Skip to main content
Glama
mguttmann
by mguttmann

action1-mcp-server

License: MIT Node Coverage Tools Tests

A production-grade Model Context Protocol (MCP) server for the Action1 RMM REST API. Wraps the entire Action1 API surface so that Claude (or any other MCP host) can run PowerShell on Windows, Bash on macOS, deploy updates, reboot endpoints, search audit trails, build CVE remediation plans, and more — all via natural language and with a three-layer destructive guard so the LLM cannot accidentally mutate production state.

Status: v0.5.0 — 100 % coverage of the pinned Action1 OpenAPI 3.1.0 spec, exposed as 166 tools (33 curated incl. 6 workflow wrappers + 133 auto-generated) with pinned SHA, hybrid architecture, three-layer destructive guard, stdio and Streamable HTTP transports, MCPB bundle, CI. Full conformance pass against the Anthropic mcp-builder skill best practices (server name, tool annotations, response_format, output schemas, Markdown rendering, character limits, evaluation suite).

Why this project

Action1 has a clean REST API but a thick layer of LLM-unfriendly quirks that, if unhandled, silently produce wrong results:

  • macOS Bash actions need a ten-field run_script payload the API returns not applicable to Mac platform for any field that is missing.

  • Windows PowerShell actions need a non-empty success_exit_codes.

  • last_seen is YYYY-MM-DD_HH-MM-SS (UTC), not ISO-8601 — Date.parse returns NaN (we render it human-readable in Markdown output).

  • The self URL of a list-endpoint includes a /general segment that is not a real REST resource.

  • The script-output stream is interleaved with Starting / Waiting / Completed lifecycle markers that need to be filtered.

  • OS is upper-case, platform is lower-case, both can carry the platform string; we normalise via a single detector.

This server encodes all of those. See docs/api-coverage-gaps.md §"Cross-repo comparison" for what other Action1 MCP projects miss.

Related MCP server: atera-mcp

Highlights

  • 100 % API coverage — every operation in the pinned Action1 OpenAPI 3.1.0 spec is reachable through exactly one MCP tool. Mapping in docs/api-coverage.md. The pin is enforced by a unit test (tests/unit/specSha.test.ts) so an upstream spec change fails the build instead of silently rotting the surface.

  • Hybrid architecture — hand-curated tools that encode the quirks above + auto-generated tools from the spec + high-level workflow wrappers (CVE remediation plan, audit log search, software inventory, recurring schedules, report export, group resolver).

  • MCP-protocol completeness — beyond tools, the server also ships:

    • 7 Resources (action1://me, ://orgs, ://templates, ://reports, ://endpoints/{orgId}, ://groups/{orgId}, ://vulnerabilities/{orgId}) for hosts that pre-fetch context. All list-shaped resources are capped to fit the 1 MB host limit and emit a truncation note when the cap fires.

    • 6 Slash-Prompts (/patch-windows-fleet, /audit-vulnerabilities, /triage-offline-endpoints, /run-script-fleetwide, /software-inventory-sweep, /check-my-permissions) for one-click workflows.

    • logging/setLevel — clients can dynamically bump or lower verbosity at runtime.

    • Cancellation propagation — long-running tools (auto_paginate, wait_for_automation, execute_and_wait) honour the host's AbortSignal.

    • outputSchema declared on every list-shaped read tool for client-side validation.

  • Skill-conformant tools — every tool emits response_format (markdown default, json opt-in), a structured description with Args / Returns / Examples / Error Handling sections, all four annotations (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) explicitly set, and total / count / next_cursor / has_more on every paginated response.

  • Markdown rendering with humanised values — Action1 timestamps (YYYY-MM-DD_HH-MM-SS) render as YYYY-MM-DD HH:MM:SS UTC; ID columns lead the table; per-tool CHARACTER_LIMIT = 25_000 keeps agent context lean.

  • Three-layer destructive guardACTION1_ALLOW_DESTRUCTIVE env switch + per-call confirm: "YES" + dry_run: true (default). The LLM cannot accidentally mutate production state. Optional ACTION1_DESTRUCTIVE_AUTO_CONFIRM for isolated single-operator setups (still requires the env switch).

  • Sound auth — OAuth2 client-credentials with proactive 5-minute refresh, in-flight deduplication of concurrent token requests, and refresh_token-first fallback when re-acquiring.

  • Robust transport — retry with exponential backoff for DNS hiccups, HTTP 5xx, and 429 (honors Retry-After). Pagination walks limit/from transparently with caller-supplied caps.

  • Both transports — stdio (default; for local Claude Code / Cursor / Claude Desktop) + Streamable HTTP, stateless (for hosted Claude.ai custom connectors / team setups). HTTP transport supports bearer-token auth via MCP_HTTP_TOKEN (constant-time compare), a 1 MB body limit, and hard-fails on non-loopback bind without an Origin allowlist.

  • Distribution — MCPB bundle for Claude Desktop one-click install, npm publish-ready.

  • Observability — structured JSON-line logs to stderr with auto-redaction of Bearer …, api-key-…, and any property whose key looks sensitive (authorization, *_token, *_secret, password, …). Stdout reserved for MCP JSON-RPC.

  • Strict TypeScript with Zod input schemas on every tool. 527 tests across 4 categories (unit / integration / security / performance).

Quickstart

git clone https://github.com/mguttmann/action1-mcp.git
cd action1-mcp
npm install
cp .env.example .env             # edit with your Action1 credentials
npm run build
npm run inspector                # opens MCP Inspector against the built server

Or attach directly to Claude Code:

claude mcp add action1 -- node --env-file=$(pwd)/.env $(pwd)/dist/index.js

For the full installation walkthrough — including Claude Desktop, Claude.ai, Cursor, Continue.dev, and Cody — see docs/INSTALLATION.md.

Architecture

┌──────────────────────────────────────────────────────────────────────┐
│ Curated tools + Workflow wrappers                                     │
│ • script execution (Win + Mac + OS-aware)                             │
│ • execute_and_wait (POST + poll + filtered output)                    │
│ • get_endpoint with /general → canonical path + list-fallback         │
│ • CVE remediation plan, audit log search, software inventory, …      │
├──────────────────────────────────────────────────────────────────────┤
│ Auto-generated tools                                                  │
│ • one tool per remaining spec operation, verb-first snake_case names  │
│ • shared runtime: pagination, destructive guard, error mapping        │
│ • Action1 OpenAPI 3.1.0 pinned at SHA af75f1cc…                       │
├──────────────────────────────────────────────────────────────────────┤
│ Shared infrastructure                                                  │
│ • Action1Client (auth, retry, pagination, error mapping)               │
│ • TokenProvider (refresh_token fallback, 5-min proactive refresh)      │
│ • OrgResolver (fuzzy name match, session cache)                        │
│ • Three-layer destructive guard (env + confirm + dry_run)              │
│ • Structured stderr logger with auto-key redaction                     │
│ • Markdown auto-table renderer (humanises Action1 timestamps)          │
│ • Per-tool CHARACTER_LIMIT = 25_000 + WIRE_LIMIT_BYTES = 400_000       │
└──────────────────────────────────────────────────────────────────────┘

When a curated tool and an auto-generated tool address the same path, the curated one wins by name and the auto-generated one is suppressed via src/codegen/curated-overrides.ts. See docs/api-coverage.md for the full mapping.

Configuration

All configuration is via environment variables; copy .env.example to .env and fill in.

Variable

Required

Default

Description

ACTION1_BASE_URL

yes

Region-specific instance, e.g. https://app.eu.action1.com/api/3.0.

ACTION1_CLIENT_ID

yes

OAuth2 client id from Action1 → Settings → API Credentials.

ACTION1_CLIENT_SECRET

yes

OAuth2 client secret. Shown once at credential creation.

ACTION1_ORG_ID

recommended

Default org UUID. Each tool can override via org_id.

ACTION1_DEFAULT_TIMEOUT_MINUTES

no

10

Per-action timeout (PowerShell, etc.).

ACTION1_DEFAULT_RETRY_MINUTES

no

1440

Window during which Action1 retries when an endpoint is offline.

ACTION1_LOG_LEVEL

no

info

One of debug, info, notice, warn, warning, error, critical, alert, emergency.

ACTION1_LAST_SEEN_STALE_MINUTES

no

10

Minutes since last_seen before an endpoint is treated as offline (range 1–1440). Tune up for fleets that check in infrequently.

ACTION1_ALLOW_DESTRUCTIVE

no

false

Set to true / 1 / yes to allow tools with destructiveHint: true to mutate state.

ACTION1_DESTRUCTIVE_AUTO_CONFIRM

no

false

Single-operator only: waives the per-call confirm: "YES" requirement. dry_run still defaults to true — pass dry_run: false to actually execute. Still requires ACTION1_ALLOW_DESTRUCTIVE=true.

PORT

no

3000

HTTP transport port.

HOST

no

127.0.0.1

HTTP transport host.

MCP_HTTP_TOKEN

no

unset

Required Authorization: Bearer <token> on /mcp when set. Strongly recommended for any non-loopback bind.

MCP_HTTP_ALLOWED_ORIGINS

no

unset

Comma-separated allowlist for browser Origin headers. Required when binding to a non-loopback host — the server hard-fails to start otherwise.

TRUST_PROXY

no

false

Reverse-proxy hop trust for correct client IPs in rate-limiting. One of false / true / loopback / a CIDR. Enable only for trusted upstream proxies.

Connecting to MCP hosts

Host

Transport

Doc

Claude Code (CLI)

stdio

INSTALLATION § Claude Code

Claude Desktop (macOS / Windows)

stdio

INSTALLATION § Claude Desktop

Claude.ai (web)

Streamable HTTP

INSTALLATION § Claude.ai

Cursor

stdio

INSTALLATION § Cursor

Continue.dev / Cody

stdio

INSTALLATION § generic

Tools

See docs/USAGE.md for the full tool reference and docs/EXAMPLES.md for end-to-end recipes.

A summary of the curated layer (the auto-generated layer is the long tail and is documented operation-by-operation in docs/api-coverage.md):

Discovery (read-only)

action1_list_organizations, action1_list_endpoints, action1_endpoints_summary (server-side aggregation: ~1 KB regardless of fleet size), action1_get_endpoint (with /general → canonical path fallback, plus derived platform and connectivity.online), action1_search_endpoints (substring filter on hostname / user / OS / status), action1_list_action_templates, action1_get_action_template, action1_list_missing_updates, action1_list_vulnerabilities (graceful 403 if scope absent), action1_list_recent_automations, action1_automations_summary.

Execution (destructive — guard required)

action1_run_powershell (Windows; auto-fills success_exit_codes), action1_run_bash_macos (macOS; auto-fills the ten run_script fields), action1_run_script (auto-routes by OS), action1_reboot_endpoint, action1_deploy_update (spec-conformant {scope, packages, reboot_options}), action1_deploy_package, action1_uninstall_program, action1_run_data_collection. All accept target_type: "Endpoint" (default) or "EndpointGroup" for bulk fan-out.

Polling / results (read-only)

action1_get_automation_status, action1_get_automation_results, action1_get_automation_output (filters Starting/Waiting/Completed), action1_wait_for_automation.

Workflows (destructive)

action1_execute_and_wait — start an action, poll until it terminates, return the filtered output. Auto-routes by OS for mode: "script" or runs a named template for mode: "template".

High-level wrappers

action1_endpoint_groups_resolve (fuzzy name → UUID), action1_software_inventory_for_endpoint, action1_recurring_schedules, action1_audit_log_search, action1_report_export, action1_cve_remediation_plan.

Auto-generated

Every remaining Action1 API operation as a verb-first snake_case tool. See docs/api-coverage.md. All input parameter names are normalised to snake_case for consistency with the curated layer.

Resources

Seven MCP resources for hosts that pre-fetch context:

URI

Purpose

action1://me

The authenticated identity / role / permissions. Use this as a startup probe to know which tool families will 403.

action1://orgs

All visible organizations.

action1://templates

Action template catalog.

action1://reports

Report catalog.

action1://endpoints/{orgId}

Live endpoint snapshot per org. Pass default to use ACTION1_ORG_ID.

action1://groups/{orgId}

Endpoint groups.

action1://vulnerabilities/{orgId}

Org-wide CVE rollup. May 403 if the role lacks view_vulnerabilities.

All list-shaped resources are capped at ~400 KB and emit a truncation note when the cap fires; the equivalent paginated tool gives unbounded data via cursor chaining.

Slash-prompts

Six host-surfaced workflows for the most common day-to-day jobs:

Prompt

Args

What it does

/patch-windows-fleet

group_query

Resolves the group, lists missing updates, previews and (after confirmation) deploys.

/audit-vulnerabilities

top_n?

Surveys org-wide vulnerabilities, ranks the worst, presents a remediation plan.

/triage-offline-endpoints

stale_minutes?

Walks the inventory, surfaces endpoints whose status or last_seen are stale.

/run-script-fleetwide

group_query, script_text

Validates the script is read-only, dispatches via OS-aware routing, streams output.

/software-inventory-sweep

software_name

Searches every endpoint's installed software for a substring match.

/check-my-permissions

Reads action1://me and reports which tool families will 403 with the current role.

Destructive guard

Every tool flagged destructiveHint: true enforces three independent gates:

ACTION1_ALLOW_DESTRUCTIVE=true   ← server env, restart-required
        AND
confirm: "YES"                    ← exact, case-sensitive
        AND
dry_run: false                    ← default is true → preview-only
// Preview only (default)
{ "tool": "action1_run_powershell",
  "arguments": { "endpoint_id": "<uuid>", "script_text": "Get-Date" } }
// → returns { "dry_run": true, "would_send": { method, path, body } }

// Actually execute (server env: ACTION1_ALLOW_DESTRUCTIVE=true)
{ "tool": "action1_run_powershell",
  "arguments": { "endpoint_id": "<uuid>", "script_text": "Get-Date",
                 "dry_run": false, "confirm": "YES" } }

Single-operator setups can opt into ACTION1_DESTRUCTIVE_AUTO_CONFIRM=true, which waives only the per-call confirm: "YES" requirement — dry_run still defaults to true, so a bare call is still a preview; pass dry_run: false to execute. The env switch is still required, and the server logs a loud warning at start-up when this mode is on.

See docs/SECURITY.md for the full threat model.

Examples

Three quick workflows; many more in docs/EXAMPLES.md:

# 1. Fleet health check
> "How many endpoints are online and how many need a reboot?"

  agent → action1_endpoints_summary
  result → { total: 1247, fresh_last_seen: 1130, reboot_required: 38, ... }

# 2. Run a read-only PowerShell on a specific Win11 host
> "What's the OS build of <hostname>? Run `Get-ComputerInfo OsBuildNumber`."

  agent → action1_search_endpoints { query: "<hostname>", fields: ["hostname"] }
  agent → action1_run_powershell {
            endpoint_id: <uuid>,
            script_text: "Get-ComputerInfo OsBuildNumber",
            dry_run: false, confirm: "YES" }
  agent → action1_wait_for_automation { instance_id: <id>, endpoint_id: <uuid> }

# 3. Build a CVE remediation plan
> "What's needed to remediate CVE-2024-XXXX?"

  agent → action1_cve_remediation_plan { cve_id: "CVE-2024-XXXX" }
  result → { plan: [{ cve, affected_endpoints, candidate_packages }], ... }
  agent → action1_deploy_update { ... } (after operator confirmation)

Rate limits

Action1's REST API does not publish a hard rate-limit ceiling. In practice we observe ~10 requests per second sustained without 429s on the EU instance. If you do hit 429:

  • The retry wrapper honours Retry-After automatically.

  • Token-bucket-style throttling on auto_paginate calls keeps a multi-page list walk under ~5 RPS.

  • For mass-fan-out actions, prefer target_type: "EndpointGroup" over individual per-endpoint POSTs — Action1 fans out server-side.

The server does NOT pre-emptively cache list responses; consecutive calls always hit the API. See src/client/retry.ts for the retry policy.

Required Action1 permissions

The MCP server's tool surface respects whatever role the API key carries. Common scopes:

Tool family

Required permission

Discovery (orgs, endpoints, templates, automations)

view_endpoints, view_organizations, view_action_templates

Software inventory

view_installed_software

Missing updates

view_endpoints (often suffices)

Vulnerabilities

view_vulnerabilities (commonly missing on automation-only keys)

Audit log

view_audit

Reports

view_reports

Execute scripts / deploy / reboot

manage_actions, manage_endpoints

Manage schedules

manage_schedules

Use action1://me or the /check-my-permissions slash prompt to confirm what the configured key can do before the agent starts attempting destructive operations.

Documentation

File

What it covers

docs/INSTALLATION.md

Step-by-step for every supported MCP host, plus install FAQ.

docs/FAQ.md

Cross-topic FAQ + how-to recipes.

docs/USAGE.md

Tool reference for curated + wrapper layers, plus Resources, Prompts, output-format, cancellation, logging.

docs/EXAMPLES.md

End-to-end recipes (patching, triage, CVE remediation, etc.).

docs/DEPLOYMENT.md

stdio / HTTP / systemd / MCPB / Cloudflare Workers, plus the production checklist.

docs/SECURITY.md

Threat model, destructive guard, credential rotation, redaction, rate limits.

docs/TROUBLESHOOTING.md

Common failure modes and fixes.

docs/CONTRIBUTING.md

Codegen workflow, test layout, commit conventions.

docs/api-coverage.md

The full operation-to-tool mapping (166 tools over the pinned spec).

docs/api-coverage-gaps.md

Cross-repo comparison and capability gaps.

docs/403-investigation.md

Why /general is not a real path.

evals/

Skill-format evaluation suite (12 multi-hop questions, harness-runnable).

TESTING.md

Unit / integration / security / performance tests, smoke tests, live-run results (anonymised).

Development

npm run dev               # tsx watch (stdio)
npm run typecheck
npm run lint
npm test                  # 527 tests across all categories
npm run test:unit         # 37 files
npm run test:integration  # MCP-protocol round-trip tests
npm run test:security     # destructive-guard truth table, redaction matrix
npm run test:performance  # capItemList / markdownTable scaling
npm run codegen           # regenerate src/tools/generated/index.ts from the spec
npm run inspector         # MCP Inspector against the built stdio server

The macOS payload-builder unit tests are intentionally strict — they protect against silent regressions of the reverse-engineered field set. If you change the payload, update the snapshot.

Roadmap

Tracked in docs/api-coverage-gaps.md § "Recommended second-wave roadmap":

  • Endpoint groups CRUD + targeting (mostly delivered via auto-gen + the target_type parameter on curated tools).

  • Reports surface (delivered via the auto-gen + action1_report_export wrapper).

  • Software inventory per endpoint (delivered via action1_software_inventory_for_endpoint).

  • CVE-based remediation builder (delivered via action1_cve_remediation_plan).

  • Recurring automations CRUD (delivered via auto-gen).

Open candidates:

  • Streamable HTTP "Sampling" / "Elicitation" support if user demand appears.

  • Cloudflare Workers reference deployment.

  • Bundle the generated _coverage_table.md into the npm package.

Security

See docs/SECURITY.md. Report vulnerabilities via the private security advisory at https://github.com/mguttmann/action1-mcp/security/advisories/new.

License

MIT © 2026 mguttmann

Acknowledgements

Available Tools

166 tools
action1_add_endpoint_to_groupAdd an endpoint to an endpoint groupA
Destructive

Add a single endpoint to an endpoint group. POSTs the spec array body [{method:POST,data:{endpoint_id,type}}] to /endpoints/groups/{org}/{group}/contents. Re-adding an existing member is a no-op.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
group_idYesEndpoint group id.
endpoint_idYesEndpoint UUID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false. The description adds value by explaining the no-op behavior for re-adding and the exact POST body format, which aids in understanding side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no fluff. Each sentence provides essential information: purpose and HTTP method in the first, behavior and endpoint in the second.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema and full schema coverage, the description adequately covers the tool's behavior and constraints. The no-op detail and endpoint path add sufficient context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with clear descriptions for each parameter. The description does not add additional parameter-level meaning beyond what the schema already provides, so a baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Add a single endpoint to an endpoint group' with specific verb and resource. It distinguishes from siblings like 'action1_remove_endpoint_from_group' and provides the HTTP endpoint path for precise understanding.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description notes that 'Re-adding an existing member is a no-op,' providing guidance on idempotency. However, it lacks explicit when-to-use or when-not-to-use instructions relative to similar tools like creating groups.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_automations_summaryServer-side aggregation over recent automation instancesA
Read-onlyIdempotent

Walks recent automation instances and returns counts (by_status, by_template, success/failure). ~1 KB output.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
max_scanNoMax instances to walk.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only, idempotent, non-destructive behavior. The description adds output size (~1 KB) and the nature of aggregation, but doesn't mention potential performance impact or what defines 'recent'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one sentence plus an output size note, with no wasted words. It is front-loaded with key information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the simple nature of the tool and the presence of an output schema, the description is nearly complete. It could clarify what 'recent' means (e.g., time range) but otherwise covers the necessary context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers all 3 parameters fully (100% coverage). The description adds meaningful context: that the tool aggregates counts by status/template/success/failure, that max_scan limits the walk, and that response_format controls output type.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool walks recent automation instances and returns counts (by_status, by_template, success/failure), distinguishing it from sibling tools like list_automation_instances which would return raw instance data.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for summary counts but offers no explicit guidance on when to prefer this over alternatives like list_automation_instances or get_automation_results.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_clone_packageClone Software Repository packageA
Destructive

Clone Software Repository package. Creates a full copy of an existing Software Repository package under a new package ID. Perm: manage_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
package_idYesProvide a specific package ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and readOnlyHint=false, indicating a write operation. The description adds that a 'full copy' is created, but does not elaborate on side effects (e.g., whether it triggers automations or consumes resources). It does not contradict annotations, but it adds limited behavioral context beyond what annotations provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise: three sentences that cover purpose, behavior, and permission. It is front-loaded with the action and avoids any redundant information. Every sentence contributes value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 4 parameters, all documented, and an output schema available, the description is largely sufficient. It mentions the required permission and that a new package ID is generated. However, it could be slightly more specific about what 'full copy' entails (e.g., whether all versions, settings, and associated data are duplicated). Still, overall it provides adequate context for tool selection and invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for all parameters (package_id, org_id, confirm, dry_run). The description does not add new insights beyond the schema; it only restates the overall purpose. Baseline 3 is appropriate as the schema already documents each parameter adequately.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Clone'), the resource ('Software Repository package'), and the outcome ('full copy under a new package ID'). It effectively distinguishes from sibling tools like action1_create_package (which creates from scratch) and action1_delete_package. The verb+resource+scope is specific and unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage (when you need a duplicate of an existing package) but does not explicitly state when to use this tool over alternatives like action1_create_package or action1_update_package. No 'when not to use' or comparison with siblings is provided, leaving some ambiguity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_clone_roleCloning a roleC
Destructive

Cloning a role. Creates a copy of an existing… Perm: manage_roles.

ParametersJSON Schema
NameRequiredDescriptionDefault
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
role_idYesPath parameter (synthesised: not declared in spec).

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description says 'Creates a copy' implying non-destructive behavior, but the annotation destructiveHint: true suggests the tool destroys something. This is a contradiction. The description adds no further behavioral context beyond the truncated statement and permission requirement.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely short but ends abruptly with an ellipsis, making it incomplete. While front-loaded with 'Cloning a role', the second sentence is truncated, impairing readability and usefulness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a potentially destructive tool (despite description claiming otherwise), important behavioral details like the required confirmation and dry-run mode are missing from the description. The output schema exists but does not compensate for the lack of cloning-specific context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so parameters are already described. The description adds no additional meaning beyond the schema, and the mention of 'Perm: manage_roles' is not a parameter but a prerequisite. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Cloning a role. Creates a copy of an existing…' which identifies the verb (clone) and resource (role). It distinguishes from create_role and update_role by the name, but does not explicitly differentiate from siblings. The permission hint adds clarity. However, truncation reduces precision.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool vs alternatives such as create_role or update_role. The description only mentions required permission but fails to provide context for decision-making.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_automation_instanceApplying a automationC
Destructive

Applying a automation. Immediately runs an instance of the automation on the specified endpoints in the specified. Perm: run_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Description adds the permission requirement 'Perm: run_automations', but annotations already indicate destructiveHint=true. No additional behavioral details (e.g., side effects, confirmation steps) are provided beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short (two sentences) but includes an incomplete sentence ('in the specified'). The permission line is concise but could be integrated better. Not overly verbose, but grammar issues detract.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive tool with required confirm parameter and output schema, the description fails to explain the dry_run behavior, the confirm requirement, or what the output contains. OpenWorldHint and destructiveHint require more context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% with clear descriptions for body, org_id, confirm, dry_run. The tool description does not add any additional parameter meaning, so baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description states it applies an automation and immediately runs an instance on specified endpoints, which clearly identifies the tool's primary action. However, the phrase 'in the specified' is incomplete, slightly reducing clarity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives like action1_create_automation_schedule or when not to use it. The only hint is 'immediately runs', implying it's for immediate execution, but no explicit context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_automation_scheduleCreate a automation scheduleB
Destructive

Create a automation schedule. Schedules a new automation. The automation will be executed against a specified list of endpoints. Perm: manage_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: AutomationSchedulePayload)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false, so the description's mention of permission adds context. However, it does not disclose potential side effects (e.g., if the schedule overwrites an existing one) or what happens upon execution with dry_run=false.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description consists of three sentences, the first two of which largely repeat the title. While it is not verbose, it could be more concise by combining them. The placement of permission at the end is acceptable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (4 parameters, nested body, output schema, destructive annotation), the description lacks critical context such as the difference between schedule and instance, the purpose of dry_run and confirm, and whether scheduling is immediate or deferred. It feels incomplete for a creation tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for all parameters. The description adds no additional meaning beyond the schema, such as clarifying the structure of the body or the role of confirm/dry_run. Baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Create a automation schedule' and 'Schedules a new automation,' indicating the primary action. It also mentions execution against endpoints, which differentiates it from similar create tools like action1_create_automation_instance. However, it could more explicitly distinguish between a schedule and an instance.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for scheduling automations on endpoints and mentions the required permission 'manage_automations.' However, it does not provide explicit guidance on when to use this tool compared to alternatives like action1_create_automation_instance, nor does it specify when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_cve_remediationDocuments applied compensating controls for a specific vulnerability.C
Destructive

Documents applied compensating controls for a specific vulnerability. Adds documentation for an applied remediation action for specific… Perm: manage_vulnerabilities.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: RemediationPayloadPost)
cve_idYesThe unique identifier of a CVE (Common Vulnerabilities and Exposures), e.g. CVE-2005-2300
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations indicate destructiveHint=true, so the tool is destructive. The description says 'Adds documentation' but does not clarify what is destroyed (presumably previous remediation documentation?) or that confirmation is required (confirm parameter). No contradiction with annotations, but little extra value.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but incomplete: the second sentence appears truncated ('specific…') and includes a permission note that could be placed elsewhere. It could be clearer with full sentences.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 5 parameters, destructive annotations, and an output schema, the description is insufficient. It does not explain what the output contains, how it relates to other CVE remediation tools, or the effect of the 'dry_run' parameter. The output schema exists but is not mentioned.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description does not elaborate on parameters beyond what is in the schema. For example, 'body' is only referenced as a schema, and 'confirm' is not explained as a safety mechanism.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states the tool documents compensating controls for a vulnerability, which clearly indicates the action. However, it does not explicitly distinguish it from sibling tools like action1_cve_remediation_plan or action1_update_remediation, though the verb 'create' suggests adding a new record.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool (e.g., after creating a remediation plan) or when not to use it (e.g., when updating existing documentation). The mention of 'Perm: manage_vulnerabilities' hints at a permission requirement but not usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_data_sourceCreating a data sourceA
Destructive

Creating a data source. Creates a new custom data source. At this time, all data sources are enterprise-wide. Perm: manage_data_sources.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive=true. The description adds value by specifying the required permission ('Perm: manage_data_sources') and the enterprise-wide scope, which are behavioral traits beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded with the key action. It contains a bit of redundancy ('Creating a data source' and 'Creates a new custom data source'), but overall it is efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity and the presence of an output schema, the description covers essential context (permission, scope) but does not mention the confirmation or dry_run parameters, leaving some gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all parameters are well-documented in the schema. The description adds no additional parameter info, so it meets the baseline but does not exceed it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Creates a new custom data source', providing a specific verb and resource. It also distinguishes from siblings by noting 'all data sources are enterprise-wide', which sets it apart from other create tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not explicitly state when to use this tool versus alternatives like update_data_source or delete_data_source. It only implies usage context through the enterprise-wide scope, but lacks direct guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_endpoint_groupCreating a new groupA
Destructive

Creating a new group. Creates a new endpoint group within the specified organization. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive and read-only behavior; description adds the permission requirement but does not elaborate on effects like dry_run behavior or what happens on confirmation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, with the first being slightly redundant with the title, but overall efficient and front-loaded with core action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Completeness is adequate given the output schema exists and annotations are present, but description could better explain dry_run/confirm parameters and differentiate from sibling create tools.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of parameters with descriptions, but the body parameter description is generic. Description adds context that the body defines group details but no specific field guidance.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it creates a new endpoint group within an organization, distinguishing from sibling tools like add_endpoint_to_group and other create tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides the required permission (manage_endpoints) but lacks guidance on when to use this tool versus alternatives or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_endpoint_remote_sessionStarting a new remote sessionC
Destructive

Starting a new remote session. Sends a request to the endpoint to start a new remote session. Perm: remote_connect.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesProvide an endpoint ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and idempotentHint=false, so the description adds minimal transparency. It mentions the required permission 'remote_connect', but does not disclose side effects (e.g., whether existing sessions are terminated), endpoint reachability requirements, or any irreversible actions beyond what the annotations imply.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short (two sentences plus permission note) but contains redundancy: 'Starting a new remote session' and 'Sends a request to the endpoint to start a new remote session' say essentially the same thing. It could be more compact or front-loaded with critical details.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (nested body object, required confirm parameter, dry_run, output schema exists but not described), the description lacks essential context. It does not explain the preview-then-execute flow implied by dry_run, nor the meaning of the output. With many sibling tools, no differentiation is provided.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with all parameters described, so the baseline is 3. The tool description does not add any extra meaning or context to parameters like 'body', 'confirm', or 'dry_run'. It repeats no parameter information, but also provides no additional semantic value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'starting' and resource 'remote session', matching the tool name and title. However, it does not distinguish this 'create' operation from the sibling 'action1_update_remote_session' or other remote session tools, but the purpose is still unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus alternatives like 'action1_update_remote_session' or 'action1_get_remote_session'. No prerequisites, preconditions, or when-not-to-use scenarios are mentioned. The agent must infer usage solely from the tool name.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_organizationCreate an organizationB
Destructive

Create an organization. Creates a new organization. Perm: manage_organizations.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: object)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations indicate destructiveHint=true and readOnlyHint=false, so the description adds permission info ('Perm: manage_organizations'). However, it does not disclose the confirmation requirement (confirm param) or dry_run behavior, which are important behavioral details beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise (two short sentences plus permission), with no wasted words. However, it could be improved by structuring the permission as a separate note or providing more context without increasing length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema and full parameter documentation, the description omits important context for a creation tool, such as what the body parameter expects or that confirmation is required. It only repeats the action and adds permission, leaving gaps in understanding.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds no additional meaning about the parameters; it only mentions the permission, not the body, confirm, or dry_run semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool creates an organization, using the verb 'Create' and resource 'organization'. It is specific enough to distinguish from sibling tools that create other entities, though it does not explicitly differentiate itself.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives, such as when to create an organization versus update or delete one. There is no mention of prerequisites or context, only a permission requirement.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_packageCreate new Software Repository packageA
Destructive

Create new Software Repository package. Create a new custom Software Repository package object (with no versions) and set its initial basic. Perm: manage_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: SoftwareRepositoryPackagePayloadPost)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive, not read-only, not idempotent. The description adds the permission requirement (Perm: manage_software_repository) which is helpful. It also mentions 'set its initial basic' but does not elaborate, missing some transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with two sentences and front-loaded. Could be slightly tighter by avoiding repetition, but overall it is efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 4 parameters, nested objects, and an output schema, the description is brief. It does not explain return values, the 'initial basic' concept, or dry_run behavior. Adequate but with gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already defines all parameters. The description adds no additional meaning beyond what the schema provides, meeting the baseline expectation for high coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (Create), the resource (Software Repository package), and notes it creates with no versions. It distinguishes from siblings like 'create_package_version' which creates a version. The verb+resource is specific.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions required permission (manage_software_repository) but does not explicitly state when to use this tool versus alternatives like cloning or updating. Usage context is implied by the tool name and siblings but lacks explicit guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_package_versionCreate new version in Software Repository packageC
Destructive

Create new version in Software Repository package. Adds a new version to the specified Software Repository package. Perm: manage_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
package_idYesProvide a specific package ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and readOnlyHint=false. The description adds the specific permission requirement ('Perm: manage_software_repository'), which is useful beyond annotations. However, it does not disclose other behaviors like idempotency or error handling, so it only marginally adds value.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, but the first is redundant with the title. The second adds a permission note. Could be more concise by removing the first sentence or combining. Adequate but not optimal.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description omits important behavioral details such as the confirm parameter requirement, dry_run default, and what the output schema returns. Given the tool has a nested body and multiple parameters, the description is incomplete for an AI agent to use confidently.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with all parameters described. The description provides no additional meaning beyond the schema, so it meets the baseline of 3 without adding value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Create new version in Software Repository package' with a specific verb and resource. However, it does not differentiate from sibling tools like action1_create_package or action1_clone_package, missing explicit distinction.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives. The description does not mention prerequisites, when-not-to-use, or compare with siblings. Only a permission note is provided, which is insufficient for decision-making.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_reportCreating a custom reportB
Destructive

Creating a custom report. Creates a custom report in the predefined Custom report category. Perm: manage_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations indicate destructiveHint=true, consistent with 'Creates'. The description adds the permission requirement. However, it does not discuss side effects, the confirm parameter, or dry_run behavior, which are important for a destructive operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with a permission note, making it concise and front-loaded. However, it could be structured to include more details without being verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists but is not described. The description omits the confirm/dry_run mechanism, which is crucial for safe usage. Given the tool's destructive nature and presence of these parameters, the description is incomplete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so all parameters are documented in the schema. The description adds no extra meaning beyond the schema, such as explaining the confirm or dry_run fields.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The title and description state the tool creates a custom report in the 'Custom report category', which differentiates it from other report-related siblings like create_report_subscription. However, it does not fully elaborate on the scope or uniqueness.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the required permission 'manage_reports' but provides no guidance on when to use this tool versus alternatives. It lacks context on prerequisites or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_report_subscriptionCreating a new report subscriptionC
Destructive

Creating a new report subscription. Creates a new report subscription. Perm: view_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: object)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint=false, destructiveHint=true, but the description adds the permission requirement 'Perm: view_reports', which is useful. However, the description adds no further behavioral context beyond what the annotations and name imply, such as side effects or idempotency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description contains two sentences: a heading 'Creating a new report subscription.' followed by the same phrase 'Creates a new report subscription.' This redundancy wastes space. It could be simplified to a single concise sentence or bullet points.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

While an output schema exists so return values are covered, the description omits crucial context: what triggers a subscription (e.g., email, frequency), how dry_run works, and why confirm=YES is required. For a destructive operation (destructiveHint=true), more safety guidance would be expected.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so parameters are documented in the schema. The tool description does not add any extra meaning for parameters (body, confirm, dry_run). The mention of 'Perm: view_reports' is not parameter-specific. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states the action 'Creating a new report subscription' and mentions the required permission 'view_reports'. While it distinguishes the tool from siblings by specifying 'report subscription', the wording is redundant ('Creating... Creates...') and lacks precision on what a subscription entails.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives (e.g., update_report_subscription, delete_report_subscription, list_report_subscriptions). There is also no explanation of how to choose between dry_run and confirm parameters.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_roleCreating a roleC
Destructive

Creating a role. Creates a new… Perm: manage_roles.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotation destructiveHint=true indicates destructive behavior, and the description adds 'Perm: manage_roles' hinting at required permissions. However, it does not explain the nature of the destruction (e.g., overwriting existing roles), rate limits, or side effects beyond what annotations already imply.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short but incomplete (truncated sentence 'Creates a new...'), sacrificing essential information. It is not well-structured and the opening phrase 'Creating a role' is redundant with the title.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a destructive tool with 3 parameters including a nested object body, the description lacks details about the body schema, the role creation process, and safety mechanisms like confirm and dry_run. An output schema exists but is not referenced.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema covers all three parameters with descriptions (body, confirm, dry_run). The tool description adds no additional parameter meaning, such as format or constraints, so baseline 3 is appropriate given 100% schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'Creating a role' and 'Creates a new...', indicating the verb and resource. However, the sentence is truncated and lacks specificity about what a role is in this context, and it does not differentiate from the many other create_* sibling tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives such as action1_create_user or action1_create_package. There is no mention of prerequisites, limitations, or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_role_userAssigning user to a specific roleA
Destructive

Assigning user to a specific role. Assigns user to a role specified by its ID. Perm: assign_roles.

ParametersJSON Schema
NameRequiredDescriptionDefault
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
role_idYesProvide a specific role ID.
user_idYesProvide a specific user ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare readOnlyHint=false and destructiveHint=true, consistent with description. Description adds permission context but no additional behavioral details beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no waste. Purpose and permission stated concisely, front-loaded with action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given annotations, full schema coverage, and sibling tools, description provides sufficient context for a simple assignment operation. Could mention failure conditions but not necessary.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of parameters with clear descriptions. Description adds no extra meaning beyond what schema provides. Baseline score for high coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states verb 'assigns' and resources 'user' and 'role', with specific ID requirement. Distinguishes from siblings like create_role or delete_role_user.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Mentions required permission 'assign_roles', implicitly guiding usage. Does not explicitly state when to use vs alternatives, but purpose is clear from name and context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_scriptCreating a custom scriptA
Destructive

Creating a custom script. Creates a new custom script and adds it to the Script Library. Perm: manage_scripts.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.5/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true. Description adds 'creates' and 'adds' but no further behavioral context such as whether existing scripts can be overwritten, if the creation is immediate, or any side effects. With annotations present, the description adds limited value.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences defining purpose and permission. No superfluous content. Front-loaded with the action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists but not shown. Description lacks usage guidelines and behavioral details. Adequate but with gaps given the number of sibling tools and complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%. Description does not elaborate beyond schema: body, confirm, dry_run are only described in schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Title 'Creating a custom script' and description 'Creates a new custom script and adds it to the Script Library' provide a specific verb and resource. It clearly distinguishes from sibling tools like action1_create_package which create different resources.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives. The permission note 'Perm: manage_scripts' gives a requirement but does not describe context or exclusions. Minimal guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_settingCreating a new settingC
Destructive

Creating a new setting. Creates a new setting. At this time, all setting templates are enterprise-wide. Perm: manage_advanced_settings.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: SettingPayloadPost)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true. The description adds permission requirement ('Perm: manage_advanced_settings') and enterprise-wide scope, which are useful. However, it does not explain the confirm or dry_run parameters' behavior, which are safety-critical for a destructive operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but contains redundancy: 'Creating a new setting. Creates a new setting.' could be one sentence. The permission and scope information is concise but lacks structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the destructive nature (destructiveHint=true) and the presence of a required confirm parameter, the description fails to explain that confirm must be 'YES' to execute. Also, the dry_run parameter's role in previewing is not mentioned. Output schema exists, so return values are covered, but execution constraints are missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds no additional meaning about the parameters (body, confirm, dry_run) beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Creating a new setting' with the verb 'create' and resource 'setting'. It distinguishes from sibling tools like update, delete, and list. However, the first sentence is redundant, repeating the same idea.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives. The note 'all setting templates are enterprise-wide' provides some context but no when-to-use or when-not-to-use instructions. No alternatives are mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_create_userCreate new userC
Destructive

Create new user. Creates a new user. To create an SSO user, please first review the following documentation: -. Perm: manage_users.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.2/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description contradicts annotations: annotations mark destructiveHint=true, suggesting destructive potential, but the description simply says 'create user' with no mention of destructive behavior. This contradiction creates confusion.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but contains redundancy (first two sentences say the same thing) and an incomplete reference to documentation. It lacks efficient structure and wastes words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description omits critical context about the parameters, such as the purpose of dry_run and confirm fields, and does not explain the required permission beyond a brief mention. This is insufficient for a tool with a required body parameter and optional flags.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description does not need to repeat parameter details. However, it adds no additional meaning beyond what the schema provides, so it meets the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description essentially restates the title ("Create new user") without adding specific scope or differentiation from sibling tools. The mention of SSO users hints at a use case but doesn't clarify what constitutes a new user in this context.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives like update_user or other create_* tools. The reference to SSO documentation is incomplete and doesn't help the agent decide when to invoke this tool.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_cve_remediation_planBuild a remediation plan for a CVE or an endpoint (read-only)A
Read-onlyIdempotent

Read-only correlation of vulnerabilities and missing updates. Does NOT execute; pass the result to action1_deploy_update.

ParametersJSON Schema
NameRequiredDescriptionDefault
cve_idNoPlan for one CVE id.
org_idNoOrg UUID.
max_itemsNoMax plan entries.
endpoint_idNoPlan for one endpoint.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint=false. The description adds the critical behavior that it does not execute and should be used to generate input for deployment, which is beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short, front-loaded sentences that convey purpose and key constraints with no wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only correlation tool with an output schema and rich annotations, the description covers purpose, usage guidelines, and behavioral notes, including the important instruction to pass to a sibling tool. No gaps remain.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema covers 100% of parameters with descriptions. The description does not provide additional semantic context for parameters beyond what the schema already offers.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Read-only correlation of vulnerabilities and missing updates', specifying the verb and resource. It also distinguishes from siblings like action1_create_cve_remediation by noting it does not execute. However, it could be more explicit about the output being a remediation plan.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit when-not-to-use: 'Does NOT execute' and direct alternative: 'pass the result to action1_deploy_update'. The title also indicates read-only usage.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_automationDeleting a automation scheduleB
DestructiveIdempotent

Deleting a automation schedule. Deletes a scheduled automation specified by its ID. Perm: manage_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
automation_idYesProvide a specific automation ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false. The description adds the permission requirement and the presence of dry_run (preview) and confirm parameters, but does not discuss irreversibility or side effects. It adds some context but is not comprehensive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, front-loaded with purpose. The first sentence is slightly redundant with the title but overall efficient with no extra words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has safety mechanisms (dry_run, confirm) and an output schema (not shown), but the description does not explain how to use dry_run versus confirm, or address idempotent reuse. Adequate but not thorough for a destructive tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description only mentions 'specified by its ID' for automation_id, adding no new meaning beyond the schema descriptions for the other parameters. No value added.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states 'Deletes a scheduled automation specified by its ID', combining a specific verb and resource. It is distinct from siblings like action1_delete_automation_action by focusing on the schedule itself. However, it does not explicitly differentiate from other delete tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description lacks any guidance on when to use this tool versus alternatives, no when-not scenarios, and no comparison to sibling tools. It only states the permission required, which is minimal for decision-making.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_automation_actionDeleting an action from a automationB
DestructiveIdempotent

Deleting an action from a automation. Deletes a specified action from a scheduled automation. Perm: manage_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
action_idYesProvide a specific action ID.
automation_idYesProvide a specific automation ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true, but description omits key behavioral traits like the required confirm parameter and dry_run behavior which are critical for safe invocation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is concise at two sentences with no wasted words, though could be slightly more informative without losing brevity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite annotations and output schema existing, description fails to mention important safeguards (confirm, dry_run) making it incomplete for safe execution.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents parameters adequately. Description adds no additional meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states 'Deleting an action from a automation' with specific verb and resource, and distinguishes from similar sibling tools like action1_delete_automation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Implied usage as a deletion tool, but no explicit guidance on when to use this vs alternatives. Only mentions required permission.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_data_sourceDeleting a custom data sourceA
DestructiveIdempotent

Deleting a custom data source. Deletes an existing custom data source. Note that you cannot remove built-in data sources. Perm: manage_data_sources.

ParametersJSON Schema
NameRequiredDescriptionDefault
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
data_source_idYesProvide a specific data source ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations indicate destructiveHint=true and readOnlyHint=false, so the description's mention of deletion is consistent but not additive. It adds the permission requirement and a restriction on built-in sources, but does not elaborate on side effects or irreversibility beyond what annotations suggest.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise: two sentences and a permission note. Every sentence is necessary and informative, with no redundant or vague language.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a delete tool, the description covers the core function, key restriction (no built-in sources), and required permission. It does not mention potential impacts (e.g., on reports) or recovery options, but overall it is adequately informative given the annotations and output schema presence.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with clear descriptions for all three parameters (confirm, dry_run, data_source_id). The description does not add additional meaning beyond what the schema provides, so a baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states it deletes a custom data source, using the verb 'deleting' and 'deletes'. It distinguishes from built-in data sources, and sibling tools include create and update variants, making the purpose clear.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description notes that built-in data sources cannot be removed, providing a clear exclusion. However, it does not mention when to use this tool versus alternatives like disabling a data source or when other constraints apply, leaving some ambiguity.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_deployerDeleting DeployerB
DestructiveIdempotent

Deleting Deployer. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
deployer_idYesProvide a specific deployer ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and idempotentHint=true. Description adds only 'Deleting' which is redundant. No extra behavioral context like what gets destroyed or side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, no unnecessary words, efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given annotations, output schema exists, and 4 parameters, the description is minimal but not incomplete. However, it lacks output behavior details (e.g., success/error). Adequate for a straightforward delete tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with clear descriptions for each parameter. Description adds no additional parameter info beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description states 'Deleting Deployer', clear verb and resource. However, does not explicitly differentiate from sibling delete tools beyond the resource name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Mentions required permission 'Perm: manage_endpoints' but gives no guidance on when to use this tool vs alternatives or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_endpointDeleting an endpointB
DestructiveIdempotent

Deleting an endpoint. Removes a specified endpoint and attempts to uninstall its agent. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesProvide an endpoint ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive and idempotent behavior. The description adds the side effect of attempting to uninstall the agent, which provides useful context beyond annotations, but lacks details on reversibility or cascading effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short (two sentences) and to the point. However, the first sentence is slightly redundant, and the structure could be optimized for scanning.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 4 parameters and an output schema, the description could elaborate on how 'confirm' and 'dry_run' interact or what happens if uninstall fails. It is minimally adequate but not comprehensive.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description does not need to explain parameters. However, it adds no extra meaning beyond what the schema already provides, so a baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Deleting an endpoint', 'Removes a specified endpoint') and the resource, and distinguishes it from other delete tools by mentioning the agent uninstallation side effect.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Only a permission requirement is mentioned. No guidance on when to use vs alternatives, prerequisites, or typical scenarios, leaving the agent without context for selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_groupDeleting an endpoint groupB
DestructiveIdempotent

Deleting an endpoint group. Deletes an existing group in the specified organization. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
group_idYesProvide an endpoint group ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive and idempotent behavior. The description adds the required permission (manage_endpoints) but does not disclose other traits like what happens to associated endpoints or whether deletion is reversible.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and to the point. The first sentence is slightly redundant with the second, but overall no unnecessary information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and annotations covering destructiveness, the description adds permission context. However, it omits mention of the confirm parameter or dry_run behavior, which are important for safe execution.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so each parameter is well-documented in the schema. The description adds no extra parameter meaning beyond what is already provided.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (deleting an endpoint group) with specific verb and resource. It mentions organization scope and required permission, effectively distinguishing it from sibling tools like create or update.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No usage guidance is provided; the description does not specify when to use this tool versus alternatives (e.g., when not to delete a group) or any prerequisites beyond permission.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_organizationDeleting an organizationA
DestructiveIdempotent

Deleting an organization. Removes an organization from the enterprise. Perm: manage_organizations.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false. The description adds the required permission, but no additional behavioral detail (e.g., irreversibility, cascading effects). With annotations present, the description adds some value but is minimal.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise: one sentence plus a permission note. Every word is useful, and the purpose is immediately clear with minimal text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

While the output schema exists and the tool is destructive, the description lacks details about consequences (e.g., whether deletion is immediate, impacts on associated data) and user context. It is adequate but could be more complete for a deletion tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so all parameters are well described in the schema. The description does not add extra meaning or usage context for the parameters beyond what the schema provides, meeting the baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (deleting an organization) and scope (from the enterprise), with a required permission. It is specific and distinguishes from sibling delete tools by specifying 'organization'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not provide guidance on when to use this tool versus alternatives (e.g., updating an organization) or any context about prerequisites or exclusions. Only permission is mentioned, but no when-to-use or when-not-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_packageDelete custom Software Repository packageA
DestructiveIdempotent

Delete custom Software Repository package. Deletes a custom Software Repository package specified by its ID. Perm: manage_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
package_idYesProvide a specific package ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive and idempotent behavior. The description adds context about deleting 'custom' packages and the permission requirement, but does not elaborate on side effects or reversibility. Beyond annotations, it adds useful but limited information.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description consists of two concise sentences with no fluff. It front-loads the action and resource type, then adds a permission note.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a delete tool with an output schema and fully described parameters, the description covers essential context (permission, resource type). However, it omits mention of the dry_run and confirm safety mechanisms, which are important for agent understanding. The schema fills these gaps, but the description could be more complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with all parameters described. The description adds no additional parameter meaning beyond noting deletion 'by its ID' and the permission requirement. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Delete custom Software Repository package' with a specific verb and resource, distinguishing it from sibling tools like create_package, update_package, clone_package.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the required permission ('Perm: manage_software_repository') but provides no guidance on when to use this tool over alternatives, nor any exclusions. Usage is implied but not explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_package_version_actionDelete additional action from version of Software Repository packageC
DestructiveIdempotent

Delete additional action from version of Software Repository package. Deletes the specified additional action from the specified custom… Perm: manage_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
action_idYesProvide a specific action ID.
package_idYesProvide a specific package ID.
version_idYesProvide a specific version ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already convey destructiveness (destructiveHint=true) and non-read-only nature (readOnlyHint=false). The description adds the permission requirement but does not disclose additional behavioral traits such as irreversibility, cascading deletions, or side effects. Since annotations cover the safety profile, a score of 3 is appropriate; the description adds some value but not rich context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short and front-loaded, but it is incomplete (truncated sentence). While concise, it sacrifices completeness and structure. A complete sentence or bullet points would improve clarity without adding excessive length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has an output schema, so return values are inherently covered. However, the description does not explain the effect of deletion (e.g., whether the action is permanently removed, what happens to the version), preconditions, or how it fits into broader workflows. For a destructive tool with 6 parameters and many siblings, more context is needed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, meaning the schema already documents all parameters. The description does not add any additional meaning or context for the parameters beyond what the schema provides. Baseline 3 is correct.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (delete) and the resource (additional action from version of software repository package). It also mentions the required permission, which adds clarity. However, the sentence is truncated ('custom…'), slightly reducing precision. It distinguishes from sibling tools like delete_version and delete_package.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives. There is no mention of prerequisites, exclusions, or context indicating whether it should be used for specific scenarios. The permission note is not usage guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_remediationDeletes remediation record of compensating controlsC
DestructiveIdempotent

Deletes remediation record of compensating controls. Deletes a specific remediation record for compensating controls for a specific… Perm: manage_vulnerabilities.

ParametersJSON Schema
NameRequiredDescriptionDefault
cve_idYesThe unique identifier of a CVE (Common Vulnerabilities and Exposures), e.g. CVE-2005-2300
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
remediation_idYesA specific remediation ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false. Description adds permission context but does not elaborate on behavioral details like irreversibility or side effects. No contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is short but incomplete (truncated) and repetitive ('Deletes remediation record... Deletes a specific remediation record...'). Lacks structural clarity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having 5 parameters, an output schema, and annotations, the description fails to explain important details like the dry_run behavior, confirmation requirement, or return values. It is insufficient for full understanding.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so parameters are well-documented in the schema. The tool description adds no additional parameter information, meeting the baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description states it deletes remediation records of compensating controls, but the text is truncated and repetitive, reducing clarity. It does not fully distinguish from related sibling tools like create or update.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No usage guidance provided. Only a permission note ('Perm: manage_vulnerabilities') is included, but there is no mention of when to use this tool versus alternatives like update or list.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_reportDeleting a custom reportA
DestructiveIdempotent

Deleting a custom report. Deletes a custom report specified by its ID. Perm: manage_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
report_idYesProvide a specific report ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description states the tool deletes a report, consistent with annotations (destructiveHint=true, readOnlyHint=false, idempotentHint=true). However, it adds no additional behavioral context beyond the annotations, such as irreversibility or cascading effects on subscriptions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with two sentences. The first sentence repeats the title, but the second is precise. Could be more succinct by omitting the first sentence, but overall it is well-structured and not verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple delete-by-ID operation with an output schema and clear annotations, the description is mostly complete. It fails to mention the confirm and dry_run parameters, but these are documented in the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all three parameters. The description mentions 'specified by its ID' referring to report_id, but adds no further semantic value beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states exactly what the tool does: 'Deletes a custom report specified by its ID.' It clearly identifies the verb (delete) and resource (custom report), and distinguishes it from sibling tools like action1_create_report, action1_update_report, and action1_list_reports.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives. There is no mention of prerequisites (e.g., needing the report ID) or situations where deletion should be avoided. The only hint is 'Perm: manage_reports,' but this does not constitute usage guidelines.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_report_subscriptionDeleting the report subscriptionC
DestructiveIdempotent

Deleting the report subscription. Removes the report subscription.

ParametersJSON Schema
NameRequiredDescriptionDefault
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
subscription_idYesProvide a specific subscription ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true, so the description's 'Removes' adds no new behavioral insight. Critically, it fails to disclose the required 'confirm' parameter and the safety net of 'dry_run', which are important behavioral details not captured by annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Extremely short but redundant: two sentences saying essentially the same thing. While concise, the repetition wastes an opportunity to provide useful information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that it's a destructive action with a confirm parameter and dry_run option, the description is inadequate. It does not explain the confirmation step, the effect of dry_run, or what the output schema returns. The description leaves the agent uninformed about safe execution.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the schema describes each parameter well (confirm const 'YES', dry_run default true, subscription_id). The description adds no additional semantic value beyond the schema, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description states 'Deleting the report subscription. Removes the report subscription.' which clearly indicates the action and resource. However, it does not differentiate from sibling delete tools like 'delete_report' or provide any unique purpose context beyond the name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool vs alternatives. Does not mention prerequisites, conditions, or that it should only be used when a subscription is no longer needed. Siblings exist but no contrast provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_roleDeleting a specific roleA
DestructiveIdempotent

Deleting a specific role. Deletes a role specified by its ID. Perm: manage_roles.

ParametersJSON Schema
NameRequiredDescriptionDefault
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
role_idYesProvide a specific role ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description does not contradict annotations (destructiveHint=true). It adds permission context but does not elaborate on side effects or behavior beyond what the annotations convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with three short sentences. It is front-loaded with the main purpose and contains no unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema and high parameter coverage, the description adequately covers the core action and permission. It could mention the confirmation and dry_run behavior explicitly, but those are in the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with parameter descriptions. The description aligns with the role_id parameter but does not add new meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb (deleting), resource (role), and method (by ID). It distinguishes from sibling tools like create_role or update_role.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the required permission 'Perm: manage_roles', providing a prerequisite. However, it does not explicitly state when to use this tool versus alternatives or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_role_userUnassigning user from a specific roleA
DestructiveIdempotent

Unassigning user from a specific role. Unassigns user from a role specified by its ID. Perm: assign_roles.

ParametersJSON Schema
NameRequiredDescriptionDefault
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
role_idYesProvide a specific role ID.
user_idYesProvide a specific user ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive and idempotent behavior. The description adds the permission requirement but does not disclose additional side effects or behaviors beyond what annotations provide. Adequate but not enhanced.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with two sentences, front-loading the purpose. Every sentence serves a clear function, with no redundancy or wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's destructive nature and presence of output schema, the description lacks context on return values or failure modes. The confirm and dry_run parameters are not explained in the description, though schema covers them. Adequate but could be more complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description adds no extra meaning beyond the schema's parameter descriptions. The description only mentions role ID and user ID implicitly but does not elaborate on confirm or dry_run semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (unassign) and the resource (user from a role). It specifies 'by its ID' and mentions the required permission. It implicitly distinguishes from sibling 'create_role_user' but does not explicitly name alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the required permission 'assign_roles' and states the unassignment action. It does not provide explicit guidance on when not to use or contrast with siblings, though the context implies usage for removing a user-role association.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_scriptDeleting a custom scriptA
DestructiveIdempotent

Deleting a custom script. Deletes an existing custom script specified by its ID. Perm: manage_scripts.

ParametersJSON Schema
NameRequiredDescriptionDefault
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
script_idYesProvide a specific script ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark the tool as destructive (destructiveHint=true). The description adds the need for the 'confirm' parameter with 'YES' and the permission requirement, which is beyond what annotations provide. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short (two sentences), but the first sentence repeats the title. Merging them would improve conciseness. Still, it is efficient and front-loaded with key info.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has low complexity, an output schema exists, and the description covers purpose and permission. However, it omits mention of the dry_run parameter's preview functionality, which is important for agent understanding. Lacks completeness for a delete tool with a preview option.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline 3. The description adds no extra meaning beyond the schema for parameters like confirm, dry_run, and script_id. It only mentions the ID and permission, which are already covered.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states the verb 'Deleting' and the resource 'custom script', and distinguishes it from the many sibling tools like create_script, update_script, etc. It's specific and unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions 'Perm: manage_scripts' which hints at a prerequisite, but does not explicitly state when to use this tool versus alternatives. Given the abundance of delete tools, some guidance on context would improve it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_settingDeleting a settingA
DestructiveIdempotent

Deleting a setting. Deletes an existing setting specified by its ID. Perm: manage_advanced_settings.

ParametersJSON Schema
NameRequiredDescriptionDefault
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
setting_idYesProvide a specific setting ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive and idempotent behavior. The description adds the permission requirement and confirms deletion by ID, providing useful context beyond annotations without contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two short sentences, front-loaded with the action and permission, with no redundant information. Every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers purpose and permission. With a comprehensive schema and output schema present, it provides sufficient context for an agent to invoke the tool correctly, though it could optionally mention the safety mechanisms (confirm, dry_run) briefly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description adds little beyond what the schema already documents. It reinforces the role of setting_id but doesn't elaborate on confirm or dry_run, which are covered in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it deletes a setting by ID, using a specific verb and resource. It distinguishes from other delete tools among many siblings, making the purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the required permission 'manage_advanced_settings', providing context for when to use. However, it does not explicitly state when not to use or provide alternatives, leaving some gap.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_userDelete userC
DestructiveIdempotent

Delete user. Deletes an existing… Perm: manage_users.

ParametersJSON Schema
NameRequiredDescriptionDefault
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
user_idYesProvide a specific user ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and readOnlyHint=false, so the description adds marginal value by specifying the required permission 'manage_users'. No contradiction with annotations. However, it does not disclose other behavioral traits like irreversibility or cascading effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short but incomplete due to truncation (elliipsis). It is front-loaded with the purpose but lacks structure and completeness. Every sentence should earn its place; here one sentence is truncated.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is incomplete (truncated) and lacks usage context, behavioral details, and mention of return values. Although an output schema exists, the description should still provide a full understanding of the tool's effect and prerequisites.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with all three parameters (user_id, confirm, dry_run) adequately described in the schema. The tool description adds no additional meaning beyond the schema, so a baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'Delete user. Deletes an existing…' which clearly indicates the action and resource. It also notes the required permission 'manage_users'. Although truncated, the purpose is clear and distinguishes from sibling delete tools for other resources.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives like delete_role_user or update_user. No when-not or context provided beyond the permission requirement, which does not clarify usage scenarios.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_delete_versionDelete version from Software Repository packageA
DestructiveIdempotent

Delete version from Software Repository package. Deletes the specified version of the specified custom Software Repository package. Perm: manage_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
package_idYesProvide a specific package ID.
version_idYesProvide a specific version ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true and idempotentHint=true, so the description adds minimal behavioral insight. It mentions the permission but does not elaborate on side effects, such as the confirmation or dry-run behavior, which are only in the schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise, with two sentences that clearly state the purpose and permission. No redundant information; every word adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of annotations, full schema coverage, and an output schema, the description is fairly complete. It lacks mention of the confirmation/ dry-run parameters, but these are covered in the schema. Slight gap in explaining the destructive nature beyond the annotation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all parameters are documented in the schema. The description adds no extra meaning beyond the schema; it only restates the action and permission. Baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states the action (delete version) and the resource (Software Repository package), and distinguishes from sibling delete tools by specifying 'from Software Repository package'. It also mentions the required permission.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the required permission but provides no explicit guidance on when to use this tool vs alternatives, nor any exclusions or when-not-to-use scenarios. Usage is implied but not directly addressed.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_deploy_packageDeploy a software packageB
Destructive

Deploy software via the deploy_package template. Use action1_get_action_template for the params schema.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNoFriendly action name.
org_idNoOrg UUID.
paramsYesTemplate params for deploy_package.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesEndpoint UUID, or Group ID when target_type='EndpointGroup'.
target_typeNoEndpoint (default) or EndpointGroup for fan-out.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true. Description adds no additional behavioral context (e.g., confirmation required, dry-run capability, effect on endpoints). Schema covers these, but description does not flag them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences with no redundancy. First sentence states purpose, second provides useful cross-reference.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists so return value not needed. However, description misses deployment context (e.g., targets, side effects, preconditions). Adequate but not comprehensive for a destructive action.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline 3. Description hints at external params schema, adding marginal value. No contradiction or omission.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the verb 'deploy' and resource 'software package', and references the template. However, it does not explicitly distinguish from sibling tools like action1_deploy_update or action1_run_script.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description instructs to use action1_get_action_template for param schema, but provides no guidance on when to use this tool versus alternatives like action1_deploy_update, or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_deploy_updateDeploy specific updates to an endpointB
Destructive

Deploy one or more updates (by package id) via the deploy_update template.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNoFriendly action name.
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
updatesYesUpdates to deploy.
endpoint_idYesEndpoint UUID, or Group ID when target_type='EndpointGroup'.
target_typeNoEndpoint (default) or EndpointGroup for fan-out.
reboot_afterNoReboot policy after deploy.
display_summaryNoOptional console summary.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare destructiveHint=true, so the description does not need to repeat that. But it adds no additional behavioral context such as what changes are made, how the template works, or error conditions. With annotations present, a score of 3 is acceptable.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence with no waste. It is efficient but could be slightly more informative without losing conciseness.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema and full parameter coverage, the description is too brief for a complex tool with 10 parameters. It omits context about the template, target_type variations, reboot policy, confirm requirement, and dry_run behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds no extra meaning beyond the schema; it merely restates 'by package id' which is already in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it deploys updates by package id using a template. However, it does not differentiate from the sibling action1_deploy_package, which may cause confusion. The verb 'deploy' and resource 'updates' are specific.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives like action1_deploy_package or list_missing_updates. The description does not specify prerequisites or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_endpoint_groups_resolveResolve endpoint group by name (fuzzy)A
Read-onlyIdempotent

Look up an endpoint group by name or UUID using exact-id/exact-name/starts-with/contains.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryYesGroup name fragment or UUID.
org_idNoOrg UUID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint=true, idempotentHint=true, destructiveHint=false. The description adds no extra behavioral context beyond 'look up', which is consistent with read-only nature. No contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

One sentence, front-loaded with key verb and resource, no redundant words. Every word adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a lookup tool with full annotations and a complete schema, the description is mostly sufficient. However, it does not specify what fields are returned (though an output schema exists). Slightly more detail about the result would improve completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for all parameters. The description adds the matching strategies ('exact-id/exact-name/starts-with/contains') which provides useful context beyond the schema's 'Group name fragment or UUID.'

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'Look up an endpoint group by name or UUID' with specific verb (look up) and resource (endpoint group). The title adds 'fuzzy' and the description mentions matching modes (exact-id/exact-name/starts-with/contains), clearly distinguishing from siblings like list_endpoint_groups and get_group.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies it is for fuzzy lookup but does not explicitly state when to use it versus alternatives like list_endpoint_groups (which lists all groups) or get_group (which gets by ID). No exclusions or when-not-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_endpoints_summaryServer-side aggregation over all endpointsA
Read-onlyIdempotent

Walks every endpoint and returns counts (total, by status/platform/OS/online, reboot_required). ~1 KB output regardless of fleet size.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint. The description adds value by noting that it 'walks every endpoint' (implying full scan) and guarantees ~1 KB output regardless of fleet size, which are useful behavioral traits beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences front-load the core purpose and key behavioral trait (constant output size). Every word earns its place, with no extraneous information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that an output schema exists and the description lists the returned counts, the tool is fully specified for a read-only summary endpoint. No additional information is needed for correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% with clear descriptions for both parameters (Org UUID, response_format with enum). The description does not add new parameter-level information beyond what the schema provides, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'returns counts' and the resource 'endpoints,' specifying the categories (total, status, platform, OS, online, reboot_required). It distinguishes from siblings like list_endpoints by focusing on aggregated data.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for summary statistics but does not explicitly state when to use this tool over alternatives like list_endpoints or other summary tools. It provides clear context for quick fleet overview without pagination issues.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_execute_and_waitExecute and wait for output (script or template)B
Destructive

One-shot helper: starts an action (auto-routes by OS for 'script', or runs a template), polls until terminal, returns filtered output.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNo'script' auto-routes by OS; 'template' runs a template_id.script
nameNoFriendly action name.
org_idNoOrg UUID.
paramsNoTemplate params when mode='template'.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesEndpoint UUID.
script_textNoRequired when mode='script'.
template_idNoRequired when mode='template'.
response_formatNoOutput format. Default markdown.
timeout_secondsNoPolling timeout.
success_exit_codesNoPowerShell only. Default '0'.
poll_interval_secondsNoPoll interval seconds.
skip_connectivity_checkNoSkip offline-abort check.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide destructiveHint=true and readOnlyHint=false. The description adds 'one-shot helper' and polling behavior, but misses key traits like the required confirm parameter, default dry_run preview, and potential destructive side effects. The term 'terminal' is ambiguous, and 'filtered output' is undefined.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Single sentence with 16 words, front-loaded. Every word serves a purpose. However, 'terminal' is ambiguous and could be clearer (e.g., 'completion' or 'termination').

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite output schema and annotations, the description is too minimal for a complex tool with 14 parameters and many sibling tools. It omits essential context about confirm, dry_run, timeout, and endpoint targeting, making it insufficient for reliable agent selection and invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with parameter descriptions. The description adds context about auto-routing for script mode, largely repeating the schema. It does not explain confirm, dry_run, or other parameters beyond their schema descriptions. The overall workflow linking parameters is implied but not explicit.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool starts an action (script or template), polls until completion, and returns filtered output. The verb 'starts' and 'polls' specify the action and behavior. It distinguishes from sibling tools like run_script by emphasizing polling and combined script/template support, though not explicitly contrasting.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives like run_script, run_powershell, or wait_for_automation. The description does not mention prerequisites or exclusions, leaving the agent to infer context without clear direction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_export_audit_logExport of audit trail data.C
Read-onlyIdempotent

Export of audit trail data. Exports audit data. Use parameters to filter out exported… Perm: view_audit.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
eventNoThe list of comma-separated event names to include.
limitNoSet the maximum number of items to be returned (the page size).
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
formatNoSpecify the report format.
sortbyNoDefine the sorting order by a certain field.
timetoNoThe end date and time in the following format: YYYY-MM-DD_HH-MM-SS
from_idNoProvide the sequential ID of the first record to be returned.
verboseNoSkip per-item compactor.
timefromNoThe start date and time in the following format: YYYY-MM-DD_HH-MM-SS
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint, idempotentHint, and destructiveHint. Description adds the 'Perm: view_audit' permission requirement, which is useful. However, it does not elaborate on what 'export' entails (e.g., generating a downloadable file).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is redundant ('Export of audit trail data. Exports audit data.') and appears truncated with a trailing ellipsis. It is not well-structured and wastes space on repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having 11 parameters and an output schema, the description fails to clarify the tool's purpose relative to siblings or explain the output format. It leaves gaps about the nature of the export and parameter effects.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

All 11 parameters are fully described in the schema (100% coverage). The description adds only the generic phrase 'Use parameters to filter out exported…', which does not provide meaningful additional context beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states it exports audit trail data, but it is vague and repetitive. It does not differentiate from sibling tools like action1_audit_log_search or action1_list_audit_events, and the trailing ellipsis suggests incompleteness.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool vs alternatives. Mentions permission requirement but no when-not or alternative tools. The agent is left to infer usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_action_templateGet action template detailsA
Read-onlyIdempotent

Fetch full details (parameters, supported platforms) for a single action template by id.

ParametersJSON Schema
NameRequiredDescriptionDefault
template_idYesAction template id.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint. The description adds no new behavioral traits beyond stating it fetches details. While consistent, it does not add value beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single, clear sentence that front-loads the action and resource. No wasted words; efficient and to the point.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With output schema present, description need not detail return values. It covers the purpose and key input (id). Could mention response_format options briefly, but schema covers it. Adequate for a retrieval tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers both parameters with descriptions. The description adds 'by id' for template_id and mentions 'full details', but this is implicit from the schema. No significant new semantic information.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses specific verb 'fetch' and resource 'action template by id', clearly distinguishing it from list_action_templates. It also states what details are included (parameters, supported platforms), providing clarity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for fetching detailed info on a specific template, but does not explicitly state when to use this over sibling tools like list_action_templates or other get_* tools. No alternative guidance or exclusions are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_agent_install_urlGetting the URL for agent installationB
Read-onlyIdempotent

Getting the URL for agent installation. In order to manage an endpoint, the Action1 agent needs to be installed on it first. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
install_typeYesThe install type.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare the tool as readOnlyHint=true, idempotentHint=true, destructiveHint=false, so the description's behavioral disclosure burden is lower. Description adds the permission requirement 'Perm: manage_endpoints' and the prerequisite of agent installation. It does not contradict annotations. While useful, it does not provide significant new behavioral insight beyond what annotations and schema provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is brief (two sentences) and front-loads the main action. The first sentence repeats the title, which could be eliminated for conciseness, but overall the text is efficient and every sentence serves a purpose: stating the action and providing prerequisite context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 4 parameters, a rich annotation set, and an output schema, the description adequately states the overall purpose and prerequisite. However, it does not mention that the URL varies by install_type (e.g., WindowsMSI, MacPKG, LinuxDEB) or that org_id may be optional. With the openWorldHint annotation, the agent can infer dynamic scope, but some additional context about the output or usage scenarios would improve completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline is 3. The description does not add any additional meaning or elaboration on the parameters (org_id, verbose, install_type, response_format). It neither explains their purpose nor provides examples. Thus, no added value beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states 'Getting the URL for agent installation', which is a specific verb+resource. It explains the prerequisite (agent must be installed to manage endpoints) and mentions required permission. However, it does not differentiate from the sibling tool action1_get_windows_deployer_url, which might be an alternative for Windows-specific deployment. Overall clear but lacks sibling distinction.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage context: 'In order to manage an endpoint, the Action1 agent needs to be installed on it first.' This suggests the tool should be called before endpoint management. However, no explicit guidance on when to use vs. alternatives like action1_get_windows_deployer_url, nor when not to use. Usage is implied but not explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_audit_eventGet an audit record by its ID.B
Read-onlyIdempotent

Get an audit record by its ID. Get a specific audit record by its ID. Perm: view_audit.

ParametersJSON Schema
NameRequiredDescriptionDefault
idYesThe ID of an event.
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false. The description adds the permission requirement, which is useful context, but does not disclose other potential behaviors like error handling or rate limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description contains redundancy with two nearly identical opening sentences. It could be condensed while retaining the permission note. The information is present but not optimally structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple retrieval tool with a complete schema and output schema, the description is minimally adequate. However, it lacks any mention of error cases (e.g., what if the ID does not exist) or result format specifics not covered by the output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents all three parameters with descriptions. The tool description adds no additional parameter-level meaning beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states 'Get an audit record by its ID,' clearly identifying the verb (get) and resource (audit record). It is distinguishable from sibling tools like list_audit_events or search, but does not explicitly differentiate them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description only mentions a required permission ('Perm: view_audit'), but provides no guidance on when to use this tool versus alternatives such as 'list_audit_events' or 'search'. No context or exclusions are given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_automation_instanceGetting a specific instanceA
Read-onlyIdempotent

Getting a specific instance. Gets details about a automation instance specified by its ID. Perm: view_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
automation_idYesProvide a specific automation ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, indicating the tool is safe and non-mutating. The description adds the permission requirement 'view_automations', which is a helpful behavioral detail beyond annotations. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with three short sentences: a title phrase, a clear action statement, and a permission note. It is front-loaded and contains no unnecessary words or fluff. Every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description provides basic context for a simple 'get' operation. The existence of an output schema reduces the need to explain return values. While it doesn't elaborate on parameters like verbose or response_format, the schema covers them. For the tool's low complexity, the description is sufficiently complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already describes all four parameters (org_id, verbose, automation_id, response_format). The description does not add any additional meaning or usage context for the parameters, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action: 'Gets details about a automation instance specified by its ID.' The verb 'gets' and resource 'automation instance' are specific. It differentiates from siblings like list_automation_instances (which lists all) and create_automation_instance (which creates).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions 'Perm: view_automations' which provides a permission prerequisite. However, it does not explicitly state when to use this tool vs alternatives like list_automation_instances or other get tools. The usage context is only implied by the tool's name and basic purpose.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_automation_outputGet automation script output (filtered)A
Read-onlyIdempotent

Returns filtered stdout for one endpoint of an automation instance. Strips Action1 status markers.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
endpoint_idYesEndpoint UUID.
include_rawNoIf true, also include raw description list.
instance_idYesInstance UUID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds value beyond annotations by specifying that the output is filtered and strips Action1 status markers, which is not captured by readOnlyHint, openWorldHint, idempotentHint, or destructiveHint.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence that conveys the core purpose without unnecessary words, making it concise and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is adequate but minimal. It does not elaborate on the filtering mechanism, relationship to similar output tools, or implications of the output schema, leaving some gaps for a tool with 5 parameters.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Since schema description coverage is 100%, baseline is 3. The description adds no additional parameter meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool returns filtered stdout for one endpoint of an automation instance, distinguishing it from sibling tools like action1_get_automation_script_output by mentioning filtering and stripping of Action1 status markers.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies use when filtered output is needed, but does not explicitly state when to use this tool versus alternatives (e.g., action1_get_automation_script_output, action1_get_automation_results), nor does it provide exclusion criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_automation_resultsGet automation endpoint-results overviewA
Read-onlyIdempotent

Per-endpoint result rollup for an instance. Use action1_get_automation_output for stdout.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
instance_idYesInstance UUID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description does not add behavioral traits beyond what annotations already provide. Annotations declare readOnlyHint=true, idempotentHint=true, destructiveHint=false. The description's mention of 'rollup' implies aggregation but doesn't contradict or disclose additional behavioral nuances like pagination or limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with only two sentences. The first sentence states the core purpose, and the second provides an alternative tool reference. No unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema exists, annotations cover safety, and schema covers parameters, the description is fully complete. It tells the agent exactly what the tool does and how it relates to a sibling tool, with no missing information for agent comprehension.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% so the schema already documents parameters. The description does not add extra meaning or context for parameters beyond what the schema provides, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Per-endpoint result rollup for an instance', specifying the exact scope and resource. It also distinguishes from the sibling tool action1_get_automation_output by mentioning that tool is for stdout, providing clear differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly tells when to use this tool (for per-endpoint rollup) and when to use an alternative ('Use action1_get_automation_output for stdout'), providing clear guidance on tool selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_automation_scheduleGetting a specific automation scheduleA
Read-onlyIdempotent

Getting a specific automation schedule. Gets a scheduled automation specified by its ID. Perm: view_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
automation_idYesProvide a specific automation ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false. The description adds the permission requirement (view_automations), which provides useful context beyond annotations. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with two sentences plus a permission hint. It is front-loaded with the action and resource, with no wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (get by ID), full schema coverage, annotations, and presence of an output schema, the description adequately covers purpose and permission. It could mention error handling or format but is complete enough for safe usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and the description does not elaborate on parameters beyond what the schema provides. The automation_id is implicit in 'by its ID' but adds no syntactic detail. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Getting', the resource 'automation schedule', and specifies identification by ID. It distinguishes from sibling tools like list_automation_schedules and other get/update/delete operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage when needing a specific schedule by ID, but it does not explicitly contrast with alternatives like list_automation_schedules (for listing all) or other get_automation_* variants. However, the context is clear enough for basic selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_automation_script_outputGetting details of a specific endpointA
Read-onlyIdempotent

Raw automation-script output struct. For filtered stdout (status markers stripped) prefer action1_get_automation_output (curated). Getting details of a specific endpoint. Gets details about the automation instance applied to an endpoint specified by its ID. Perm: view_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
endpoint_idYesProvide an endpoint ID.
instance_idYesProvide a specific instance ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
truncatedNo

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and openWorldHint, covering safety. Description adds that output is raw and struct-form, but lacks details on output schema behavior (e.g., what 'raw' means, how 'compactor' affects output). With annotations carrying the main burden, description adds minimal extra transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, but repetitive: 'Raw automation-script output struct.' and 'Getting details of a specific endpoint.' and 'Gets details about the automation instance...' repeat similar ideas. Could be consolidated into two sentences. No wasted words, but not maximally efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists but is not shown; description does not explain return structure. Lacks details on pagination, error handling, or what 'raw output' precisely includes. Mention of permission is good, but overall completeness is adequate given schema coverage but not thorough.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. Description adds no significant parameter-specific meaning beyond schema descriptions. The 'verbose' parameter's 'Skip per-item compactor' is not explained further, and response_format default is mentioned. Acceptable but not enhanced.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool gets raw automation-script output for a specific endpoint, distinguishing it from the curated sibling action1_get_automation_output. It specifies the resource (automation instance applied to endpoint) and includes permission requirement.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly recommends using action1_get_automation_output for filtered stdout, providing a clear alternative. Does not cover other similar tools like get_automation_results, but the primary distinction is made.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_automation_statusGet automation instance statusA
Read-onlyIdempotent

Returns the high-level status of one automation instance. For stdout use action1_get_automation_output.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
instance_idYesInstance UUID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint; description adds only that it returns 'high-level status' and differentiates from stdout output, which is minimal additional context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose, efficient and no wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given existing annotations, output schema, and simple nature of operation (read-only status check), the description provides enough context along with sibling differentiation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3; description adds no extra meaning beyond what schema provides, just mentions 'one automation instance'.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it returns high-level status of one automation instance and distinguishes from sibling tool action1_get_automation_output for stdout.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly tells when not to use this tool (for stdout) and provides alternative (action1_get_automation_output).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_cveDetailed information on a specific vulnerability within an organization…C
Read-onlyIdempotent

Detailed information on a specific vulnerability within an organization, including CVE details like attack vector. Retrieves detailed… Perm: view_vulnerabilities.

ParametersJSON Schema
NameRequiredDescriptionDefault
cve_idYesThe unique identifier of a CVE (Common Vulnerabilities and Exposures), e.g. CVE-2005-2300
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, openWorld, idempotent hints. Description adds permission requirement ('Perm: view_vulnerabilities'), but does not disclose other behavioral traits (e.g., org-specific, caching, pagination). No annotation contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Brief (two sentences) but somewhat incomplete (ends with 'Retrieves detailed...'). Lacks structure, could be more concise while adding missing details about org and format.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having output schema and annotations, description feels incomplete: doesn't specify that org_id is optional, doesn't mention response_format parameter, and omits what 'detailed' includes beyond attack vector. For a 4-param tool, more context expected.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema descriptions cover all 4 parameters with 100% coverage. Description mentions 'attack vector' which hints at cve_id purpose but adds no new information beyond schema. Baseline 3 due to high schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description states it provides detailed vulnerability info including attack vector, clearly distinguishing it from siblings like get_cve_description (only description) and list_cve_endpoints (endpoint listing). However, lacks explicit mention of what 'detailed' entails.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives or when not to use it. Missing explicit context like 'use this for full CVE details, use get_cve_description for just the description'.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_cve_descriptionDetailed information on a specific vulnerability in general (not for an…A
Read-onlyIdempotent

Detailed information on a specific vulnerability in general (not for an organization), including CVE details like attack vector. Retrieves… Perm: view_vulnerabilities.

ParametersJSON Schema
NameRequiredDescriptionDefault
cve_idYesThe unique identifier of a CVE (Common Vulnerabilities and Exposures), e.g. CVE-2005-2300
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description discloses that the tool retrieves information and requires the 'view_vulnerabilities' permission, which adds value beyond the annotations (readOnlyHint=true, etc.). It mentions the content includes attack vector, providing insight into the response. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise and front-loaded with the main purpose. It includes essential information like permission and scope. The truncation at 'Retrieves…' is minor and does not hinder clarity. It is efficient and to the point.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is complete for a read-only tool with detailed annotations and an output schema. It covers the tool's scope (general vulnerability info), permission, and content hints. It could mention error cases or rate limits, but given the annotations, it is sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds context about the response (e.g., includes attack vector) and the required permission, but does not elaborate on the parameters beyond what the schema already provides. This adds some value, justifying a 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states that the tool provides detailed information on a specific vulnerability, including CVE details like attack vector. It distinguishes itself by noting 'not for an organization', which differentiates it from sibling tools like action1_get_cve that may return organization-specific data. The purpose is specific and actionable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use this tool by contrasting 'general' vulnerability info with organization-specific data. It also mentions the required permission 'view_vulnerabilities'. However, it does not explicitly name alternative tools or state when not to use it, so it's clear but not exhaustive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_data_sourceGetting a specific data sourceA
Read-onlyIdempotent

Getting a specific data source. Gets details about a specific data source. Perm: manage_data_sources, manage_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
verboseNoSkip per-item compactor.
data_source_idYesProvide a specific data source ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint, idempotentHint, and destructiveHint=false, so the description's burden is lowered. The description adds permission requirements but no further behavioral details (e.g., rate limits, side effects). With annotations providing the safety profile, a score of 3 is appropriate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short—two sentences plus permission—and front-loaded with the purpose. It is concise, though the first sentence is somewhat redundant with the title. No unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity and the presence of an output schema (not shown but indicated) and complete parameter documentation, the description is adequate. It mentions permissions, which is helpful. It could mention handling of invalid IDs, but overall it provides sufficient context for an AI agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description does not add any extra meaning beyond what the schema provides for the three parameters. No additional clarification is given.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'gets details about a specific data source', using a specific verb and resource. It distinguishes from sibling tools like 'list_data_sources' and 'create_data_source' by focusing on a single data source retrieval.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions required permissions ('manage_data_sources, manage_reports') which provides context, but it does not explicitly state when to use this tool versus alternatives like 'list_data_sources' or 'update_data_source'. The guidance is implied by the name and description but not explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_deployerGetting a specific DeployerA
Read-onlyIdempotent

Getting a specific Deployer. Obtains the current information about the specified Action1 Deployer service. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
deployer_idYesProvide a specific deployer ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate the tool is read-only, idempotent, and non-destructive. The description adds the required permission ('Perm: manage_endpoints'), which is valuable. No contradiction with annotations. Additional details about response format or error behavior are absent but not critical given the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise (two sentences, 21 words) and front-loaded with the action. Every sentence serves a purpose: stating the action and providing the permission requirement.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read operation with a complete output schema and rich annotations, the description covers the essential purpose and permission. It lacks mention of error handling or availability, but the core function is well communicated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and parameter descriptions are already present. The description does not add any new meaning to the parameters beyond what the schema provides, so baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Getting a specific Deployer') and the resource ('Action1 Deployer service'). The verb 'get' and the target 'deployer' are specific, and the distinction from sibling list tools is clear due to the focus on a single deployer.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage when you have a deployer ID, but it does not explicitly mention when to use this tool instead of alternatives like action1_list_endpoint_deployers or when not to use it. No direct guidance on prerequisites or context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_drilldown_for_report_rowDrilling down to detailsB
Read-onlyIdempotent

Drilling down to details. Expands report details to provide more information. Perm: view_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
live_onlyNoSpecify if you want to retrieve live results only.
report_idYesProvide a specific report ID.
auto_paginateNoWalk all pages.
report_row_idYesProvide a specific report row ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint, idempotentHint, destructiveHint=false. The description adds the permission requirement ('view_reports'), which is useful beyond annotations. However, it does not elaborate on any behavioral traits, and the annotations already cover safety aspects adequately.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise with two sentences, efficiently stating the purpose and permission. However, it could be slightly more informative without being verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 12 parameters and an output schema, the description is minimal but covers the core purpose. It lacks details on typical usage, output interpretation, or how drilldown results are structured. The output schema exists, so that gap is partially mitigated, but more context would improve completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so parameters are fully described in the input schema. The description does not add any additional meaning or context for parameters beyond what the schema already provides, so baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states that the tool drills down into report details for a specific row, matching the tool name. It distinguishes itself from sibling tools like action1_get_report_or_category by focusing on row-level detail expansion. However, the phrase 'Drilling down to details' is slightly redundant with the name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives. The description does not mention when not to use it or provide context for selecting it over other reporting tools. The permission note ('Perm: view_reports') is helpful but insufficient for usage guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_endpointGet endpoint general infoA
Read-onlyIdempotent

Fetch the general info block for a single endpoint, plus derived platform and connectivity.online flags.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
endpoint_idYesEndpoint UUID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnly, idempotent, and non-destructive hints. The description adds value by mentioning derived platform and connectivity.online flags, providing behavioral context beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence of 18 words that directly states what the tool does with no unnecessary information. Front-loaded and concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Tool is simple with output schema present, so description doesn't need to explain return format. It mentions derived flags, which is sufficient for a read-only operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for all parameters. The description does not add additional meaning to parameters beyond what the schema provides, so baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses specific verb 'Fetch' and clear resource 'general info block for a single endpoint', plus adds details about derived flags, effectively distinguishing it from sibling tools like action1_get_endpoint_discovery_settings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives (e.g., list_endpoints or get_endpoint_discovery_settings). The purpose implies it for detailed endpoint info, but lacks direct when-not or alternative mentions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_endpoint_discovery_settingsGetting Agent Deployment settingsA
Read-onlyIdempotent

Getting Agent Deployment settings. Obtains the current Agent Deployment settings in a specified organization. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint and idempotentHint. The description adds a permission requirement ('Perm: manage_endpoints'), which provides useful behavioral context beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short and to the point, but the inconsistency between tool name and title/description suggests a lack of precision. Still, no extraneous content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple get operation with full schema and output schema, the description is largely complete. It could elaborate on what 'Agent Deployment settings' entails, but it's sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of parameters with descriptions, so the description adds no extra parameter meaning. Baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it obtains Agent Deployment settings, but the tool name refers to endpoint_discovery_settings, causing ambiguity. The verb 'Get' is appropriate, but the inconsistency reduces clarity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives. The description only states its function without context on prerequisites or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_endpoints_onboarded_statusChecking endpoint statusC
Read-onlyIdempotent

Checking endpoint status. Retrieves information if any endpoints were added to an organization.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already indicate readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false. The description merely restates that it retrieves information, adding no behavioral context beyond what annotations provide. It doesn't disclose potential limitations, edge cases, or behavior like missing data or empty results.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short (two sentences), but the first sentence ('Checking endpoint status') is redundant with the title. The second sentence conveys the main purpose. It could be restructured to combine both into one more informative sentence, but it's not verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (3 optional parameters, output schema exists) and the relatively common task of checking endpoint status, the description lacks detail on what 'onboarded status' means, how the output is structured, or when this tool is appropriate. It does not fully prepare the agent to invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage for all parameters, so the baseline is 3. The description does not elaborate on parameter usage or meaning beyond the schema, so it neither adds nor detracts. This is adequate but not improved.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a clear verb ('Retrieves') and resource ('information if any endpoints were added'), which indicates the tool checks onboarded status. However, it doesn't differentiate this from sibling tools like 'get_endpoint' or 'list_endpoints', which might also involve endpoint status. The title 'Checking endpoint status' is too generic, but overall the purpose is understandable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus alternatives. The description does not mention conditions for use, exclusions, or contrast with other listing or retrieval tools. The agent has to infer from the name and description without explicit direction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_enterpriseGetting enterprise settingsC
Read-onlyIdempotent

Getting enterprise settings. Gets settings for an enterprise. You can query data for your enterprise…

ParametersJSON Schema
NameRequiredDescriptionDefault
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, destructiveHint, so safety is covered. The description adds minimal context beyond 'gets settings', not explaining what settings are included or any special authentication needs. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is repetitive: 'Getting enterprise settings.' and 'Gets settings for an enterprise.' are redundant. The third sentence trails off without completing. It wastes words without adding value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of annotations, output schema, and fully described parameters, the description is minimally adequate. However, it lacks context on what enterprise settings encompass or why one would query them.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters are already explained. The description adds no additional semantic meaning beyond the schema fields.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states it gets enterprise settings, which is clear and specific to this tool. However, it repeats the title in the first sentence and doesn't differentiate from other 'get' tools like get_setting or get_me, but the resource is distinct enough.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool vs alternatives (e.g., update_enterprise or other get tools). There are no prerequisites or context for usage.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_export_for_reportExporting a reportB
Read-onlyIdempotent

Exporting a report. Exports data from the report. Use parameters to filter out exported… Perm: view_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
formatNoSpecify the report format.
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
live_onlyNoSpecify if you want to retrieve live results only.
report_idYesProvide a specific report ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false. The description adds the permission requirement but does not disclose additional behavioral traits such as rate limits, size constraints, or side effects beyond what annotations imply.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short (two sentences) and to the point. However, the first sentence 'Exporting a report.' is redundant with the title. It is concise but could be more informative.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 10 parameters and an output schema present, the description lacks details about the output format, pagination, or what 'filter out exported' means. It does not leverage the output schema to explain return values, leaving gaps for an agent to understand the full behavior.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage, with each parameter well-documented. The description only says 'Use parameters to filter out exported…' which adds minimal meaning beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'Exporting a report. Exports data from the report' which clearly identifies the verb (export) and resource (report data). However, it does not distinguish from sibling tool 'action1_report_export', which likely has similar functionality.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides a permission hint ('Perm: view_reports') and vaguely mentions filtering, but offers no explicit guidance on when to use this tool versus alternatives like 'action1_list_report_data' or 'action1_get_export_for_report_row'. No when-not-to-use or exclusion criteria are given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_export_for_report_rowExporting report detailsC
Read-onlyIdempotent

Exporting report details. Exports reports data. Use parameters to filter out exported… Perm: view_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
formatNoSpecify the report format.
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
report_idYesProvide a specific report ID.
report_row_idYesProvide a specific report row ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, destructiveHint=false, idempotentHint=true, and openWorldHint=true. The description adds 'Perm: view_reports' which hints at required permission, but does not disclose other behavioral aspects such as whether the export returns a file or affects system state.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short with two sentences, one of which is incomplete. It is adequately concise but lacks completeness, and the incomplete sentence detracts from structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 6 parameters and an output schema, the description should clarify that the export is for a specific report row and possibly mention output format or file download. The description is insufficient to fully understand the tool's operation without relying on the name and schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description does not add any parameter-specific details beyond what the schema already provides, and the incomplete phrase 'Use parameters to filter out exported…' adds no value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'Exporting report details' and 'Exports reports data', but the tool name specifies 'for report row', which is more specific. The description does not clearly differentiate exporting a single row vs the entire report, making the purpose somewhat vague.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives like action1_get_export_for_report. There is no mention of prerequisites, context, or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_groupGetting an endpoint groupB
Read-onlyIdempotent

Getting an endpoint group. Gets a specific endpoint group by its ID. Perm: view_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
group_idYesProvide an endpoint group ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint. The description adds only the required permission 'view_endpoints', which is a modest improvement. No additional behavioral details.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with two short sentences. It is front-loaded with the key action. However, the first sentence is redundant with the title.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple getter with good annotations and an output schema, the description is minimally adequate. It lacks information about the response or usage of optional parameters, but the schema and annotations partially compensate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the description adds little value beyond stating the main parameter's purpose. It does not elaborate on optional parameters like org_id or verbose, but the schema covers them adequately.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action is to get a specific endpoint group by its ID. The verb-resource combination is clear, and while it doesn't explicitly distinguish from list tools, the emphasis on a specific ID implies the difference.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives like list_endpoint_groups or other getters. No context about prerequisites or typical scenarios.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_installed_software_endpointGetting installed apps on a specific endpointB
Read-onlyIdempotent

Getting installed apps on a specific endpoint. Gets a list of installed apps on an endpoint specified by its ID. Perm: view_installed_software, view_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
endpoint_idYesProvide an endpoint ID.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, destructiveHint=false, covering safety and idempotency. The description adds the required permission, but does not disclose pagination behavior, error handling, or other traits beyond what annotations provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with two short sentences and a permission note, front-loading the purpose. Every word earns its place with no fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema exists, the description covers the main purpose and permission. It could mention pagination or that results are a list, but overall it is mostly complete for a read-only tool with many optional parameters.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all parameters have descriptions in the schema. The description does not add any parameter-specific semantics beyond what is already in the schema, so baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves a list of installed apps for a specific endpoint, using the verb 'get' and specifying the resource. It mentions the required permission, but does not explicitly distinguish from sibling tools like action1_list_installed_software_data or action1_software_inventory_for_endpoint.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives, no exclusions or context provided beyond stating the required permissions. Among many sibling list tools, the agent lacks direction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_match_conflicts_for_packageCheck for package matching conflicts when editing and existing package versionC
Read-onlyIdempotent

Check for package matching conflicts when editing and existing package version… Perm: view_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
package_idYesProvide a specific package ID.
app_name_matchNoProvide the REGEX expression to match the software name.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint=true, destructiveHint=false, openWorldHint=true, idempotentHint=true, so the safety profile is clear. The description adds the permission requirement 'Perm: view_software_repository,' which is useful. However, it does not describe what 'matching conflicts' entail, what triggers them, or how the output is structured. With high annotation coverage, the description adds marginal value.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence plus a permission note. It is concise but contains a typo and lacks structure such as bullet points or sections. It could be more organized while still being brief.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that the tool has 5 parameters including a regex match field and an optional output format, and there is an output schema, the description is too minimal. It does not explain what a 'matching conflict' is, how conflicts are identified, or how the output should be interpreted. The permission hint is helpful, but overall context is lacking.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all 5 parameters including their types and brief descriptions. The tool description adds no additional parameter-specific information beyond what is in the schema. Baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Title and description clearly state the tool checks for package matching conflicts when editing an existing package version. The verb 'check' and resource 'package matching conflicts' are specific. However, there is a typo ('editing and existing' should be 'editing an existing'), and the term 'matching conflicts' is not further defined. Distinguishes from sibling tools like action1_get_match_conflicts_for_software_repository by specifying 'for package'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives. The description mentions a required permission 'view_software_repository,' but does not specify usage contexts, prerequisites, or scenarios where another tool would be more appropriate. Given the large set of sibling tools, this is a significant gap.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_match_conflicts_for_software_repositoryCheck for Software Repository package matching conflicts before creating a new…A
Read-onlyIdempotent

Check for Software Repository package matching conflicts before creating a new package version… Perm: view_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
app_name_matchNoProvide the REGEX expression to match the software name.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnly, openWorld, idempotent, and non-destructive hints. The description adds a permission requirement ('Perm: view_software_repository') which is useful context beyond annotations. No contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise—only a few words plus a permission note. It is front-loaded with purpose and context, with no unnecessary information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema and complete parameter documentation, the description adequately covers the tool's purpose and usage context. It could mention edge cases, but it is sufficient for typical use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the parameters are well-documented in the schema. The description does not add extra meaning beyond what is already in the schema, meeting the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Check' and the resource 'Software Repository package matching conflicts', and distinguishes it from similar tools like 'action1_get_match_conflicts_for_package' by specifying 'Software Repository'. It also provides the context of use: 'before creating a new package version'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly mentions when to use the tool: 'before creating a new package version'. However, it does not provide explicit alternatives or conditions when not to use it, though the context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_meGet the current user settingsA
Read-onlyIdempotent

Get the current user settings. Gets settings for the currently authenticated…

ParametersJSON Schema
NameRequiredDescriptionDefault
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint and destructiveHint, so the safety profile is clear. The description adds no further behavioral context beyond the purpose, which is acceptable but not enhanced.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short (two sentences) and front-loaded with the purpose. However, the second sentence essentially repeats the title, missing an opportunity to be more efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema and comprehensive annotations, the description covers the essential purpose. It could more explicitly differentiate from sibling tools, but overall it is adequate for a simple get-self tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema documents both parameters. The tool description adds no additional meaning or context for the parameters, achieving the baseline but no added value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Get the current user settings' and 'Gets settings for the currently authenticated user'. It uses a specific verb and resource, and the title reinforces this. Among siblings like action1_get_user and action1_get_setting, the purpose is distinct.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives (e.g., action1_get_user for other users, action1_get_setting for specific settings). The description only states what it does without context for selection.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_org_subscription_usageGetting usage statistics for a specific organizationA
Read-onlyIdempotent

Getting usage statistics for a specific organization. Gets details about license usage for an organization specified by its ID. Perm: manage_organizations.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds the permission requirement beyond annotations, which already indicate read-only, idempotent, non-destructive behavior. No other behavioral traits (e.g., error handling, pagination) are disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, no fluff. The first sentence is slightly redundant with the title, but overall concise and front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of annotations, output schema, and fully described parameters, the description is adequate for a simple read operation. It covers the permission requirement, but could mention error cases or scope.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description does not need to add parameter details. It adds no additional meaning beyond what the schema provides for org_id, verbose, or response_format.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves license usage details for a specific organization by its ID. It distinguishes from sibling tools like action1_get_subscription_usage by specifying the org focus, but lacks explicit differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage when needing per-org subscription stats and mentions the required permission (manage_organizations), but does not provide when-not-to-use or compare with alternative tools like action1_get_subscription_usage.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_remote_sessionGetting a remote sessionA
Read-onlyIdempotent

Getting a remote session. Gets details for an existing remote session specified by ID. Perm: remote_connect.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
session_idYesProvide a specific remote session ID.
endpoint_idYesProvide an endpoint ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds value beyond annotations by specifying the required permission. Annotations already indicate read-only and non-destructive nature; description complements with access control info. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Conveys purpose and permission in two sentences, but first sentence is somewhat redundant with the title. No extraneous information, but could be tighter.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Provides essential information for a read tool but does not elaborate on response format or parameter specifics (though output schema exists to cover return values). Adequate for a simple retrieval operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with all parameters described. Description does not add additional meaning beyond what is already in the input schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the verb 'get' and resource 'remote session details' and specifies identification by ID. Distinguishes from sibling tools like action1_create_endpoint_remote_session and action1_update_remote_session.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Mentions permission requirement ('Perm: remote_connect') but lacks explicit guidance on when to use versus alternatives or when not to use. Provides basic context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_report_or_categoryListing reports and categoriesC
Read-onlyIdempotent

Listing reports and categories. Gets a list of reports and categories. At this time all reports are enterprise-wide.

ParametersJSON Schema
NameRequiredDescriptionDefault
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.
report_or_category_idYesProvide a specific report id or category id.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.5/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond annotations (readOnlyHint, etc.), the description adds only 'At this time all reports are enterprise-wide', which is minimal. It does not disclose behavioral traits like pagination, performance, or scope limitations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but contains redundancy ('Listing reports and categories' followed by 'Gets a list...'). It is adequately concise but not well front-loaded with critical information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity with a required ID parameter and abundant sibling tools, the description is incomplete. It fails to clarify that the tool retrieves a specific report/category by ID, and the vagueness about its purpose detracts from completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description adds no extra meaning beyond existing parameter descriptions. Baseline score of 3 is warranted as the schema already documents all parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'Listing reports and categories' but the required parameter 'report_or_category_id' suggests it retrieves a specific item, not a list. This creates ambiguity and does not clearly distinguish from sibling 'action1_list_reports' which likely lists all reports.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives like 'action1_list_reports'. The description only provides a vague context note about enterprise-wide reports without usage direction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_roleGetting a specific roleB
Read-onlyIdempotent

Getting a specific role. Gets details about a role specified by its ID. Perm: manage_roles.

ParametersJSON Schema
NameRequiredDescriptionDefault
role_idYesProvide a specific role ID.
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare read-only, idempotent, non-destructive. Description adds permission requirement ('Perm: manage_roles'), which is useful context, but does not disclose any other behavioral aspects beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, efficiently conveying purpose and permission requirement. First sentence is somewhat redundant with title but acceptable.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read operation with 3 parameters and an output schema, the description is adequate but does not explain verbose or response_format usage. Completeness is acceptable given schema and annotations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline 3. Description does not add extra meaning to parameters; only role_id is implied. verbose and response_format are not elaborated.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states it gets details about a role by ID. Verb 'gets' and resource 'role' are specific. Distinguishes from list_roles which lists all roles, but does not explicitly differentiate.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this versus list_roles or other role-related tools. No exclusions or alternatives mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_scriptGetting a specific scriptA
Read-onlyIdempotent

Getting a specific script. Gets details for a script specified by its ID. Perm: use_scripts.

ParametersJSON Schema
NameRequiredDescriptionDefault
verboseNoSkip per-item compactor.
script_idYesProvide a specific script ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the description carries less burden. It adds a permission requirement ('Perm: use_scripts'), which is useful behavioral context beyond what annotations provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences and front-loaded with a clear purpose. The first sentence is slightly redundant with the title, but overall it is concise with no wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that this is a simple fetch operation with a detailed schema and output schema, the description adequately covers the core purpose and permission context. No major gaps are present.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all parameters. The description adds no additional meaning beyond what is in the schema, meeting the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Gets details for a script specified by its ID,' with a specific verb ('Gets details') and resource ('script'). This distinguishes it from sibling tools like action1_create_script or action1_list_scripts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It mentions a permission requirement ('Perm: use_scripts') but does not explain contexts or when not to use it, leaving the agent to infer from sibling names.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_settingGetting setting configurationA
Read-onlyIdempotent

Getting setting configuration. Gets details about the setting configuration. Perm: manage_advanced_settings.

ParametersJSON Schema
NameRequiredDescriptionDefault
verboseNoSkip per-item compactor.
setting_idYesProvide a specific setting ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover read-only, idempotent, non-destructive. The description adds a permission requirement (manage_advanced_settings) not in annotations, providing extra behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, but slightly redundant ('Getting setting configuration' and 'Gets details about the setting configuration'). Still concise overall.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description is minimal but workable given an output schema exists. However, it lacks explanation of response format or common use cases.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, parameters have descriptions. The tool description adds no additional parameter semantics beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it gets configuration details for a setting, matching the tool name. It distinguishes from sibling tools like create_setting and list_settings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives (e.g., list_settings). No conditions or exclusions mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_setting_templateGetting a setting templateB
Read-onlyIdempotent

Getting a setting template. Gets details about a setting template specified by its ID.

ParametersJSON Schema
NameRequiredDescriptionDefault
verboseNoSkip per-item compactor.
template_idYesProvide a specific setting template ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.2/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, so the description adds no additional behavioral context (e.g., permissions, side effects, rate limits) beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two efficient sentences that front-load the purpose. Slight redundancy with the title but overall concise and no unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists (as per context signals), so return values need not be described. However, the description lacks any additional context such as what 'details' include or any usage notes beyond the bare minimum.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema has 100% coverage with descriptions for all three parameters (verbose, template_id, response_format). The description does not add any further meaning or usage context for the parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves a specific setting template by ID, distinguishing it from siblings like 'list_setting_templates' and 'get_setting'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives (e.g., 'get_setting' or 'list_setting_templates'). The description only states what it does, not when or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_software_repository_packageGet Software Repository package settingsA
Read-onlyIdempotent

Get Software Repository package settings. Gets details for a Software Repository package specified by its ID. Perm: view_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
fieldsNoAdd FIELDS parameter to query extended data.
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
package_idYesProvide a specific package ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, etc. The description adds the permission constraint, which is relevant behavioral context. However, it does not elaborate on other behavioral aspects beyond what annotations provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences: first states purpose, second adds permission requirement. No unnecessary words. Front-loaded with essential information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema, the description is sufficient for a straightforward get tool. It covers the core functionality and permission, though it could mention the scope of 'settings' returned.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for all 5 parameters. The description does not add any parameter-specific details beyond what is in the schema, so it meets the baseline but provides no extra value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the verb (Get) and specific resource (Software Repository package settings). The name and description align, and it distinguishes from sibling 'get' tools by specifying the exact resource type.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides a permission requirement ('Perm: view_software_repository'), which helps agents know when the tool is accessible. However, it does not explicitly state when not to use it or mention alternative tools for similar purposes.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_subscriptionGetting enterprise license informationA
Read-onlyIdempotent

Getting enterprise license information. Gets details about the enterprise license. Perm: manage_enterprise.

ParametersJSON Schema
NameRequiredDescriptionDefault
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint false, indicating a safe read operation. The description adds value by disclosing the required permission 'manage_enterprise,' which is critical for access control and beyond annotation scope.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short but contains repetition: 'Getting enterprise license information. Gets details about the enterprise license.' could be merged into one sentence. It is efficient in length but not optimally concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema and the tool's simplicity, the description adequately conveys purpose and permission. However, it does not explain what the returned details include or any limits, leaving slight gaps for complex scenarios.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema itself documents both parameters (verbose, response_format). The description does not add further meaning or usage context for the parameters, justifying a baseline score.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves enterprise license information, using 'Getting enterprise license information' and 'Gets details about the enterprise license.' This verb-resource combination is specific and distinguishes it from siblings like action1_get_enterprise, which may focus on general enterprise details.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the required permission 'manage_enterprise,' but provides no guidance on when to use this tool versus alternatives such as action1_get_subscription_usage or action1_list_subscription_usage_organizations. It lacks explicit context for when-to-use or when-not-to-use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_subscription_usageGetting usage statistics for an enterpriseB
Read-onlyIdempotent

Getting usage statistics for an enterprise. Gets details about license usage for the entire enterprise. Perm: manage_enterprise.

ParametersJSON Schema
NameRequiredDescriptionDefault
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint false. The description adds permission requirement, which is useful, but otherwise aligns with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but contains redundancy (first two sentences essentially say the same thing). Could be more concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the simple parameters, existing output schema, and rich annotations, the description is sufficient. It adds scope and permission context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Parameter descriptions in the schema are complete (100% coverage). The description adds no additional meaning beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it retrieves usage statistics for the enterprise, specifically license usage. It is unambiguous but does not differentiate from the sibling tool action1_get_org_subscription_usage.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the required permission (manage_enterprise) but provides no guidance on when to use this tool versus alternatives, such as per-org usage tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_update_packageListing updates for a packageA
Read-onlyIdempotent

Listing updates for a package. Gets a list of updates available for a package specified by its ID. Perm: approve_updates, view_dashboards, manage_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
customNoSpecify if the package is custom (yes) or builtin (no).
fieldsNoAdd FIELDS parameter to query extended data.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
builtinNoSpecify if the package is builtin (yes) or custom (no).
verboseNoSkip per-item compactor.
package_idYesProvide a specific package ID.
only_latestNoSpecify if you want to exclude superseded updates. By default, 'yes'.
auto_paginateNoWalk all pages.
approval_statusNoSpecify the update status.
response_formatNoOutput format. Default markdown.
security_severityNoSpecify the severity level, e.g., security_severity=-Critical (for all non-critical).

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint, openWorldHint, idempotentHint, and destructiveHint, indicating safe, read-only behavior. The description adds value by listing the specific permissions needed, which goes beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise at two sentences, with no unnecessary words. The first sentence front-loads the core purpose. However, it could be slightly more efficient by combining the two sentences.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (16 parameters, rich annotations, output schema), the description is minimal. It states the basic task but doesn't elaborate on the nature of 'updates', pagination, or filtering options. Output schema fills some gaps, but more context would help the agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage for all 16 parameters, so the schema already documents parameter meaning. The description adds no additional information beyond mentioning the required 'package_id' implicitly. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Gets a list' and the resource 'a package', specifying the action. However, it does not differentiate from sibling tools like list_updates or list_missing_updates, missing a chance to clarify uniqueness.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It lists required permissions, which helps the agent understand authorization requirements. However, there is no guidance on when to use this tool versus alternatives, nor any exclusions or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_userGet userC
Read-onlyIdempotent

Get user. Gets an existing… Perm: view_users.

ParametersJSON Schema
NameRequiredDescriptionDefault
user_idYesProvide a specific user ID.
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint, so the safety profile is covered. The description adds only the permission requirement (view_users), which is minor. No additional behavioral traits are disclosed, and the description does not contradict the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely short (two incomplete sentences), which is concise but sacrifices clarity. The sentence "Gets an existing…" is cut off, reducing professionalism. It could be improved without adding length.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema and sibling tools, the description is insufficient. It does not explain when to use this tool over similar ones (e.g., list_users) or what information is returned. The incomplete sentence and lack of context leave the agent underinformed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the input schema fully documents all three parameters (user_id, verbose, response_format). The description does not add any extra meaning or usage context beyond what the schema provides. Baseline score of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly indicates the tool retrieves user information ("Get user") and mentions the required permission (view_users). It is concise and directly tied to the tool name and title, but does not distinguish this tool from similar sibling tools like list_users or get_me.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives. There is no mention of prerequisites, context, or when-not to use it. The description only states the basic action and a permission, offering no selection criteria.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_versionGet version in Software Repository packageA
Read-onlyIdempotent

Get version in Software Repository package. Gets details about a package version specified by its ID. Perm: view_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
package_idYesProvide a specific package ID.
version_idYesProvide a specific version ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide strong behavioral hints (readOnlyHint, idempotentHint, openWorldHint, destructiveHint false), reducing the description's burden. The description adds the permission requirement 'view_software_repository', which is valuable beyond the annotations. No contradictions or additional behavioral traits are disclosed, but given the annotation coverage, this is sufficient.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences, front-loaded with the purpose. It avoids repetition but could be slightly tighter (e.g., merging the first two sentences). No wasted words, and permission is stated separately. Effective for quick scanning.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema (handling return values) and full schema coverage for parameters, the description adequately covers what the tool does, how to identify the version, and the required permission. It does not explain the specific details returned, but that is expected to be in the output schema. A score of 4 reflects that it meets the needs for a read tool with rich annotations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the input schema already documents all parameters with descriptions. The tool description does not add extra meaning or usage context for the parameters (e.g., no explanation of 'verbose' or 'response_format' beyond the schema). Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Get' and the resource 'version in Software Repository package', specifying it gets details by ID. It distinguishes from siblings like 'action1_get_software_repository_package' (gets package) and 'action1_get_update_package' (gets update package).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage by stating it gets version details and requires 'Perm: view_software_repository', but provides no explicit guidance on when to use this vs. alternatives like 'action1_get_software_repository_package' or 'action1_list_software_repository'. The agent is left to infer context from the name and sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_get_windows_deployer_urlGetting Deployer installation URLA
Read-onlyIdempotent

Getting Deployer installation URL. Obtains an URL to download the Deployer installation… Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint=true and idempotentHint=true, but the description adds the permission requirement 'Perm: manage_endpoints', which provides behavioral context beyond annotations. It also clarifies the non-destructive nature of obtaining a URL.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise, using only two short sentences to convey the purpose and permission. It front-loads the key action. However, it could be slightly more structured, e.g., integrating the permission note more fluidly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that an output schema exists (not shown but indicated), the description does not need to detail return values. It covers the essential purpose and permission. For a simple URL retrieval tool, this is adequate, though it omits default response format or error scenarios.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so each parameter already has a description in the schema. The main description does not add additional meaning or usage hints for the parameters, thus it meets the baseline but does not surpass it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Getting Deployer installation URL' and 'Obtains an URL to download the Deployer installation', providing a specific verb and resource. This distinguishes it from sibling tools like action1_get_deployer, which likely retrieves deployer configuration rather than a download URL.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description lacks any guidance on when to use this tool versus alternatives such as action1_get_deployer or action1_list_endpoint_deployers. No explicit usage context or exclusions are provided, leaving the agent to infer appropriateness without support.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_init_software_uploadInitialize package file uploadC
Destructive

Initialize package file upload. Initializes package file upload. The client starts by sending the initial upload request. Perm: manage_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: object)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
platformYesplatform
package_idYesProvide a specific package ID.
version_idYesProvide a specific version ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description mentions permission 'manage_software_repository' but adds no behavioral traits beyond annotations. It does not explain side effects, non-idempotency, or the destructive nature indicated by annotations, missing an opportunity to warn about resource allocation or state changes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but contains repetition ('Initialize package file upload' appears twice). It could be more concise and structured, though the permission line is useful.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema, the description does not explain return values or next steps (e.g., chunked upload). For a complex initiator tool, more context about the workflow is needed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description does not need to repeat parameter details. However, it adds no additional semantic context, such as how parameters relate to each other or the upload flow, remaining at baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states the tool initializes a package file upload, clarifying it is the first step. However, it does not differentiate from sibling tools like action1_upload_software_chunk or action1_create_package, which could lead to confusion about the exact role.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives. The description implies it's the initial request but offers no comparisons or exclusions, leaving the agent to infer usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_action_templatesList action templatesA
Read-onlyIdempotent

List every action template (id, name, description). Use ids with action1_get_action_template.

ParametersJSON Schema
NameRequiredDescriptionDefault
applicable_toNoFilter to templates applicable to a context URL.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
truncatedNo

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, openWorldHint, and destructiveHint=false. The description adds context about return fields (id, name, description) and the relationship to another tool. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences with no wasted words. First sentence states purpose and output, second sentence gives actionable guidance. Ideal structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema exists and the tool is a simple list operation, the description is adequately complete. It covers purpose, output fields, and usage hint. Could optionally mention that it returns all templates (no pagination mentioned) but not necessary.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so parameters are fully documented in schema. Description adds no additional explanation about the applicable_to filter or response_format enum beyond what's in the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states it lists all action templates with id, name, description, and explicitly distinguishes from the sibling tool action1_get_action_template by instructing to use ids with it.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides clear usage instruction to use the ids with action1_get_action_template. While it doesn't explicitly state when not to use, the sibling context makes it clear. A minor improvement would be to directly mention that this is for listing, not single retrieval.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_audit_eventsGet audit records of user actions.B
Read-onlyIdempotent

Get audit records of user actions. 'The Audit Trail contains event records associated with user actions, such as logins, remote. Perm: view_audit.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
eventNoThe list of comma-separated event names to include.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
sortbyNoDefine the sorting order by a certain field.
timetoNoThe end date and time in the following format: YYYY-MM-DD_HH-MM-SS
from_idNoProvide the sequential ID of the first record to be returned.
verboseNoSkip per-item compactor.
timefromNoThe start date and time in the following format: YYYY-MM-DD_HH-MM-SS
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate read-only, idempotent, and non-destructive behavior. The description adds the required permission ('Perm: view_audit') and briefly explains what the audit trail contains (user actions like logins, remote sessions). This provides useful context beyond annotations, though it is not exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is relatively short but contains a typo ('remote.') and incomplete phrasing. It is not overly verbose, but could be more polished and front-load key information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity of 12 parameters and the presence of an output schema, the description provides basic context (permission, content type) but lacks explanation of parameter relationships (e.g., 'from' vs 'from_id', pagination options). It is minimally adequate but leaves gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, meaning all parameters are already described in the schema. The description does not add any additional meaning or usage guidance for individual parameters, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Get audit records of user actions', indicating the tool retrieves audit events. However, it does not distinguish from sibling tools like 'action1_audit_log_search' or 'action1_export_audit_log', which have overlapping purposes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives. The only additional context is the required permission 'view_audit', but no comparisons or exclusion criteria are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_automation_deployment_statusesGetting the deployment statuses of a automationB
Read-onlyIdempotent

Getting the deployment statuses of a automation. Gets the deployment statuses of a automation specified by its ID. Perm: view_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
verboseNoSkip per-item compactor.
automation_idYesProvide a specific automation ID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
truncatedNo

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds the permission requirement 'view_automations' beyond what annotations provide (readOnlyHint, idempotentHint, etc.). However, it does not disclose other behavioral traits like pagination, rate limits, or whether it returns all statuses at once. Given that annotations already cover the core behavioral profile, this is adequate but not exceptional.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is only two sentences with minimal redundancy. It is front-loaded with the action and permission. However, it could be condensed into one sentence to eliminate repetition without losing clarity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only tool with 4 parameters, a clear purpose, and annotations covering behavior, the description provides sufficient context. The presence of an output schema means return values need not be explained. It could mention that results are filtered by permissions, but this is implied by the permission requirement.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with all parameters described. The description only reiterates that automation_id identifies the automation, adding no additional meaning beyond the schema. It does not explain org_id, verbose, or response_format, so it meets the baseline for high schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action: getting deployment statuses of a specific automation by ID, and mentions the required permission. It is somewhat redundant (two sentences saying the same thing), but the purpose is unambiguous. It distinguishes itself from siblings like action1_get_automation_status by specifying 'deployment statuses', though it does not explicitly contrast with alternatives.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus other automation-related tools (e.g., action1_get_automation_status, action1_list_automation_instances). There is no mention of prerequisites, context, or exclusions, leaving the agent to infer usage purely from the name and description.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_automation_instancesListing automation instancesA
Read-onlyIdempotent

Listing automation instances. Gets a list of running and completed automations for the specified organization. Perm: view_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
statusNoSpecify the status.
verboseNoSkip per-item compactor.
completedNoSpecify the completion status of the automation schedule.
endpoint_idNoThe ID of the endpoint to query.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and idempotentHint=true. The description adds that it retrieves both running and completed automations and requires the 'view_automations' permission, which is useful context beyond annotations. It does not mention pagination or any other behavioral traits, but the annotations cover safety.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with two short sentences. Every word is necessary and front-loaded, providing essential information without waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 12 parameters and an output schema exists (though not shown in the prompt), the description is mostly complete. It covers the purpose, scope (running/completed), and required permission. It could mention the return format or pagination behavior, but the schema and annotations fill in some gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with well-described parameters (12 parameters, all have descriptions). The description does not add any additional meaning to the parameters beyond what the schema provides, so it meets the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states that the tool lists automation instances (running and completed) for a specified organization. The verb 'listing' and resource 'automation instances' are specific, and it distinguishes from other list tools by referring to instances rather than schedules or recent automations, but it does not explicitly differentiate from siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives like list_automation_schedules or list_recent_automations. The description only implies it is for listing instances of an organization, but lacks explicit context or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_automation_schedulesListing automation schedulesB
Read-onlyIdempotent

Listing automation schedules. Lists existing scheduled automations. Use parameters to filter out automations in the returned. Perm: view_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare the tool as read-only, idempotent, and non-destructive. The description adds the permission requirement and filtering capability but lacks details on pagination or response structure, which are already implied by annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short and front-loaded, but the first two sentences are redundant ('Listing' vs 'Lists'), wasting a bit of space.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 9 parameters and an output schema, the description is minimal. It covers the basic purpose and permission but lacks details on pagination, result format, or how it differs from similar list tools, which would improve completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description does not need to explain parameters. However, it only generically mentions filtering without adding specific value beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists automation schedules with a specific verb and resource. However, it does not differentiate from related sibling tools like list_automation_instances or list_recent_automations, which could cause confusion.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions using parameters to filter and the required permission, but fails to provide explicit guidance on when to use this tool over alternatives or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_cve_endpointsLists endpoints in an organization affected by a specific vulnerabilityC
Read-onlyIdempotent

Lists endpoints in an organization affected by a specific vulnerability. Retrieves a list of endpoints within the specified organization… Perm: view_vulnerabilities.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
cve_idYesThe unique identifier of a CVE (Common Vulnerabilities and Exposures), e.g. CVE-2005-2300
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
product_namesNoThe names of the products to retrieve the endpoints associated with those specific...
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already convey readOnly, idempotent, non-destructive. The description adds a permission requirement ('Perm: view_vulnerabilities') but does not elaborate on pagination, rate limits, or other behavioral traits beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short (two sentences) but the second sentence ends with an ellipsis, suggesting truncation. It is not as structured as it could be, lacking bullet points or clear separation of concepts.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (11 parameters, output schema present, many sibling tools), the description should provide more context on filtering, sorting, pagination, and output. It only mentions permission and a vague scope, leaving gaps for effective agent use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds no additional meaning for any parameters, such as the required 'cve_id' or optional filters and pagination controls.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'Lists' and identifies the resource as 'endpoints affected by a specific vulnerability', clearly distinguishing it from siblings like 'list_endpoints' and 'list_vulnerabilities'. However, the second sentence is redundant and the ellipsis suggests incompleteness.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage when needing endpoints for a CVE but provides no explicit guidance on when not to use or alternatives. No comparison to similar list tools like 'list_endpoints' or 'list_org_vulnerabilities'.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_cve_remediationsLists past remediation actions for a specific vulnerabilityB
Read-onlyIdempotent

Lists past remediation actions for a specific vulnerability. Retrieves a list of previously applied remediation actions for a specific… Perm: view_vulnerabilities.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
cve_idYesThe unique identifier of a CVE (Common Vulnerabilities and Exposures), e.g. CVE-2005-2300
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, destructiveHint=false, etc. The description adds a permission requirement ('Perm: view_vulnerabilities') but does not disclose other behaviors like pagination or sorting. Description adds some value but does not significantly exceed annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is brief but has a cut-off sentence (ellipsis). It could be more efficient by merging the two sentences and completing the thought. Front-loaded with purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

While output schema exists and annotations are rich, the description fails to explain pagination, filtering, or response format despite 10 parameters. The description is minimal for a tool with such complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema fully documents all 10 parameters. The description does not provide additional meaning or context beyond what is already in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Lists past remediation actions for a specific vulnerability', which matches the tool name and distinguishes it from sibling tools like create, update, delete, and plan remediation actions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives (e.g., create_cve_remediation, cve_remediation_plan). No when-not-to-use or context provided beyond the basic purpose.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_data_sourcesListing data sourcesA
Read-onlyIdempotent

Listing data sources. Gets a list of existing data sources. To filter out built-in data sources, set the 'builtin'. Perm: manage_data_sources, manage_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
builtinNoSpecify if the package is builtin (yes) or custom (no).
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
truncatedNo

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The description adds behavioral context beyond annotations by specifying required permissions and the ability to filter built-in data sources. Annotations already indicate read-only, idempotent, non-destructive behavior, which the description aligns with. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with three sentences. It front-loads the purpose, then provides a filter hint and permission requirement. Every sentence adds value, though the first sentence is somewhat redundant with the title.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the main use case, a key filter, and required permissions. It lacks details on pagination, error handling, or output format, but an output schema exists. Given the tool's simplicity and annotations, it is reasonably complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds a hint about the 'builtin' parameter's purpose (filter built-in data sources) but does not explain 'verbose' or 'response_format' further. The schema already provides descriptions for all parameters, so the description adds marginal value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool 'Gets a list of existing data sources.' It uses specific verb+resource ('Gets a list of data sources') and distinguishes from sibling tools like create or delete data sources.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit guidance on filtering built-in data sources via the 'builtin' parameter and specifies required permissions ('Perm: manage_data_sources, manage_reports'). It does not explicitly state when not to use, but the permission requirement implies conditions for use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_endpoint_deployersListing DeployersB
Read-onlyIdempotent

Listing Deployers. Lists all Action1 Deployer services in the specified organization. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
osNoFilter by operation system.
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
statusNoSpecify the status.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
installed_sinceNoEnter the installation date.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already specify readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false, indicating a safe, idempotent read operation. Description adds 'Perm: manage_endpoints', which is a behavioral constraint not covered by annotations, but does not contradict them.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is concise with two sentences. The first sentence is slightly redundant with the title, but overall no wasted words. Could be more structured to front-load the purpose and permission.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite 12 parameters including pagination, filtering, sorting, and output format, the description offers no high-level guidance on how to effectively use these. With an output schema present, return values are covered, but the description lacks completeness for complex parameter interactions.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all 12 parameters are already defined. The description does not add any additional meaning or usage context for parameters like os, filter, or cursor beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states 'Lists all Action1 Deployer services in the specified organization' with verb 'Lists', resource 'deployers', and scope 'organization'. This distinguishes it from siblings like get_deployer (single item) and delete_deployer (destructive).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives like get_deployer for a single item or other list tools. No mention of pagination, filtering strategies, or prerequisites beyond the permission line.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_endpoint_groupsListing endpoint groupsB
Read-onlyIdempotent

Listing endpoint groups. Lists existing endpoint groups. Use filters and narrow down and sort the returned results. Perm: view_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint. The description adds only the permission requirement, which provides some behavioral context. No contradictions. However, it adds minimal value beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is brief but contains some redundancy: 'Listing endpoint groups' and 'Lists existing endpoint groups' repeat the same idea. It could be more concise by merging the first two sentences. However, it is not overly verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool complexity (9 parameters, output schema exists, many sibling tools), the description covers purpose, filtering/sorting, and permissions. However, it omits explicit mention of pagination behavior, which is important for a list tool with pagination parameters. The output schema likely covers return format, so overall it is moderately complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already describes all parameters. The description mentions filters and sorting but does not add meaningful detail beyond what the schema provides. Therefore, it does not significantly enhance parameter understanding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action is for listing endpoint groups, using the verb 'list' and resource 'endpoint groups'. It mentions filtering and sorting, which aligns with the purpose. However, it does not explicitly distinguish from sibling tools like get_group or list_group_contents, though the context implies it.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description advises using filters, sorting, and mentions the required permission 'view_endpoints'. It gives basic context on when to use the tool, but does not explicitly state when not to use it or compare to alternatives, such as retrieving a single group or listing group contents.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_endpoint_missing_updatesGetting missing updates for an endpointA
Read-onlyIdempotent

Filtered/paginated variant of action1_list_missing_updates (curated). Use for severity/approval_status/sortby filtering. Getting missing updates for an endpoint. Obtains a list of missing software updates for a specific endpoint. Perm: view_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
endpoint_idYesProvide an endpoint ID.
auto_paginateNoWalk all pages.
approval_statusNoSpecify the update status.
response_formatNoOutput format. Default markdown.
security_severityNoSpecify the severity level, e.g., security_severity=-Critical (for all non-critical).

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, destructiveHint. Description adds permission requirement (view_endpoints) and hints at pagination and filtering, but adds limited extra behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is very concise: three sentences front-loading the most important information (filtered variant, use case, permission). No fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 12 parameters and an output schema, the description covers purpose, filtering use case, and permission. It does not need to explain every parameter since the schema is exhaustive. Slightly lacking in edge-case guidance.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline is 3. Description mentions some filters (severity, approval_status, sortby) but these are already documented in the schema. No additional meaning beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it is a filtered/paginated variant of action1_list_missing_updates, specifically for obtaining missing updates for a single endpoint. This distinguishes it from its broader sibling.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly recommends use for severity, approval_status, and sortby filtering. Mentions required permission. Could be more explicit about when not to use it versus the curated variant.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_endpointsList managed endpoints (cursor-paginated)A
Read-onlyIdempotent

List endpoints with server-side filters (status, online_status, os, reboot_required, …). For counts, use action1_endpoints_summary instead.

ParametersJSON Schema
NameRequiredDescriptionDefault
osNoFilter by OS substring.
limitNoMax items.
cursorNoPagination cursor.
fieldsNoAPI field-set: *, missing_updates, vulnerabilities.
filterNoAction1 filter expr (e.g. status=='Connected').
org_idNoOrg UUID.
sortbyNoSort key (e.g. name, last_seen).
statusNoFilter by status (Connected/Disconnected).
page_sizeNoUpstream page size.
projectionNoClient projection: bare (default), compact, full.
reset_cacheNoBypass cache for fresh page.
online_statusNoFilter by online status.
update_statusNoFilter by update status.
reboot_requiredNoFilter by reboot-required.
response_formatNoOutput format. Default markdown.
vulnerability_statusNoFilter by vulnerability status.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate read-only, idempotent, non-destructive. Description adds cursor-pagination and filter types. No contradiction. Could mention caching or pagination details more explicitly.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences. Front-loaded with purpose, no redundant information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 16 parameters and presence of output schema, description covers the essential purpose and key filters. Could elaborate on projections or pagination, but not required given schema richness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with clear descriptions. Description only reiterates filter types, adding little beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('List') and resource ('endpoints'), and clarifies filtering capabilities. It explicitly distinguishes from the sibling tool action1_endpoints_summary for counts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

States when to use (list with server-side filters) and when not (use summary for counts). Does not cover all alternatives (e.g., search_endpoints) but provides useful context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_group_contentsListing endpoints from the groupA
Read-onlyIdempotent

Listing endpoints from the group. Lists all endpoints included in the specified group. Perm: view_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
osNoFilter by operation system.
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
fieldsNoSome API requests support the optional 'fields' parameter that specifies which object...
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
statusNoFilter by online status.
verboseNoSkip per-item compactor.
group_idYesProvide an endpoint group ID.
auto_paginateNoWalk all pages.
online_statusNoFilter by last seen online status.
update_statusNoFilter by update status.
reboot_requiredNoFilter by reboot requirement of the endpoint.
response_formatNoOutput format. Default markdown.
vulnerability_statusNoFilter by vulnerability status.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, destructiveHint=false, fully covering safety and idempotency. The description adds only the permission requirement, which does not contradict annotations. No additional behavioral traits are disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is terse at two sentences, front-loading the purpose. However, the first sentence 'Listing endpoints from the group' is redundant with the title. Overall, it is clear and avoids unnecessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 17 parameters and an output schema, the description lacks guidance on pagination, filtering, or how to use the many optional parameters. Annotations cover safety and idempotency, but the description leaves agents to infer usage from parameter descriptions alone. Adequate but not comprehensive.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so each parameter has a description in the input schema. The tool description adds no additional parameter meaning beyond what is in the schema. Baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Lists all endpoints included in the specified group', using a specific verb and resource. It distinguishes from sibling tools like 'action1_list_endpoints' (all endpoints) and 'action1_list_endpoint_groups' (list groups). The title also aligns with the purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions required permission 'Perm: view_endpoints', which provides minimal guidance. It does not explicitly state when to use this tool vs alternatives (e.g., 'action1_list_endpoints'), nor does it mention when not to use it. The permission hint is useful but insufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_installed_software_dataGetting installed appsB
Read-onlyIdempotent

Getting installed apps. Gets a list of installed apps. Use parameters to filter out apps in the returned results. Perm: view_installed_software.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
live_onlyNoSpecify if you want to retrieve live results only.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, openWorldHint. Description adds permission requirement (view_installed_software) but no further behavioral details like pagination or output format.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Short and to the point, but first sentence is redundant with the title. Could be merged.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 10 parameters and an output schema, the description is too minimal. Lacks explanation of pagination, sorting, output options, and other key parameters, making it incomplete for complex usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline 3. Description only says 'filter out apps' – no added semantic detail beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clear verb and resource: 'Gets a list of installed apps'. However, it repeats the title and does not explicitly distinguish from sibling list tools like list_installed_software_errors.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Mentions using parameters to filter, but no guidance on when to use vs alternatives (e.g., search, software_inventory_for_endpoint) or when not to use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_installed_software_errorsGetting apps report errorsC
Read-onlyIdempotent

Getting apps report errors. Returns apps report errors. Use parameters to filter out returned results. Perm: view_installed_software.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

C2.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint, openWorldHint, idempotentHint, and destructiveHint false. The description adds the permission requirement 'view_installed_software,' which is useful beyond annotations. No contradictions. Behavior is adequately disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but contains redundancy ('Getting apps report errors. Returns apps report errors.'). It could be more concise without repetition. Structure is acceptable but not exemplary.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present (not shown but indicated), return values are documented. The description is minimal but sufficient given high schema coverage and annotations. However, for a tool with 9 parameters, slightly more context about what errors entail could improve completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema covers all 9 parameters with descriptions (100% coverage). The description adds 'Use parameters to filter out returned results' but provides no additional semantic detail beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose3/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states it returns 'apps report errors' and mentions filtering, but it's repetitive and doesn't strongly differentiate from siblings like list_installed_software_data or list_report_errors. The verb 'list' from the name is clear, but the description could be more specific about what constitutes an error.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description only says to use parameters to filter results. It provides no guidance on when to use this tool over alternatives, such as when needing error reports vs. general data. No explicit when-to-use or when-not-to-use context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_instance_endpoint_resultsListing resultsA
Read-onlyIdempotent

Listing results. Gets a list of endpoints where the automation instance is being applied or has been executed. Perm: view_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
instance_idYesProvide a specific instance ID.
last_statusNoSpecify the last status of the automation instance.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint. The description adds the 'view_automations' permission requirement and clarifies that the tool lists endpoints where the instance is applied or executed, providing useful behavioral context beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but includes a redundant first sentence ('Listing results.'). It could be more concise by merging into one sentence. The permission info is useful but not front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the comprehensive schema (100% parameter descriptions) and output schema, the description is fairly complete. It could briefly mention pagination or filtering, but the schema covers that. The permission mention adds value.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all 11 parameters. The description adds no additional parameter meaning, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (listing results) and the specific resource (endpoints for an automation instance). It also mentions the required permission, making it distinct from sibling list tools like list_automation_instances or list_endpoints.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not provide explicit guidance on when to use this tool versus alternatives, such as when to use list_automation_instances or list_automation_deployment_statuses. The purpose is implied but not contrasted with siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_logsGetting diagnostic logsC
Read-onlyIdempotent

Getting diagnostic logs. Gets diagnostic logs. Use parameters to pre-filter returned results. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
levelNoSpecify the minimum request level.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

C2.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint, openWorldHint, idempotentHint, and destructiveHint=false, so the description adds some value by including 'Perm: manage_endpoints.' However, it does not disclose pagination behavior or rate limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but contains redundancy ('Getting diagnostic logs' repeated). It could be condensed into one clear sentence without loss of information.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present and annotations covering safety, the description is minimally acceptable. However, given the broad concept of 'logs' and many parameters, more context about log types or sources would improve completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

All 9 parameters have descriptions in the input schema (100% coverage). The description's mention of pre-filtering is already implied by the schema, so no additional meaning is added.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description redundantly states 'Getting diagnostic logs. Gets diagnostic logs.' It does not specify what kind of diagnostic logs or their source, making it vague. Compared to siblings like 'action1_list_audit_events', the distinction is unclear.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives like other list tools. The statement 'Use parameters to pre-filter returned results' is generic and does not differentiate from sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_missing_updatesList missing updates for an endpointA
Read-onlyIdempotent

Returns missing-update items for one endpoint. Each item.id can be passed to action1_deploy_update.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax items to return.
org_idNoOrg UUID.
endpoint_idYesEndpoint UUID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
truncatedNo

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false. The description adds that each returned item has an id usable for deploy, which is useful behavioral context. It does not contradict annotations and provides a meaningful supplement.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with two sentences, front-loading the core purpose and a key usage note. No wasted words, making it efficient for an AI agent to parse quickly.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema (so returns need not be described) and comprehensive annotations, the description covers the essential purpose and a critical usage link (deploy). It does not explain optional parameters like limit or response_format, but these are already documented in the schema. Adequate for a simple list tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the input schema already documents all four parameters comprehensively. The description adds no additional meaning beyond what is in the schema, hence a baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the tool returns missing-update items for one endpoint, with a specific verb 'returns' and resource 'missing-update items'. It distinguishes from siblings like action1_list_updates by specifying 'for one endpoint' and links to deployment via item.id, making its purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Description implies usage context by noting that item.id can be passed to action1_deploy_update, indicating this tool is a prerequisite before deploying updates. However, it does not explicitly state when not to use this tool or mention alternatives, so it lacks explicit exclusion guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_organizationsList organizationsA
Read-onlyIdempotent

List every organization the configured API key can access.

ParametersJSON Schema
NameRequiredDescriptionDefault
adminNoIf true, restrict to orgs the API key has admin rights on.
limitNoMax items to return.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
truncatedNo

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, so the agent knows this is a safe read operation. The description adds that it covers all accessible orgs, but no further behavioral details like pagination behavior or response format.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single clear sentence with no unnecessary words. It is front-loaded and efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has an output schema (context signals indicate true), so return values need not be explained. The description covers the main purpose. Minor gap: the limit parameter implies pagination but not explained; however, with 3 optional parameters, completeness is high.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the description does not need to add parameter details. The description does not elaborate on parameters beyond the schema, so baseline score of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'list' and the resource 'organizations', specifying that it returns every organization the API key can access. It is distinct from sibling tools like create_organization or update_organization.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies use when a list of all accessible organizations is needed, but does not provide explicit when-not-to-use or alternative tool suggestions. However, for a straightforward list tool, this is sufficient.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_org_vulnerabilitiesList of all vulnerable software within the organizationA
Read-onlyIdempotent

Org-wide CVE rollup with 13 server-side filters. For per-endpoint vulnerabilities use action1_list_vulnerabilities (curated). List of all vulnerable software within the organization… Perm: view_vulnerabilities.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
scoreNoThe severity of the Common Vulnerabilities and Exposures (CVE) entries.
cursorNoPagination cursor.
cveidsNoAdd CVEIDs parameter to query specific vulnerabilities by their CVE IDs.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
endpoint_idNoThe ID of the endpoint to query.
reset_cacheNoReset current cache.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.
published_date_endNoThe maximum publishing date of the Common Vulnerabilities and Exposures (CVE) entries.
remediation_statusNoThe remediation status.
published_date_startNoThe minimum publishing date of the Common Vulnerabilities and Exposures (CVE) entries.
remediation_required_end_dayNoThe maximum value of the remediation deadline, in days. Example: 30
remediation_required_start_dayNoThe minimum value of the remediation deadline, in days. Example: 7

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations (readOnlyHint, idempotentHint, destructiveHint) already indicate safe read operation. Description adds that it has 13 server-side filters and mentions required permission (view_vulnerabilities), adding useful behavioral context beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with key info. Some redundancy as 'List of all vulnerable software within the organization' repeats the title, but overall concise and efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With output schema present and full schema coverage, description covers purpose, usage guidelines, and permissions. Lacks details on return format or pagination, but output schema likely handles those.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. Description does not add substantial meaning beyond the schema's parameter descriptions; it only mentions a count of filters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Org-wide CVE rollup' with 13 server-side filters, distinguishing it from per-endpoint vulnerabilities. It uses specific verb (list) and resource (vulnerabilities) and differentiates from sibling tool action1_list_vulnerabilities.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'For per-endpoint vulnerabilities use action1_list_vulnerabilities (curated)', providing direct guidance on when to use this tool vs an alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_permissionsListing permission templatesB
Read-onlyIdempotent

Listing permission templates. Gets a list of available permission templates.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint and destructiveHint; description adds no extra behavioral context beyond confirming 'Gets a list'. No contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with minor redundancy (first sentence partially repeats title). Otherwise concise and front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only list operation with full annotation coverage and an output schema, the description provides adequate complete context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of parameters; description does not add additional meaning or highlight key parameters beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the tool lists permission templates (specific verb and resource). Distinguishes from siblings that list other resources like roles, users, etc.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives, no prerequisites or filtering context provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_recent_automationsList recent automation instancesA
Read-onlyIdempotent

List recent automation instances for the org. For counts use action1_automations_summary instead.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax items.
cursorNoPagination cursor.
org_idNoOrg UUID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A3.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnly, idempotent, non-destructive, open world. Description adds scope (org) but no additional behavioral traits like pagination or recency definition.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose, no redundant words. Highly concise and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Basic but adequate given output schema presence and annotations. Lacks detail on pagination and 'recent' meaning, but covers essential purpose and sibling distinction.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema provides full descriptions for all 4 parameters. Description adds no additional parameter context. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it lists recent automation instances for the org, and distinguishes from sibling action1_automations_summary for counts.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly tells when to use (for listing) and when not (for counts, use alternative). No prerequisites mentioned, but sufficient for typical use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_report_dataGetting report rowsC
Read-onlyIdempotent

Getting report rows. Gets data organized by report rows. Use parameters to filter out returned results. Perm: view_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
detailsNoSpecify 'yes' to expand the details. This parameter is supported only for Summary reports.
verboseNoSkip per-item compactor.
live_onlyNoSpecify if you want to retrieve live results only.
report_idYesProvide a specific report ID.
endpoint_idNoThe ID of the endpoint to query.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false, so the safety profile is clear. The description adds the required permission 'view_reports', which is helpful extra context. No contradictions with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but contains redundancy: 'Getting report rows' and 'Gets data organized by report rows' say essentially the same thing. Could be more concise by removing one. Otherwise, it's front-loaded and to the point.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having 13 parameters and an output schema, the description is minimal. It does not explain what report rows represent, how pagination works, or provide any operational context. For a complex tool, more detail would be beneficial.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with all parameters described. The description does not add any parameter-specific meaning beyond what the schema provides, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool retrieves report rows ('Getting report rows', 'Gets data organized by report rows'). It distinguishes from sibling tools like list_reports or get_report_or_category by focusing on row-level data, though it could be more explicit about the specific action (e.g., list report data for a given report).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives like get_drilldown_for_report_row or list_reports. The only usage hint is 'Use parameters to filter out returned results', which is generic and does not provide context-specific recommendations or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_report_errorsGetting report errorsA
Read-onlyIdempotent

Getting report errors. Returns report errors for the specified report. Perm: view_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
report_idYesProvide a specific report ID.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint and idempotentHint; the description adds the permission requirement 'Perm: view_reports', which is useful context beyond annotations. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise with two sentences, front-loading the purpose. However, the first sentence is slightly redundant with the second.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema exists, the description is adequate but could be more complete by explaining how this tool differs from similar list tools (e.g., list_report_data).

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents all parameters. The description does not add additional parameter-level meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Getting' and resource 'report errors', and specifies 'for the specified report', distinguishing it from siblings like list_report_data or list_reports.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions a required permission 'Perm: view_reports', but does not provide explicit guidance on when to use this tool versus alternatives, nor when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_reportsListing reportsA
Read-onlyIdempotent

Listing reports. Gets a list of existing reports. At this time all reports are enterprise-wide.

ParametersJSON Schema
NameRequiredDescriptionDefault
subtreeNoSpecify if you want to query the entire report subtree.
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
truncatedNo

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, so the safety profile is clear. The description adds that reports are enterprise-wide, providing scope context. However, it does not disclose pagination behavior or rate limits, which are not covered by annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise, with only two sentences. It front-loads the key action ('Listing reports') and adds scope context. No superfluous words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a list tool with no output schema, the description should ideally mention return format or pagination. The enterprise-wide scope is helpful, but the description lacks detail on what the list contains (e.g., report IDs, names) or any limitations.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and each parameter's schema includes detailed descriptions. The tool description does not add any information beyond the schema, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists existing reports, specifying 'Gets a list of existing reports.' This distinguishes it from sibling tools like action1_get_report_or_category (single report) and action1_create_report (creation). The enterprise-wide scope clarifies the resource context.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for listing reports but does not explicitly state when to use this tool versus alternatives like action1_get_report_or_category for a specific report or action1_list_report_data for data within a report. No exclusions or prerequisites are mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_report_subscriptionsListing report subscriptions.C
Read-onlyIdempotent

Listing report subscriptions. Gets a list of report subscriptions.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint, idempotentHint, etc. The description merely restates the action without adding behavioral details such as pagination behavior or rate limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is redundant (two sentences saying essentially the same thing). It could be more concise without losing clarity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the simple list operation, strong annotations, and full schema coverage, the description is adequate but does not mention that results are paginated (implied by params) or any other contextual details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema descriptions cover 100% of parameters, so baseline is 3. The description does not add extra meaning about parameters beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists report subscriptions, and the name specifies the resource. It distinguishes from siblings like create_report_subscription and delete_report_subscription by focusing on listing, but does not explicitly differentiate from other list tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives like get_report_or_category or search. The description lacks contextual usage hints.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_rolesListing rolesA
Read-onlyIdempotent

Listing roles. Gets a list of available roles. Perm: manage_roles.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
fieldsNoAdd FIELDS parameter to query extended data.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds permission requirement beyond annotations; annotations already indicate read-only and idempotent, so no contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Very short and to the point, though 'Listing roles.' is redundant with 'Gets a list of available roles.' Still efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Minimal but adequate given schema and output schema exist; could specify scope like 'all roles in the organization' for completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of parameters, so description does not need to add; it does not provide extra semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it lists/get roles, but does not differentiate from other list tools like action1_list_role_users or action1_get_role.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Mentions the required permission 'Perm: manage_roles', but does not provide guidance on when to use this tool vs list_role_users or get_role.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_role_usersListing users in a specific roleA
Read-onlyIdempotent

Listing users in a specific role. Gets a list of users in a role specified by its ID. Perm: view_users, assign_roles, manage_roles.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
sortbyNoDefine the sorting order by a certain field.
role_idYesProvide a specific role ID.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint as false. The description adds the required permissions ('view_users, assign_roles, manage_roles'), which is valuable behavioral context. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise: two short sentences plus permissions. It front-loads the primary action without any redundant or verbose text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (9 parameters, many siblings, existing output schema), the description is mostly complete. It covers the core purpose and permissions but could briefly mention pagination or filtering options. However, the output schema and parameter descriptions fill the gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the input schema fully documents all 9 parameters. The description does not add any parameter-specific meaning beyond what the schema provides. Baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Listing users in a specific role') and the resource ('users in a role specified by its ID'). It distinguishes from siblings like 'action1_list_users' (which lists all users) by specifying the role context.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description lists required permissions, which hints at authorization context, but does not explicitly guide when to use this tool versus alternatives like 'action1_get_role' or 'action1_list_users'. No exclusions or when-not-to-use are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_scriptsListing scriptsA
Read-onlyIdempotent

Listing scripts. Gets a list of existing scripts from the Script Library. Perm: use_scripts.

ParametersJSON Schema
NameRequiredDescriptionDefault
builtinNoSpecify if the package is builtin (yes) or custom (no).
verboseNoSkip per-item compactor.
platformNoplatform
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
truncatedNo

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare the tool as read-only and idempotent. The description adds the permission requirement ('Perm: use_scripts'), which is useful behavioral context beyond what annotations provide. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise, consisting of two short sentences and a permission note, with no wasted words. It is front-loaded with the main action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the core purpose and permission, but lacks details about result ordering, pagination, or limits. Since an output schema exists, the return structure is defined elsewhere, but for a list tool, more context on result behavior would be helpful.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema provides descriptions for all 4 parameters (100% coverage). The tool description does not add any additional semantic information beyond what the schema already defines.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'list' and resource 'scripts', and specifies the source as 'Script Library'. It also notes the required permission, distinguishing it from sibling tools like action1_get_script and action1_create_script.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the required permission, providing some usage context. However, it lacks explicit guidance on when to use this tool versus alternatives or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_settingsListing settingsA
Read-onlyIdempotent

Listing settings. Lists all existing settings. At this time, all settings are enterprise-wide. Perm: manage_advanced_settings.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
categoryNoThe category of advanced settings.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A3.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and non-destructive. The description adds the requirement of 'manage_advanced_settings' permission and the scope constraint that all settings are enterprise-wide. This provides useful behavioral context beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise with three sentences. However, it is slightly redundant ('Listing settings. Lists all existing settings.'). It is front-loaded with purpose and keeps the permission requirement as a separate sentence, which is good structure.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers purpose, scope, and required permission. While it doesn't mention return value format or pagination details, these are covered by the output schema and input parameters. The description is adequately complete for a list operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with all 9 parameters described in the input schema. The tool description does not add any parameter-specific information beyond what the schema provides, so a baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Lists all existing settings') with specific verb and resource. It distinguishes from sibling tools like get_setting or create_setting by implying a list operation. The scope ('all settings are enterprise-wide') adds precision.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives (e.g., get_setting for a single setting, create_setting for adding). The permission requirement is noted, but there are no exclusions or contrast with other list tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_setting_templatesListing setting templatesB
Read-onlyIdempotent

Listing setting templates. Gets a list of existing setting templates.

ParametersJSON Schema
NameRequiredDescriptionDefault
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
truncatedNo

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, and destructiveHint. The description adds no extra behavioral context beyond stating it returns a list.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, but they are repetitive ('Listing' and 'Gets a list'). Could be merged into one concise statement.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple read-only list tool with rich annotations and output schema, the description is minimally adequate. However, it does not explain pagination or filtering behavior beyond what the 'filter' parameter indicates.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

All 3 parameters have full schema descriptions (100% coverage). The description adds no additional meaning beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Listing setting templates' and 'Gets a list of existing setting templates', providing a specific verb and resource. It distinguishes from sibling 'get_setting_template' but not from 'list_settings'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives like 'list_settings'. No explicit context, prerequisites, or exclusions provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_software_repositoryList Software Repository packagesA
Read-onlyIdempotent

List Software Repository packages. Gets a list of Software Repository packages for the entire enterprise. Perm: view_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
customNoSpecify if the package is custom (yes) or builtin (no).
fieldsNoAdd FIELDS parameter to query extended data.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
builtinNoSpecify if the package is builtin (yes) or custom (no).
verboseNoSkip per-item compactor.
platformNoplatform
match_nameNoProvide the software name to search for.
auto_paginateNoWalk all pages.
match_versionNoProvide the software version to search for.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already cover readOnly, idempotent, and non-destructive hints. The description adds the permission requirement but does not elaborate on pagination or open world behavior beyond what annotations indicate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but contains redundancy (first sentence repeats title). It is front-loaded but could be more concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the 15 parameters and available schema descriptions, the description is adequate but minimal. It lacks context on how parameters affect results (e.g., filtering, pagination).

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the description need not add parameter details. It does not provide additional meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'List Software Repository packages' with scope 'for the entire enterprise,' clearly differentiating from sibling tools like get_software_repository_package. The permission requirement is also specified.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for listing all enterprise packages but does not provide explicit guidance on when to use alternatives (e.g., search or get_software_repository_package) or specify exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_subscription_usage_organizationsGetting usage statistics for organizationsB
Read-onlyIdempotent

Getting usage statistics for organizations. Gets details about license usage with statistics for each organization individually. Perm: manage_organizations.

ParametersJSON Schema
NameRequiredDescriptionDefault
verboseNoSkip per-item compactor.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
truncatedNo

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, idempotentHint, destructiveHint false, so the safety profile is clear. The description adds the permission requirement ('manage_organizations') which is helpful. However, it does not disclose other behavioral traits like pagination, rate limits, or data freshness, which would add value beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is short with two sentences plus a permission note, no unnecessary words. Could be improved by starting with an action verb like 'Lists' to match typical tool naming conventions.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the simple nature (2 optional params, output schema present, annotations rich), the description is sufficient but lacks explicit mention that it returns a list of organizations or the scope (all organizations). Slightly vague about output format.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema covers all 2 parameters with descriptions. Description does not add any additional meaning or context for the parameters, so it meets the baseline for 100% schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states it retrieves license usage statistics per organization. The verb 'Gets' is appropriate for a read tool, but it does not explicitly contrast with similarly named siblings like action1_get_org_subscription_usage or action1_get_subscription_usage, reducing differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives. The description mentions a required permission but provides no context about typical use cases or comparison with other subscription/usage tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_updatesListing missing updatesC
Read-onlyIdempotent

Listing missing updates. Gets a list of all missing updates. Use parameters to filter out updates in the returned results. Perm: approve_updates, view_dashboards, manage_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
customNoSpecify if the package is custom (yes) or builtin (no).
fieldsNoAdd FIELDS parameter to query extended data.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
builtinNoSpecify if the package is builtin (yes) or custom (no).
verboseNoSkip per-item compactor.
only_latestNoSpecify if you want to exclude superseded updates. By default, 'yes'.
auto_paginateNoWalk all pages.
approval_statusNoSpecify the update status.
response_formatNoOutput format. Default markdown.
security_severityNoSpecify the severity level, e.g., security_severity=-Critical (for all non-critical).
update_sla_end_dayNoThe maximum value of the remediation deadline in the SLA.
update_sla_start_dayNoThe minimum value of the remediation deadline in the SLA.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate safe read-only and idempotent behavior. The description adds permission requirements, which is useful context. However, it does not explain pagination, scoping, or what 'missing updates' entails.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is somewhat redundant (first two sentences repeat the same idea). The permission list is useful but could be integrated more concisely. Overall, it is adequately sized but not optimally structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 17 parameters and the existence of an output schema, the description is too brief. It lacks explanation of the concept of 'missing updates,' how parameters interact, or typical usage patterns. The output schema partially compensates, but more context would improve agent selection.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema documents all parameters. The description adds no additional meaning beyond 'use parameters to filter,' which does not enhance understanding of individual parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists all missing updates, but it does not distinguish from the sibling tool 'action1_list_missing_updates', which likely serves the same purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool over alternatives like 'action1_list_missing_updates' or other list tools. The description only mentions using parameters to filter, but lacks context on appropriate use cases.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_user_rolesList the roles assigned to a userA
Read-onlyIdempotent

List the roles assigned to a user. Retrieves all roles assigned to a user specified by ID. Perm: manage_users.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
user_idYesProvide a specific user ID.
verboseNoSkip per-item compactor.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide readOnlyHint, idempotentHint, and destructiveHint, indicating a safe, non-destructive operation. The description adds the permission requirement 'Perm: manage_users', which is useful but not extensive. No contradictions exist.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise with two sentences that directly state the purpose and permission requirement. Every word adds value, and no extraneous information is present.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has an output schema (as indicated by context signals) and the schema covers all parameters, so the description doesn't need to explain return values. It adequately covers the core purpose, though it could optionally mention pagination-related parameters (from, limit, cursor) for completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all parameters are documented in the schema. The description adds no additional parameter-specific meaning beyond the schema, earning a baseline score of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly states that the tool lists roles assigned to a user, specifying it retrieves roles by user ID. This clearly defines the verb (list) and resource (roles), and distinguishes it from sibling tools like action1_list_roles (which lists all roles) and action1_list_role_users (which lists users for a role).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage when needing roles for a specific user but provides no explicit guidance on when to use this tool versus alternatives, such as action1_list_roles or action1_list_role_users. It mentions a required permission (manage_users) but lacks when-not usage or alternative recommendations.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_usersListing usersB
Read-onlyIdempotent

Listing users. Gets a list of users within the current Action1 enterprise. Perm: view_users.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
verboseNoSkip per-item compactor.
user_typeNoSpecify if the user type is API or Interactive.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds permission context beyond annotations, stating 'Perm: view_users'. Also confirms read-only behavior aligning with readOnlyHint. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Very concise, with main action front-loaded. The first sentence is somewhat redundant with the title, but overall efficient with no unnecessary text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Describes basic function and required permission, but does not mention optional filtering or pagination parameters. Output schema exists, so return format is covered, but the description could be more complete for a listing tool with many options.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. Description does not add additional meaning to any parameter beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it gets a list of users within the current enterprise, distinguishing from sibling get_user which retrieves a single user. However, no explicit differentiation from other listing tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Only mentions permission required (view_users) but does not provide guidance on when to use this tool versus alternatives like action1_get_user or action1_create_user.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_version_endpointsListing endpoints missing a specific updateB
Read-onlyIdempotent

Listing endpoints missing a specific update. Gets a list of endpoints that are missing updates for a specific package and its version,. Perm: approve_updates, view_dashboards, manage_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
fromNoProvide the number of the first record to be returned.
limitNoSet the maximum number of items to be returned (the page size).
cursorNoPagination cursor.
filterNoProvide a case-insensitive substring to filter and narrow down returned results (i.e., if...
org_idNoOrg UUID.
sortbyNoDefine the sorting order by a certain field.
verboseNoSkip per-item compactor.
package_idYesProvide a specific package ID.
version_idYesProvide a specific version ID.
auto_paginateNoWalk all pages.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint=false, so the safety profile is clear. The description adds permission requirements (approve_updates, view_dashboards, manage_automations) but lacks details on pagination behavior or response format.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but contains redundancy ('Listing endpoints missing a specific update.' followed by 'Gets a list...') and a typo (comma before period). It is front-loaded but could be more concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 11 parameters, an output schema, and many sibling tools, the description is minimally adequate. It covers the core purpose but lacks context on when to use this specific tool over others.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description does not need to add parameter details. The description adds no additional semantic meaning beyond the schema, earning the baseline score of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool lists endpoints missing updates for a specific package and version, using a specific verb and resource. It distinguishes from sibling tools like 'list_endpoints' and 'list_endpoint_missing_updates' by emphasizing the specific update context.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. Despite many sibling tools with similar names, no explicit context or exclusion criteria is given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_list_vulnerabilitiesList vulnerabilities for an endpointA
Read-onlyIdempotent

Returns vulnerability findings for one endpoint. Returns a clear 403 if the API key lacks the vulnerabilities scope.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
endpoint_idYesEndpoint UUID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
truncatedNo

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark it as safe read-only. Description adds useful behavioral context about a 403 error for missing scope, going beyond annotations without contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with no waste. First sentence states purpose, second adds a key behavioral detail, front-loaded and efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Output schema exists, so return details are covered. Description covers purpose and a common error. Slightly lacking on output scope (e.g., vulnerability types) but adequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so schema fully documents parameters. Description adds no extra parameter meaning beyond what schema provides, baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses 'returns vulnerability findings for one endpoint' providing a specific verb+resource. It distinguishes from siblings like action1_list_org_vulnerabilities by specifying per-endpoint scope.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Implies usage for a single endpoint but lacks explicit when-to-use/alternatives guidance. No exclusion or comparison with sibling tools like action1_list_cve_endpoints.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_move_endpointMoving the endpoint to another organizationB
Destructive

Moving the endpoint to another organization. Moves the endpoint to another organization. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesProvide an endpoint ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true, so the description adds only the permission note. The confirm and dry_run parameters in schema hint at safety measures, but description does not elaborate. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, but the first repeats the second. Could be more concise by combining. No wasted words but room for improvement.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of a confirm parameter and dry_run, the description lacks context on how to use them safely. However, output schema exists, reducing need for return value explanations. Adequate but not thorough.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so all parameters are described in the schema. The description adds no additional meaning beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (moving an endpoint to another organization) and mentions required permission, but it is repetitive and does not distinguish from sibling tools like update_endpoint that might change org membership indirectly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives (e.g., update_endpoint, delete_endpoint). No usage context or prerequisites provided beyond the action itself.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_raw_requestRaw Action1 API request (escape hatch)A
Destructive

Generic passthrough to any Action1 API path. Bypasses per-tool schemas — use only when no dedicated tool exists. GET/HEAD run free; POST/PUT/PATCH/DELETE require the destructive guard (ACTION1_ALLOW_DESTRUCTIVE + confirm:YES + dry_run-default-true).

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body for non-GET verbs.
pathYesAPI path beginning with /.
queryNoOptional query params.
methodYesHTTP method.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Disclosures beyond annotations: describes the passthrough nature, mentions bypassing schemas, and details the destructive guard mechanism. No contradiction with annotations (destructiveHint=true is correctly reflected).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three concise, front-loaded sentences each serve a distinct purpose: defining the tool, setting usage boundaries, and explaining safety constraints. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity as an escape hatch with many parameters and safety guards, the description is sufficiently complete. It covers purpose, usage conditions, and behavioral constraints without overloading.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of parameters. Description adds value by explaining default behavior (dry_run default true) and required confirmation (confirm: 'YES') for destructive verbs, which is not evident from the schema alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly defines the tool as a 'Generic passthrough to any Action1 API path' and explicitly states it bypasses per-tool schemas, positioning it as an escape hatch. It distinguishes from siblings by directing usage only when no dedicated tool exists.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit guidance: use only when no dedicated tool exists. Also specifies safe vs. destructive operations, requiring a destructive guard with confirm and dry_run for mutation methods.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_reboot_endpointReboot an endpointA
Destructive

Reboots the host via the reboot action template. Combine with action1_wait_for_automation to track recovery.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNoFriendly action name.
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesEndpoint UUID, or Group ID when target_type='EndpointGroup'.
target_typeNoEndpoint (default) or EndpointGroup for fan-out.
response_formatNoOutput format. Default markdown.
skip_connectivity_checkNoSkip offline-abort check.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.6/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true, and the description merely states 'Reboots the host' without adding behavioral context such as expected side effects, prerequisite permissions, or what happens during the reboot. The mention of 'reboot action template' is minimal extra information.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no fluff. The first sentence clearly states the action, and the second provides a useful tip for combining with another tool, making it efficient and front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the 8 parameters, output schema, and annotations, the description covers the core action succinctly. It misses some behavioral nuance (e.g., confirmation requirement, dry-run default) but remains adequate for a reboot tool with good schema coverage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline is 3. The description does not add any parameter-specific meaning beyond what the schema already provides, so no extra value is added.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Reboots the host via the reboot action template', specifying the verb and resource. The title 'Reboot an endpoint' reinforces the purpose, and the action is distinct from sibling tools like create or delete operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description hints at combining with action1_wait_for_automation for recovery tracking but does not explicitly state when to use or avoid this tool, nor does it clarify prerequisites or alternatives among the many sibling tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_recurring_schedulesList recurring automation schedules (read)B
Read-onlyIdempotent

List recurring automations with optional client-side filters (status, template_id, group id substring).

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax items.
cursorNoPagination cursor.
org_idNoOrg UUID.
active_onlyNoDrop paused/disabled schedules.
template_idNoFilter by first action template_id.
response_formatNoOutput format. Default markdown.
group_id_substringNoFilter by target group id substring.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint, openWorldHint, idempotentHint, and destructiveHint=false. The description adds minimal behavioral context beyond 'client-side filters'. No contradictions; it adequately complements annotations but doesn't add much new information.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, concise sentence of 12 words that front-loads the main purpose. Every word earns its place without unnecessary detail.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 7 optional parameters and an output schema, the description is brief but covers the primary function. It omits mention of pagination (limit/cursor), org_id requirement (optional), and response_format. Adequate for a simple read tool, but more context would improve usability.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema fully documents parameters. However, the description mentions a 'status' filter which does not exist in the schema (the actual parameter is 'active_only'). This inaccuracy reduces the value added beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The title and description clearly state it lists recurring automation schedules (read-only). However, the sibling list 'action1_list_automation_schedules' exists, and the description does not differentiate between them, causing potential confusion.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions optional client-side filters but provides no guidance on when to use this tool versus alternatives (e.g., action1_list_automation_schedules). No when-not-to-use information or context about prerequisites.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_remove_endpoint_from_groupRemove an endpoint from an endpoint groupA
Destructive

Remove a single endpoint from an endpoint group. POSTs the spec array body [{method:DELETE,endpoint_id}] to /endpoints/groups/{org}/{group}/contents (there is no DELETE verb or /contents/{id} sub-path).

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
group_idYesEndpoint group id.
endpoint_idYesEndpoint UUID.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false. The description adds non-obvious behavioral details: the use of a POST with a body array simulating DELETE due to no native DELETE verb, which is critical for understanding how the operation works.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences: first states the purpose, second provides essential technical implementation detail. Every word is informative, with no redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given that an output schema exists and all parameters are documented, the description adds the crucial implementation detail about the POST body format and lack of DELETE endpoint. It could mention the destructive nature or confirmation requirements, but the schema already includes a 'confirm' parameter.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already describes each parameter. The description does not add additional semantics beyond mentioning the URL pattern with org, group, and endpoint, but it does not elaborate on specific parameter constraints or formats.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The tool name and description clearly state the action: removing a single endpoint from an endpoint group. The description specifies the HTTP method and endpoint, and the sibling tool list includes a corresponding add tool, providing clear differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not specify when to use this tool versus alternatives like action1_add_endpoint_to_group or when not to use it. It only describes the HTTP mechanics, lacking usage context or prerequisites.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_report_exportRun a report and return its data or CSV exportB
Read-onlyIdempotent

Resolve a report by name or UUID, then return JSON rows or a CSV export blob.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax rows when format='json'.
formatNo'json' rows or 'csv' blob.json
org_idNoOrg UUID.
reportYesReport id or name fragment.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint, idempotentHint, and destructiveHint false. The description adds that it returns JSON or CSV data, which is consistent. However, it does not disclose additional behavioral traits like caching, pagination, or performance implications. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single clear sentence that front-loads the main action. It is concise with no wasted words. However, it could include slightly more context without becoming verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (5 params, 1 req, output schema exists), the description is minimally adequate. It provides core purpose but lacks context for selecting among sibling tools. The presence of output schema slightly reduces the need for return value explanation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all parameters are documented in the schema. The tool description adds no extra meaning beyond what the schema already provides (e.g., limit, format, org_id, report, response_format). Baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it resolves a report by name or UUID and returns JSON rows or CSV export. This is a specific verb+resource. However, it does not differentiate from sibling tools like action1_list_report_data or action1_get_export_for_report, which may overlap in purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No usage guidelines are provided. The description does not specify when to use this tool versus alternatives, nor does it mention prerequisites or context. Given many sibling tools, this omission could lead to confusion.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_requery_installed_software_for_endpointRe-querying installed apps on a specific endpointA
Destructive

Re-querying installed apps on a specific endpoint. This API method initiates an asynchronous update ("requery") of the installed software… Perm: view_installed_software, view_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesProvide an endpoint ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true, and the description adds that the method is asynchronous and requires permissions. This is consistent and adds value beyond annotations. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence plus permission requirement. It is concise and to the point, with no fluff. Could be slightly more structured, but efficient overall.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the output schema exists and annotations are provided, the description is complete enough. It covers the asynchronous nature and required permissions. However, it might benefit from noting that the response is an async operation status, but that is likely in the output schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema itself documents all parameters. The description adds no extra meaning to parameters beyond the schema, but it does mention required permissions which is not parameter-specific. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'requery' and the resource 'installed apps on a specific endpoint', distinguishing it from the sibling 'requery_installed_software_for_org' which targets the entire org. The title reinforces the purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description lists required permissions but does not explicitly state when to use this tool versus alternatives, such as the org-level query. The context is implied by the tool name, but no explicit guidance on when not to use or when to choose this over the org-level sibling.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_requery_installed_software_for_orgRe-querying installed appsA
Destructive

Re-querying installed apps. This API method initiates an asynchronous update ("requery") of the installed software inventory. Perm: view_installed_software.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate it's not read-only (readOnlyHint=false) and destructive (destructiveHint=true). The description adds the asynchronous nature, which is valuable. However, it does not elaborate on side effects (e.g., overwriting inventory data, triggering scans) or the impact of the operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise: two sentences that state the action and the required permission. No redundant or extraneous content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of 3 parameters, an output schema, and sibling tools, the description is too minimal. It lacks explanation of the asynchronous workflow, how to monitor the requery, the role of dry_run, and the distinction from the per-endpoint version.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema covers all 3 parameters with descriptions (org_id, confirm, dry_run), so baseline is 3. The description adds no additional parameter information beyond the schema, but does not contradict or mislead.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb ('initiates an asynchronous update') and resource ('installed software inventory'). It also distinguishes from siblings like 'action1_requery_installed_software_for_endpoint' by focusing on organization-level scope, and from listing tools by mentioning it's a requery operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the required permission ('view_installed_software') but does not provide explicit guidance on when to use this tool versus alternatives like listing or requerying per endpoint. The context is implied by the tool's name and sibling structure, but not directly stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_requery_reportRe-querying a reportA
Destructive

Re-querying a report. This API method initiates an asynchronous update ("requery") of the report's underlying data source. Perm: view_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
report_idYesProvide a specific report ID.
endpoint_idNoThe ID of the endpoint to query.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false. The description adds that the operation is asynchronous, which is valuable context beyond annotations. However, it does not detail potential side effects, cancellation, or result retrieval.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences with no wasted words. Front-loaded with key action and resource, followed by essential details.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema and annotations, the description adequately covers the core action. It could be slightly more complete by noting how to handle the async response, but overall sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the schema already documents all parameters. The description adds no further semantics for individual parameters beyond stating the permission.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb (requery), resource (report), and key details (asynchronous update, permission required). It distinguishes from sibling tools like 'get_report' or 'list_reports' by specifying it initiates a data refresh.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions the required permission but provides no guidance on when to use this tool vs. alternatives (e.g., other report actions). It does not state when not to use or mention alternatives among siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_request_enterprise_closureClosing the entire enterprise associated with Action1 accountA
Destructive

Closing the entire enterprise associated with Action1 account. The request is available only for a free Action1 account. Perm: manage_enterprise.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: EnterpriseRequest)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive=true and readOnly=false. The description adds valuable context: it is a closure request, limited to free accounts, and requires specific permissions. It does not contradict annotations and provides additional behavioral insight beyond what annotations alone convey.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences long, front-loading the purpose and then adding constraints. Every sentence is necessary and contributes value. No waste.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the destructive nature and the presence of an output schema, the description sufficiently covers the tool's purpose, constraints, and permission requirements. However, it could mention that the dry_run parameter defaults to true for previewing and that confirm requires the string 'YES', but these are already in the schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all three parameters. The description does not add any parameter-specific semantics; it only provides overall context. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The title and description clearly state the tool's purpose: 'Closing the entire enterprise associated with Action1 account'. It specifies the action, resource (enterprise), and constraints (free account, required permission). This distinguishes it from sibling tools like 'request_enterprise_quote' or 'revoke_enterprise_closure'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states that the request is 'available only for a free Action1 account' and requires the 'manage_enterprise' permission. This provides clear context on when the tool is applicable, though it does not mention alternatives or when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_request_enterprise_quoteRequesting a quoteC
Destructive

Requesting a quote. Sends a quote request to the Action1 Sales department. Perm: manage_enterprise.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: SubscriptionQuotePayload)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations indicate destructive hint, but description does not explain what 'destructive' means here (e.g., creates a request that cannot be undone). The dry_run and confirm parameters imply a two-step process, but this is not disclosed in the description.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Description is very short (2 sentences) and gets to the point. However, it is borderline under-specified; a bit more detail would be welcome without becoming verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the nested object parameter, output schema existence, and destructive nature, the description lacks context on how to use the tool effectively (e.g., what the output contains, how dry_run works).

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with clear parameter descriptions. The description adds no extra meaning, but also doesn't mislead. This meets the baseline for highly covered schemas.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states 'Sends a quote request to the Action1 Sales department,' clearly identifying the action and resource. It distinguishes from siblings like closure or trial requests, but could be more specific about the quote type.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives. Does not mention prerequisites, when to use dry_run, or how it differs from other enterprise request tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_request_enterprise_trialRequest a free trial or its extensionC
Destructive

Request a free trial or its extension. Perm: manage_enterprise.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: SubscriptionPayload)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true. The description adds only the permission requirement, not explaining side effects, execution conditions (confirm param), or the effect of dry_run versus actual execution.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with clear front-loading of purpose. Efficient, but lacks details about parameters and execution flow.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having output schema and 3 parameters (one required), the description omits key context about what the body object should contain and how dry_run affects behavior. Incomplete for a destructive action with execution guard.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. Description does not add extra meaning beyond schema, which already describes parameters with descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action as requesting a free trial or its extension, using specific verb and resource. It is distinct from siblings like closure and quote, though no explicit differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Only minimal guidance provided: required permission. No context on when to use this tool vs others (e.g., for cancellation) or prerequisites for the request.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_revoke_enterprise_closureRevoking account closureA
Destructive

Revoking account closure. The Action1 enterprise will be immediately reactivated and all your data will be retained. Perm: manage_enterprise.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: EnterpriseRequest)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Beyond annotations (destructiveHint: true), the description adds key behavioral details: immediate reactivation, data retention, and required permission (manage_enterprise). This helps the agent understand the consequences and authorization needed, though it could mention if the action is reversible or has side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise: three sentences covering purpose, effect, and permission. No redundant information, front-loaded with the main action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the destructive nature and three parameters, the description covers the most critical aspects: what happens (reactivation, data retention) and permissions. It does not explain that it reverses a closure request, but the presence of an output schema and annotations fills some gaps. Overall, fairly complete for a tool of this complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 100% schema coverage, the baseline is 3. The description adds no parameter details beyond what the schema already provides (confirm, dry_run, body). The schema descriptions are sufficient, so the description does not need to repeat them.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool purpose: revoking account closure, resulting in immediate reactivation and data retention. It uses specific verbs and identifies the resource (enterprise closure), distinguishing it from sibling tools like action1_request_enterprise_closure.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description lacks guidance on when to use this tool versus alternatives. It does not mention prerequisites (e.g., a prior closure request), when not to use it, or how it relates to other enterprise management siblings. The context of reversing a closure is implied but not explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_run_bash_macosRun a Bash script on a macOS endpointA
Destructive

Run a Bash script on a macOS endpoint via the run_script template. For OS-aware routing use action1_run_script.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNoFriendly action name.
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesEndpoint UUID, or Group ID when target_type='EndpointGroup'.
script_textYesScript source.
target_typeNoEndpoint (default) or EndpointGroup for fan-out.
retry_minutesNoRetry window in minutes when endpoint is offline.
response_formatNoOutput format. Default markdown.
timeout_minutesNoPer-action timeout in minutes (number or digit-string).

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true, so the description adds context by mentioning the 'run_script template' which implies standard execution behavior. However, it does not detail potential side effects, but for a script execution tool, the destructive hint suffices.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the action verb, no redundant words, perfectly concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite 10 parameters, schema covers all. Output schema exists. The description is sufficient for a script execution tool, though it could mention that output is captured. Still, it's adequately complete given the structured metadata.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the description does not add extra meaning beyond the schema. Baseline score of 3 is appropriate as the description does not enhance parameter understanding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Run a Bash script on a macOS endpoint' (specific verb and resource) and distinguishes from sibling 'action1_run_script' by noting OS-aware routing as an alternative.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says to use this tool for Bash on macOS and directs to 'action1_run_script' for OS-aware routing, providing clear when-to-use and when-not-to-use guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_run_data_collectionRun a data collectionC
Destructive

Trigger the run_data_collection template on an endpoint.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNoFriendly action name.
org_idNoOrg UUID.
paramsNoOptional template params.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesEndpoint UUID, or Group ID when target_type='EndpointGroup'.
target_typeNoEndpoint (default) or EndpointGroup for fan-out.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations indicate destructiveHint=true, implying irreversible changes, but the description does not elaborate on consequences, permissions, or that dry_run defaults to true. It adds minimal behavioral context beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence, but it lacks front-loaded key details like execution behavior or warnings. It is concise but could be more informative without being verbose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (8 parameters, nested objects, destructive annotation), the description is inadequate. It omits critical context about the dry_run default, confirmation requirement, and output handling.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the input schema already documents all parameters. The description adds no extra meaning, justifying the baseline score of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('trigger') and the resource ('run_data_collection template' on an endpoint), making the purpose specific. However, it does not differentiate from sibling 'run_*' tools like run_script.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives such as action1_run_script or action1_execute_and_wait. There is no mention of context or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_run_powershellRun PowerShell on a Windows endpointA
Destructive

Run PowerShell on a Windows endpoint via the run_powershell template. Runs as SYSTEM (no user profile).

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNoFriendly action name.
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesEndpoint UUID, or Group ID when target_type='EndpointGroup'.
script_textYesScript source.
target_typeNoEndpoint (default) or EndpointGroup for fan-out.
retry_minutesNoRetry window in minutes when endpoint is offline.
response_formatNoOutput format. Default markdown.
timeout_minutesNoPer-action timeout in minutes (number or digit-string).
success_exit_codesNoComma-separated success exit codes.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructive behavior (destructiveHint: true) and non-readonly. The description adds the key behavioral detail that the script runs as SYSTEM with no user profile, which is important for agents to understand execution context. However, it does not disclose potential side effects or error states beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise: one sentence plus a phrase. Every word earns its place, and the key action is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema, the description lacks critical context for a destructive tool. It does not mention the confirm or dry_run parameters, which are essential for safe execution. The template concept is mentioned but not explained. Given 11 parameters and destructive hint, the description is too sparse.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already explains all parameters. The tool description adds no additional parameter-level meaning. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: running PowerShell on a Windows endpoint. It distinguishes from siblings like run_bash_macos (different OS) and run_script (generic) by specifying the operating system and template.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives like run_script or execute_and_wait. The description does not mention prerequisites, limitations, or scenarios where this tool should be avoided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_run_scriptRun a script (auto-route by endpoint OS)A
Destructive

Cross-platform script runner. Routes to PowerShell (Windows) or Bash (macOS); errors on Linux/unknown.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNoFriendly action name.
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesEndpoint UUID, or Group ID when target_type='EndpointGroup'.
script_textYesScript source.
target_typeNoEndpoint (default) or EndpointGroup for fan-out.
retry_minutesNoRetry window in minutes when endpoint is offline.
response_formatNoOutput format. Default markdown.
timeout_minutesNoPer-action timeout in minutes (number or digit-string).
success_exit_codesNoPowerShell only; ignored on macOS.
skip_connectivity_checkNoSkip offline-abort check.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false. The description adds valuable behavioral context: auto-routing behavior, OS-specific shell selection, and error condition. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise: two sentences with no wasted words. The first states the overall purpose, the second details the routing logic and error case. Perfectly front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the high schema description coverage and presence of output schema, the description sufficiently covers the key behavioral aspect (auto-routing). It does not need to repeat schema details. However, it could mention the destructive nature beyond annotations, but overall complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description does not add additional semantic detail for any parameter beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool is a cross-platform script runner that auto-routes to PowerShell or Bash based on endpoint OS, and errors on Linux. This distinguishes it from sibling tools like action1_run_powershell and action1_run_bash_macos, which force a specific shell.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context on when to use (Windows/macOS) and when not to (Linux/unknown). However, it doesn't explicitly compare to sibling alternatives like action1_run_powershell or action1_run_bash_macos, which would help agents decide when to use this auto-route version vs. the specific ones.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_search_endpointsSearch endpoints (client-side substring filter, cursor-paginated)A
Read-onlyIdempotent

Substring search across hostname, user, OS, status. Walks pages client-side since Action1 has no server-side substring search.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax items.
queryYesSubstring (case-insensitive).
cursorNoPagination cursor.
fieldsNoRestrict matching to these fields.
org_idNoOrg UUID.
projectionNoPer-endpoint projection.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and destructiveHint=false, so agent knows it's safe. The description adds valuable behavioral info: it walks pages client-side, which affects performance and pagination behavior. This goes beyond the annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, 14 words, no fluff. The core action and a key behavioral caveat are front-loaded. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema, the description doesn't need to cover return values. It mentions the pagination approach and the matching fields. It could mention how to use the cursor parameter, but overall it provides sufficient context for the tool's operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description reiterates the fields but doesn't add new semantic meaning beyond the schema. The title mentions cursor-paginated but the description itself does not elaborate on cursor usage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it performs substring search across specific fields (hostname, user, OS, status) and the title adds cursor-paginated detail. The mention of walking pages client-side distinguishes it from sibling tools like action1_list_endpoints that likely have server-side filtering.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explains when to use this tool (for substring search) and why (no server-side search in Action1), but doesn't explicitly state when not to use it or name alternatives. The context is clear for an agent to decide.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_software_inventory_for_endpointList installed software for an endpointA
Read-onlyIdempotent

Fetch installed-software inventory for one endpoint, with optional name substring filter.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMax items.
cursorNoPagination cursor.
org_idNoOrg UUID.
endpoint_idYesEndpoint UUID.
find_by_nameNoSubstring filter on application name.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription
noteNo
countYes
itemsYes
totalNo
has_moreNo
next_cursorNo

TDQS

A3.5/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, openWorldHint=true, idempotentHint=true, and destructiveHint=false, so the tool's safety profile is clear. The description adds little behavioral context beyond what annotations provide—no mention of pagination behavior, rate limits, or response size considerations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence (12 words) that is front-loaded with the action and scope. Every word earns its place, with no redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 6 parameters (including pagination and output format) and a detailed output schema, the description is brief. It doesn't explain pagination mechanics or the default output format. Given the tool's complexity, more guidance would be helpful, but the schema and annotations fill many gaps.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all parameters. The description adds value by clarifying the 'find_by_name' parameter as a 'substring filter', but it does not provide additional meaning beyond the schema for other parameters like cursor, limit, or response_format. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it fetches installed-software inventory for one endpoint with an optional name substring filter. It uses specific verb and resource, differentiating from sibling tools like 'action1_list_installed_software_data' or 'action1_requery_installed_software_for_endpoint'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description says 'for one endpoint' and mentions the optional filter, which provides some context, but it does not specify when to use this tool versus alternatives (e.g., list_installed_software_data or requery). No explicit when-not-to-use or alternative guidance is given.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_stop_instanceStopping a automationA
Destructive

Stopping a automation. Stops applying a automation instance and aborts actions running on a remote endpoint. Perm: manage_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
instance_idYesProvide a specific instance ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark destructive=true; description adds context about aborting remote actions and required permission. Could elaborate on post-stop state but adequate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose. First sentence is slightly redundant with title, but overall efficient and clear.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With output schema present and annotations, description covers purpose, permission, and effect. Missing potential error cases or prerequisites, but sufficient for a destructive action tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline 3 applies. Description does not add detail beyond schema for parameters like instance_id or confirm, but permission hint is additional context.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool stops an automation instance and aborts actions on a remote endpoint, distinguishing it from siblings like delete_automation or create_automation_instance.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies using this tool to stop a running automation, but lacks explicit guidance on when to use vs alternatives like pause or delete. Permission requirement is mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_uninstall_programUninstall a programA
Destructive

Uninstall software via the uninstall_program template. Use action1_get_action_template for the params schema.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameNoFriendly action name.
org_idNoOrg UUID.
paramsYesTemplate params for uninstall_program.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesEndpoint UUID, or Group ID when target_type='EndpointGroup'.
target_typeNoEndpoint (default) or EndpointGroup for fan-out.
response_formatNoOutput format. Default markdown.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.5/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true, so the description's mention of 'Uninstall' aligns. However, it does not disclose required confirmation or dry-run behavior beyond what is in the schema. No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise with two sentences, front-loading the main purpose. It could include a bit more about next steps but is efficient and focused.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's destructive nature and 8 parameters, the description lacks essential details like the need to set confirm='YES' and dry_run=false for execution. It relies on external reference for params schema, leaving gaps in understanding.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description adds minimal value. The hint to use another tool for params schema is helpful but does not explain individual parameters beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action is to uninstall software using a specific template. It distinguishes this tool from siblings by specifying the uninstall_program template and references another tool for parameter details.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description directs users to action1_get_action_template for parameter schema but does not provide explicit guidance on when to use this tool versus alternatives or prerequisites such as endpoint requirements.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_automationUpdating a automation scheduleB
Destructive

Updating a automation schedule. Perm: manage_automations.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: AutomationSchedulePayload)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
automation_idYesProvide a specific automation ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations declare destructiveHint=true and readOnlyHint=false, so the agent knows it's a mutating/destructive operation. The description adds 'Perm: manage_automations' which provides permission context beyond annotations. However, it does not disclose side effects, required state, or error scenarios.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Extremely concise: two sentences totaling 11 words. Every word carries weight—purpose and permission. No filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with 5 parameters (including dry_run and confirm), nested body schema, and output schema, the description lacks behavioral context. It does not explain the preview/execute mode (dry_run), the confirmation requirement (confirm), or the structure of the body. The agent must rely solely on the schema, which is insufficient for safe usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for all parameters. The description adds no further parameter-level meaning, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Updating a automation schedule', identifying the verb (updating) and resource (automation schedule). It distinguishes from siblings like 'create_automation_schedule' and 'delete_automation', but it could be more specific about what aspects can be updated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives (e.g., create or delete). The only extra info is a permission requirement, but no context about prerequisites, exclusions, or typical use cases.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_data_sourceUpdating a custom data sourceB
Destructive

Updating a custom data source. Updates a custom data source specified by its ID. Perm: manage_data_sources.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: DataSourcePayload)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
data_source_idYesProvide a specific data source ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false. The description adds the permission requirement but does not disclose side effects or reversibility beyond what annotations already provide. No contradictions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but somewhat redundant, repeating 'updating a custom data source' in two consecutive sentences. It could be more concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema and annotations, the description is adequate but fails to elaborate on the dry_run safety feature or the confirm parameter beyond the schema. It covers the basics.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for all parameters. The tool description does not add value beyond the schema, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states an update operation on a custom data source by ID. It specifies the action and the required permission, but does not differentiate from sibling tools like create or delete.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description lacks any guidance on when to use this tool versus alternatives (e.g., create_data_source, delete_data_source). No prerequisites or context are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_endpointChanging an endpoint comment or nameA
Destructive

Changing an endpoint comment or name. Changes the user-defined 'comment', 'name' and custom attributes for the specified endpoint. Perm: manage_endpoint_attributes.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
endpoint_idYesProvide an endpoint ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false. The description adds that it changes specific user-defined fields, but does not disclose additional behavioral traits such as whether changes are reversible, impact on existing data, or error states. It does not contradict annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no redundancy. The first sentence front-loads the core action and resource. Every word adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

An output schema exists, so return values are not required here. The description covers the operation, affected fields, and a permission requirement. However, it lacks prerequisites (e.g., endpoint existence) and error handling details. Adequate but not thorough.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for all 5 parameters. The description mentions the fields changed (comment, name, custom attributes) which aligns with the body parameter, but does not add meaning beyond what the schema already provides. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'Changing' and resource 'endpoint', specifies the exact fields affected ('comment', 'name', and custom attributes'), and distinguishes from sibling update tools by targeting endpoint-specific attributes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions a required permission 'Perm: manage_endpoint_attributes', which is a usage condition, but does not provide guidance on when to use this tool versus alternatives like action1_update_endpoint_agent_deployment or action1_move_endpoint. No exclusions or when-not scenarios are stated.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_endpoint_agent_deploymentUpdating Agent Deployment settingsC
Destructive

Updating Agent Deployment settings. Updates the Agent Deployment configuration for a specific organization. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: AgentDeploymentPayload)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true. Description adds no extra behavioral context such as side effects, need for confirmation, or reversibility. The confirm parameter is not highlighted.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Very concise at two sentences. No wasted words, but could benefit from better structure. Slightly under-informative.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema, the description is too minimal for a destructive tool with 4 parameters including nested objects. Lacks explanation of dry_run and confirm parameters, and usage context.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%. Description does not add any parameter details beyond the schema. Baseline of 3 is appropriate since no additional value added.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'updates' and the resource 'Agent Deployment configuration for a specific organization'. It includes a permission hint. It distinguishes from sibling update tools by specifying 'endpoint agent deployment'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when or when not to use this tool. No alternatives mentioned despite many sibling tools. Missing context about prerequisites or preconditions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_enterpriseUpdating enterprise settingsB
Destructive

Updating enterprise settings. Updates settings for a current enterprise. Perm: manage_enterprise.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: EnterprisePayload)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false, so the description's mention of 'Updates settings' is consistent but adds no new behavioral insight beyond the permission requirement. The description does not disclose the confirm or dry_run patterns, which are behavioral traits beyond annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise (two short sentences) with no wasted words. It front-loads the core purpose. However, it could be slightly more informative without significant length increase, e.g., mentioning the confirm/dry_run behavior.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool that updates enterprise settings with a confirm-and-dry-run pattern, the description lacks crucial context. It does not explain the confirmation requirement or the dry_run preview mode, which are important for safe usage. The output schema exists but the description is incomplete for guiding proper invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, with descriptions for all three parameters (body, confirm, dry_run). The tool description adds no additional parameter-specific information beyond what is already in the input schema, meeting the baseline but not exceeding it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'updates' and the resource 'enterprise settings'. It distinguishes from siblings as it is the only tool specifically for updating enterprise settings among many update tools. However, the description is somewhat vague, not specifying which settings are updated.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions a required permission (manage_enterprise), which provides some usage guidance. However, it does not specify when to use this tool versus alternatives (e.g., get_enterprise, other update tools) or provide any context about when not to use it.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_groupChanging group settingsB
Destructive

Changing group settings. Changes settings for an existing endpoint group in the specified organization. Perm: manage_endpoints.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: EndpointGroupPayload)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
group_idYesProvide an endpoint group ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide destructiveHint=true. Description adds permission requirement but does not disclose effects, reversibility, or confirmation mechanism (confirm parameter). With annotations, bar is lower; description adds some value.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, but first sentence is redundant (restates title). Second sentence adds value. Efficient but could be trimmed.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers basic purpose and permission, but lacks details on confirmation, dry-run behavior, output, or update scope. Output schema exists but description doesn't leverage it fully.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, baseline 3. Description implicitly refers to org_id and group_id but does not add meaning beyond schema for parameters like body, confirm, or dry_run.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states it changes settings for an existing endpoint group in a specified organization, with explicit verb+resource. It distinguishes from sibling tools like create, delete, or get groups.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use vs when not to use, nor alternatives. The permission is mentioned but no context about preview vs execution modes (dry_run parameter).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_meUpdate the current user settingsC
Destructive

Update the current user settings. Updates settings for the currently authenticated…

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: UserPayload)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate the tool is destructive and not read-only. The description adds no additional context about behavioral traits, such as the need for confirmation (though 'confirm' parameter exists) or side effects. With annotations present, the burden is partially met, but more context would improve transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very short but appears truncated and incomplete. It repeats the same phrase. It lacks necessary detail and is under-specified, which hurts usability despite its brevity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's destructive nature and the existence of safety parameters (confirm, dry_run), the description misses critical context. It does not explain the confirmation requirement or the preview mode. The output schema exists but is not referenced. The description is insufficient for an agent to use the tool safely.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for each parameter. The description does not add any additional meaning beyond what the schema provides, such as explaining the UserPayload or the purpose of 'confirm' and 'dry_run'. Baseline 3 due to high coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The title and description clearly state that this tool updates settings for the currently authenticated user. The 'me' in the name distinguishes it from other update tools like 'update_user' which target other users. However, the description does not explicitly differentiate it from siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool versus alternatives. There is no mention of prerequisites, limitations, or when not to use it. The description simply states the action.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_organizationUpdating organization settingsB
Destructive

Updating organization settings. Updates settings for an organization specified by its ID. Perm: manage_organizations.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: OrganizationPayload)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already convey destructiveHint=true and readOnlyHint=false. The description adds minimal value by noting the required permission, but does not disclose other behavioral traits like consequences of the update or whether changes are reversible.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description consists of three concise sentences, each adding distinct information: action, operation details, and permission requirement. No redundancy or unnecessary text.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the presence of an output schema (not shown but indicated in context), the description covers the core operation and required permission. It could mention the destructive nature or confirm parameter implications, but overall sufficient for a straightforward update tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the description does not need to elaborate on parameters. It adds no additional meaning beyond what the schema provides, achieving the baseline of 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Updating') and the resource ('organization settings'), with a specific reference to updating by ID. However, it does not explicitly distinguish this from sibling tools like create or delete, which is acceptable given the tool name.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description only provides the required permission ('Perm: manage_organizations') but offers no guidance on when to use this tool versus alternatives (e.g., create_organization or update_setting). The schema includes a dry_run parameter and required confirm, but the description does not explain their usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_packageUpdate Software Repository package settingsA
Destructive

Update Software Repository package settings. Perm: manage_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: object)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
package_idYesProvide a specific package ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false. Description adds permission info but no further behavioral details about what gets destroyed or authorization requirements beyond the permission.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, 10 words, front-loaded with action. Every word contributes.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite output schema and annotations, the description omits critical context about the dry_run and confirm parameters, which are essential for safe execution. Users need to consult the schema for this.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so parameters are documented. Description adds no additional meaning beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states verb 'Update' and resource 'Software Repository package settings'. It is distinct from sibling tools like action1_get_software_repository_package or action1_deploy_package.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Mentions required permission but provides no guidance on when to use versus alternatives or when not to use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_remediationUpdates record of compensating controls when remediation changesB
Destructive

Updates record of compensating controls when remediation changes… Perm: manage_vulnerabilities.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: RemediationPayload)
cve_idYesThe unique identifier of a CVE (Common Vulnerabilities and Exposures), e.g. CVE-2005-2300
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
remediation_idYesA specific remediation ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true. The description adds permission requirement ('Perm: manage_vulnerabilities'), which is useful context. However, it does not elaborate on what exactly gets destroyed or other side effects. With annotations providing the core safety profile, a 3 is appropriate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise with two sentences, no wasted words. Could be improved with a bit more structure, but it is efficient and front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 6 parameters (including nested body) and an output schema, the description is minimal. It does not explain the body parameter or return value, but output schema exists. Some gaps remain, so a 3.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description does not add additional meaning to any parameters beyond what the schema provides. No parameter descriptions in the description text.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The name and title clearly indicate updating remediation. The description specifies 'Updates record of compensating controls when remediation changes', which is specific and distinguishes from other update tools among siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description states 'when remediation changes' but does not provide explicit when-to-use guidance or alternatives. No mention of when not to use or related tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_remote_sessionSwitching a current monitorB
Destructive

Switching a current monitor. Changes the 'current_monitor' parameter for a specific remote session. Perm: remote_connect.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: object)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
session_idYesProvide a specific remote session ID.
endpoint_idYesProvide an endpoint ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true and readOnlyHint=false, so the description's mention of 'changes' adds no new behavioral insight. It does not disclose side effects like session interruption or whether changes are reversible.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no wasted words. The first sentence is slightly redundant but overall concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with an output schema and annotations, the description is minimal. It lacks details on success/failure outcomes, whether the session needs to be active, and any preconditions beyond permissions.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% with all parameters documented. The description hints that the body parameter includes 'current_monitor', adding minor context beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it changes the 'current_monitor' parameter for a remote session, which distinguishes it from create and get siblings. However, the title 'Switching a current monitor' is vague and could be confused with a display switching action.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description mentions required permission 'remote_connect' but provides no explicit guidance on when to use this tool versus alternatives like create_remote_session or get_remote_session. Usage is implied as updating an existing session.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_reportUpdating a custom reportC
Destructive

Updating a custom report. Updates a custom report. You cannot changes a custom report's category. Perm: manage_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: ReportPayload)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
report_idYesProvide a specific report ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true. The description adds a behavioral constraint (category immutability) and permission info. However, it does not describe side effects, reversibility, or the destructive nature beyond what annotations provide.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but contains redundancy ('Updating a custom report. Updates a custom report.'). It conveys essential info but could be more concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (nested body, dry_run/confirm, multiple siblings), the description lacks important context like how to properly execute an update (dry_run and confirm flow). Output schema exists but does not compensate for missing operational details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description does not add extra meaning for parameters like the body object or the dry_run/confirm mechanism, which are critical for correct usage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it updates a custom report, with a specific verb and resource. It adds a constraint (cannot change category) and required permission. However, it redundantly repeats the purpose and does not differentiate from siblings like create or delete reports.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides a constraint (cannot change category) and permission requirement, but no explicit guidance on when to use this tool versus alternatives (e.g., create_report, delete_report). No mention of prerequisites or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_report_subscriptionUpdating the report subscription.C
Destructive

Updating the report subscription. Updates the report subscription. Perm: view_reports.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: ReportSubscriptionPayload)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
subscription_idYesProvide a specific subscription ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already mark destructiveHint=true, so description adds little. It notes 'Perm: view_reports' but omits critical behavioral traits like dry_run preview mode or confirm requirement, which are only in schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Extremely concise but with redundancy ('Updating the report subscription. Updates the report subscription.'). Front-loads verb but wastes first sentence. Could be tighter.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite nested schema and output schema, description ignores key behaviors (dry_run, confirm, idempotency, output). For a destructive update with safety mechanisms, much more context is needed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers 100% of parameters with descriptions, so baseline is 3. Description adds no parameter-specific meaning beyond schema, failing to enhance understanding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description specifies verb 'updating' and resource 'report subscription', clearly identifying the action. However, it lacks specifics on what aspects can be updated (e.g., schedule, recipients), making it somewhat vague despite being clear.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives like create or delete subscription. Does not mention prerequisites or conditions, leaving the agent without decision support.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_roleUpdating a specific roleA
Destructive

Updating a specific role. Updates a role specified by its ID. Perm: manage_roles.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
role_idYesProvide a specific role ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.6/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate readOnlyHint=false and destructiveHint=true, so the description's mention of 'updating' aligns. It adds the permission requirement but does not clarify whether the update is partial or full replacement, or any side effects beyond the annotation hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short (two sentences) but has slight redundancy ('Updating a specific role' repeated as 'Updates a role specified by its ID'). It is mostly front-loaded but could be tighter.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With an output schema present, return values need no description. However, the description omits guidance on the confirm and dry_run parameters, which are crucial for execution safety. More context on the destructive nature and required confirmation would improve completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and each parameter has a description. The description adds 'Perm: manage_roles' but does not enhance understanding of parameter semantics beyond what the schema provides. No critical gaps.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action (updating a specific role) and the resource (by ID), and distinguishes it from sibling tools like create_role, delete_role, and get_role. The mention of 'Perm: manage_roles' adds context about authorization.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not explicitly state when to use this tool versus alternatives like clone_role or update_role_user. It implies usage via 'updating a role by ID' but lacks explicit guidance on context or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_scriptUpdating a custom scriptB
Destructive

Updating a custom script. Updates details for an existing custom script specified by its ID. Perm: manage_scripts.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: object)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
script_idYesProvide a specific script ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint=true. The description adds the permission requirement 'Perm: manage_scripts', which is useful. However, it does not disclose the presence of the confirm and dry_run parameters or their implications for execution, nor any side effects beyond 'updates details'.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description contains only two sentences, but the first sentence 'Updating a custom script.' is redundant with the title and wastes tokens. It is still relatively concise.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the destructive nature (destructiveHint=true) and the presence of required confirm and dry_run parameters, the description should explain how these fields affect execution. It does not, leaving the agent without critical context for safe invocation. The output schema exists but its content is not described.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description only reiterates that updates are done by ID, which matches the script_id description. It adds no new meaning for body, confirm, or dry_run.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Updates details for an existing custom script specified by its ID', providing a specific verb and resource. The title and description differentiate it from siblings like create_script and delete_script, though it could more explicitly distinguish from other update tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool over alternatives such as action1_create_script or action1_get_script. It does not specify prerequisites or scenarios where an update is appropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_settingUpdating a settingB
Destructive

Updating a setting. Updates an existing setting specified by its ID. Perm: manage_advanced_settings.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: SettingPayload)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
setting_idYesProvide a specific setting ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

B3.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

While annotations already indicate destructiveness (destructiveHint: true) and non-read-only, the description adds the permission requirement. However, it does not disclose any other behavioral traits such as side effects or reversibility.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely concise, consisting of one sentence and a permission note. It is front-loaded with the core purpose and contains no wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema, the description fails to explain important behavioral aspects like the role of 'confirm' and 'dry_run' parameters, which are critical for a destructive update tool. It lacks completeness for safe operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with parameter descriptions. The tool description adds no additional meaning beyond what the schema provides, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb (updating), resource (setting), and method (specified by its ID). It also mentions the required permission, distinguishing it from create, delete, and get setting tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description does not provide guidance on when to use this tool versus alternatives, nor when not to use it. It only states the permission required, which is a prerequisite but not usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_userUpdate userC
Destructive

Update user. Updates an existing… Perm: manage_users.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyYesRequest body (schema: object)
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
user_idYesProvide a specific user ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations indicate destructiveHint=true and readOnlyHint=false. The description adds the permission requirement 'Perm: manage_users', which is useful context beyond annotations. However, it does not explain side effects, reversibility, or what happens on success.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness2/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very brief but also truncated, leaving an incomplete sentence. It redundantly repeats the title and fails to provide a self-contained explanation.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema (not shown) and destructive annotations, the description lacks details on expected outcomes, error states, or behavioral characteristics. For a 4-parameter tool with nested objects, more context is needed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with descriptions for all 4 parameters. The description adds no additional parameter-level information beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose2/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description is truncated ('Updates an existing…') and vague. While title indicates 'Update user', it fails to specify what user attributes can be updated or differentiate from other update tools like update_role or update_endpoint.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance on when to use this tool versus alternatives such as create_user, delete_user, or get_user. No when-not-to-use conditions or prerequisites are mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_update_versionModify version in Software Repository packageC
Destructive

Modify version in Software Repository package. - accept_eula - for "EULA_accepted" property - approve_updates - for "approval_status

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body (schema: object)
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
package_idYesProvide a specific package ID.
version_idYesProvide a specific version ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate destructiveHint: true and readOnlyHint: false. The description adds no further behavioral context beyond the parameter hints. It does not disclose side effects, required permissions, or reversibility beyond the confirm parameter.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is short but lacks structure. It starts with a single sentence then moves to bullet-like parameter hints without clear organization. Could be more readable and efficient.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite having an output schema and annotations, the description omits crucial context: what the body object expects beyond two hinted keys, what the response contains, how the confirm parameter works, and any post-update effects. Incomplete for a mutation tool with complex parameters.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all parameters. The description adds value by hinting at possible body properties (accept_eula, approve_updates) but only partially compensates for the open-ended body schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The title and first sentence clearly state the action is to modify a version in a software repository package. However, the description does not differentiate from sibling tools like create_package_version or delete_version, which could cause confusion.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No explicit guidance on when to use this tool versus alternatives. The description hints at the confirm parameter but does not explain when to perform a dry run or execute. No prerequisites or exclusions mentioned.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_upload_software_chunkUpload package file chunksC
DestructiveIdempotent

Upload package file chunks. Uploads package file chunks. Perm: manage_software_repository.

ParametersJSON Schema
NameRequiredDescriptionDefault
bodyNoRequest body.
org_idNoOrg UUID.
confirmNoRequired to execute. Exact string "YES".
dry_runNoDefault true (preview). Set false to execute.
platformYesplatform
upload_idYesupload_id
package_idYesProvide a specific package ID.
version_idYesProvide a specific version ID.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

C2.9/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already provide destructiveHint=true and idempotentHint=true. The description adds the required permission but does not elaborate on behavioral aspects like chunk ordering or state changes. Given annotations cover some, the description adds minimal extra transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness3/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description contains a redundant phrase ('Upload package file chunks. Uploads package file chunks.') which wastes words. It could be simplified to one sentence. While short, the redundancy reduces efficiency.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With 8 parameters including a nested body, enum, and an output schema, the description fails to explain the upload process, chunk relationships, or prerequisites like init_software_upload. It is insufficient for a tool with this complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

All parameters have descriptions in the schema (100% coverage), so the baseline is 3. The description does not add any additional meaning or usage context for parameters beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states the tool uploads package file chunks, which is a specific verb-resource pairing. However, it repeats itself and does not distinguish from sibling tools like init_software_upload or create_package. Purpose is clear but lacks differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is provided on when to use this tool vs alternatives such as init_software_upload or create_package_version. The description only states what the tool does, offering no conditional usage information.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

action1_wait_for_automationPoll an automation until it terminatesA
Read-onlyIdempotent

Block until an automation instance reaches a terminal status (Success/Failed/Stopped/Error/Canceled) or timeout.

ParametersJSON Schema
NameRequiredDescriptionDefault
org_idNoOrg UUID.
endpoint_idNoIf set, also fetch filtered script output.
instance_idYesInstance UUID.
response_formatNoOutput format. Default markdown.
timeout_secondsNoPolling timeout.
poll_interval_secondsNoPoll interval seconds.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already indicate read-only, idempotent, non-destructive behavior. The description adds that it blocks and lists terminal statuses, but does not specify timeout behavior (e.g., error vs. partial result). No contradiction with annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence that efficiently conveys the core function. No redundant words; proper front loading.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the essential operation but omits details about timeout behavior (e.g., return value on timeout) and does not explain polling parameters. However, the output schema exists and annotations provide safety context, so it's minimally adequate.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all parameters are documented in the schema. The description's mention of 'timeout' adds no new semantics beyond the schema. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Block until') and resource ('automation instance'), and lists the exact terminal statuses. This clearly distinguishes it from siblings like action1_get_automation_status which are non-blocking.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage (waiting for automation termination) but does not explicitly state when to use this tool versus alternatives (e.g., get_automation_status for a quick check). No prerequisites or exclusions are provided.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

TDQS

C2.9/5.0
Disambiguation3/5

With 166 tools, there is significant overlap and multiple ways to perform similar actions (e.g., endpoints have get_endpoint, list_endpoints, search_endpoints, endpoints_summary). While descriptions often help, the large number makes it hard for an agent to reliably distinguish between closely related tools.

Naming Consistency4/5

All tools follow the 'action1_verb_noun' pattern with occasional qualifiers. Minor deviations exist (e.g., 'action1_cve_remediation_plan' vs. 'action1_create_cve_remediation'), but overall consistency is high for such a large set.

Tool Count1/5

166 tools is far beyond the recommended range (3-15) and indicates near-complete API exposure rather than a curated, coherent tool set. This overwhelming number undermines usability for both agents and humans.

Completeness4/5

The tool set covers CRUD for endpoints, groups, automations, scripts, packages, reports, vulnerabilities, users, roles, and more. Minor gaps exist (e.g., no delete_automation_instance, only stop), but overall the surface is very comprehensive.

Maintenance

ActivityMaintained
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    A
    maintenance
    An MCP server for Action1, a cloud-native RMM platform, enabling remote monitoring, patch management, and endpoint management through Action1's API.
    6
    2
    Apache 2.0
  • A
    license
    Not graded
    quality
    A
    maintenance
    MCP server for the Atera RMM API. Implements a decision tree architecture for efficient tool discovery, enabling Claude to manage devices, alerts, tickets, and customers in Atera.
    Apache 2.0
  • A
    license
    A
    quality
    F
    maintenance
    A comprehensive Model Context Protocol (MCP) server that enables Claude and other LLM applications to execute PowerShell commands, scripts, and perform system operations on Windows systems.
    10
    25
    MIT

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/mguttmann/action1-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server