vrr/agent-zero
2
0
Fork 0
mirror of https://github.com/agent0ai/agent-zero.git synced 2026-08-26 16:55:43 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
agent-zero/plugins/_tool_access
History
Alessandro eec18ad839 Enforce scoped tool access policies 
Add one project/profile-aware resolver for canonical local, plugin, and MCP tool identities.

Apply it to text prompts, Responses schemas, connector stubs, local execution, MCP invocation, and delegated agents while preserving the response and vision invariants owned by the runtime.
2026-08-12 14:34:15 +02:00
..
extensions/python/tool_execute_before Enforce scoped tool access policies 2026-08-12 14:34:15 +02:00
AGENTS.md Enforce scoped tool access policies 2026-08-12 14:34:15 +02:00
default_config.yaml Enforce scoped tool access policies 2026-08-12 14:34:15 +02:00
hooks.py Enforce scoped tool access policies 2026-08-12 14:34:15 +02:00
plugin.yaml Enforce scoped tool access policies 2026-08-12 14:34:15 +02:00
README.md Enforce scoped tool access policies 2026-08-12 14:34:15 +02:00

README.md

Tool Access

Tool Access is the always-enabled runtime owner for Agent Editor tool policy. Policies use the standard plugin precedence: active project profile, active project, user profile, bundled/plugin profile, then the default. Sparse project policy lives under .a0proj/plugins/_tool_access/config.json; profile policy lives under usr/agents/<profile>/plugins/_tool_access/config.json.

One resolver filters textual prompts and provider-native schemas, rejects local and MCP execution, and keeps delegated agents bound to their own effective scope. The required final-response capability is always available.