List an assistant’s tools

GET/api/v1/assistants/{id}/tools

scope assistants:read

What this assistant can actually do. Every tool in the catalogue with enabled already resolved — a tool the assistant says nothing about takes the catalogue default, so this answers "what can it do" rather than "what was overridden". gated marks the ones that stop for a human first.

Path parameters

Name	Type	Description
`id`required	`string (uuid)`	Assistant id

Request

curl "https://your-crm.example.com/api/v1/assistants/8f2c1d3e-4a5b-4c6d-9e0f-1a2b3c4d5e6f/tools" \
  -H "Authorization: Bearer $RAABTA_API_KEY"

Response · 200 OK

{
  "data": [
    {
      "id": "bookings.create",
      "group": "booking",
      "group_label": "Bookings",
      "title": "create",
      "description": "Book an appointment for a contact.",
      "sensitivity": "write",
      "enabled": true,
      "gated": false,
      "default_enabled": true,
      "explicit": true
    }
  ]
}

Response

Wrapped in { data: … }

Name	Type	Description
`id`required	`string`	Tool id
`group`required	`string`	Catalogue group id
`group_label`required	`string`	Group name as shown in the dashboard
`title`required	`string`	Short human name
`description`required	`string`	What the tool does
`sensitivity`required	`string (enum)`	A critical tool always raises an approval, whatever `gated` says`readwritecritical`
`enabled`required	`boolean`	Whether this assistant may use it, with the catalogue default already applied
`gated`required	`boolean`	Whether it pauses for a human approval before running
`default_enabled`required	`boolean`	What it would be if the assistant said nothing
`explicit`required	`boolean`	True when the assistant states an opinion, false when it is taking the default

Errors

Status	Code	When
400	`validation_error`	The body or query failed validation. `details` lists each failing field with a `path` and a `message`.
401	`unauthorized`	No usable API key: the Authorization header is missing or malformed, or the key is unknown, revoked or expired. The three are deliberately indistinguishable.
403	`forbidden`	The key is valid but lacks the scope this endpoint requires, or the request came from an address outside the key’s IP allowlist. The message says which.
403	`account_suspended`	The account this key belongs to is suspended. Rotating the key will not help; contact support.
404	`not_found`	No such resource in this account. A resource that exists in another account also returns this.
429	`rate_limited`	The per-key budget, or the per-IP budget for failed authentication, is exhausted. Honour `Retry-After` before retrying.
500	`internal`	Something failed on our side. Safe to retry with the same Idempotency-Key; quote `request_id` if it persists.