Remote Tools
Register customer-hosted tools for LLM calls
Remote Tools
Remote tools let Stevora-hosted agents call logic and data that stay inside your application. Every request is signed with a secret returned when the tool is created.
All requests require x-api-key.
Create a remote tool
POST /v1/remote-tools
| Field | Type | Required | Description |
|---|---|---|---|
name | string | Yes | Starts with a letter; letters, numbers, _, and -; maximum 64 characters |
url | string | Yes | Public HTTPS endpoint |
timeoutMs | integer | No | 100-30,000 milliseconds; default 10,000 |
curl -X POST https://api.stevora.in/v1/remote-tools \
-H "x-api-key: stv_your_api_key" \
-H "Content-Type: application/json" \
-d '{
"name": "lookup_customer",
"url": "https://api.example.com/stevora-tools/customer",
"timeoutMs": 10000
}'{
"success": true,
"data": {
"id": "rtool_abc123",
"name": "lookup_customer",
"url": "https://api.example.com/stevora-tools/customer",
"timeoutMs": 10000,
"createdAt": "2026-07-23T10:00:00.000Z",
"secret": "rtsec_..."
}
}Store secret securely. It is shown only once and is used to verify Stevora's request signature.
List remote tools
GET /v1/remote-tools
curl https://api.stevora.in/v1/remote-tools \
-H "x-api-key: stv_your_api_key"The response returns tool metadata but never the signing secret.
Delete a remote tool
DELETE /v1/remote-tools/:id
curl -X DELETE https://api.stevora.in/v1/remote-tools/rtool_abc123 \
-H "x-api-key: stv_your_api_key"{
"success": true,
"data": { "deleted": true }
}See Tool Calling for request verification and workflow usage.