Scorecard review

Scorecard Review

Review service maturity and compliance scorecards using Harness Internal Developer Portal (IDP) via MCP.

Instructions

Step 1: List Catalog Entities

Call MCP tool: harness_list
Parameters:
  resource_type: "idp_entity"
  org_id: "<organization>"
  project_id: "<project>"

Step 2: Get Entity Details

Call MCP tool: harness_get
Parameters:
  resource_type: "idp_entity"
  resource_id: "<entity_id>"

Step 3: Get Scorecard Scores

Call MCP tool: harness_list
Parameters:
  resource_type: "idp_score"
  org_id: "<organization>"
  project_id: "<project>"

Get specific entity score:

Call MCP tool: harness_get
Parameters:
  resource_type: "idp_score"
  resource_id: "<entity_id>"

Step 4: Check Documentation

Call MCP tool: harness_list
Parameters:
  resource_type: "idp_tech_doc"
  org_id: "<organization>"
  project_id: "<project>"

Step 5: Review Workflows

Call MCP tool: harness_list
Parameters:
  resource_type: "idp_workflow"
  org_id: "<organization>"
  project_id: "<project>"

Common Scorecard Categories

• Production Readiness - CI/CD, monitoring, alerting, runbooks
• Security Compliance - Vulnerability scanning, secrets management, access control
• Documentation - API docs, architecture diagrams, runbooks
• Operational Excellence - SLOs, incident response, on-call
• Developer Experience - Build times, test coverage, onboarding

Report Format

## Service Scorecard Report

**Service:** <name>
**Overall Score:** X/100

### Category Scores
| Category | Score | Status |
|----------|-------|--------|
| Production Readiness | 85/100 | Pass |
| Security | 70/100 | Needs Work |
| Documentation | 45/100 | Failing |
| Operations | 90/100 | Pass |

### Failing Checks
1. Missing API documentation
2. No SBOM generation configured
3. Test coverage below 80%

### Improvement Actions
1. Add API docs to /docs endpoint
2. Enable SBOM in CI pipeline
3. Increase test coverage to 80%+

IDP Resource Types

Resource Type	Operations	Description
idp_entity	list, get	Catalog entities
idp_score	list, get	Scorecard scores
idp_tech_doc	list, get	Technical docs
idp_workflow	list, get	IDP workflows

Examples

• "How is api-gateway doing on scorecards?" - Get idp_score for entity
• "Which services are failing production readiness?" - List idp_score, filter by failing
• "Help me improve checkout-service score" - Get score, identify failing checks, suggest fixes
• "Show all services below 80% compliance" - List and filter idp_score

Performance Notes

• Analyze all scorecard checks before recommending improvements. Do not skip failing checks.
• Cross-reference failing checks with the service's actual configuration and documentation.
• Prioritize recommendations by impact — focus on checks that affect production readiness first.

Troubleshooting

No Scores Available

• Verify scorecards are configured in IDP settings
• Check entity is registered in the catalog
• Ensure data sources (CI/CD, monitoring) are connected

Scores Not Updating

• Check integration sync status
• Verify data source connectivity
• Review scorecard rule configuration