Reference · Glossary
Tool allowlist
Last updated
An explicit list of **tool names the model may call** — everything else is rejected at runtime.
When to use
Agents and MCP integrations where dangerous tools exist in the registry.
When not to
Single read-only tool with no side effects — still validate args.
Example
Only `search_docs` and `create_ticket` allowed; `delete_user` never registered.