Tool registry

Tools are the unit of action the agent works with. Each turn, the intent classifier selects a subset, and the tool loop lets the model call them until it can answer.

This page is the reference for the built-in registry — what's in the box, the ToolEntry shape, and a couple of tool-specific quirks worth knowing about. For the how-to topics, follow the links below:

• Customizing tools — remove, replace, or add tools.
• Bring your own data — feed customer-authored GeoJSON into the agent.
• Scope-aware data tools — the analyseData / processData per-turn scope mechanism.
• Code generation — the JavaScript-as-parameter pattern, threat model, and output contract.

The ToolEntry shape

The plugin ships a DEFAULT_TOOLS registry — a flat record of named ToolEntry objects. Each entry defines what the tool does and how the agent should use it:

{
    description: string;          // Full tool description for the model
    inputSchema: ZodType;         // Validated input parameters
    outputSchema?: ZodType;       // Structured output (improves reliability)
    execute: (input, state, options?) => Promise<any>;   // options.signal — see Cancellation below

    // Classifier metadata
    classificationPrompt?: string; // One-liner: when to activate this tool
    tags?: string[];               // Category labels (e.g. 'route', 'traffic')
    examples?: string[];           // Usage examples shown in the help tool
    examplePrompts?: string[];     // Natural-language prompts shown in the help tool
    relatedTools?: string[];       // Tools often used together
    dependsOn?: string[];          // Tools that must run first

    // Optional: per-turn scope — see Scope-aware data tools
    scopeSchema?: ZodType;         // Shape of `toolScopes[<name>]` the classifier emits
    scopePrompt?: string;          // Hint for the classifier describing the scope shape
}

Cancellation

execute's third argument carries the AI SDK's own abortSignal for the tool call, which fires when the model's turn is cancelled:

type ToolExecuteOptions = { signal?: AbortSignal };

Forward it to every service call your tool makes, so a cancelled turn also cancels the in-flight HTTP request. An aborted call rejects with SDKAbortError, and since execute must never throw, catch it and return a standard error shape:

import { SDKAbortError, search } from '@tomtom-org/maps-sdk/services';

execute: async ({ query }, state, options) => {
    try {
        const results = await search({ query, signal: options?.signal });
        return { count: results.features.length };
    } catch (error) {
        if (error instanceof SDKAbortError) return { error: 'Cancelled.' };
        return { error: `Search failed: ${error instanceof Error ? error.message : String(error)}` };
    }
},

Do not forward it into work that outlives the turn, such as a monitor's recurring tick or any deferred job. Those fire after the signal has already aborted, and a monitor treats a rejected tick as fatal — it clears its own interval — so a leaked signal stops the monitor instead of cancelling one request.

A tool can also be defined via a ToolEntryBuilder — a function from ToolBuildOptions to ToolEntry — when the entry needs to be rebuilt per turn (e.g. for scope-aware behavior). See Scope-aware data tools / Add a scopable custom tool.

What's in the registry

Tools are grouped by what they do, not which API they wrap:

analyseData and processData are special — they take JavaScript as a parameter instead of a fixed argument list, and the classifier emits a per-turn scope that narrows their schema to the relevant kinds. See Code generation.

The full API reference (every tool's signature, input/output schemas, and examples) is in the Agent Toolkit Plugin API Reference.

The help tool

The built-in help tool is available to the model at runtime. When a user asks "what can you do?" or "show me routing examples", the model calls help to surface tool descriptions, usage examples, and example prompts filtered by tag. Users discover capabilities through natural conversation — no documentation browsing required.

help is also useful as a development surface: call getDefaultToolPrompts() from your own code to get a Record<ToolName, readonly string[]> of every tool's examplePrompts, and surface them as starter suggestions in your chat UI. The registry stays the single source of truth.

Tools that read state vs. fetch data

A key design distinction: some tools fetch fresh data from TomTom services; others read from plugin state. The scope-aware recallState tool (narrowed per call via kind — places / routes / ranges / geometries / byod / incidents / trafficAreaAnalytics) exists because tool results are not retained in conversation history. If a user asks "what were those places?" an hour into a session, the model calls recallState — it does not guess or hallucinate prior results.

See State for the shape of what these tools read from.

getTrafficIncidents where schema

Traffic-incident loading uses a where schema (within mode) instead of a top-level bbox. The same multi-region inputs that discoverPlaces.where.within accepts (viewport, boundingBox, queries, placeIds, geometries, range, route) all resolve to bboxes and are unioned into one bbox for the underlying SDK call (≤ 10,000 km²). Default when where is omitted: { mode: 'within', viewport: true }.

// Current viewport
getTrafficIncidents({});

// Named area (geocoded → polygon bbox)
getTrafficIncidents({ where: { mode: 'within', queries: [{ query: 'Paris', queryAs: 'place' }] } });

// Buffered corridor around the latest route
getTrafficIncidents({ where: { mode: 'within', route: { widthMeters: 1000 } } });

// Multi-source union
getTrafficIncidents({
    where: { mode: 'within', queries: [{ query: 'Amsterdam' }], placeIds: ['G55fc4abe-...'] },
});

When the classifier picks getTrafficIncidents with both a meaningful multi-region field and viewport: true (which strict-mode LLM providers like Azure / OpenAI emit by default), the executor prefers the multi-region intent — the tool never silently answers with the viewport when the user named a specific area.

Related

• Customizing tools — how to remove, replace, or add tools.
• Bring your own data — using BYOD layers with the agent.
• Scope-aware data tools — analyseData / processData per-turn scope.
• Code generation — JavaScript-as-parameter tools and their threat model.
• State — what each tool reads from and writes to.
• How it works — the classifier / tool-loop flow.
• Securing your agent — the caps on tool arguments, and what bounds a turn.