70 tools with inconsistent quality. Naming is generally verb-noun compliant (domains_list_all, email_create, etc.), but descriptions vary widely: many are terse (10-30 chars, e.g., 'List main, parked, addon, and sub domains') and lack actionable context for LLM selection. Input schemas are present for most tools but often minimal, many accept empty objects {} (domains_list_all, subdomain_list, email_list) with no parameters, limiting composability. Parameter descriptions exist but are sparse (e.g., 'Subdomain prefix, e.g. "blog"' lacks format/length constraints). Output schemas are not documented anywhere in the source. Error handling is generic (asErrorContent wrapper) with no recovery guidance. Security concern: setup tool and auth_switch_profile modify state but lack confirmation patterns. No tool annotations (readOnlyHint, destructiveHint) visible in registration code.

• Document output schemas for all tools. For list_* tools, specify: array of objects with field names, types, and meanings. Example: 'Returns array of {domain: string, type: "main"|"parked"|"addon"|"sub", root_domain: string}'. Enables LLM to extract and chain results.
• Add pagination parameters (limit: 1-100, offset: 0+) and filtering (domain_type, search_term) to all list_* tools. Return total_count and next_offset in responses. Prevents context window exhaustion and enables incremental discovery.
• Expand tool descriptions to 100-200 chars. Include: WHAT it does, WHEN to use it (vs similar tools), WHAT it returns, and any prerequisites. Example: 'List all subdomains under a parent domain. Call this to discover existing subdomains before creating new ones. Returns array of {subdomain, root_domain, document_root}.'
• Add tool annotations during registration: readOnlyHint=true for list_* and get_* tools; destructiveHint=true for delete_* and remove_* tools; idempotentHint=true for tools that can be safely retried (e.g., create with unique constraint). Signals intent to LLMs.
• Implement confirmation pattern for setup and auth_switch_profile: return a confirmation token and require a second call with that token to commit. Prevents accidental credential overwrites.