Registry for AI agent tools

Tools your agents can run locally, with permissions you can read.

Every tool on toolpal is open source, signed by the registry, and declares exactly what it touches: network, environment variables, temp files. Your agent runs it in its own sandboxed process.

Browse all tools Publish a tool

$npm i toolpal && npx toolpal add @demo/hello

import { toolpal } from "toolpal/sdk";

const { greeting } = await toolpal.execute({
  tool: "@demo/hello",
  input: { name: "Ada" },
});

Authors publish

A tool is one function with JSON Schemas for its input and output. toolpal publish bundles it and the registry signs it.

Permissions come from the code

Static analysis finds every network call, environment variable and file access. Undeclared use is refused at publish time.

Agents run it locally

Each call runs in a permission-restricted Node.js process on your machine. Nothing is hosted, and no data leaves unless the tool declares network access.

No tools published yet

Be the first: run toolpal publish in a tool project.