> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gobare.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Read a session's tools

> Read a session's tool configuration.



## OpenAPI

````yaml /openapi.json get /v1/sessions/{session_id}/tools
openapi: 3.1.0
info:
  title: Gobare Agent API
  version: v1
  description: >-
    Programmatic access to Gobare coding-agent sessions. Conceptually aligned
    with OpenAI's Agents API; deliberately not wire-compatible with it. See the
    divergence list in the product documentation.
servers:
  - url: https://api.{domain}
    variables:
      domain:
        default: gobare.dev
security: []
paths:
  /v1/sessions/{session_id}/tools:
    get:
      summary: Read a session's tools
      description: Read a session's tool configuration.
      operationId: get_sessions_session_id_tools
      responses:
        '200':
          description: Read a session's tool configuration.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ToolConfig'
        '400':
          description: >-
            `invalid_request`. A query parameter this endpoint does not take.
            Refused rather than ignored, because an ignored filter answers with
            everything and looks like a filter that matched.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '401':
          description: The access token is missing, unrecognised, expired or revoked.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '403':
          description: >-
            The token is valid but may not perform this call. The message names
            the scope it wanted.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '404':
          description: >-
            No such endpoint, or no such object under this token's organization.
            Another organization's id is indistinguishable from one that never
            existed, deliberately.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '429':
          description: >-
            `rate_limit_exceeded`. The token is past its allowance for this
            bucket. Honour `Retry-After`; the `x-ratelimit-*` headers on every
            response say how close you were.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
        '500':
          description: An unexpected error. Quote the request id.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
        - accessToken: []
components:
  schemas:
    ToolConfig:
      type: object
      required:
        - object
        - session_id
      properties:
        object:
          type: string
          const: session.tools
          description: >-
            Always `session.tools`. Names the shape, so a value can be
            identified without knowing which call returned it.
        session_id:
          type: string
          description: The session this configuration applies to.
        tools:
          type: array
          description: >-
            The configuration as sent, in the same vocabulary: one entry per
            tool, each with a `type` of `mcp` or `function`. Secret values are
            withheld — see `redacted`.
          items:
            $ref: '#/components/schemas/Tool'
        text:
          type:
            - object
            - 'null'
          description: >-
            Output shaping, or null when none was set. Asked of the model, not
            enforced.
          properties:
            verbosity:
              type: string
              enum:
                - low
                - medium
                - high
            format:
              type: object
              description: >-
                `{type: "json_schema", schema: {…}}` — the shape the model is
                asked to answer in.
    Error:
      type: object
      required:
        - error
      description: Every refusal this API makes, in one shape.
      properties:
        error:
          description: Always present on a failure, and the only thing present.
          type: object
          required:
            - code
            - message
            - request_id
          properties:
            code:
              type: string
              enum:
                - invalid_request
                - authentication_error
                - permission_denied
                - not_found
                - method_not_allowed
                - conflict
                - queue_full
                - rate_limit_exceeded
                - project_limit_exceeded
                - context_length_exceeded
                - provider_error
                - provider_unauthorized
                - sandbox_error
                - sandbox_unavailable
                - directory_unavailable
                - workspace_recovery_failed
                - bridge_incompatible
                - internal_error
            message:
              type: string
            request_id:
              type: string
              description: >-
                Also on the x-request-id header. Quote it when reporting a
                problem.
    Tool:
      type: object
      required:
        - type
        - name
      properties:
        type:
          type: string
          enum:
            - mcp
            - function
        name:
          type: string
          description: 'Unique across both types: the agent sees one list.'
        url:
          type: string
          description: 'mcp: the server''s address. Exclusive with `command`.'
        command:
          type: string
          description: 'mcp: a command run inside the sandbox. Exclusive with `url`.'
        args:
          type: array
          items:
            type: string
          description: 'mcp: arguments for `command`.'
        allowed_tools:
          type: array
          items:
            type: string
          description: >-
            mcp: restrict the agent to these tools from this server. Absent
            means all of them.
        required:
          type: boolean
          description: >-
            mcp: the session fails if this server will not connect. Absent means
            optional, which produces an `mcp.unavailable` event instead.
        redacted:
          type: array
          items:
            type: string
          description: >-
            Names of the secret values withheld from this response, such as
            `authorization` or `headers.x-api-key`. Not a request field: sending
            it back is refused, so an edited read-back cannot silently drop your
            credentials.
        description:
          type: string
          description: 'function: what the function is for. The model reads it.'
        parameters:
          type: object
          description: 'function: a JSON Schema for the arguments. Carried unexamined.'
        timeout_seconds:
          type: integer
          description: 'function: how long to wait for your process to answer this call.'
  securitySchemes:
    accessToken:
      type: http
      scheme: bearer
      description: >-
        A `gbr_pat_` access token. Scopes are recorded on the token when it is
        minted.

````