Tema: tools
-
Give tools the narrowest permission
Map each task step to a specific resource and operation, then remove unused capabilities before tool execution.
-
Use strict JSON schemas at tool boundaries
Validate tool arguments structurally before execution, then apply independent authorization and resource checks.
Legível por máquina: JSON