---
title: "Preview Tool Policy"
method: POST
path: "/workspaces/{workspace_id}/agent/presets/tool-policy"
tags: ["agent-presets"]
---

# Preview Tool Policy

`POST /workspaces/{workspace_id}/agent/presets/tool-policy`

## Request

- Base URL: `https://platform.tracecat.com/api`
- URL: `https://platform.tracecat.com/api/workspaces/{workspace_id}/agent/presets/tool-policy`
- Auth: one of:
  - API key in cookie `fastapiusersauth`
  - HTTP bearer

Evaluate unsaved tool selections without changing a preset.

## Path parameters

- `workspace_id` string, uuid, required

## Request body

- AgentPresetToolPolicyPreview: Unsaved tool selections to evaluate using the runtime policy pipeline.
  - `actions` string[]
  - `namespaces` string[]
  - `mcp_integrations` string[]
  - `skill_ids` string[]
  - `tool_approvals` object

## Response `200`

Successful Response

- AgentPresetToolPolicyRead: Non-secret effective policy for rendering preset configuration.
  - `actions` string[]
  - `skill_actions` string[]: Effective registry actions granted by attached skills.
  - `max_tools` integer, nullable
  - `requires_internet_access` boolean
  - `has_approvals` boolean
  - `blocked_tools` PresetToolSourceRead[]
    - `tool_id` string, required
    - `skill_id` string, uuid, nullable
    - `skill_name` string, nullable
  - `internet_sources` PresetToolSourceRead[]
    - `tool_id` string, required
    - `skill_id` string, uuid, nullable
    - `skill_name` string, nullable

## Other responses

- `400`: Invalid tool policy selections
- `422`: Validation Error

---

[API](https://skmtc.dev/tracecat/apis/tracecat-api.md) - [All operations](https://skmtc.dev/tracecat/apis/tracecat-api/llms.txt) - [OpenAPI document](https://skmtc.dev/tracecat/apis/tracecat-api/revisions/2efdda25045f?raw)