Docs / Agents / Tool Policy

Tool Policy

Define which tools agents may call and under what scopes.

What this covers

Allowed tools

Explicitly whitelist tools per agent.

Denied tools

Block high‑risk actions by default.

How to use

1. List tools

Enumerate tools and scopes for agents.

2. Define allow/deny

Explicitly allow or deny each tool.

3. Simulate decision

Run policy simulation for coverage.

4. Approve + apply

Approve the policy change.

5. Export policy evidence

Export tool policy snapshot.

Console pages

Key API endpoints

GET /agents/tool-policy — List tool policy

Evidence outputs

Tool policy snapshots