Reference · Snippet · typescript

Tool allowlist check

Last updated Jul 17, 2026

toolssecurityagents

const ALLOWED = new Set(["search_docs", "create_ticket"]);

function handleToolCall(name: string, args: unknown) {
  if (!ALLOWED.has(name)) throw new Error(`blocked tool: ${name}`);
  validateArgs(name, args);
  return runTool(name, args);
}