Building workflows

Agents & tools

Defining what an agent may do, and what happens when it does it.

Tool grants#

An agent can only call tools it has been granted. Grants are explicit and per-agent, so widening one agent’s reach never widens another’s.

	Meaning	Default policy
low	Read-only. No state changes anywhere.	Runs unattended
medium	Creates or updates internal records.	Runs unattended, audited
high	Writes to a system of record, or sends to a person.	Approval in production
critical	Irreversible: payments, deletions, external sends at scale.	Approval in every environment

Every tool lists the agents and workflows that reference it. Deleting a tool tells you what breaks before you confirm, rather than after.

Was this page helpful?

Building workflows

Defining what an agent may do, and what happens when it does it.

An agent can only call tools it has been granted. Grants are explicit and per-agent, so widening one agent’s reach never widens another’s.

	Meaning	Default policy
low	Read-only. No state changes anywhere.	Runs unattended
medium	Creates or updates internal records.	Runs unattended, audited
high	Writes to a system of record, or sends to a person.	Approval in production
critical	Irreversible: payments, deletions, external sends at scale.	Approval in every environment

Every tool lists the agents and workflows that reference it. Deleting a tool tells you what breaks before you confirm, rather than after.

Was this page helpful?