GOVCLOUD
/

Tool Catalog

Two-tier registry. Org tools approved by Platform Admin and visible to every team. Team tools registered by a Team Admin and scoped to that team.

Every tool call flows through the Tool Dispatcher

The model-driving runtime holds zerotool IAM. It can only invoke its agent's Tool Dispatcher, which holds each Tool's scoped permissions (granted at deploy time), enforces the Agent's allowlist and input schema, invokes the Tool, and records the call in the Trajectory. One enforcement and audit point per agent — so a prompt injection can never reach an AWS API the Dispatcher doesn't already gate.

ADR 0020
Model runtime
no tool IAM · can only call the Dispatcher
Tool Dispatcher
holds scoped IAM · allowlist + schema check · writes Trajectory
Tool / AWS action
in-VPC endpoint · least-privilege
Each dispatch lands in the Trajectory Store and the Audit Log — the Sandbox trace shows them as tool spans.
12 tools
ToolKindScopeIAM actionsApproved byIn use by
Zendesk Search
Read-only ticket search across Zendesk.
httporgnone (in-VPC HTTP)Platform Admin
2026-02-04
4 agents
Salesforce Lookup
Read accounts, contacts, opportunities.
httporgnone (in-VPC HTTP)Platform Admin
2026-01-22
6 agents
Confluence KB
MCP server fronting the Confluence space.
mcporg
bedrock:Retrieve
Platform Admin
2026-01-22
5 agents
Stripe Charges
Quote refunds, list charges. Mutations gated by approval-broker.
httpteamnone (in-VPC HTTP)Priya Shah (Team Admin)
2026-03-11
1 agents
Approval Broker
Issues human-in-the-loop approval requests via Slack + email.
lambdaorg
sns:Publishses:SendEmail
Platform Admin
2026-01-30
3 agents
GitHub Issues
File and read issues on configured repos.
httpteamnone (in-VPC HTTP)Marcus Chen (Team Admin)
2026-04-02
1 agents
Datadog Query
Query metrics, logs, traces. Read-only.
httpteamnone (in-VPC HTTP)Marcus Chen (Team Admin)
2026-04-02
1 agents
Policy Lookup (Guidewire)
Read insurance policy data from Guidewire.
httpteamnone (in-VPC HTTP)Linnea Park (Team Admin)
2026-03-18
2 agents
Duck Creek Write
Post claim decisions to the core system. Mutations only.
httpteamnone (in-VPC HTTP)Linnea Park (Team Admin)
2026-03-18
2 agents
Document Upload
S3 multipart upload to the team's intake bucket.
awsorg
s3:PutObject
Platform Admin
2026-02-15
1 agents
KYC Vendor (Persona)
Initiate and read KYC verification cases.
httpteamnone (in-VPC HTTP)Priya Shah (Team Admin)
2026-05-15
1 agents
Calendly Create
Create scheduling links for end users.
httporgnone (in-VPC HTTP)Platform Admin
2026-02-15
1 agents
Approval flow

A Team Admin can register a team tool immediately. Promotion to org tier requires Platform Admin review and a security questionnaire.

Schema is required

Every tool advertises a typed schema (input + output). The interview agent uses these to suggest tools that fit the user's described intent.

Where they run

Every Tool endpoint is reachable from inside the air-gapped VPC — a Lambda ARN, an in-VPC HTTP API over PrivateLink/interface endpoint, or an AWS service action. There is no public-internet egress: no IGW, no NAT, no forward proxy.