Tools

Tools let the agent take real actions during a call — check orders, invoices, appointments — by calling your HTTP endpoints.

Request format

When the LLM decides to call a tool, the engine POSTs to your tool URL:

POST https://your-api.com/tools
{
  "name": "check_order",
  "arguments": {"order_id": "12345"}
}

Respond with JSON — the agent reads it and answers the caller.

Security

- **SSRF guard**: localhost, private IPs (10.x, 192.168.x, 172.16-31.x), cloud metadata endpoints and non-HTTP schemes are blocked.

- Optional `secret_header` per tool — e.g. `Authorization: Bearer …` — verified on our side, never exposed to the model.

- Tool responses are truncated to 2 KB before entering the LLM context.

Listing

`GET /v1/tools` — your tenant's tool registry.

Creating tools

Tool creation UI/API is being finalized. Until then, send tool definitions to support — we register them tenant-scoped.