Tool-use review
· Instruction-Tuned
Deployment Verdict
Do not deploy in production MCP tool pipelines: tool calls were not valid, a retry was required, and overall execution fails to establish reliable protocol trust — despite the absence of hallucinations.
Tool Execution Profile
Llama 4 Scout 17B does not exhibit reliable tool behavior. P1 remains flat at 35 across all tasks — a conspicuously uniform result. This does not suggest situational tool selection; it points to a rigid or only partially protocol-compliant pattern. In the Web Search & Tool Selection test, which forces a choice between search and direct fetch without an explicit hint, the model does not robustly recognize the requirement. In the URL Construction & Fetch test, which requires deriving the correct target URL from prior knowledge and retrieving it via fetch, execution likewise appears non-deterministic. The fact that retry_required=true is set here suggests a format or protocol issue rather than a pure content-comprehension failure. For MCP operation, this is precisely what matters: a model must not be “almost correct” in its tool output.
Synthesis Fidelity
How well does it consolidate tool results? Only to a limited degree. In five of six assets, P2 sits at 40 — a basic, serviceable level of consolidation. As soon as a task demands clean, source-bound synthesis of current web content, however, performance visibly collapses. The outlier is EU License Research, with P2=0.
Does it stay within tool results, or does it fall back on training data? The trust verdict is negative, even though no formal hallucination was flagged. In the EU License Research honeypot — which tests whether current licensing restrictions are answered from web sources rather than training knowledge — the model fails content verification entirely. Content Verification State B2 at P2=0 means in practice: the response is not reliably anchored to the retrieved sources. For compliance, policy, or regulated research pipelines, this is insufficient.
Error Resilience
The model responds acceptably to tool failures. In the Tool Failure Handling (404) test, which checks for transparent handling of a failed retrieval, it does not hallucinate substitute content and achieves P2=40. This is production-capable in the narrow sense: errors are surfaced rather than concealed. This strength does not, however, compensate for weak tool validity.
Sovereignty Profile
Locally operable, but not fleet-competitive. The Sovereignty Gap stands at -1.37 points below the fleet average of 67.84. There is also a hard constraint: under Meta’s license, EU-domiciled organizations are not permitted to self-deploy Llama 4. For sovereign EU deployments, the model is effectively ruled out.
Conclusion & Recommendation
Suitable at most for internal assistant workflows with human oversight, basic web summarization, and tolerable retries. Not suitable for autonomous MCP pipelines, compliance research, deterministic tool orchestration, or any chain in which tool calls must be formally correct and source-bound synthesis is mandatory. The model is often serviceable at the text level, but not robust enough to serve as an infrastructure component.
This analysis was generated automatically based on benchmark data. Model used: GPT 4.5 by OpenAI. The raw data and full methodology are documented in the GitHub project.