Skip to main content
For a model that supports tools, send a function definition in tools. The model can return a request to call that function. Your application validates the arguments, runs an allowed operation, and sends the result in a subsequent completion request. Limitless does not execute your application functions or grant the model access to your services.
Treat model-generated arguments as untrusted input. Enforce authorization in your application, allow only known functions, validate schemas, and bound the number of tool rounds. Each model call is a separate inference request. Tool support, parallel tool calls, and schema strictness depend on the model. The gateway forwards supported request fields; it cannot make a model implement an unsupported feature.