: • "user-provided parameters" or "user-specified" • "fetched from database" or "retrieved from external source" • "based on user preferences" or "according to input" • "specified location/value" or "to be determined"
-
[8]
analyze heat exchanger with inlet temp 80°C, outlet 60°C, flow rate 0.5 kg/s
ALWAYS provide concrete values: • Specific numbers (e.g., "analyze heat exchanger with inlet temp 80°C, outlet 60°C, flow rate 0.5 kg/s") • Named entities (e.g., "analyze weather in San Francisco" not "specified city") • For locations: Use city names, landmark names, or general areas, NOT specific street addresses – GOOD: "San Francisco", "Times Square", ...
work page 2024
Show all 37 references
-
[9]
If the task involves analysis, provide ALL input data in the task description: • For calculations: provide all numbers, formulas, and units needed • For searches: provide specific search terms and criteria • For comparisons: provide specific items with their properties • For o...
-
[10]
MUST require multiple tools in a specific sequence
-
[11]
Tool B should need output from Tool A (dependency chain)
-
[12]
Include decision points based on intermediate results
-
[13]
Be realistic and valuable for business/research purposes
-
[14]
Define expected analysis and output format
-
[15]
Task must be immediately executable - agent should never need to ask for more information
-
[16]
task_id":
Task should be executable and solvable by using the provided tools. You need to pay attention to the function and the output of the provided tools. Output Format: Output ONLY a JSON object (not an array). ALWAYS USE relative dates/times: { 34 MCP-Bench: Benchmarking Tool-Using...
-
[17]
SOLVABILITY (1-10): • 10: All required data is provided, tools perfectly match needs, clear success criteria • 8-9: Task is clearly solvable with the given tools, minor ambiguities acceptable • 6-7: Mostly solvable but some steps may be challenging or unclear • 4-5: Significan...
-
[18]
solvability_score
UTILITY (1-10): • 10: Critical business/research value, addresses real-world problem perfectly • 8-9: Strong practical value, useful for decision-making or operations • 6-7: Moderate value, interesting but not critical • 4-5: Limited practical value, mostly academic exercise •...
2024
-
[19]
• 4–6: Perfectly completes 40–60% of requirements
Task Fulfillment • 1–3: Perfectly completes 10–30% of requirements. • 4–6: Perfectly completes 40–60% of requirements. • 7–8: Perfectly completes 70–80% of requirements. • 9–10: Perfectly completes 90–100% of requirements
-
[20]
• 4–6: 40–60% of claims are perfectly grounded in tool outputs
Grounding • 1–3: 10–30% of claims are perfectly grounded in tool outputs. • 4–6: 40–60% of claims are perfectly grounded in tool outputs. • 7–8: 70–80% of claims are perfectly grounded in tool outputs. • 9–10: 90–100% of claims are perfectly grounded in tool outputs. 38 MCP-Be...
-
[21]
• 4–6: 40–60% of tools were perfectly selected for their subtasks
Tool Appropriateness • 1–3: 10–30% of tools were perfectly selected for their subtasks. • 4–6: 40–60% of tools were perfectly selected for their subtasks. • 7–8: 70–80% of tools were perfectly selected for their subtasks. • 9–10: 90–100% of tools were perfectly selected for th...
-
[22]
• 4–6: 40–60% of tool calls have perfectly accurate and complete parameters
Parameter Accuracy • 1–3: 10–30% of tool calls have perfectly accurate and complete parameters. • 4–6: 40–60% of tool calls have perfectly accurate and complete parameters. • 7–8: 70–80% of tool calls have perfectly accurate and complete parameters. • 9–10: 90–100% of tool cal...
-
[23]
• 4–6: 40–60% of dependency chains are perfectly executed
Dependency Awareness • 1–3: 10–30% of dependency chains are perfectly executed. • 4–6: 40–60% of dependency chains are perfectly executed. • 7–8: 70–80% of dependency chains are perfectly executed. • 9–10: 90–100% of dependency chains are perfectly executed
-
[24]
• 4–6: 40–60% redundant calls OR 40–60% of parallelizable tasks were executed in parallel
Parallelism and Efficiency • 1–3: More than 70% redundant calls OR less than 30% of parallelizable tasks were executed in parallel. • 4–6: 40–60% redundant calls OR 40–60% of parallelizable tasks were executed in parallel. • 7–8: 20–30% redundant calls AND 70–80% of paralleliz...
-
[25]
perfectly executed
When evaluating percentages, be EXTREMELY STRICT about what counts as “perfectly executed”
-
[26]
Perfectly
“Perfectly” means ALL of the following must be true: • Correct tool selection (not just “works” but OPTIMAL choice) 39 MCP-Bench: Benchmarking Tool-Using LLM Agents with Complex Real-World Tasks via MCP Servers • Complete and accurate parameters (not just valid, but IDEAL) • Z...
-
[27]
If ANY of the above is missing, that portion is NOT perfectly executed (counts as 0%)
-
[28]
Example: Task completed correctly but with 1 redundant call = that portion is 0% perfect KEY PRINCIPLES:
-
[29]
ALWAYS calculate as percentage, NOT absolute numbers
-
[30]
10 errors in 100 calls (10%) = same score as 1 error in 10 calls (10%)
-
[31]
Consider the OPPORTUNITY COUNT for each dimension: • Tool calls: How many total calls were made? • Parallelization: How many tasks COULD have been parallel? • Parameters: How many total parameters across all calls? • Claims: How many factual statements were made? • Dependencie...
-
[32]
perfectly executed
NORMALIZE by complexity - don’t punish complex tasks: • Simple task: 1 error/5 steps (20% defect) = Score 7 • Complex task: 4 errors/20 steps (20% defect) = Score 7 CRITICAL: Apply the STRICTEST interpretation of “perfectly executed”. If there’s ANY doubt, score lower. CONCRET...
-
[33]
You MUST map each score to the exact percentage ranges in the rubrics
-
[34]
Task Completion and Tool Selection MUST be evaluated against the CONCRETE TASK REFERENCE, not the fuzzy task
-
[35]
Planning Effectiveness should be evaluated based on the PROPORTION of dependencies correctly handled, not the absolute number of steps executed or exact conformance to the dependency analysis
-
[36]
First calculate the actual percentage of completion/success, then assign the corresponding score range
-
[37]
task_fulfillment_reasoning
IMPORTANT: Focus on completion RATIOS not absolute numbers - completing 7/10 steps (70%) should score similarly to completing 14/20 steps (70%), regardless of task complexity. Please score based on COMPLETION PERCENTAGES and PROPORTIONAL SUCCESS, not absolutenumbersoftoolscall...
2021
Reviewed August 5, 2026 · model on record in the stance chip above.
Discussion (0). Continue with ORCID to comment.