Tool allowlisting
Also called: allowlisting, tool allow-list, whitelisting
Explicitly enumerating which tools an agent may use in a given context, and refusing everything else.
Rather than connecting every server and hoping the model chooses well, the operator defines the specific set of tools appropriate for the task — often per workflow or per trust level — and the client enforces it. Higher-impact tools can require per-call approval on top of being allowlisted.
Why it matters
It directly shrinks the attack surface a prompt injection can use. If the exfiltration tool isn't on the list, the toxic flow is broken regardless of what the model was told to do. Allowlisting is more robust than trying to detect misuse, because it constrains rather than judges.
Exposure map
Live counts of instances showing this pattern will appear here once the exposure map is collecting data.