grant_agent_tool
Grant ONE specific tool to an agent's loadout (tool_access). Use when an operator says "give the tool" / "let use ". The tool name is validated against the live registry at write time — phantom names are rejected, deprecated names auto-map to their successor. For wholesale capability re-derivation use recalibrate_agent_jd instead; connector tools auto-provision on connection.
[sensitive-tier — first use may require a manager's approval; a from-now-on approval makes future calls seamless, a just-once approval re-asks next time.]
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| reason | No | Optional one-line why — stored in the audit record on the agent's JD. | |
| agent_id | Yes | UUID of the agent receiving the tool. Use get_team_roster to find IDs. | |
| companyId | Yes | FreedomOS company id to act within (you must be a member). Required for company-scoped tools. | |
| tool_name | Yes | Exact registry name of the tool to grant (e.g. "capture_idea"). |