knosh list-tools¶
List all tools registered in the application.
Synopsis¶
Description¶
list-tools displays all registered tools with their names, write-capabilities, and a summary of which agents can access them. This command is useful for understanding tool availability and the permission rules configured for each agent.
The tool names shown in the output are the exact identifiers to use when configuring permission blocks in agent Markdown files.
Output¶
The output includes an entry for each tool, showing its name, whether it performs write operations, and per-agent access rules:
## create-directory
- **Write capable:** yes
- **Agent access:** All agents can access this tool with no restrictions.
## text-read
- **Write capable:** no
- **Agent access:**
- code-reviewer: allowed
- sandboxed-agent: restricted
- src/*: allow
- *: deny
Patterns are shown exactly as written in the agent's permission block — list-tools does not resolve a relative pattern against any working directory, since it has none of its own.
Each agent's access is one of:
- allowed — the agent can use this tool without restrictions
- denied — the agent cannot use this tool
- restricted — the agent has pattern-based rules limiting tool access, followed by the rule list
Each rule shows the glob pattern and whether it allows (allow) or denies (deny) access.
Tip
If no tools are defined (which is unusual), list-tools prints *No tools defined.* — this typically indicates a misconfiguration.
Note
list-tools shows Knosh's built-in tools only. Tools from connected MCP servers are namespaced as <serverHandle>_<toolName> and are never listed here — use list-mcp to see the configured servers, and the naming convention to work out an MCP tool's name.