hard_delete_agent

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations supplied, the description carries the full behavioral burden and does so well: irreversibility, permanence ('cannot be recovered'), an exhaustive list of destroyed data classes, and the on-disk artifacts (inbox, outbox, attachments) affected. Only the authorization requirements around registration_token are left unstated.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

Three dense sentences, front-loaded with the destructive action and its scope, followed by the soft-delete disqualifier and the confirmation requirement. No filler or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values need not be described, and the destruction scope plus confirmation gate cover the highest-risk aspects of this operation. The remaining gap is the undocumented registration_token and any auth/permission prerequisites implicit in its presence.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 0% across four parameters, so the description must compensate, yet it only meaningfully explains 'confirmation' (exact literal 'I UNDERSTAND'). Neither project_key, agent_name, nor the optional registration_token is described, and registration_token in particular is not self-explanatory.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('IRREVERSIBLY delete an agent') and then enumerates exactly what is removed: messages, recipient records, file reservations, agent links, window identities, and on-disk archives. The explicit 'This is NOT soft-delete' line distinguishes it from the soft variants (retire_agent, deregister_agent) an agent would otherwise consider.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

It conveys the precondition for invocation (confirmation must be exactly 'I UNDERSTAND') and the permanent nature of the operation, which strongly implies when it is appropriate. However, it never names the sibling alternatives (retire_agent, deregister_agent, unretire_agent) or tells the agent to prefer them when reversibility is acceptable, leaving the tool-selection decision to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.