- Published on
Article · Through the layers
Only offer tools that belong to the current workflow
Build tool manifests for the current task instead of exposing an entire backend. Keep independent server authorization because hiding a tool does not prevent a fabricated call.