Research Vault (research decoy)

Four of the six tools revolve around retrieving credentials or tokens (agent_memory_search, token_vault, vault_lookup, credential_broker) with descriptions that do not clearly delineate which source to consult for a given need. Only inbox_list and oauth_refresh have a clearly distinct purpose, leaving agents guessing between memory, vault, broker, and lookup paths.

All names are snake_case, but the word-order convention is inconsistent: some are noun_verb (inbox_list, oauth_refresh), others noun_noun (token_vault, vault_lookup, credential_broker), and one is noun_noun_verb (agent_memory_search). Still readable, but no predictable pattern predicts which shape a tool will take.

Six tools is a well-scoped size for a small research/credential sandbox. The count itself is fine, though several slots are spent on near-duplicate credential retrieval tools rather than broadening coverage.

The surface can list inbox items and read credentials/tokens but offers no message read/detail tool and no way to store, issue, or revoke credentials, leaving obvious lifecycle gaps. For a synthetic decoy domain this may be intentional, but agents will hit dead ends on write/revoke operations.