Govern tool calls

Start with a local dry-run

Download the tool manifest and request into one directory.

rippflow tools invoke customer-lookup \
  --input tool-request.json --tool-manifest tool.yaml --dry-run

This validates the example locally. It does not call the MCP server.

Before a real call

• Register an approved server/tool in your installation.
• Pin the tool version or digest and permitted scopes.
• Set the budget, concurrency limit, timeout and approval requirement.

Review the exact operation

rippflow tools list --json
rippflow mcp servers --json
rippflow operations inspect OPERATION_ID --json

Approvals bind to the parameters and tool version. Changed input needs a new approval.