Allowed Tools
Agent-level tool allowlists enforced at runtime.
Agents can have an allowed_tools array. During MCP discovery and execution, tools not in the allowlist are filtered out or denied. Set via POST/PATCH /agents.
If allowed_tools is empty or unset, no tool restriction is applied at the agent level. Policy rules can still block specific tools.