| 1 | # Tool Access |
| 2 | |
| 3 | Tool Access is the always-enabled runtime owner for Agent Editor tool policy. |
| 4 | Policies use the standard plugin precedence: active project profile, active |
| 5 | project, user profile, bundled/plugin profile, then the default. Sparse project |
| 6 | policy lives under `.a0proj/plugins/_tool_access/config.json`; Global profile |
| 7 | policy lives under `usr/agents/<profile>/plugins/_tool_access/config.json`, and |
| 8 | project-profile policy lives under |
| 9 | `usr/projects/<project>/.a0proj/agents/<profile>/plugins/_tool_access/config.json`. |
| 10 | The Plugins screen exposes these scoped files through its existing |
| 11 | configuration list; policy choices remain owned by Agent Editor. |
| 12 | |
| 13 | One resolver filters textual prompts and provider-native schemas, rejects local |
| 14 | and MCP execution, and keeps delegated agents bound to their own effective scope. |
| 15 | The required final-response capability is always available. |