Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states this tool performs 'Read-only validation' for a managed identity, listing specific checks (ownership, expiry, authorization, credentials) and explicitly noting it does not return the password. This distinguishes it from sibling tools like create_test_identity, delete_test_identity, and renew_test_identity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.