---
title: "List tools"
method: GET
path: "/v1/senders/{senderId}/agent/tools"
tags: ["Agent Tools"]
---

# List tools

`GET /v1/senders/{senderId}/agent/tools`

List tools for an agent.

## Path parameters

- `senderId` string, required

## Query parameters

- `enabled` boolean
- `limit` integer
- `cursor` string

## Response `200`

List of tools.

- object
  - `items` AgentTool[], required
    - `id` string, required
    - `agentId` string, required
    - `name` string, required
    - `description` string, required — Description for the LLM to understand when to use this tool.
    - `parameters` ToolParameters, required
      - `type` 'object', required
      - `properties` object, required
      - `required` string[], required
    - `webhookUrl` string, uri, required — HTTPS URL to call when the tool is executed.
    - `enabled` boolean, required
    - `createdAt` string, date-time, required
    - `updatedAt` string, date-time, required
    - `webhookSecret` string — Signing secret for this tool's webhook. **Returned only when the tool is created**, never on a later read. Zavu generates one if you do not supply it, and signs every call to this tool with it: `X-Zavu-Signature: <hex>`, the HMAC-SHA256 of the request body. Verify it before trusting the call. Lost it? Rotate with `POST /v1/senders/{senderId}/agent/tools/{toolId}/webhook/secret`.
  - `nextCursor` string, nullable

## Other responses

- `401` — Unauthorized.
- `404` — Agent not found.

---

[API](https://skmtc.net/zavudev/apis/zavu-unified-messaging-layer-api.md) · [All operations](https://skmtc.net/zavudev/apis/zavu-unified-messaging-layer-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/zavudev/zavu-unified-messaging-layer-api/revisions/4dacdff2adf8/schema)