{
  "tool": "lookup_order",
  "arguments": {
    "order": "42"
  },
  "task": {
    "task_id": "<string>",
    "session_id": "K7QM-24XP",
    "agent_id": "billing",
    "agent_version": 123
  },
  "org_id": "<string>"
}

API Reference

Http tool call

When an agent calls one of its HTTP tools (tools.http), GuidingHand POSTs the call to the tool’s url with a GuidingHand-Signature: t=<unix>,v1=<hex> header: the HMAC-SHA256 of <t>.<raw body> with your org’s tool secret (GET /v1/tool_secret), as for webhook events. It waits up to 15 seconds, follows no redirects and makes each call once. Your response body, as text (up to 64 KB), is what the model gets back: a 2xx is the result, and any other status, or no answer, tells the model the call failed. A tool with approval: "always" is only called once someone approves.

WEBHOOK

tool_call

{
  "tool": "lookup_order",
  "arguments": {
    "order": "42"
  },
  "task": {
    "task_id": "<string>",
    "session_id": "K7QM-24XP",
    "agent_id": "billing",
    "agent_version": 123
  },
  "org_id": "<string>"
}

Authorizations

Authorization

string

header

required

An org API key (gh_live_…) from Settings → API keys in the console.

Body

application/json

tool

string

The tool’s name.

Example:

"lookup_order"

arguments

object

What the model passed, which should match the tool’s parameters. Check it like any input from outside.

Example:

{ "order": "42" }

task

object

Show child attributes

org_id

string

Response

200

The result for the model: any text, such as JSON.