Beta Managed Agents Agent Tool Config Params
BetaManagedAgentsAgentToolConfigParams = BetaManagedAgentsBashToolConfigParams or BetaManagedAgentsEditToolConfigParams or BetaManagedAgentsReadToolConfigParams or 5 moreConfiguration override for a specific tool within a toolset.
BetaManagedAgentsBashToolConfigParams objectConfiguration override for the bash tool.
type: optional "bash"name: "bash"Must be "bash".
enabled: optional boolean or nullWhether this tool is enabled and available to Claude. Overrides the default_config setting.
permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or nullPermission policy for tool execution.
BetaManagedAgentsAlwaysAllowPolicy objectTool calls are automatically approved without user confirmation.
type: "always_allow"
BetaManagedAgentsAlwaysAskPolicy objectTool calls require user confirmation before execution.
type: "always_ask"
BetaManagedAgentsAutoPolicy objectThe server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
type: "auto"
BetaManagedAgentsEditToolConfigParams objectConfiguration override for the edit tool.
type: optional "edit"name: "edit"Must be "edit".
enabled: optional boolean or nullWhether this tool is enabled and available to Claude. Overrides the default_config setting.
permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or nullPermission policy for tool execution.
BetaManagedAgentsAlwaysAllowPolicy objectTool calls are automatically approved without user confirmation.
BetaManagedAgentsAlwaysAskPolicy objectTool calls require user confirmation before execution.
BetaManagedAgentsAutoPolicy objectThe server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
BetaManagedAgentsReadToolConfigParams objectConfiguration override for the read tool.
type: optional "read"name: "read"Must be "read".
enabled: optional boolean or nullWhether this tool is enabled and available to Claude. Overrides the default_config setting.
permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or nullPermission policy for tool execution.
BetaManagedAgentsAlwaysAllowPolicy objectTool calls are automatically approved without user confirmation.
BetaManagedAgentsAlwaysAskPolicy objectTool calls require user confirmation before execution.
BetaManagedAgentsAutoPolicy objectThe server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
BetaManagedAgentsWriteToolConfigParams objectConfiguration override for the write tool.
type: optional "write"name: "write"Must be "write".
enabled: optional boolean or nullWhether this tool is enabled and available to Claude. Overrides the default_config setting.
permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or nullPermission policy for tool execution.
BetaManagedAgentsAlwaysAllowPolicy objectTool calls are automatically approved without user confirmation.
BetaManagedAgentsAlwaysAskPolicy objectTool calls require user confirmation before execution.
BetaManagedAgentsAutoPolicy objectThe server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
BetaManagedAgentsGlobToolConfigParams objectConfiguration override for the glob tool.
type: optional "glob"name: "glob"Must be "glob".
enabled: optional boolean or nullWhether this tool is enabled and available to Claude. Overrides the default_config setting.
permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or nullPermission policy for tool execution.
BetaManagedAgentsAlwaysAllowPolicy objectTool calls are automatically approved without user confirmation.
BetaManagedAgentsAlwaysAskPolicy objectTool calls require user confirmation before execution.
BetaManagedAgentsAutoPolicy objectThe server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
BetaManagedAgentsGrepToolConfigParams objectConfiguration override for the grep tool.
type: optional "grep"name: "grep"Must be "grep".
enabled: optional boolean or nullWhether this tool is enabled and available to Claude. Overrides the default_config setting.
permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or nullPermission policy for tool execution.
BetaManagedAgentsAlwaysAllowPolicy objectTool calls are automatically approved without user confirmation.
BetaManagedAgentsAlwaysAskPolicy objectTool calls require user confirmation before execution.
BetaManagedAgentsAutoPolicy objectThe server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
BetaManagedAgentsWebFetchToolConfigParams objectConfiguration override for the web_fetch tool.
type: optional "web_fetch"name: "web_fetch"Must be "web_fetch".
allowed_domains: optional array of stringOnly fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains.
blocked_domains: optional array of stringNever fetch URLs whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme, port, or path). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains.
enabled: optional boolean or nullWhether this tool is enabled and available to Claude. Overrides the default_config setting.
max_content_tokens: optional number or nullMaximum number of tokens of fetched text content to include in context per call. Does not apply to binary content such as PDFs.
format: int32
permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or nullPermission policy for tool execution.
BetaManagedAgentsAlwaysAllowPolicy objectTool calls are automatically approved without user confirmation.
BetaManagedAgentsAlwaysAskPolicy objectTool calls require user confirmation before execution.
BetaManagedAgentsAutoPolicy objectThe server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
BetaManagedAgentsWebSearchToolConfigParams objectConfiguration override for the web_search tool.
type: optional "web_search"name: "web_search"Must be "web_search".
allowed_domains: optional array of stringOnly return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "docs.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with blocked_domains.
blocked_domains: optional array of stringNever return search results whose host is one of these domains or a subdomain of one. Each entry is a plain hostname like "ads.example.com" (no scheme or port; an optional path suffix is accepted). At most 64 entries; an empty list is rejected (omit the field instead). Cannot be combined with allowed_domains.
enabled: optional boolean or nullWhether this tool is enabled and available to Claude. Overrides the default_config setting.
permission_policy: optional BetaManagedAgentsAlwaysAllowPolicy or BetaManagedAgentsAlwaysAskPolicy or BetaManagedAgentsAutoPolicy or nullPermission policy for tool execution.
BetaManagedAgentsAlwaysAllowPolicy objectTool calls are automatically approved without user confirmation.
BetaManagedAgentsAlwaysAskPolicy objectTool calls require user confirmation before execution.
BetaManagedAgentsAutoPolicy objectThe server decides each tool call individually: it judges, from the tool, its input, and the session content so far, whether the call is safe to execute or high-risk, and evaluates it to allow when judged safe and to deny when judged high-risk. A call the server cannot reach a judgement on evaluates to ask.
user_location: optional BetaManagedAgentsUserLocation or nullApproximate user location for search result localization.
type: "approximate"Location precision. Only "approximate" is supported.
city: optional string or nullCity name.
minLength: 1, maxLength: 255
country: optional string or nullTwo-letter ISO 3166-1 country code, uppercase.
region: optional string or nullRegion or state name.
minLength: 1, maxLength: 255
timezone: optional string or nullIANA timezone identifier, e.g. "America/Los_Angeles".
minLength: 1, maxLength: 255