Expose one REST operation

Suppose an agent needs to read a ticket from a REST service. Start with the operation that provides that read, not the service’s entire API surface.

Build the tool

1. Obtain the service’s OpenAPI 3.x document and identify the required operation.
2. Import the specification and select only that operation.
3. Review the generated tool name and the path, query, header, and body mapping.
4. Configure the approved host, credential binding, input limits, and timeout.
5. Submit for review and verify the accepted runtime configuration.

Test the boundary

Call the generated tool with a valid test identifier. Compare the result with the expected upstream record. Then supply invalid input and confirm rejection. Attempt an unselected operation and confirm it cannot execute.

The client must not be able to replace the registered host with an arbitrary URL or choose another HTTP method through a tool argument. If the tool schema permits an unexpected override, stop and correct the mapping before publication.

Keep the contract current

When the upstream specification changes, inspect the affected operation and generated schema again. Reimporting does not mean every new operation should become callable. Continue with the schema reference when validating exact fields.