The specific set of external APIs, functions, database connections, and system utilities an AI agent is authorized to invoke.
Tools give AI agents agency to affect the physical and digital world. Tool access governance enforces least-privilege constraints down to specific method signatures, argument boundaries, and target systems.
A customer service agent is granted tool access to read customer accounts and draft emails, but barred from invoking refund or account deletion tools without explicit human approval.
Tool calls represent the primary vector for agent-driven operational disruption or unauthorized data modification.
EnterpriseACP enforces fine-grained tool entitlements, argument validation, and pre-call authorization gates.