Skip to main content

Assign Tools to an Agent

Tools are the agent's reach: it can call what you grant it and nothing else. Open the agent from Manage > Machine Users > Background Agents and select the Tools tab. The tab header carries a count, and a red badge when capability requests are waiting.

Add tools

Add Tool opens a picker that searches your MCP servers and tools. Each server expands to its tools and shows its auth badge (such as Instant OAuth) and tool count, and the confirm button names how many you are adding, for example Add 3 tools.

The Add Tools dialog searching MCP servers and tools, each server row showing its auth badge and tool count

Read the tool list

Each row shows the tool name and its MCP server, the description, a call count, a Connect badge when the tool's server still needs authenticating, and a risk band. A Select all checkbox supports acting on several at once.

Two actions sit at the end of each row: the pencil opens the tool editor, and the bin removes the tool from the agent. They sit side by side, so check which one you are on before selecting.

An agent's Tools tab listing three GitHub tools, each with a call count, a Connect badge, a Low risk band, and edit and delete actions

Edit a tool

The editor opens as its own page. It has an Enabled toggle, an AI Generate action, a Form / JSON switch, and Save. Your changes are not applied until you select Save, and they do not reach the agent's platform until you deploy.

The tool editor Form view with Name, Description, Slug, Annotation, the HTTP method and path, and the Schema to Mapping steps

The Form view covers Name, Description, Slug (the tool name presented in the MCP, with a character counter), Annotation, and the HTTP method and path. Below that sits a two-step Schema then Mapping flow: define the input schema, then configure the request mapping.

The input schema builder listing properties with name, type, description, Required, and Constant value toggles, plus Add Property and Generate from JSON Example

Build the input schema property by property, each with a name, type, description, Required, and an optional Constant value, or produce it in one step with Generate from JSON Example.

The JSON view shows the whole tool document, including action (path, method, mapping), inputSchema, annotations such as readOnlyHint and idempotentHint, and the stored ai_risk block with its level, score, and reasoning.

Generate a tool with AI

AI Generate opens Generate Tool with AI: describe how the tool should behave, in at least 20 characters, and select Generate Tool.

Capability requests

When an end user opens an agent they own in the connect dashboard, they can request more tools, skills, or triggers. Each request becomes a notification tied to the agent.

Pending requests appear as a red badge next to the agent name and on the Tools tab, where you can review the requested items and any free-text explanation, then approve them by adding the capability or dismiss them.

What owners and end users are allowed to ask for in the first place is set under Background Agent Settings.

Keep the set scoped

  • Assign the minimum set of tools needed for the job, and remove tools the agent no longer uses.
  • Watch the risk band. It reflects the risk assessment of the underlying tool.
  • Every agent tool call flows through the gateway, so it is logged and subject to guards and policies like any other traffic.

What to do next