credentials_list
SAGOT credentials.list. Uses the same authorization and validation as website, API and CLI.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| workspaceId | Yes |
SAGOT credentials.list. Uses the same authorization and validation as website, API and CLI.
| Name | Required | Description | Default |
|---|---|---|---|
| workspaceId | Yes |
Changes observed during successful MCP inspections.
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must carry full behavioral disclosure. It mentions that authorization and validation match the website/API/CLI, which weakly implies an authenticated read, but never states whether this is read-only, whether it paginates, whether it returns secrets, or what happens on missing/invalid workspace. That leaves key behavioral traits undisclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
It is very short and front-loaded, which is good, but the brevity is under-specification rather than deliberate conciseness. Two terse sentences that mostly restate the name and assert parity with other interfaces without adding actionable detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a credentials-listing tool with no annotations, no output schema, and 0% schema description coverage, the description is drastically incomplete. It omits what is listed, the response shape, pagination, error behavior, and permission requirements, leaving the agent unable to safely and correctly invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% and there is a single required parameter (workspaceId). The description gives no meaning to it, its format, or the scope implied by supplying a workspace. An agent has to rely solely on the parameter name and JSON Schema constraints, with no textual elaboration.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'SAGOT credentials.list' is essentially a name restatement with a namespace prefix, not a stated purpose. It does not explain that this lists credential records, what kind of credentials, or how it differs from credentials_create or credentials_revoke. The verb+resource is only inferable from the tool name itself.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit when-to-use guidance or mention of alternatives. One could infer that a 'list' operation is separate from create/revoke, but the description never states that, nor does it mention prerequisites like required permissions beyond a vague 'same authorization as website, API and CLI'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Add one secure layer between your agents and this server.