revoke_agent_tool
Remove ONE specific tool from an agent's loadout (tool_access). Use when an operator says "take away from " — or to clean a phantom/stale name out of a loadout (unresolvable names ARE removable here, unlike grant). Reports honestly when the name was not present, and when the tool is a universal base tool the runtime keeps available regardless.
[write-tier — first use may require a manager's approval; a from-now-on approval makes future calls seamless, a just-once approval re-asks next time.]
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| agent_id | Yes | UUID of the agent. Use get_team_roster to find IDs. | |
| companyId | Yes | FreedomOS company id to act within (you must be a member). Required for company-scoped tools. | |
| tool_name | Yes | Exact loadout entry to remove (phantom/stale names allowed). |