Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is only implied: the description tells the agent what to do with the token after creation (hand it to the user or CI secret store), which situates the tool in a CI/deployment workflow, but it never states when to mint one, what prerequisites exist, or why one would choose this over the revoke/list siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.