Where to set them

  1. Open Tools in the top nav.
  2. Pick the spoke or MCP from the left list.
  3. For each tool, toggle Allow, Deny, or Ask per agent / team.

The three states

  • Allow — agent can call it without prompting.
  • Deny — agent cannot call it; the LLM gets a 403-style tool error if it tries.
  • Ask — call stages as a pending action; the user (in the floating widget or the War Room) must approve.

Defaults

  • Read-only tools default to Allow.
  • Write tools to external systems (ghl_send_message, bridge_send_sms, ghl_opportunity_move_stage, …) default to Ask.
  • Destructive tools (delete, remove, archive) default to Deny.

Tool-count cap

Calling LLMs cap tool catalogs (Claude: 40 per request). Ambrose truncates descriptions to 180 chars and prunes lowest-priority tools first if the union of allowed tools exceeds the cap. Bias toward Allow-listing only what you need.