Npe Irinṣẹ

Define each tool's purpose, input schema, output shape, and side effects. A narrowly scoped operation is easier to validate than a general command interface. The tool description should explain when the operation is appropriate without giving the model authority beyond the user's request. Validate inputs and permissions in application code. A well-formed argument can still identify the wrong account, destination, or amount. Keep secrets out of tool descriptions and return only information the demanding user is allowed to access. Handle errors and uncertain results explicitly. A network timeout may happen before or after an external action completes. Use operation identifiers or a read-back check where possible so a retry does not duplicate a finished action. After execution, provide an accurate result and verify the intended state. Treat text returned by a website or document as untrusted content; it cannot allow new actions simply because it arrived through a tool. Test cancellation, malformed responses, revoked access, and partial completion as part of the full tool-use lupu.