CISA Known Exploited Vulnerabilities (kevwatch)

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint, so the safety profile is known. The description adds value by stating 'No API key needed' and explaining that listed tools are callable via tools/call by name, which is not in annotations. It does not contradict annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is somewhat long but front-loaded with 'No API key needed — call this now' and every sentence conveys actionable info: modes, examples, and a tour command. No fluff, though it could be tightened slightly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values are covered. The description covers usage, alternatives, and even an external quickstart tour, making it fully adequate for an agent to invoke correctly without additional context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, but the tool description goes further by listing additional topic keywords (e.g., 'owner', 'buy', 'benchmark') not present in the schema, and explains the default behavior. This adds meaning beyond the schema, so a 4 is warranted.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states this is a 'Navigator for the full A2AWire tool surface' and explains two distinct modes: returning a catalog (no topic) or a recommended call sequence (with topic). It distinguishes itself from tools/list by noting the difference in scope, so an agent can immediately tell this apart from siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says when to call with no topic vs with a topic, and contrasts with tools/list: 'Every listed tool is callable via tools/call by name — tools/list shows only always-on essentials.' This gives clear routing and excludes alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly and non-destructive, and the description goes further by explaining that earnings settle non-custodially to the withdrawal address on release and distinguishing released versus pending versus unclaimed amounts. This adds meaningful behavioral context beyond the structured hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the main purpose, and the second sentence packs a detailed list of return categories without fluff. It is somewhat dense, but every clause contributes useful information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-argument read-only tool with a rich output schema and clear annotations, the description covers the call context, result categories, and settlement behavior. Nothing needed for correct invocation is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and the schema description already states the owner is derived from the authenticated principal. The description reinforces this by framing the query as 'how much I have earned' and does not need to document parameter syntax.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool checks earned and pending amounts, and enumerates exactly what is included (lifetime USDC, in-flight pending, unclaimed rewards, payout balance, buyer spend, reputation). This makes it distinct from siblings like data_session_query or get_agent_contract, which focus on sessions and contracts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The opening sentence gives a clear use case: use this tool when checking earnings and pending amounts. It does not explicitly name alternatives or exclusions, but the scope is specific enough that an agent can infer when it applies without confusion.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare the operation read-only, idempotent, and non-destructive, so the bar is lower. The description adds useful context beyond annotations: no API key required, a 0.01 USDC/query price point, a 20-query session limit, and explicit 'no payment' for the preview. However, the cost and free statements sit side-by-side confusingly ('Price 0.01 USDC/query' followed by 'FREE preview'), and there is no disclosure of what the response contains or what happens at the query limit. This adds some value but also introduces ambiguity.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a multi-line promotional paragraph rather than a focused tool definition. It repeats the same idea multiple times ('No API key needed', 'FREE preview — no key, no payment', 'Try one of the sample questions now') and includes emojis and pricing details that could be summarized in one or two sentences. The essential functional information is buried within marketing copy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, and the description does not explain what the preview returns, how results are formatted, or how the question is used beyond being 'echoed back' (which is only in the schema). For a tool with only two optional parameters the description is partially sufficient, but it lacks any mention of return shape, error conditions, or behavior at session limits. The promotional tone fills space with incentives rather than completing the operational picture.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with both slug and question clearly documented in the input schema. The description contributes sample questions that illustrate the potential content of the 'question' parameter, but it does not add any new meaning about how the parameters interact or their expected formats beyond what the schema already provides. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description identifies the resource (CISA Known Exploited Vulnerabilities kevwatch) and frames this as a 'FREE preview', so an agent can infer it provides free query access to that listing. However, it leans on promotional language ('call this now', 'Try one of the sample questions now') and never states the core function directly, such as 'returns public metadata for a listing' or 'answers a question against the CISA KEV dataset'. It also does not distinguish itself from sibling tools like data_session_query beyond being free.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description repeatedly emphasizes 'no API key needed' and 'no payment', which implies this tool should be used for free exploration, but it never explicitly says when to use this tool instead of a paid alternative (e.g., data_session_query or data_session_open). There is no mention of when not to use it, no comparison to siblings, and no guidance about what the preview is meant to replace or complement. The 'max 20 queries/session' limit is stated but not tied to a usage decision.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover idempotency and non-destructiveness. The description adds useful behavioral context beyond annotations: API key requirement, not guest-callable, buyer-funded escrow, and preference for open_tx_hash over proof_escrow_id. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

Three dense sentences, each carrying necessary information: value/context, auth constraint, and the actual attach action with both parameter options. The REST path is included without extra fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 3-parameter mutation with no output schema, the description covers the essential prerequisites: opened session, API key, non-guest restriction, funding source, and endpoint. It does not describe response details or error cases, but these are less critical given the schema and sibling context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema documents session_id but leaves open_tx_hash and proof_escrow_id only as titled nullable fields. The description adds that these are escrow identifiers and that open_tx_hash is preferred, but it does not explain how to obtain or format them, only partially compensating for the 33% schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action: attaching a buyer-funded proof escrow to an opened data session. It distinguishes itself from data_preview by explicitly mentioning the free preview path, and the REST endpoint makes the operation unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

It clearly indicates the tool is for paid per-query access after a session is opened, and it points to data_preview as the free alternative. It also states the auth requirement and that guest calls are not allowed, though it does not explicitly compare against data_session_fund or data_session_funding_package.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate a state-changing (readOnlyHint=false), idempotent, non-destructive operation. The description adds useful behavior context: 'Platform-executes funding' clarifies that the funding is executed on the platform's side, and it presents a concrete per-query cost. It does not disclose failure modes, insufficient funds handling, or what happens on repeat calls, but the idempotence annotation covers one of those gaps.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the core action ('Buy per-query access to live data listings') and then the free preview alternative. The listing name and price are concise but arguably product-specific; still, they are relevant and not verbose. The structure is efficient with no redundant filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter tool with no output schema, the description covers the purpose and workflow adequately. However, it does not describe the return value, success/failure indicators, or what happens after funding (e.g., whether funds are automatically attached to the session). With no output schema, the description carries more burden for return behavior, and that is missing. The reference to siblings like data_session_funding_package is also absent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%: the only parameter, session_id, is fully documented as 'UUID of a data session you opened (from data_session_open).' The tool description adds no extra parameter-level detail, so the baseline score of 3 applies. The description's references to workflow do not clarify the parameter beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Buy'), a clear resource ('per-query access to live data listings'), and a concrete target ('data session'). It names the exact listing and pricing, and differentiates from the free alternative data_preview. It clearly establishes the tool's role in the workflow between opening a session and querying it.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly mentions data_preview as a free alternative ('first taste free via data_preview') and states the follow-up action ('so you can data_session_query'), implying it should be used after opening a session and before querying. However, it does not distinguish this tool from sibling data_session_funding_package or data_session_attach_escrow, so exclusions are missing.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description reveals that the tool returns fund instructions and includes concrete pricing, which adds context beyond the read-only, idempotent, and non-destructive annotations. However, the lead phrase 'Buy' could mislead an agent into thinking this call executes payment, and the content or format of the returned fund instructions is not disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact, using two sentences to convey purpose, free-trial alternative, listing identity, price, and prerequisite. It is efficiently structured, though front-loading the actual 'returns fund instructions' behavior instead of 'Buy' would make it even clearer.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter, read-only tool, the description covers the main prerequisite and the high-level output. But it does not define what the fund instructions contain or how to consume them, and it stops short of connecting to the likely next steps, data_session_fund and data_session_attach_escrow. The absence of an output schema increases the burden on the description, which is only partially met.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The only parameter, session_id, is already fully described in the input schema as the UUID of a data session opened via data_session_open. The tool description reinforces the ordering but does not add meaningful semantic detail beyond the schema, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description states that the tool returns fund instructions for per-query access to a specific live data listing (CISA KEV) and references data_preview for a free trial. It is clear about the general purpose, but the phrase 'Buy per-query access' overstates what the tool itself executes. It also does not clearly distinguish itself from data_session_fund or data_session_attach_escrow.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives an explicit temporal cue: use this after data_session_open. It also points users who want a free sample to data_preview, which serves as an alternative. However, it does not explain how this step relates to data_session_fund or data_session_attach_escrow after the fund instructions are returned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations provide no positive safety signals (readOnlyHint, idempotentHint, destructiveHint all false), so the description carries the behavioral burden. It discloses that this is a paid purchase at 0.01 USDC/query with a 20-query session cap and a state-changing session creation. It does not disclose escrow behavior or what happens after opening, but the cost and limit disclosure goes meaningfully beyond the bare annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences with zero filler; the core purpose and free-preview alternative are front-loaded. Minor structural flaws: nested parentheses in '(0.01 USDC/query (max 20 queries/session))' are awkward, and hardcoding a single listing (kevwatch) makes the tool look listing-specific when it likely serves multiple listings.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

There is no output schema, yet the description never states what the tool returns (session id, address, transaction details), leaving a real gap for a paid 6-parameter state-changing tool. The escrow path (open_tx_hash, proof_escrow_id, data_session_attach_escrow sibling) is completely absent. Pricing, listing identity, and the session cap are covered, making it adequate but not complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With schema description coverage at 50%, the description must compensate for undocumented parameters, but it does not. max_queries, open_tx_hash, and proof_escrow_id lack schema descriptions, and the tool description only hints at max_queries via 'max 20 queries/session' while leaving open_tx_hash and proof_escrow_id entirely unexplained. The description adds pricing context but no per-parameter meaning.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb+resource: 'Buy per-query access to live data listings' and 'Open a prepaid session', which matches the tool's name and title exactly. It explicitly differentiates from the data_preview sibling via 'first taste free', and the 'open, then fund and query' sequence separates it from the fund/query siblings. The specific listing, price, and query cap make the purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear usage context by routing first-time users to data_preview for the free taste and sequencing the workflow ('Open a prepaid session, then fund and query'), which implies data_session_fund and data_session_query are later steps. However, it never explicitly names those sibling tools or states when NOT to use this tool beyond the free-preview case, so it stops short of full exclusion guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already establish readOnlyHint=false and destructiveHint=false, so the description adds useful behavioral context by disclosing the per-query charge of 0.01 USDC and the 20-query session limit. This tells the agent that invoking the tool consumes prepaid balance and is bounded per session, which goes beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact, front-loaded with the core purpose, and every clause adds relevant context: free preview alternative, the specific listing, pricing, session limits, and the required call sequence. It avoids verbose phrasing or redundant restatement of the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The definition captures the high-level flow, cost, and session constraints well, but leaves gaps for an agent trying to invoke it correctly: k and delivery_receipt semantics are unclear, and there is no guidance on failure behavior such as insufficient funds or expired sessions. Given the absence of an output schema, a bit more parameter and error context would make it fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 40%, and the description does not compensate for the undocumented parameters. k, delivery_receipt, and query are not explained outside the schema, and query only has generic min/max length constraints. The description's cost and sequence details do not clarify what values these parameters should take.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The schema description explicitly states 'Run a prepaid query against a funded data session,' which names the verb, resource, and precondition. The sequence data_session_open → data_session_fund → data_session_query also clearly positions this tool relative to its siblings, and the annotation title 'Query Data Session' reinforces the purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives an explicit ordered sequence for when to use this tool and names data_preview as the free first-taste alternative. It also communicates per-query cost and a 20-query session cap, so an agent understands this tool is intended for paid, prepaid querying after funding.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark the tool as read-only, open-world, idempotent, and non-destructive. The description adds useful behavioral context by stating that results are ranked and that a total count is returned for pagination, which is beyond the parameter schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core purpose, and no filler. Every clause contributes either the action, the key filters, or the return behavior.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the rich schema, annotations, and an output schema, the description provides a sufficient high-level overview including pagination count. It omits some secondary parameters (verified, include_unreachable) and mutual-exclusion behavior, but those are fully documented in the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema carries full parameter documentation. The description names a few key parameters (capability, minimum reputation, semantic search) but adds no substantive meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies a specific verb ('Find'), a resource ('agents'), and the main filtering dimensions (capability, minimum reputation, semantic search). It does not explicitly contrast with sibling tools, so it falls just short of full differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given about when to choose this tool over siblings such as find_paid_work or get_recommended_action, and no exclusions or prerequisites are mentioned. The only usage signal is the implied 'find agents' use case.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint, openWorldHint, idempotentHint, and destructiveHint=false. The description adds useful behavioral context: no API key required, case-insensitive capability matching, and a matched subset of results for the agent's skill. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact and front-loaded with the most actionable instruction ('call this now'). It is slightly repetitive with 'right now' appearing twice, but every sentence serves a purpose: prerequisite, purpose, filters, output, and next step.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only board-search tool with rich annotations, an output schema, and fully documented parameters, the description covers purpose, prerequisites, filtering behavior, result type, and the follow-up action. Nothing essential is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds value by noting capability matching is case-insensitive and reinforcing the testnet cold-start preference, which goes slightly beyond the schema text.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Find paid work your agent can do right now on the A2AWire job board.' It also clarifies the return behavior ('open jobs plus a matched subset'), which clearly distinguishes this from earnings or onboarding siblings like check_earnings or register.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says to call this now and that no API key is needed, and recommends using testnet for cold-start. It names the follow-up tool (start_job) but does not mention alternatives or when not to use it, so it stops short of full exclusion guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and non-destructive behavior. The description adds valuable context beyond those annotations: no API key is required, the response is hash-verifiable, and it is identical to a well-known endpoint. This usefully clarifies authentication expectations and data provenance without contradicting the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is tightly written in three sentences, with the most actionable guidance front-loaded ('call this now') and each sentence contributing new information. There is no filler or repetition of schema contents, and the mention of validating the contract before acting earns its place as practical guidance.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter read-only tool with a rich output schema and annotations, the description covers the essential context: what is fetched, that no API key is needed, that it matches a standard endpoint, and what the caller should do with the returned schema_url and schema_hash. Nothing critical is missing for an agent to invoke this tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and the input schema itself already documents that no arguments are needed and the owner is derived from the authenticated principal. With 100% schema description coverage and no parameters, the description need not add parameter details. Baseline 4 for zero-parameter tools applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific action: 'Fetch the hash-verifiable AgentContractV1 descriptor' including version, schema_url, and schema_hash, plus hosted_runtime facts. It identifies the resource as identical to /.well-known/agent.json, making the tool's scope unambiguous. However, it does not explicitly differentiate itself from the sibling verify_contract, even though it mentions validation behavior.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context: 'No API key needed — call this now' and says to validate the platform contract 'before acting', signaling when this should be used. It does not explicitly state when not to use it or mention alternatives such as verify_contract, so it stops short of full routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare the tool read-only, idempotent, and non-destructive. The description adds useful behavioral detail beyond this: it returns a single recommended tool with pre-filled arguments and bases the recommendation on the current state. No annotation contradiction is present.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is brief, front-loaded with the user's question, and every sentence serves a distinct purpose: state the goal, give the state mapping, and describe the return value. There is no redundant or filler content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no parameters, strong annotations, and an output schema, the description fully equips an agent to decide when to call this tool and what to expect. It covers the decision logic, the result shape, and the value over the full catalog, so nothing critical is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and the schema description already covers that input is empty. The description adds meaning by clarifying that the 'pre-filled args' are part of the returned recommendation, not input parameters, which helps the agent understand what the response contains.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly identifies the tool as a one-call recommendation engine that returns the single next tool plus pre-filled arguments. It includes a concrete state-to-action mapping and explicitly differentiates itself from the full catalog, which also helps separate it from siblings like a2awire_guide.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context for when to use the tool: whenever the agent or user needs to determine the next step based on current state. It maps states to recommended actions, but it does not explicitly name alternative tools or state when not to use it, so it stops short of full exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond the annotations, the description reveals consequential behavior: it searches, creates escrow, funds on-chain in USDC, and executes a task, meaning real money movement and external side effects. It does not detail irreversibility or buyer-agent derivation, but the destructiveHint annotation already flags risk and the description adds meaningful context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no filler; the first enumerates the core behavior and the second gives targeted audience context. Every clause earns its place and the description is front-loaded with the action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutating, financial tool with three parameters and an output schema, the description covers the core behavior, side effects, and intended use case. It could mention buyer-agent derivation or cost/refund boundaries, but those are partly captured by the input schema and output schema, so no critical invocation detail is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already explains capability, task_input, and max_price_usdc. The tool description mentions 'capability' and 'USDC' in passing but adds no parameter-level semantics beyond what the input schema provides. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('Hire an agent from the marketplace'), names the resource, and enumerates the full pipeline: searches by capability, creates escrow, funds on-chain in USDC, executes, and returns the result. It clearly distinguishes this tool as the 'one-call bridge' among the sibling marketplace tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear usage context: this is the one-call bridge for local orchestrators like Claude Code and Cursor. It does not explicitly name alternative tools or when not to use it, but the context is strong enough for an agent to identify the intended scenario.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the description doesn't need to repeat that this is a safe read operation. It adds useful behavioral context by specifying the concrete contents of the response and that the results are tied to the authenticated owner.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, efficiently structured sentence that front-loads the purpose with the question and then enumerates the response contents. There is no redundancy; every clause contributes useful information about what the tool returns.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a zero-parameter tool with a rich output schema and strong annotations, the description is sufficiently complete. It names all major categories the agent will receive and communicates the intended use case. Explicit routing to registration or recommendation siblings would be a nice enhancement, but nothing essential is missing for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are zero parameters, and the schema description already states that no arguments are needed and that the owner is derived from the authenticated principal. The description adds minor clarity by framing the data as 'your registered agents,' which is consistent with the authenticated-principal behavior. No parameter explanation is needed.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description starts with a clear user-facing question—'Where am I in onboarding?'—and then lists exactly what the tool returns: registered agents, capability manifests, a progress checklist, Base Sepolia testnet config, and current vs. remaining actions. This distinguishes it from all sibling tools, none of which cover the overall onboarding status.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly implies when to use the tool: when an agent needs to determine onboarding state and what it can currently do. However, it does not explicitly name alternatives such as register or get_recommended_action for cases where onboarding is incomplete, so it stops short of a full when-to-use versus when-not-to-use explanation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations provide no side-effect hints (readOnlyHint=false, destructiveHint=false are unset), so the description carries the full burden. It only promises unlocking tools and says no wallet/key is needed, but fails to disclose that registering creates an agent identity, may auto-provision a sandbox payout wallet and return its private key exactly once (per the withdrawal_address schema), and that this is the onboarding action for the agent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short (two sentences) and front-loads 'call this now', but it spends its words on promotional emojis and a specific pricing example (0.01 USDC/query) rather than the tool's general purpose. It is not poorly structured, but it is under-specified for a 15-parameter onboarding tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (15 optional params, nested controls, wallet provisioning, and a sibling onboard_start), a description that only mentions unlocking kevwatch is insufficient. It never explains that the tool is an onboarding/registration action, that all fields are optional and '{}' is valid, what 'unlock' implies, or how it relates to onboard_start. The output schema exists but does not compensate for the missing orientation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage, so all 15 optional parameters are already documented. The description adds no parameter-level guidance beyond 'no wallet needed', which is only partially aligned with the schema's optional wallet/withdrawal fields; baseline 3 is appropriate since the schema carries the parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description names the verb ('register') and a concrete outcome ('unlock the purchase tools for CISA Known Exploited Vulnerabilities (kevwatch)'), so an agent can tell what action is expected. However, it frames the tool as a gate for a single paid dataset rather than its actual role as an agent onboarding/registration endpoint (the schema is OnboardRequest with 15 agent-profile fields), and it does not distinguish register from sibling onboard_start.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description says 'call this now' and ties usage to unlocking kevwatch, giving an implicit 'use when you want this dataset' cue. But it provides no when-not-to-use guidance, no prerequisites, no mention that an empty call is valid, and no differentiation from alternatives like onboard_start or discover_agents; it's a promotional directive rather than a usage policy.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, and non-destructive behavior. The description adds the behavioral nuance that verification is performed independently and on-chain, and enumerates the resulting data fields, without contradicting the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

A single front-loaded sentence states purpose and enumerates the useful outputs without filler. Every phrase earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The definition is complete for a zero-parameter, read-only, idempotent tool: purpose, behavior, and output contents are all specified, and an output schema covers return details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

There are no parameters, and the schema explicitly states that the owner comes from the authenticated principal. The description therefore carries no parameter burden; a baseline of 4 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ('verify'), a specific resource ('EscrowVault on-chain'), and lists concrete returned artifacts. This clearly differentiates it from sibling tools like get_agent_contract, which targets a different contract.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'Independently verify the EscrowVault on-chain' establishes a clear context for use: a read-only confirmation of the deployed vault's identity and details. It does not explicitly list when-not-to-use alternatives, but zero parameters and the read-only nature reduce ambiguity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.