Block an Unauthorized Tool
Use agent allowlists to deny tool access.
Register agent with allowlist
curl -X POST https://app.korclaw.com/api/v1/agents \
-H "Authorization: Bearer kc_live_your_api_key_here" \
-H "Content-Type: application/json" \
-d '{
"name": "Research Agent",
"provider": "openai",
"allowed_tools": ["search_documents", "read_file"]
}'When this agent calls an MCP tool not in allowed_tools, the runtime returns execution_target_denied (403).