Skip to content
ML Academy

Introduced on day 47

Tool allow-list

An explicit, per-task or per-route list of the tools an LLM application may call, enforced by the code that executes calls rather than by instructions in the prompt.

In detail

Calls to tools outside the list are rejected and logged. Narrow lists remove whole attack paths and limit what a misread or injected request can reach. An allow-list is necessary but not sufficient: calls to permitted tools still need argument validation and authorisation for the requesting user.