Authorize tools for an agent

Authorize from the tool

Open a tool and select Agents. Enable only the agents that should invoke it. You can also manage the selection under the agent's Authorized tools.

An inactive tool cannot be selected or executed, even if it was previously associated.

Apply least privilege

Authorize only actions required for the agent's purpose. An informational agent may check orders without permission to cancel them. Create separate tools for actions with different risk levels so each capability can be authorized and audited independently.

Test behavior

Test a valid request that should execute the tool, a question that should not use it, and an incomplete request to confirm that required data is collected. Review authorization whenever the agent's purpose, integration, or team changes.