Tool policies

Tool Governance attaches reusable tool-access policies to a flow version. Each policy is a set of rules that Allow, require Human approval, or Deny tool calls.

​

Rule effects

Policy cards summarize rule counts (for example 3 rules, 1 approval, 2 deny).

​

Create a policy (Studio wizard)

In Graph Studio → Governance → Tool Governance → create / New policy. Steps are dynamic: Navigation: Continue to the next step · Back · final save.

​

Attach a policy

1. Open Tool Governance.
2. Under Library, choose a policy → Attach (or Attach governance).
3. Apply to: Entire flow or One agent.
4. If the policy has Human approval rules, complete Approval delivery:
   • Channels: Dashboard and/or Email
   • Users (email recipients) when Email is on
5. Confirm attach. Binding stores binding_type: "policy", policy_ids, flow_version, optional agent_node_id, and approval_notification.

In Use lists policies on this flow version with Edit, Detach, Attach HIL, and Approval delivery.

​

Library vs In Use

​

Workspace Policies tab

OPERATE → Governance → Policies shows fleet metrics (blocked vs logged, approvals resolved, rule mix). Use it to spot hotspots, then fix bindings in Studio.

​

Related

• HITL
• Approvals
• Governance overview
• Guardrails