How agents select tools

Control selection

1. In the custom agent’s Permissions section, assign the smallest useful tool set.
2. Add skills that explain when and how those tools should be used.
3. Configure plugins separately and keep channel allow-lists narrower than general task access.
4. Choose a task permission mode that matches the risk.
5. In a test, verify the agent uses the expected tool and avoids unrelated ones.

Expected result

The transcript shows a relevant tool call with visible input and output. File scope, network or browser switches, approvals, connected-account permissions, and hard policy can still block execution even when the tool is assigned.