Per-tool permissions

It would be very helpful to be able to set permissions per tool call.

For example I want query_prometheus: "allow" but create_dashboard: "ask" and delete_dashboard: "deny"

This issue might be a duplicate of existing issues. Please check:

Unifying tools and permissions #1961: Discusses unifying tools and permissions configuration, which addresses the related concern of having separate permission controls
Finer-grained permissions for writing files? #2039: Requests finer-grained permissions for specific file operations, which is the same concept of per-tool permissions applied to the write tool

Feel free to ignore if none of these address your specific case.

This will be done as part of #1961

Navigation Menu