Give the agent the same tools you use

What it does

What an agent can actually do

diagnose_service()

Ask about a service

diagnose_service reads p99 by service.version, error rate and throughput over a window and returns what changed, not a chart image the model has to squint at.

find_slow_traces()

Pull the traces behind it

find_slow_traces and inspect_trace return real spans with real attributes. The agent reads db.statement, not a summary of it.

read_source_file()

Read the source that ran

Link a repository and search_source_code plus read_source_file let the agent get from a stack frame to the function, so its proposal cites a line rather than a guess.

claim_error_issue()

Write, when you allow it

Claiming an issue, setting a severity or opening an alert rule are separate write tools. Read-only is the default posture, and mutations need approval.

OrgId filter

Scoped to one org

Every tool call is filtered by the org on the key, in the query itself. An agent cannot read across a tenant boundary because the query it runs cannot express it.