To let an assistant use these tools, grant AI agents on the consent screen, or just
Agent compliance under its Fine-tune. The scope is agent_compliance.
Read tools work with Read only or Read & write access; write tools only with
Read & write.
Your assistant doesn't see these tools straight away. It finds them with search_tools or
describe_tools, and runs one with use_tool, passing its name and
arguments. Most assistants do this for you: just ask for what you want.
What your assistant is told about this group
The compliance controls around your agents. Policies: versioned sets of guardrails and escalation rules. Conduct rules: versioned rules written into the agent's instructions, with example replies, ready-made templates to copy, and each rule's check results. The rulebook: which agents carry which rules. The decision feed: each time the compliance gate checked something an agent was about to do, with the policies behind the decision, and each conversation's full audit trail. The review queue: actions the gate held for a person to approve (decide_tool_approval lets one go ahead: confirm with the user first). And the tools agents can use, with a record of every time they were used.
The descriptions below are the ones your assistant reads, so they're written for it. When a connection covers more than one
organisation, the assistant passes org (the organisation's slug, from list_orgs) to say which one.
get_compliance_overview
Read Compliance overview
Counts across the compliance estate: registry rules, policies, decisions, tool executions.
Arguments
| Field | Type | Description |
|---|---|---|
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
list_agent_policies
Read List agent policies
Compliance policies (guardrail/escalation bundles) agents attach.
Arguments
| Field | Type | Description |
|---|---|---|
| limit | integer | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
get_agent_policy
Read Get an agent policy
One policy with its current version's rule sets and the agent versions that use it.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
create_agent_policy
Write Create an agent policy
Create a compliance policy from registry rules (with config overrides) plus org guardrails and escalation rules.
Arguments
| Field | Type | Description |
|---|---|---|
| name required | string | |
| description | string | |
| screening_mode | string |
One of: "auto", "always", "never"
|
| rule_keys | array of string | Registry rule keys |
| rule_configs | object | Per-rule-key config overrides |
| guardrail_ids | array of string | |
| escalation_rule_ids | array of string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
update_agent_policy
Write Update an agent policy
Save a new version of a policy with the given rule sets (pass the FULL set you want: it replaces the old one). Draft agent versions pick up the new version; promoted versions keep theirs.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| name | string | |
| description | string | |
| screening_mode | string |
One of: "auto", "always", "never"
|
| rule_keys | array of string | Registry rule keys |
| rule_configs | object | Per-rule-key config overrides |
| guardrail_ids | array of string | |
| escalation_rule_ids | array of string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
delete_agent_policy
Write Delete an agent policy
Delete a policy. Refused while agents still attach it.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
apply_agent_policy_pack_update
Write Update a policy to its pack's latest version
For a policy installed from a compliance pack that has a newer revision: replaces the policy's standard rules with the pack's, as a new policy version (draft agent versions move onto it). The org's own guardrails and escalation rules stay. Confirm first.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
list_conduct_rules
Read List conduct rules
Prompt-level conduct rules plus the platform template registry (topic, revision, which agents each is recommended for) with per-template usage.
Arguments
| Field | Type | Description |
|---|---|---|
| limit | integer | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
get_conduct_rule
Read Get a conduct rule
One rule with its current prompt text and examples, version history, whether its template has a newer revision, and how each agent carrying it did on its checks.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
create_conduct_rule
Write Create a conduct rule
Create a custom conduct rule (goes into agents' system prompts), optionally with example replies that keep and break it. To start from a platform template, use adopt_conduct_rule_template instead.
Arguments
| Field | Type | Description |
|---|---|---|
| name required | string | |
| description | string | |
| prompt_text required | string | |
| examples | array of object | Example replies, at most 6 |
| examples[].kind required | string |
One of: "good", "bad"
|
| examples[].text required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
update_conduct_rule
Write Update a conduct rule
Edit a conduct rule. Changing prompt_text or examples saves a new version, which draft agent versions pick up (promoted versions keep theirs). Examples only change together with prompt_text: to change only the examples, pass the current text too.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| name | string | |
| description | string | |
| prompt_text | string | |
| examples | array of object | Example replies, at most 6 |
| examples[].kind required | string |
One of: "good", "bad"
|
| examples[].text required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
delete_conduct_rule
Write Delete a conduct rule
Delete a rule. Refused while agents still attach it.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
adopt_conduct_rule_template
Write Copy a conduct rule template
Copy a platform conduct rule template (see list_conduct_rules) into an editable, versioned rule of the org's own, with its example replies. The copy remembers the template revision, so a later revision can be applied with update_conduct_rule_from_template.
Arguments
| Field | Type | Description |
|---|---|---|
| template_key required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
update_conduct_rule_from_template
Write Update a conduct rule to its template's latest revision
For a rule copied from a platform template whose template has a newer revision (template_update_available): replaces the rule's wording and examples with the template's, as a new version. Overwrites any edits made to the copy: confirm first.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
run_conduct_rule_checks
Write Run a conduct rule's checks
Starts a compliance check run of the rule's written checks against every agent that carries the rule (its live version, else its draft), on web chat. Uses AI credit: confirm first. Returns the runs started; follow them with get_check_run.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
get_rulebook
Read Get the rulebook
Every agent against every rule it could carry (the org's conduct rules, platform templates attached as is, and policies): whether its live or only its draft version carries each, and which recommended conduct rule templates its live version is missing (add them in a new agent version with create_agent_version).
Arguments
| Field | Type | Description |
|---|---|---|
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
list_policy_decisions
Read List policy decisions
The compliance gate feed, as the dashboard shows it: every screening, send and tool decision (each tool call once, with how it ended) and the policies in force for each, with per-decision counts. decision: require_approval surfaces the human-review queue.
Arguments
| Field | Type | Description |
|---|---|---|
| action_group | string |
One of: "screen_inbound", "screen_outbound", "messaging", "tool"
|
| decision | string |
One of: "allow", "allow_with_obligations", "deny", "require_approval"
|
| agent_version_id | string | |
| rule_key | string | |
| limit | integer | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
get_policy_decision
Read Get a policy decision
One gate decision: the triggered rules, the policies in force (pinned to its agent version, verified against the fingerprint recorded with it) and where each rule came from, every rule in force with its settings at the time and the changes it made, the build it ran on, its seal in the org's hash chain (verified, unsealed or broken), how long it's kept, the AI grader's calls behind a content check, any tool-approval request, and for a tool call every step (arguments check, permission, run, result check).
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
get_conversation_audit
Read Get a conversation's audit
The full audit trail of a conversation and every other chat with the same customer, in order (for a conversation with no customer, the chats it was handed along): channels and agents per chat, the controls in force (agent versions, conduct rules, policies, tools, platform protections), consent and vulnerability, and every message, check, tool call, escalation, approval and human action with the reasons recorded at the time. Includes a fingerprint of every record it's built from.
Arguments
| Field | Type | Description |
|---|---|---|
| conversation_id required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
decide_tool_approval
Write Approve/deny a gated tool call
Decide the human-review request behind a require_approval decision and resume the conversation. Approving lets the gated action proceed: confirm with the operator first.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | Policy decision id |
| status required | string |
One of: "approved", "denied"
|
| note | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
list_agent_tools
Read List agent tools
The org's agent-callable tools (platform and custom) with confirmation/approval flags.
Arguments
| Field | Type | Description |
|---|---|---|
| limit | integer | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
get_agent_tool
Read Get an agent tool
One tool with its parameter schema and the agent versions using it.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
list_tool_executions
Read List tool executions
Agent tool-call history, newest first. Filter by status, tool name or agent.
Arguments
| Field | Type | Description |
|---|---|---|
| status | string |
One of: "pending", "success", "error"
|
| tool_name | string | |
| agent_id | string | |
| limit | integer | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
get_tool_execution
Read Get a tool execution
One execution in full: arguments, result payload and error.
Arguments
| Field | Type | Description |
|---|---|---|
| id required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
list_policy_rules
Read List policy rules
Every rule agent policies can use (content screening, escalation, action governance), with the org's own default overrides and how many of its policies use each.
Arguments
| Field | Type | Description |
|---|---|---|
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
get_policy_rule
Read Get a policy rule
One policy rule: its defaults, the org's overrides, which agent policies use it and its ten most recent triggers.
Arguments
| Field | Type | Description |
|---|---|---|
| key required | string | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |
update_org_policy_rule
Write Set the org's defaults for a policy rule
Sets the org-wide defaults for one rule, used by every agent policy that doesn't override them: config keys come from the rule's default_config (blank or default values fall back); enabled false switches the rule off org-wide. Changes how live agents screen and escalate: confirm first. Manager or owner.
Arguments
| Field | Type | Description |
|---|---|---|
| key required | string | |
| config | object | |
| enabled | boolean | |
| org | string | Organisation slug: required when this authorization covers more than one organisation (see list_orgs) |