Skip to content

knosh list-tools

List all tools registered in the application.

Synopsis

knosh list-tools

Description

list-tools displays all registered tools with their names, write-capabilities, and a summary of which agents can access them. This command is useful for understanding tool availability and the permission rules configured for each agent.

The tool names shown in the output are the exact identifiers to use when configuring permission blocks in agent Markdown files.

Output

The output includes an entry for each tool, showing its name, whether it performs write operations, and per-agent access rules:

## create-directory
- **Write capable:** yes
- **Agent access:** All agents can access this tool with no restrictions.

## text-read
- **Write capable:** no
- **Agent access:**
  - code-reviewer: allowed
  - sandboxed-agent: restricted
    - src/*: allow
    - *: deny

Patterns are shown exactly as written in the agent's permission block — list-tools does not resolve a relative pattern against any working directory, since it has none of its own.

Each agent's access is one of:

  • allowed — the agent can use this tool without restrictions
  • denied — the agent cannot use this tool
  • restricted — the agent has pattern-based rules limiting tool access, followed by the rule list

Each rule shows the glob pattern and whether it allows (allow) or denies (deny) access.

Tip

If no tools are defined (which is unusual), list-tools prints *No tools defined.* — this typically indicates a misconfiguration.

Note

list-tools shows Knosh's built-in tools only. Tools from connected MCP servers are namespaced as <serverHandle>_<toolName> and are never listed here — use list-mcp to see the configured servers, and the naming convention to work out an MCP tool's name.