Retrieve an agent tool

GET

https://api.jelliu.co/api/agents/:agentId/tools/:toolId

GET

/api/agents/:agentId/tools/:toolId

curl https://api.jelliu.co/api/agents/9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d/tools/7b0e4f3a-1c2d-4e5f-8a9b-0c1d2e3f4a5b \
     -H "Authorization: Bearer <token>"

{
  "data": {
    "id": "7b0e4f3a-1c2d-4e5f-8a9b-0c1d2e3f4a5b",
    "tenant_id": "2d9f6c1e-3b4a-4c5d-9e8f-7a6b5c4d3e2f",
    "agent_id": "9a8b7c6d-5e4f-4a3b-8c2d-1e0f9a8b7c6d",
    "name": "consultar_pedido",
    "description": "Consulta el estado y la fecha estimada de entrega de un pedido a partir de su número.",
    "type": "webhook",
    "method": "GET",
    "url": "https://api.tiendaandina.co/v1/pedidos/{numero_pedido}",
    "headers": [],
    "path_params": [
      {
        "identifier": "numero_pedido",
        "type": "string",
        "description": "Número del pedido que menciona el cliente, solo dígitos",
        "value_type": "llm_prompt",
        "required": true
      }
    ],
    "query_params": [],
    "body_params": [],
    "auth_type": "none",
    "response_timeout_secs": 20,
    "tool_call_sound": "typing",
    "tool_call_sound_behavior": "auto",
    "dynamic_variable_assignments": [],
    "position": 0,
    "created_at": "2026-09-01T15:04:05.000Z",
    "updated_at": "2026-09-01T15:04:05.000Z"
  }
}

Returns one active tool of the agent. Credentials (auth_config) are never returned; headers are returned in full, including fixed_value. A deleted tool answers 404.

This endpoint reads only the tool row: it does not check the provider, so use it to inspect configuration, not to confirm the tool is attached to the live agent.

Consistency. Cached per workspace and tool for up to 120 seconds; PATCH and DELETE through this API invalidate the entry immediately.

Access

Required scope: read (or write).
Rate limit: General API — 120–600 requests/min per workspace depending on plan. See Rate limits.
Plan: Available on every plan.

Authentication

AuthorizationBearer

Workspace API key: jl_ followed by 64 lowercase hex characters, created by the workspace owner in the dashboard (Settings → API Keys) and sent as Authorization: Bearer jl_.... The plaintext is shown once, at creation; Jelliu stores only a SHA-256 hash. A workspace can hold up to 25 active keys.

Scope	GET / HEAD	POST / PUT / PATCH / DELETE	Admin-only routes
`read`	Yes	No	No
`write`	Yes	Yes	No
`full`	Yes	Yes	Yes

Operations restricted to admins or owners reject keys without the full scope with 403, and say so in their description. No key, whatever its scope, can mint or revoke API keys or rotate a webhook secret — that requires a signed-in owner session. A revoked key stops authenticating within about 10 seconds. See Authentication.

Path parameters

agentIdstringRequiredformat: "uuid"

UUID of the agent that owns the tool.

toolIdstringRequiredformat: "uuid"

UUID of the tool, as returned by POST /api/agents/{agentId}/tools.

Response

The tool.

dataobject

A webhook tool as returned by the API. Keys are snake_case (the request bodies use camelCase). auth_config is never returned.

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

404

Not Found Error

429

Too Many Requests Error