Skip to main content
Arcanflows

Tools

Connect agents to APIs, databases, webhooks, and custom code

Tools connect your agents to the outside world — APIs, databases, webhooks, and custom code. Define a tool once, then attach it to any agent so it can take real actions, not just talk.

Tool types

TypeWhat it does
REST APICall an HTTP/REST endpoint with configured base URL, endpoints, headers, and timeouts.
FunctionRun a built-in function for a specific task.
ScriptExecute a script in a sandboxed runtime (e.g. Python/Node) for custom logic.
DatabaseQuery a connected database.
WebhookTrigger or receive a webhook.
CustomUser-defined behavior for anything the above don't cover.

Authentication

Tools that call external services support several auth methods, with credentials stored encrypted:

  • None, API key (in a header), Bearer token, Basic auth, OAuth 2.0, or Custom.

Store secrets in the Credentials Vault and reference them from the tool — never hard-code keys.

Categories

Tools are organized into categories so they're easy to find — CRM, Email & Communication, Databases, Analytics, Automation, Payment, Storage, Social Media, Development, Webhooks, and Custom.

Creating a tool

  1. Open Tools and create a new tool; pick its type and category.
  2. Configure it — for a REST API, the base URL and endpoints; for a script, the code and runtime; etc.
  3. Set authentication (referencing a credential from the vault where needed).
  4. Define an input schema (JSON Schema) so the agent knows what arguments to pass and inputs are validated.

Attaching tools to agents

Attach one or more tools to an agent. When the agent decides a tool is needed, it calls it with arguments matching the input schema, receives the result, and continues the conversation. Every execution is logged with status, timing, and any error, so you can audit and monitor tool usage.

Best practices

  • Validate inputs with a tight input schema.
  • Set timeouts so a slow dependency can't hang a conversation.
  • Store credentials in the vault; never inline secrets.
  • Monitor the execution log for failures and slow tools.

Related