outlook-mcp
outlook-ews-mcp
outlook-ews-mcp es un servidor MCP para Microsoft
Exchange local mediante EWS (exchangelib).
Proporciona a clientes compatibles con MCP (Claude Desktop, Claude Code y cualquier otro
cliente MCP) acceso a correo, calendario, contactos, carpetas, adjuntos y datos de
disponibilidad a través de un único servicio Python comprobable — sin necesidad de
scripting directo en el buzón.
Renombrado desde
outlook-mcp. Ese nombre ya estaba ocupado en PyPI por un proyecto no relacionado, por lo que el nombre de distribución y CLI ahora esoutlook-ews-mcp. La ruta de importación de Python no cambia. Hasta la primera versión etiquetada en PyPI, instale desde este repositorio como se muestra a continuación.
Contenido
Related MCP server: owa-mail-mcp
Aspectos destacados
Correo — listar, buscar (subcadena o sintaxis de consulta avanzada), leer, enviar, responder, reenviar, mover, copiar, eliminar, marcar, categorizar, acciones masivas, exportación MIME sin procesar, agregar/eliminar adjuntos
Sistema — reglas de la bandeja de entrada, fuera de la oficina (respuestas automáticas), listado de delegados de solo lectura
Calendario — listar, crear, actualizar, eliminar, responder a invitaciones, buscar espacios libres, ver el calendario de un buzón compartido/delegado, Room Finder, acciones masivas
Contactos — buscar, leer, crear, actualizar, eliminar
Carpetas y adjuntos — CRUD de carpetas y descarga de adjuntos
Autenticación —
NTLMyBasiccontra Exchange localTransporte —
stdioySSEArquitectura — mapeo centralizado de errores a través de una única abstracción
ExchangeClient(ver Notas del proyecto)Seguridad — una comprobación rápida más segura para la privacidad por defecto (ver Comprobación rápida)
Operaciones — imagen Docker y pipelines de CI/CD para GitHub y GitLab incluidos
Catálogo de herramientas
Cada herramienta a continuación está registrada en
tool_specs.py, la única fuente de verdad para su
nombre, descripción y esquema. Solo lectura marca las herramientas que nunca
modifican el buzón — obtienen más concurrencia (ver Cola de solicitudes)
y son seguras de llamar especulativamente.
Sistema
Herramienta | Descripción | Solo lectura |
| Comprueba la conectividad con Exchange | ✅ |
| Obtiene metadatos del buzón | ✅ |
| Lista los delegados del buzón y sus niveles de permiso de carpeta — solo lectura porque | ✅ |
| Lista las reglas de bandeja de entrada del servidor | ✅ |
| Crea una regla de bandeja de entrada del servidor, p. ej. "de este remitente → mover a carpeta" | |
| Habilita/deshabilita una regla o cambia su prioridad (otros campos no se pueden actualizar aquí) | |
| Elimina una regla de bandeja de entrada del servidor por id | |
| Obtiene la configuración de fuera de la oficina (respuesta automática) | ✅ |
| Desactiva, activa o programa una ventana de inicio/fin para las respuestas automáticas |
⚠️
create_inbox_rule/update_inbox_rule/delete_inbox_rulegestionan reglas a través de EWS, lo que elimina el blob de reglas del lado del cliente que Outlook de escritorio mantiene — esto puede borrar reglas que un usuario creó en el propio Outlook. Este es un comportamiento documentado de EWS, no un error aquí.
Correo
Herramienta | Descripción | Solo lectura |
| Lista correos en una carpeta | ✅ |
| Obtiene un correo completo por id | ✅ |
| Exporta el contenido MIME RFC 822 sin procesar de un mensaje, codificado en base64 | ✅ |
| Obtiene todos los mensajes de una conversación en orden, incluidos los cuerpos | ✅ |
| Busca por subcadena (asunto/cuerpo/remitente) o sintaxis de consulta avanzada del servidor | ✅ |
| Envía un correo nuevo | |
| Responde a un correo | |
| Reenvía un correo | |
| Mueve un correo a otra carpeta | |
| Copia un correo a otra carpeta | |
| Movimiento masivo, con resultados por elemento — un id malo no hace fallar al resto | |
| Copia masiva, con resultados por elemento | |
| Eliminación masiva, con resultados por elemento (eliminación suave a menos que | |
| Elimina un correo | |
| Actualiza el estado de lectura, la importancia o la marca de seguimiento | |
| Establece, agrega o elimina categorías de Outlook (las etiquetas de colores) | |
| Versión masiva de | |
| Versión masiva de | |
| Lista las categorías en uso con conteos, muestreadas de mensajes recientes (no de la lista maestra de categorías del buzón) | ✅ |
| Lista las carpetas del buzón | ✅ |
| Crea una carpeta en el buzón | |
| Renombra una carpeta — rechaza carpetas integradas (Bandeja de entrada, Elementos enviados, Calendario, ...) | |
| Elimina una carpeta y todo su contenido — rechaza carpetas integradas | |
| Crea un borrador de correo | |
| Actualiza un borrador; los campos omitidos se dejan sin cambios, | |
| Envía un borrador existente | |
| Adjunta un archivo local a un mensaje, típicamente un borrador — el archivo debe estar bajo | |
| Elimina un adjunto de un mensaje por id | |
| Guarda un adjunto en disco | ✅ |
Calendario
Herramienta | Descripción | Solo lectura |
| Lista eventos de calendario en un rango de tiempo; pasa | ✅ |
| Obtiene un evento de calendario por id; pasa | ✅ |
| Crea un evento de calendario | |
| Actualiza un evento de calendario | |
| Elimina un evento de calendario | |
| Acepta, rechaza o responde tentativamente a una invitación | |
| Encuentra espacios de tiempo libres para reuniones | ✅ |
| Elimina eventos en bloque, con resultados por elemento | |
| Responde a invitaciones en bloque, con resultados por elemento | |
| Obtiene espacios libres/ocupados; pasa | ✅ |
| Lista calendarios | ✅ |
| Lista listas de salas de Room Finder (grupos de salas de reuniones) | ✅ |
| Lista las salas de reuniones en una lista de salas de Room Finder | ✅ |
Contactos
Herramienta | Descripción | Solo lectura |
| Busca contactos | ✅ |
| Obtiene un contacto por id | ✅ |
| Crea un contacto personal | |
| Actualiza un contacto personal | |
| Elimina un contacto personal |
Casos de uso típicos
Conectar Claude Desktop u otro cliente MCP a Exchange local
Buscar mensajes de la bandeja de entrada y obtener el contenido completo del correo
Enviar o redactar correos desde flujos de trabajo de IA
Inspeccionar calendarios y crear reuniones
Comprobar ventanas de libre/ocupado para programar
Buscar contactos personales o la Lista de direcciones global
Exponer operaciones de Exchange a través de un límite MCP controlado en lugar de scripting directo del buzón
Notas de seguridad
Lo que hace el código actual:
Conectividad limitada | Se conecta solo al punto final de Exchange/EWS configurado en |
Sin telemetría | No contiene lógica de telemetría, análisis o exportación de datos a terceros |
Los secretos permanecen locales | Mantiene los secretos en variables de entorno / |
Payloads de error limpios | Las respuestas de error estructuradas de MCP nunca incluyen texto de excepción de Exchange, cuerpos de mensajes, contenidos de adjuntos o contraseñas; las herramientas exitosas devuelven solo los datos del buzón que se les pidieron |
Registros limpios |
|
Builds Docker limpios |
|
Con lo que aún debes tener cuidado:
EXCHANGE_VERIFY_SSL=falsedesactiva la verificación de certificados TLS — solo entornos internos/de confianza con certificados autofirmados.EXCHANGE_AUTH_TYPE=Basicenvía las credenciales en texto plano, por lo que el servidor se niega a iniciar contra unEXCHANGE_SERVERhttp://; solo anula conEXCHANGE_ALLOW_INSECURE_BASIC_AUTH=truepara un servidor local/de prueba que controles.get_attachmentescribe archivos en el disco, ysend_email/reply_email/forward_email/create_draftleen archivos locales (a través deattachments) y adjuntan su contenido al correo saliente. Combinado con contenido de correo no confiable, esta es una vía plausible para la exfiltración por inyección de prompts de cualquier archivo legible por el proceso. El acceso a archivos locales está denegado por defecto y solo funciona una vez queEXCHANGE_ATTACHMENT_ROOTse establece en un directorio absoluto, que luego confina tanto las rutas deattachmentscomo elsave_pathdeget_attachmenta ese árbol de directorios (unsave_pathno establecido aún cae al directorio temporal del sistema).outlook-ews-mcp-smokees seguro para la privacidad por defecto e imprime solo información de buzón enmascarada más recuentos; estableceOUTLOOK_MCP_SMOKE_INCLUDE_DATA=truesolo si deseas explícitamente datos reales de bandeja de entrada/eventos en stdout.Si habilitas el registro de archivos con
LOG_FILE, protege ese archivo con permisos del sistema operativo.Si publicas imágenes Docker desde CI, protege el acceso al proyecto de GitLab/GitHub y los permisos del registro.
Inicio rápido
uv venv
source .venv/bin/activate
uv pip install -e .[dev]
cp .env.example .env
outlook-ews-mcpPor defecto, el servidor se ejecuta en modo stdio. Establece MCP_TRANSPORT=sse para iniciar un servidor HTTP
en su lugar.
Configuración
.env mínimo para comenzar — todo lo demás a continuación tiene un valor predeterminado funcional:
EXCHANGE_SERVER=https://mail.company.com/EWS/Exchange.asmx
EXCHANGE_USERNAME=DOMAIN\username
EXCHANGE_PASSWORD=secret
EXCHANGE_EMAIL_ADDRESS=user@company.com
EXCHANGE_AUTH_TYPE=NTLMUna copia completamente comentada de cada variable está en .env.example.
Variable | Predeterminado | Descripción |
| (obligatorio) | URL del endpoint de EWS, p. ej. |
| (obligatorio) |
|
| (obligatorio) | Contraseña de la cuenta |
| sin establecer | Dirección SMTP; se establece cuando |
|
|
|
|
| Permitir autenticación |
|
| Verificar el certificado TLS del servidor; |
| sin establecer (auto-detectado) | Versión del servidor Exchange, p. ej. |
|
| Se usa solo cuando Exchange informa un ID de zona horaria GUID irresoluble; las operaciones normales usan la zona horaria predeterminada del buzón |
|
| Tiempo de espera por solicitud en segundos (1–300) |
|
| Presupuesto de reintento en tiempo real para llamadas de solo lectura cuando Exchange informa que está ocupado, no un número de reintentos; |
| sin establecer | Buzón a suplantar (requiere permisos de suplantación de Exchange) |
|
| Tamaño máximo por adjunto, aplicado tanto en la subida como en la descarga de |
|
| Máximo de adjuntos en una sola llamada de enviar/responder/reenviar/crear_borrador (1–100) |
|
| Tamaño máximo combinado de adjuntos en una sola llamada (1–500) |
| sin establecer (desactivado) | Directorio que limita las rutas de adjuntos. Si no se establece, rechaza todo acceso a archivos locales para |
|
| Límite para |
|
| Límite del tamaño de exportación MIME sin procesar antes de la expansión base64 (1–100) |
| sin establecer | Se añade a los cuerpos de texto salientes y a las respuestas/reenvíos. No existe una API de firma de EWS, por lo que esto es configuración, no la firma de Outlook del buzón |
| sin establecer | Se añade a los cuerpos HTML salientes. Misma advertencia que arriba; no hay conversión cruzada entre ambos. Cualquiera puede omitirse por llamada con |
|
|
|
|
| Host de enlace cuando |
|
| Puerto de enlace cuando |
|
| Llamadas de herramientas de solo lectura concurrentes (1–8); las llamadas de mutación siempre se ejecutan de forma exclusiva. Ver Cola de solicitudes |
|
| Máximo de llamadas admitidas a la vez, en ejecución + en espera (1–1000); más allá de eso, las llamadas reciben un error |
|
|
|
| sin establecer (stderr) | Ruta del archivo de registro; protégela con permisos del sistema operativo si se establece |
Notas de comportamiento que no están vinculadas a una sola variable:
list_eventsyfind_free_slotsaceptan unlimitacotado (predeterminado 200, máximo 1000); los rangos de eventos están limitados a 366 días y los rangos de espacios libres a 31 días, por lo que las consultas amplias no pueden producir respuestas EWS o MCP ilimitadas.Los listados se mantienen ligeros por diseño: los resúmenes de correo incluyen el remitente pero no las listas de destinatarios (
get_emaillas tiene),list_eventsdevuelve eventos sin cuerpos (get_eventlos tiene), yget_emaildevuelve cabeceras RFC-822 solo coninclude_headers: true.Las operaciones de envío devuelven
id: nullcuando EWS no proporciona un id duradero para la copia enviada (notablemente respuestas, reenvíos y borradores enviados).Los metadatos de adjuntos incluyen
downloadable; los adjuntos de elementos de Exchange incrustados tienendownloadable: falsey no pueden guardarse conget_attachment.
Cola de solicitudes
Los clientes emiten varias llamadas a herramientas en paralelo. El trabajo de Exchange es bloqueante, por lo que el servidor lo ejecuta en hilos de trabajo y admite llamadas a través de una única cola FIFO compartida.
MCP_MAX_CONCURRENCY(predeterminado4) establece cuántas llamadas de solo lectura se ejecutan a la vez, de modo que un agente que solicita un correo, la lista de carpetas y el calendario paga el viaje de ida y vuelta más lento en lugar de la suma. Las llamadas de mutación siempre se ejecutan de forma exclusiva — una a la vez, nunca superponiéndose a una lectura — por lo que no pueden ocurrir carreras de lectura/escritura en el estado compartido de la cuenta. Los llamadores que superan el límite esperan su turno, atendidos en orden de llegada; una mutación en espera bloquea a las lecturas posteriores para que no la adelanten.MCP_MAX_QUEUE_SIZE(predeterminado20) limita cuántas llamadas pueden admitirse a la vez, en ejecución o en espera. Una vez que ya hay esa cantidad, las llamadas adicionales reciben un errorserver_busyinmediato en lugar de unirse a una cola ilimitada.El transporte permanece receptivo mientras el trabajo está en curso. Las herramientas se esperan en lugar de ejecutarse en el hilo del bucle de eventos, por lo que las respuestas terminadas salen inmediatamente y los pings se responden mientras una llamada larga aún se está ejecutando.
No hay tiempo de espera por llamada, deliberadamente. Un hilo bloqueado en una lectura de socket no puede ser eliminado desde fuera; el runtime solo puede dejar de esperar por él, lo que abandona el hilo junto con la sesión EWS que mantiene. El grupo de sesiones de
exchangelibtiene un máximo estricto y entrega sesiones en un bucle sin ruta de rendición, por lo que las sesiones filtradas eventualmente lo agotan y cada llamada posterior se bloquea para siempre. En su lugar, se espera a que una llamada lenta termine, limitada porEXCHANGE_TIMEOUTmásEXCHANGE_MAX_RETRY_WAIT_SECONDS: la política de reintentos de la cuenta es de fallo rápido, por lo que cada llamada EWS lanza un error en su primer error transitorio en lugar de queexchangelibla reintente internamente para siempre, yExchangeClientreintenta solo llamadas de solo lectura, limitadas por ese presupuesto de tiempo real. Las escrituras nunca se reintentan automáticamente. Los excesos más allá del presupuesto esperado se registran.
Ejemplo de Claude Desktop
{
"mcpServers": {
"outlook": {
"command": "outlook-ews-mcp",
"env": {
"EXCHANGE_SERVER": "https://mail.company.com/EWS/Exchange.asmx",
"EXCHANGE_USERNAME": "DOMAIN\\username",
"EXCHANGE_PASSWORD": "secret",
"EXCHANGE_EMAIL_ADDRESS": "user@company.com",
"EXCHANGE_AUTH_TYPE": "NTLM"
}
}
}
}Prueba de humo
Después de completar .env, ejecuta:
outlook-ews-mcp-smokeLa salida predeterminada está saneada para una verificación más segura. Si quieres intencionalmente datos de muestra de buzón/eventos en la salida:
OUTLOOK_MCP_SMOKE_INCLUDE_DATA=true outlook-ews-mcp-smokeDocker
docker build -t outlook-ews-mcp .
docker run --rm --env-file .env outlook-ews-mcpCI/CD
GitHub Actions y GitLab CI ejecutan lint, formato, comprobaciones de tipos, pruebas, auditoría de dependencias y compilaciones de paquetes, usando la versión de uv fijada en pyproject.toml.
GitHub | Además publica versiones etiquetadas ( |
GitLab | Además compila y envía una imagen Docker al Registro de Contenedores de GitLab en la rama predeterminada y en las etiquetas, usando las variables integradas |
Comportamiento predeterminado de etiquetado de imágenes:
Disparador | Etiquetas enviadas |
Rama predeterminada |
|
Etiqueta Git |
|
Desarrollo
uv run --python 3.12 --with '.[dev]' ruff check .
uv run --python 3.12 --with '.[dev]' pytest -qNotas del proyecto
La implementación se centra en una única abstracción
ExchangeClientpara que la autenticación, el transporte, los reintentos y el mapeo de errores permanezcan centralizados.Los errores se devuelven en un formato JSON estructurado adecuado para el manejo de MCP
isError=true.
Contribuciones
Los informes de errores y las PRs son bienvenidos — consulta CONTRIBUTING.md para saber cómo configurar un entorno de desarrollo y ejecutar la suite de pruebas sin un servidor Exchange real. Para informes de vulnerabilidades, consulta SECURITY.md.
Licencia
MIT — consulta LICENSE.
Available Tools
31 toolscopy_emailC
Copy email to another folder
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the full burden. It only states the basic function without disclosing side effects, permissions, error conditions, or output behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely short (6 words), but this conciseness sacrifices critical information. It is not a model of efficient communication since it omits necessary details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given a single undocumented parameter and no annotations, the description fails to provide enough context for correct invocation. The output schema exists but is not leveraged in the description.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter 'kwargs' is completely undocumented in both schema and description, with 0% schema description coverage. The description offers no guidance on required keys or values.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('copy') and the resource ('email to another folder'), distinguishing it from sibling tools like 'move_email' which implies relocation rather than duplication.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives (e.g., copy vs. move email). No prerequisites or context provided, leaving the agent to infer usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_contactC
Create a personal contact
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, and the description provides no behavioral details such as authentication requirements, side effects, or error handling. The description is too sparse to be informative.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is minimal (one sentence) but lacks necessary detail. While concise, it fails to provide useful information beyond the tool's name, reducing its effectiveness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the low parameter count, the description should still explain the parameter's structure and expected output. It does not, leaving the agent with no actionable information.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The sole parameter 'kwargs' is opaque with no description or type constraints. With 0% schema description coverage, the description offers no clarification, making it impossible for an agent to know what keys or values are expected.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Create' and the resource 'personal contact'. It distinguishes from sibling tools like 'update_contact' and 'delete_contact', though it does not elaborate on what constitutes a personal contact.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. No exclusions, prerequisites, or contextual advice provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_draftC
Create an email draft
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, and the description fails to disclose behavioral traits beyond the basic action. It does not mention what the draft entails (e.g., recipients, body) or any side effects, leaving the agent uninformed about critical behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence, which is concise. However, it is too brief to be useful, scoring an average as the brevity comes at the cost of essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having an output schema (not detailed) and a complex domain (email drafts), the description provides no information on return values, how to populate content, or relation to other email tool actions, making it incomplete for effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has a single required 'kwargs' parameter with no defined properties and 0% coverage. The description adds no explanation, so the agent cannot understand how to structure the parameter or what keys are expected, making it nearly unusable.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Create') and resource ('email draft'), which is specific. However, given sibling tools like 'send_draft' and 'create_event', it does not differentiate further, but it is still unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives such as 'send_draft' or 'create_event'. The description lacks context for appropriate usage scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_eventC
Create a calendar event
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, and the description only says 'Create a calendar event'. It does not disclose any behavioral traits such as permissions required, side effects, or what happens if the event already exists.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence, but it is under-specified. Conciseness is achieved at the cost of omitting essential information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no annotations, generic parameter, and no explanation of output, the description is insufficient. The agent needs more context to use it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has a single parameter 'kwargs' with no description and 0% schema coverage. The description adds no context about what kwargs should contain, leaving the agent without guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description states 'Create a calendar event', clearly indicating the action (create) and resource (calendar event). However, it does not distinguish from sibling tools like update_event or respond_to_invite, but the verb 'create' is unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like update_event or respond_to_invite. No prerequisites or usage constraints provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_folderC
Create a mailbox folder
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description gives no behavioral details beyond the action. Since no annotations are present, the description should disclose effects (e.g., duplication behavior, permissions, limits), but it does not. This is a significant gap.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very short (4 words), but it is under-specification rather than concise. It sacrifices necessary detail for brevity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With 0% schema description coverage and no annotations, the description must provide comprehensive context. It fails to explain the 'kwargs' parameter, return value (though output schema exists), or any usage details. Completely inadequate for the tool's complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The sole parameter 'kwargs' is not described in the schema or description. The description adds no meaning to what this parameter should contain, making it impossible for an AI agent to use correctly.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states 'Create a mailbox folder', which clearly identifies the action (create) and resource (mailbox folder). It distinguishes from sibling tools like 'list_folders' or 'move_email' by specifying creation. However, it lacks specificity about which mailbox or folder hierarchy.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like 'list_folders' for reading or other creation tools. No context on prerequisites or exclusions is provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_contactC
Delete a personal contact
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so the description must disclose behavioral traits. It only states 'Delete', which implies destruction, but lacks details on permanence, authorization, or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence, which is concise but at the expense of essential details. It could be restructured to include parameter expectations within the same brevity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the vague input schema, lack of annotations, and many sibling tools, the description fails to provide enough context for correct invocation. The agent is left with critical knowledge gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has a single 'kwargs' parameter with 0% description coverage. The description offers no guidance on what kwargs should contain, leaving the agent unable to construct a valid input.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action 'Delete' and the resource 'personal contact', effectively distinguishing it from sibling tools like create_contact, update_contact, and get_contact.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives. With 30 sibling tools including delete_email and delete_event, the description should clarify its specific scope.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_emailC
Delete an email
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Without annotations, the description carries full burden for behavioral disclosure. It does not specify whether deletion is permanent, moves to trash, or if any confirmation is needed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely short and under-specified. While front-loaded, it fails to provide essential details, making it insufficiently concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that an output schema exists but no annotations, the description is incomplete. It does not cover key contextual details like deletion behavior or side effects.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The sole parameter 'kwargs' has no description in the schema (0% coverage), and the description adds no meaning beyond the parameter name.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Delete' and resource 'an email', which is specific and distinguishes it from sibling tools like 'delete_contact' or 'delete_event'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives, nor any prerequisites or exclusions. The description gives no context for appropriate usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
delete_eventC
Delete a calendar event
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden but only states it deletes an event. Missing critical details such as irreversibility, required permissions, impact on recurring events, or cancellation notifications.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise (one sentence), but it sacrifices necessary detail. While it states the purpose, it does not earn its place by providing additional value beyond the name.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the number of sibling tools and the generic parameter, the description is insufficient. It does not explain how to use the output schema or how to identify the event, leaving the agent with incomplete guidance.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter is 'kwargs' with no description or sub-properties. The schema coverage is 0%, and the description adds no meaning to this parameter, leaving the agent without guidance on how to specify the event to delete.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'delete' and the resource 'calendar event', distinguishing it from sibling tools like delete_contact or delete_email. However, it could be more specific by indicating how the event is identified.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives (e.g., respond_to_invite for meeting responses). There is no mention of prerequisites or when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_free_slotsD
Find meeting time slots
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits, but it omits whether the tool is read-only, mutating, requires authentication, or has side effects. The agent has zero insight into behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is short but severely under-specified. Brevity is wasted without essential details; it does not earn its place by being informative.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no annotations, a meaningless input schema, and no explanation of output (though an output schema exists), the description is completely inadequate for a tool with many siblings and potential complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has a single 'kwargs' parameter with no type or description, and schema description coverage is 0%. The description adds no parameter meaning, leaving the agent blind to required inputs.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Find meeting time slots' is vague and barely extends the tool name. It doesn't specify what inputs are needed (e.g., attendees, date ranges) or output format, and fails to distinguish it from sibling tools like 'get_my_availability'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given on when to use this tool versus alternatives. Sibling tools like 'get_my_availability' and 'list_events' likely overlap, but the description offers no comparative context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
forward_emailC
Forward an email
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description must convey behavioral traits. It does not disclose whether forwarding creates a draft or sends immediately, required permissions, or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
While short, the description is too terse and lacks substance. It fails to earn its place as it provides no actionable information beyond the tool name.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of email forwarding and the lack of schema detail, the description is severely incomplete. It does not address recipient, body, or attachments, leaving critical gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has a single 'kwargs' parameter with 0% description coverage. The description offers no details on what kwargs should contain, leaving the agent with no guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Forward an email' clearly states the verb and resource, distinguishing it from siblings like reply_email and send_email. However, it is terse and lacks specificity about the forwarding behavior.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like reply_email or send_draft. There are no exclusions or context for use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_attachmentC
Save an attachment to disk
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description must fully disclose behavior. Only mentions 'save to disk' without indicating side effects, permissions, or whether operation is idempotent. Fails to specify if attachment is deleted after save or if it requires authentication.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One sentence, very short, but lacks essential details. It is concise but at the expense of completeness. Could be improved with brief parameter notes.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having an output schema, the description is nearly empty. No mention of how to identify the attachment (e.g., attachment ID), expected input format, or return value. Incomplete for a file saving operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Single parameter 'kwargs' is an object with no schema details. Description does not explain what keys or values are needed, leaving the agent without guidance. With 0% schema coverage, this is a critical gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the action 'Save an attachment to disk', which is a specific verb-resource combination. However, it doesn't differentiate from sibling tools like get_email, and the name 'get_attachment' suggests retrieval while description implies download.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives, such as get_email or other retrieval tools. No context about prerequisites or conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_contactC
Get a contact by ID
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It only states the action without mentioning read-only nature, error handling, permissions, or side effects. This is insufficient for safe invocation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise at one sentence, but it is underspecified. It lacks critical information that would justify its brevity. Structure is simple but not effective.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the vague schema and lack of annotations, the description does not provide enough context. It neither explains the input structure nor the expected output (though an output schema exists). The tool's purpose is clear but operational details are missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% (the 'kwargs' parameter has no described properties). The description says 'by ID' but fails to specify how the ID fits into the input, leaving the agent to guess. The description adds little value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states 'Get a contact by ID', which identifies the verb and resource. However, the input schema only has a generic 'kwargs' object without an explicit ID field, creating a mismatch between the description and the schema. This reduces clarity about how to use the tool.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like search_contacts or get_email. There are no context cues, exclusions, or scenarios mentioned, leaving the agent without decision support.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_emailC
Get a full email by ID
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full responsibility. It only states 'get', implying a read operation, but does not disclose any side effects, permissions needed, or response characteristics.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise at one sentence, front-loading the purpose. However, it sacrifices essential details that could be added without much length.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of an output schema, the description need not explain return values, but it lacks parameter details and usage context. The tool is simple, but the description is too minimal even for a low-complexity tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has one parameter 'kwargs' with no description, and the tool description mentions 'by ID' but does not explain how to pass the ID or what kwargs should contain. Schema coverage is 0%, so the description fails to add meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states 'Get a full email by ID', which clearly indicates the action (get) and the resource (email) with a distinguishing detail (by ID). It differentiates from sibling tools like list_emails or copy_email that have different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like get_attachment or search_emails. No information about prerequisites or when not to use it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_eventB
Get a calendar event by ID
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, and the description lacks behavioral details such as whether authentication is required, error handling for missing IDs, or read-only nature. The agent gets no transparency beyond the basic purpose.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence with no wasted words. It could be slightly expanded, but it earns its place for a simple get-by-ID operation.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
While an output schema exists, the input parameter is poorly defined. The tool is simple, but the missing parameter guidance makes it incomplete for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has a single 'kwargs' parameter with no description (0% coverage). The description does not explain that kwargs should contain the event ID, leaving the agent uninformed about how to invoke the tool correctly.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Get a calendar event by ID' provides a clear verb ('Get'), resource ('calendar event'), and identifier ('by ID'). It effectively distinguishes this tool from siblings like create_event or update_event.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives, but the purpose is self-evident from the name and description. The agent can infer usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_mailbox_infoC
Get mailbox metadata
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description must carry the full burden. It does not disclose any behavioral traits such as read-only nature, authentication needs, or side effects beyond implying a read operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely short (three words). While brief, it is under-specified and does not provide enough information to be useful, sacrificing completeness for brevity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the presence of a complex opaque parameter (kwargs) and no annotations, the description is incomplete. It fails to explain how to use the tool or what metadata is returned, even though an output schema exists.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage, and the description does not explain the single parameter 'kwargs'. It adds no meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Get mailbox metadata', which is a specific verb+resource. It distinguishes from sibling tools like get_contact or get_email by focusing on mailbox-level metadata. However, the term 'metadata' is somewhat vague.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like list_folders or get_email. There is no mention of prerequisites, context, or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_my_availabilityC
Get free and busy slots
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It does not disclose whether the tool is read-only, requires authentication, or has any rate limits. The output schema is present but not described, missing behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is too brief at one sentence, sacrificing necessary detail. It lacks structure and front-loading of critical information like input requirements.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Even with an output schema, the description fails to explain the context of 'free and busy slots'—such as time ranges, how slots are defined, or how the output relates to the input. Incomplete for effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter 'kwargs' is a generic object with no description, and the schema coverage is 0%. The description adds no meaning beyond the schema, leaving the agent unable to determine what arguments are required.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Get free and busy slots' clearly states the verb 'Get' and the resource 'free and busy slots', indicating what the tool returns. However, it does not differentiate from the sibling tool 'find_free_slots', which likely serves a similar purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like 'find_free_slots'. There is no mention of prerequisites, time ranges, or context for the slots.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_calendarsC
List calendars
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, and the description does not disclose any behavioral traits such as pagination, authentication requirements, whether it lists all calendars or only accessible ones, or any side effects. The description carries the full burden and fails completely.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
While the description is extremely concise (two words), it is underspecified and does not provide enough information. Conciseness should not come at the expense of clarity or completeness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity and the existence of an output schema, the description could still provide context such as 'lists all calendars accessible to the user' but does not. The description is incomplete for an agent to understand the tool's functionality.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has one parameter 'kwargs' with no description (schema coverage 0%), and the description does not add any meaning to this parameter. The agent has no idea what 'kwargs' accepts.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'List calendars' clearly states the verb 'List' and resource 'calendars', which is specific and distinguishes it from sibling tools like 'list_emails' or 'list_events' by resource type. However, it does not provide any additional context or differentiation beyond the name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no guidance on when to use this tool, when not to use it, or alternatives. The description is minimal and does not help the agent decide between this and related tools like 'list_events' or 'list_folders'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_emailsD
List emails in a folder
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, and the description does not disclose behavioral traits like authentication requirements, whether the operation is read-only, pagination behavior, or return format. The agent is left uninformed about side effects or constraints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
At six words, the description is extremely concise, but this brevity sacrifices critical information. It does not earn its place as every sentence should; it is under-specified rather than efficiently informative.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the opaque parameter schema, no annotations, many sibling tools, and an existing output schema not described, the description fails to provide enough context for correct invocation. It lacks details on folder identification, filtering, pagination, or output structure.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter is 'kwargs' of type object, with no schema-level descriptions and 0% coverage. The description fails to explain what keys or values this parameter should contain, leaving the agent without guidance on how to construct the argument.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'List emails in a folder' clearly states the action and resource, but lacks specificity about which folder or what subset of emails (e.g., all, recent, filtered). It does not distinguish from sibling tools like 'search_emails' which also deal with listing emails.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives such as 'search_emails', 'get_email', or 'list_folders'. The agent has no context on prerequisites or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_eventsC
List calendar events in a time range
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description must fully disclose behavior. It only says 'list events in a time range' but omits details like pagination, ordering, event detail level, or whether it returns all properties. This is insufficient for a list operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no extraneous words, but it is too terse and lacks necessary details. Conciseness is achieved at the cost of completeness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (catch-all parameter, likely output schema present but not described) and lack of annotations, the description is inadequate. It does not explain how to use the tool effectively or what to expect in return.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema defines a single parameter 'kwargs' with 0% description coverage, meaning the schema provides no semantics. The description does not clarify what 'kwargs' accepts or how to specify the time range, leaving the agent with no guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'list', the resource 'calendar events', and the scope 'in a time range'. It distinguishes from sibling tools like list_calendars (which lists calendars) and get_event (which retrieves a single event).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives such as get_event, list_calendars, or find_free_slots. There is no mention of typical use cases or limitations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_foldersC
List mailbox folders
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided; description only says 'list' implying read-only, but lacks details on pagination, error states, or side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Too brief and under-specified; a single sentence without structure or additional context, missing critical information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having an output schema, the description fails to explain the tool's behavior or parameter usage, leaving the agent with insufficient information.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The sole parameter 'kwargs' has no description in schema and the description adds no meaning, leaving the agent without any guidance on how to use it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states 'List mailbox folders' with a specific verb and resource, clearly distinguishing from sibling tools like 'create_folder' and 'list_emails'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives, such as when to use 'create_folder' or 'list_emails' instead.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
mark_emailC
Update email flags
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the burden of behavioral disclosure. It only states 'Update email flags', implying mutation but does not describe safety, permissions, or effects on the email. Minimal value beyond purpose.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise at one sentence, but it is under-specified. While brevity is appreciated, it lacks structure and important details, making it only minimally acceptable.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the opaque input schema and no additional context, the description is incomplete. An output schema exists but does not compensate for the lack of input guidance. The description fails to provide enough information for effective tool invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter is 'kwargs' with no description inside the schema. Schema coverage is 0%. The tool description adds no meaning about what keys or values are expected, leaving the agent completely in the dark.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Update email flags' clearly states the action and resource, but it is vague regarding what flags are available and how it differs from sibling tools like 'move_email' or 'forward_email'. It lacks specificity to fully differentiate.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives. There is no mention of context, prerequisites, or exclusions, leaving the agent without usage direction.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
move_emailC
Move email to another folder
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must cover behavioral traits. It only states 'move' without indicating whether the operation is destructive, if it requires special permissions, or any side effects. This is insufficient for an agent to understand the tool's impact.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very short and front-loaded, but it lacks structure. It is one sentence with no additional details, which is borderline under-specification rather than conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of annotations and poor parameter documentation, the description fails to provide essential context. Although an output schema exists, the description does not explain return values. The tool's simplicity does not excuse the missing details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has a single parameter 'kwargs' with 0% description coverage, and the description adds no clarification. The agent has no information on what 'kwargs' should contain, such as the email ID or target folder.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Move email') and the resource ('to another folder'). It distinguishes from sibling tools like 'copy_email' and 'delete_email' by specifying the operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives. For example, it does not explain when to use 'move_email' instead of 'copy_email' or 'delete_email', leaving the agent without context for selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
ping_exchangeC
Check connectivity to Exchange
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description must carry the full burden. It says 'check connectivity' but does not explain whether it makes a live API call, what the response format is, or what happens on timeout/failure. The output schema exists but is not provided here.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise—only one short sentence—but it lacks necessary detail, especially about parameters. It is not a model of efficient communication.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the lack of annotations and poor parameter documentation, the description is incomplete. An agent cannot reliably invoke this tool without additional context about the kwargs structure.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The required parameter 'kwargs' is an object with zero schema description coverage (0%). The description provides no information about what keys or values 'kwargs' should contain, leaving the agent without guidance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Check connectivity to Exchange' clearly states the tool's purpose with a specific verb and resource. It distinctly differs from sibling tools like copy_email or create_contact.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The purpose is straightforward, but no explicit guidance is given on when to use this tool versus alternatives or any preconditions. The simplicity somewhat mitigates this gap.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
reply_emailC
Reply to an email
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden but only states the action. It fails to disclose behavioral traits such as whether the tool sends the reply immediately, requires authentication, or modifies the original email. No side effects or safety info.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single short sentence, but it is under-specified. Conciseness should not come at the cost of clarity; more details are needed to make it useful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite having an output schema and sibling tools, the description provides no information about return values, error handling, or prerequisites. The single parameter is opaque, making the tool definition incomplete for practical use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has one parameter, 'kwargs', with 0% description coverage. The description does not clarify what 'kwargs' expects or how to structure it, leaving the agent unable to correctly invoke the tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Reply to an email' clearly states the action (reply) and resource (email), differentiating it from siblings like forward_email or create_draft. However, it does not specify whether it replies to all recipients or just the sender, leaving minor ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like forward_email or send_draft. No prerequisites or context (e.g., must have an existing email thread) are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
respond_to_inviteC
Respond to a calendar invite
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description must carry full burden. It discloses no behavioral traits (e.g., side effects, idempotency, permissions). Only states the action without context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence, which is concise, but it lacks sufficient substance. It is not well-structured to convey necessary details beyond the tool's basic function.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's likely complexity (responding to an invite with a decision), the description is incomplete. It does not mention required input fields (e.g., invite ID, response type) or expected output, despite an output schema existing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has a single generic 'kwargs' parameter with no description and 0% schema coverage. The description adds no meaning to this parameter, leaving agents with no guidance on what to provide.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states 'Respond to a calendar invite', which gives a verb and resource, but it's vague—does not specify whether it accepts, declines, or tentatively responds. It adds minimal information beyond the tool name.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus siblings like 'update_event' or 'create_event'. No prerequisites or exclusions provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_contactsD
Search contacts
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations and a minimal description, the tool's behavioral traits (e.g., search scope, pagination, output format) are entirely undisclosed. The description provides no value beyond the name.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise (two words) but fails to provide necessary context. It is underspecified rather than efficiently informative, earning a low score.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (30 sibling tools, no annotations, no schema coverage), the description is woefully incomplete. The presence of an output schema is not leveraged, and critical details are omitted.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has a single parameter 'kwargs' with 0% schema description coverage. The description adds no information about how to use this parameter or what values it expects, leaving the agent blind.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Search contacts' is a tautology that restates the tool name without adding specificity. It does not differentiate from sibling tools like 'get_contact' or 'search_emails', leaving ambiguity about scope or behavior.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives. There are no context signals or exclusions, requiring the agent to infer usage from the name alone.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_emailsD
Search emails
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, and the description does not disclose any behavioral traits such as read-only nature, filtering capabilities, or return format. The tool's behavior remains completely opaque.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
At only two words, the description is too brief and lacks necessary detail. While concise, it sacrifices informativeness, which is not a positive attribute in this context.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the absence of annotations, minimal schema, and output schema not described, the description fails to provide adequate context for an AI agent to use the tool effectively. It is completely insufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has one parameter 'kwargs' with 0% description coverage, and the description offers no explanation of its purpose or expected structure. The description adds no value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Search emails' is clear as a verb+resource, indicating the tool performs a search operation on emails. However, it does not differentiate from sibling tools like 'list_emails' or 'search_contacts', lacking specificity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool over alternatives. For example, it does not clarify how 'search_emails' differs from 'list_emails' or 'search_contacts', leaving the AI agent without direction.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_draftC
Send a draft email
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must disclose behavioral traits. It fails to mention side effects like whether the draft is deleted after sending, permission requirements, or any irreversible changes. The description only states the action without depth.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
While the description is short, it is under-specified rather than concise. It lacks critical details that could be added without increasing length significantly. Every sentence should earn its place, but this one does not provide enough value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (sending an email with side effects), the description is severely incomplete. It does not explain return values, error states, or behavior changes. Even with an output schema, the description should provide context about the sending process.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has a single parameter 'kwargs' with no description (0% coverage), and the description adds no information about what 'kwargs' should contain. This leaves the agent completely uninformed about required arguments.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Send a draft email' clearly states the verb and resource, indicating the action of sending an email that was previously drafted. It distinguishes from siblings like 'send_email' which sends a new email, though it could be more explicit about operating on an existing draft.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives such as 'send_email' or 'create_draft'. It does not mention prerequisites like having a draft to send, which would help agents decide appropriately.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_emailC
Send a new email
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided; description fails to disclose behavioral traits like required permissions, side effects, or error conditions for a mutation operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very short but under-specified; it is concise but lacks structure and necessary detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool that sends email, the description omits critical context like required fields, output behavior, and differences from siblings, making it incomplete despite an output schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has a single parameter 'kwargs' with no description and 0% schema coverage. The description does not explain what keys or values are expected, adding no semantic value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool sends a new email, but does not differentiate it from sibling tools like forward_email or create_draft.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool vs alternatives such as create_draft or forward_email. No context provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_contactC
Update a personal contact
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must fully disclose behavioral traits. It only says 'update' implying mutation, but does not mention whether updates are partial or full, required permissions, error handling, or side effects. This is insufficient for safe invocation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Extremely concise (one sentence) but at the expense of completeness. While every word earns its place, the description fails to provide necessary details, making it more under-specified than efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given one parameter with zero description coverage and no annotations, the description is woefully incomplete. It does not explain the return value (though an output schema exists), valid inputs for kwargs, or any constraints. The tool cannot be safely used.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The sole parameter 'kwargs' has no description in the schema (0% coverage), and the description provides no additional meaning. The agent has no idea what keys or values are expected, severely limiting the tool's usability.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description 'Update a personal contact' is a clear verb+resource statement. It identifies the action (update) and the target object (personal contact). However, it does not differentiate from sibling tools like update_event or update_contact's specific scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus alternatives like create_contact, delete_contact, or search_contacts. The description lacks any context about prerequisites, required IDs, or typical use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
update_eventC
Update a calendar event
| Name | Required | Description | Default |
|---|---|---|---|
| kwargs | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description only indicates mutation ('Update') but does not disclose side effects, required permissions, or what happens with overlapping updates. Given no annotations, the description carries the full burden and falls short.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
While the description is very short, it sacrifices essential information. It is under-specified rather than concise, failing to earn its place by being unhelpful.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite the existence of an output schema, the description does not hint at the return structure, and the parameter is opaque. For a tool that updates calendar events, this is severely incomplete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The only parameter 'kwargs' has no description, no properties defined in the schema, and the description adds no meaning. With 0% schema description coverage, the agent has no clue what to pass.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Update') and the resource ('a calendar event'), which is distinct from sibling tools like 'create_event' and 'delete_event'. It is specific and informative.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool versus alternatives like 'respond_to_invite' or under what circumstances updating is appropriate. There is no mention of prerequisites or limitations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
31 tool updates
v0.1.0- First observed
copy_email - First observed
create_contact - First observed
create_draft - First observed
create_event - First observed
create_folder - First observed
delete_contact - First observed
delete_email - First observed
delete_event - First observed
find_free_slots - First observed
forward_email - First observed
get_attachment - First observed
get_contact - First observed
get_email - First observed
get_event - First observed
get_mailbox_info - First observed
get_my_availability - First observed
list_calendars - First observed
list_emails - First observed
list_events - First observed
list_folders - First observed
mark_email - First observed
move_email - First observed
ping_exchange - First observed
reply_email - First observed
respond_to_invite - First observed
search_contacts - First observed
search_emails - First observed
send_draft - First observed
send_email - First observed
update_contact - First observed
update_event
TDQS
Scored across 31 tools
Most tools have distinct purposes, but `find_free_slots` and `get_my_availability` overlap in functionality (both deal with availability). Otherwise, email, calendar, and contact operations are clearly separated.
All tool names follow a consistent `verb_noun` pattern in snake_case (e.g., `create_event`, `list_emails`, `send_email`). No mixing of conventions.
With 31 tools, the server covers email, calendar, contacts, and folders comprehensively. However, the count is on the higher side for a single server, exceeding the typical 3–15 range, though still manageable.
The tool set provides CRUD for emails, events, contacts, and folders, plus search, send, reply, forward, and move. Minor gaps exist (e.g., no attachment creation, no folder update), but core workflows are well-covered.
Maintenance
Related MCP Connectors
Hosted multi-user MCP for Microsoft Exchange - on-premises, hybrid and Online, per-user rights
Hosted email MCP for your own Gmail, Outlook.com, Microsoft 365, iCloud or IMAP inbox: read, search, draft, reply in thread, forward and file mail. It moves or flags up to 500 messages in one call, and a send leaves exactly one copy in Sent. A calendar is a separate connection, and connecting one adds diary and scheduling tools.
Secure MCP server for exploring incwo CRM data, documents, and email workflows.
An MCP server that provides email capabilities, hosted on Alpic platform
Related MCP Servers
- AlicenseAqualityDmaintenanceMCP server for any Microsoft Exchange / OWA deployment. Gives LLM agents access to email, calendar, directory search, folders, availability, and meeting analytics via 30 tools.3026 PyPI10MIT
- FlicenseAqualityBmaintenanceMCP server for corporate Exchange that provides access to email, calendar, and people directory via OWA JSON API.20-
- FlicenseAqualityBmaintenanceMCP server for Claude to access on-premises Outlook/Exchange mailboxes via EWS with NTLM authentication, providing tools for email, calendar, and contact management without relying on Microsoft 365 or Graph API.18-
- AlicenseNot gradedqualityAmaintenanceA local MCP server for on-premises Microsoft Exchange, connecting via EWS and NTLM. It provides mail, template, availability, and calendar workflow tools through stdio, with draft-first safety and Windows Credential Manager integration.7MIT