Reference · Glossary

Tool allowlist

Last updated Jul 17, 2026

An explicit list of **tool names the model may call** — everything else is rejected at runtime.

#When to use

Agents and MCP integrations where dangerous tools exist in the registry.

Single read-only tool with no side effects — still validate args.

Only `search_docs` and `create_ticket` allowed; `delete_user` never registered.