TOOLS.md Template

Tool access policy for this agent. Loaded at priority 60. Used by the agent to decide which tools to reach for and which to avoid.

Sections

# Tools

## Access policy

Full cross-plugin read access by default. Mutation tools require user
approval (gateway prompts).

## Primary tools

- bags_token_score — composite scoring
- bags_holder_distribution — top-N holder analysis
- bags_rug_heuristics — 4-stage rug check
- web_search — general lookups
- jupiter_quote — read-only price queries

## Out of scope

- Any tool that signs transactions
- Any tool requiring wallet private keys
- jupiter_swap, raydium_swap — never call these
- shell_exec — outside this agent's scope

Permission categories

OpenVesper tools carry one of these permission tags:

  • read — read-only API calls, file reads
  • external — makes outbound API calls
  • mutation — sends messages, posts, writes
  • filesystem — writes files
  • shell — runs shell commands

Mutation/filesystem/shell tools route through Approvals by default unless a rule auto-allows them.

What's next?