Get Tool

GET /tools/{tool_id}

Secrets are never returned — only the names in secrets_required.

Role floor

Requires member or above. The floor is a minimum, not a grant: scope filtering still applies on top of it, and a resource in another tenant answers 404 rather than 403.

Parameters

Name	In	Type		Notes
tool_id	path	string (uuid)	required	—

Responses

Status	Description	Body
200	Successful Response	ToolView
422	Validation Error	HTTPValidationError

Only the success paths are declared

Any operation may also answer any status in the error catalogue, and every failure body is the platform envelope — including the 422 this document types as HTTPValidationError.

Example

curl -X GET https://your-deployment.example.com/tools/{tool_id} \
  -H "Authorization: Bearer $COBRE_TOKEN"

Response — ToolView

Field	Type		Notes
id	string (uuid)	required	—
scope	workspace | organization | platform	required	—
organization_id	string (uuid) | null	required, nullable	—
workspace_id	string (uuid) | null	required, nullable	—
slug	string	required	—
kind	http | remote_protocol | builtin | code_exec | web_search | web_fetch | delegate | schedule	required	—
display_name	string | null	required, nullable	—
description	string	required	—
input_schema	object	required	—
config	object	required	—
secrets_required	string[]	required	—
concurrency	read | write | exclusive	required	—
effect	read | write	required	—
critical	boolean	required	—
client_owned	boolean	required	—
response_max_chars	integer	required	—
timeout_s	integer	required	—
is_active	boolean	required	—
created_at	string (date-time)	required	—
updated_at	string (date-time)	required	—