AegisAI

Each tool pairs a single verb with a distinct resource or action, and descriptions explicitly separate state-changing, state-free, verification, and list/get operations. Even similar tools like the two challenge creators are clearly differentiated by challenge type (DNS TXT vs endpoint), so misselection is unlikely.

All tools follow a consistent verb_noun pattern using clear verbs like create, get, list, register, stop, update, and verify. The monitor_ prefix is used uniformly for monitor-related resources, while distinct domains such as risk and capabilities have their own readable nouns.

At 17 tools, the set is slightly heavier than the typical well-scoped range, but each tool covers a distinct operation across subscriptions, endpoints, alerts, policy evaluation, and risk verification. The count is reasonable given the breadth of the platform.

Core read and write operations exist for subscriptions, endpoints, and alerts, but lifecycle coverage has notable gaps: there is no endpoint get/update/delete, no subscription activation/resume, and no way to enable delivery after verification. Several workflows end at stopped or pending states unless external actions occur.