Update secret

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Adds real context beyond the annotations: the response omits the secret value, and references by secret ID survive a rename. It also discloses that metadata is replaced rather than merged, which aligns with destructiveHint=true. It doesn't state permission requirements or what happens to unlisted metadata keys on partial updates.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Is the description appropriately sized, front-loaded, and free of redundancy?

Three tight sentences: purpose first, constraints second, reference-safety consequence last. No filler and nothing repeated from the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers mutation scope, immutability of sensitive fields, and response shape (value omitted) despite there being no output schema. Minor gaps remain: metadata merge-vs-replace semantics for omitted keys and error behavior for invalid IDs are unstated.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3, but the description adds semantics the schema does not: only name and metadata are mutable, and name changes are safe because references key on secretID. That directly informs how to use the two optional parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb+resource and narrows scope precisely: 'Renames a secret or replaces its metadata.' It also names what the tool cannot touch (value, kind, owner), which cleanly separates it from secrets_create, secrets_delete, and secrets_get.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear when-to-use context (rename or metadata change) and an implicit when-not by stating that value, kind, and owner are immutable here — meaning those require a different tool. It doesn't explicitly name the alternative sibling (e.g., secrets_create/delete) for changing a value, so it stops short of a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.