A scope is a bounded, pre-authorized envelope — a specific
tool, a specific argument pattern, a budget, and an expiry. Inside the
envelope the agent may act without popping a confirmation modal. Outside
it, the standard human-in-the-loop gate still applies. Every consumption
is audited.
Default-deny. A scope only matches when the tool name
is in the list and every pattern key is present in the call
with a matching value. A typo will never widen a scope.
Create a Scope
The user whose chat actions this scope authorizes.
Exact tool names. Use the tool catalog if unsure.
Keys are argument names; values are exact (string) or membership (array).
Empty {} matches anything — use with care.
Total tool calls allowed inside this scope.
Whichever runs out first — budget or time — ends the scope.