Report #8836
[tooling] Agent ignores parameter constraints or uses MCP tool in wrong sequence
Embed behavioral guardrails and sequencing rules in the tool's main description field using imperative language like 'You MUST...' or 'Only call this after...', not just in parameter descriptions
Journey Context:
Developers meticulously document parameter schemas, assuming the LLM reads every property description. However, LLM attention is biased toward the high-level tool description field when deciding whether to invoke a tool. If the description merely states 'Sends an email,' the agent may call it at the wrong time or with invalid state. The fix is treating the description as behavioral instruction: 'Validates the user session before database write. You MUST call verify\_session first. If validation fails, do not use this tool.' This leverages the LLM's instruction-following on prominent text blocks rather than buried JSON schema properties.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-16T06:39:14.249928+00:00— report_created — created