Tools in Shell runs an agent's tools from Bashkit scripts

The Tools in Shell capability (tools_in_shell) moves most of an agent’s tools, MCP servers included, from the model’s tool list into one tools command in the Bashkit shell. One script can call several tools and filter results with jq before the model sees them:

tools github list-pulls '{"repo":"acme/api","state":"open"}' | jq -r '.[].number'

Every call goes through the turn’s tool policy. A script that would make a call needing approval is held before it starts. tools plan lists a script’s calls and their risk without running anything. Tools with no risk hints are rated once, which Rate unlabeled tools can turn off. Each call shows in the session timeline under its shell call.

See Tools in Shell and #4385, #4388, #4435, #4439, #4443, #4501.