Tool Access

Tool Access is the always-enabled runtime owner for Agent Editor tool policy. Policies use the standard plugin precedence: active project profile, active project, user profile, bundled/plugin profile, then the default. Sparse project policy lives under .a0proj/plugins/_tool_access/config.json; Global profile policy lives under usr/agents/<profile>/plugins/_tool_access/config.json, and project-profile policy lives under usr/projects/<project>/.a0proj/agents/<profile>/plugins/_tool_access/config.json. The Plugins screen exposes these scoped files through its existing configuration list; policy choices remain owned by Agent Editor.

One resolver filters textual prompts and provider-native schemas, rejects local and MCP execution, and keeps delegated agents bound to their own effective scope. The required final-response capability is always available.