Tool calls are where agents meet the real world, and where most of their failures happen. Here is what twelve million production runs taught us.
Make every tool idempotent
Agents retry. Networks fail. If calling a tool twice can charge a customer twice, it eventually will. Every tool we ship accepts an idempotency key.
Validate before you execute
We check every argument against a strict schema and the current account state before a tool runs, and return clear errors the agent can recover from.
