Turn your APIs into Tools agents can run.

• Typed inputs. Malformed calls are rejected.
• Read or write, declared up front.
• Network policy, timeouts and output limits.
• Signed, versioned builds. No credentials in Tool code.
• The model picks the Tool. It never writes the request.

{
  "name": "settlement.fetch_recon_inputs",
  "version": 7,
  "input_schema": {
    "type": "object",
    "properties": { "settlement_date": { "type": "string", "format": "date" } },
    "required": ["settlement_date"],
    "additionalProperties": false
  },
  "effect": "read",
  "network_policy": "settlement-vpce-only",
  "actor_policy": { "roles": ["ops.analyst"], "approval": "not_required" },
  "limits": { "timeout_s": 60, "max_output_bytes": 262144 }
}