Watch the explanation. Practice the skill.
Agents and tool use
Let an agent choose tools without letting it grant itself access.
Captions appear here during playback.
Agents and tool use
Let an agent choose tools without letting it grant itself access.
Video playback is unavailable. Read the descriptive transcript below, go directly to practice, or open the video file.
Source-based teaching example · Fictional data · Reviewed 2026-10-03. Microsoft Mark · locally synthesized. On a small screen, use fullscreen for diagram details or read the transcript.
Read the descriptive transcript
0:00 · What you will learn
Let an agent choose tools without letting it grant itself access.
What appears on screen
Let an agent choose tools without letting it grant itself access.
0:06 · The idea
A model may propose an action. Application code must check the tool, inputs and permissions before running it. Keep limits on calls, time and repeated failures.
What appears on screen
A model may propose an action. Application code must check the tool, inputs and permissions before running it. Keep limits on calls, time and repeated failures.
0:21 · One useful term
Agent. A system that uses model outputs to select actions and observe their results within an allowed task.
What appears on screen
A system that uses model outputs to select actions and observe their results within an allowed task.
0:31 · A worked example
The mock model requests a document as a guest. The tool blocks access. The model then claims success, but no successful tool result supports that claim.
What appears on screen
The mock model requests a document as a guest. The tool blocks access. The model then claims success, but no successful tool result supports that claim.
0:45 · Your turn to think
Can the answer cite a document after the read was denied? Pause and decide before continuing.
What appears on screen
Can the answer cite a document after the read was denied? Pause the video if you need more time.
1:02 · Why this answer works
No. Use actual tool results, not the model’s claim. A repeated-read loop must also stop at its allowed call limit.
What appears on screen
No. Use actual tool results, not the model’s claim. A repeated-read loop must also stop at its allowed call limit.
1:13 · Check 1
Check permission before execution.
What appears on screen
Check permission before execution.
1:18 · Check 2
Track actual tool outcomes.
What appears on screen
Track actual tool outcomes.
1:23 · Check 3
Enforce stop limits outside the prompt.
What appears on screen
Enforce stop limits outside the prompt.
1:29 · Now try a different case
Open the lesson and try its different practice case. Use every check in the full task. Watching alone does not mark the lesson complete.
What appears on screen
Open the lesson Try the new case Check and revise The full task and its requirements are in the linked lesson.
Watching explains the example. Complete the lesson practice to check what you can do. Explore all visual lessons →