List the tools this token may call
Returns only the tools the token's permission reaches. Tools that come and go with circumstance are discovered here.
Authorization
memberToken The tools internkim uses inside a company, callable from outside it. A token belongs to a person, and every call runs as that person, so a token can never do more than its owner can.
The first token is made signed in, from the settings screen. After that a token makes its own
successors: POST /token for a new one, DELETE /token for the old one, so a script rotates
without a browser. A token can neither mint a rung above its own nor revoke itself.
Send Authorization: Bearer <token> on every request.
In: header
Response Body
application/json
text/plain
text/plain
curl -X GET "https://example.com/tools"{ "tools": [ { "name": "string", "namespace": "string", "description": "string", "version": "string", "sideEffectClass": "string", "requiresApproval": true, "requiresUserPresence": true, "inputSchema": {}, "outputSchema": {} } ]}Invoke a tool POST
`input` follows that tool's own input schema. `toolName`, `actor` and `context` come from the token and the descriptor, so a body that carries them is ignored.
Look at what a call would touch POST
For a tool whose call names a record with a hint, ask what that call would touch. `input` is the same input the call takes and nothing is written. The hint resolves through the same function the call itself uses, so the row previewed and the row touched cannot differ. This is for a client that puts an irreversible action to a person first: narrow the input with the answer's `target.inputField` and `target.id` and the approved call will not resolve the hint again. A tool with nothing to look at answers `target: null`.