6.11.2.3 AgentTool
6.11.2.3.1 Purpose¶
One callable the model can see, published by a product together with its capabilities. It names the MCP server that implements it, the capability a caller must hold, the data class of what it returns and its risk, which decides whether the user must confirm it.
6.11.2.3.2 Questions it answers¶
- Which tools exist, and which product implements each?
- What must a user hold to be offered a tool?
- Does using the tool need a confirmation, and may its output reach a non-EU model?
6.11.2.3.3 Fields¶
| Field | Type | Cardinality | Description |
|---|---|---|---|
id |
string (uuid) |
1..1 |
Key. |
name |
string |
1..1 |
Unique. Namespaced like a capability: <system>.<tool>, e.g. farm.animals.search, grant.calls.search, farm.failed_jobs.list. |
mcp_server |
string |
1..1 |
The product's MCP server and tool name that implement it. |
required_capabilities |
string |
0..* |
Capabilities of OrganizationRoleCapabilityEnum or MoonitoringCapabilityEnum, all of which the caller must hold for the tool to be offered and run. Empty: any sender of an agent bound to the tool. Each name must exist in a system's catalog. |
required_features |
string |
0..* |
Entitlement features of Entitlement the sender's Organization must hold, all of them, active at the time of the message: e.g. farm.models.mastitis for a tool that calls that model. Empty: only the agent's AgentDefinition.feature is needed.Not evaluated for staff agents, which have no Organization. |
data_class |
enum | 1..1 |
Values: public, personal.What the tool returns; a personal tool can only be used with a profile that allows personal data. |
risk |
enum | 1..1 |
Values: read, write, dangerous.read: no confirmation; write: the user confirms; dangerous: the user confirms and the call is logged as an audit event. |
description |
string |
1..1 |
What the model reads to decide when to call it; versioned with the product. |
connector |
AgentConnector | 0..1 |
|
version |
string |
1..1 |
|
created_at |
datetime |
1..1 |
|
updated_at |
datetime |
1..1 |
6.11.2.3.4 Relationships¶
References
AgentTool.connector→ AgentConnector (0..1)
Referenced by
AgentToolBinding.tool(1..1)AgentToolCall.tool(1..1)
6.11.2.3.5 Rules & constraints¶
- One callable the model can see. A row created in the Console (
moochat.agents.manage) that names a tool of a product's MCP server; the capabilities it requires are chosen from the systems' catalogs.