Approve tools
Choose which of a server's tools the agent may call, review them in bulk, and keep them reviewed when servers change.
Who can: Owners, Admins and SREs.
A server's tools appear under Discovered tools after Test connection, each pending. The agent never calls a pending tool. Approving is how you decide what the agent can do on that server.
Review in bulk
- Filter by name or description, or show All, Pending, Approved or Read-only.
- Select read-only (N) ticks every tool the server marks read-only and not destructive.
- The checkbox at the top of the list ticks or unticks every tool shown. Shift-click ticks a range.
- Clear all unticks everything.
- Rows you've changed show → approve or → revoke. The bar at the bottom counts your changes. Reset undoes them, Save approvals saves them.
Unticking an approved tool revokes it. The agent stops calling it from the next question.
Hints come from the server
The read-only and destructive labels are the server's own description of its tools. A careless or hostile server can label anything read-only. Read the names and descriptions, prefer servers' own read-only modes, and use read-only credentials.
What to approve
- Read tools you'll use: listing, getting, searching, querying, logs, events, metrics.
- Not: anything that creates, updates, deletes, deploys, restarts, scales, runs arbitrary commands or SQL that could write. Turn those off at the server where you can, so they never appear.
- Fewer is better. At most 64 tools are offered to the agent at once, and a short, relevant list gives better answers.
When a server changes a tool
sremcp fingerprints each tool's definition. When a health check or a test finds a tool changed, the tool goes back to pending, the test reports N changed and need re-approval, and the audit log records it. Review and approve it again.
If a tool changes while you're reviewing, Save approvals refuses with … changed since you opened this page. Reload and review the new definition.