create_tool_policy
Define and update enforcement policies for tools, including risk levels, approval requirements, rate limits, and blocking or hiding tools, with optional endpoint forwarding.
Instructions
Upsert a local tool enforcement policy used by gate_action and enforced_tool_call.
Policies are evaluated in-process (no API hop). Setting tool_endpoint lets
enforced_tool_call forward the call and sign request+response as a bilateral receipt.
Args:
tool_name: Name of the tool to create a policy for
risk_level: Risk classification - "low", "medium", or "high"
require_approval: If true, high-risk tools need human approval before execution
max_calls_per_minute: Rate limit (0 = unlimited)
blocked: If true, the tool is completely blocked
hidden: If true, the tool is invisible - not listed and treated as nonexistent
tool_endpoint: Optional HTTP endpoint to forward approved calls toInput Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tool_name | Yes | ||
| risk_level | No | medium | |
| require_approval | No | ||
| max_calls_per_minute | No | ||
| blocked | No | ||
| hidden | No | ||
| tool_endpoint | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |