@tool when the capability should execute inside the agent server.
Tool properties
Arguments and results must be structured. Convert unsupported custom objects to a Pydantic model or mapping at the tool boundary.
Runtime access
Credentials are private invocation capabilities. Do not expose them as model-generated arguments or ordinary context resources.
Add approval
- Every call
- After evaluation