FrozenToolBinding
A Tool binding as an Agent version froze it at publish (1.60.0, FR-integrations-4): its tools with their pinned descriptors and constraints, without any secret. The exec role loads it by binding_sha256 and refuses a call whose binding differs.
An object with 10 fields.
Fields
| Field | Type | Required | Description |
|---|---|---|---|
binding_sha256 | Sha256Hex | yes | |
connection_id | ConnectionId | yes | |
connection_phi_attested | boolean | no | Whether the binding's Connection carried an owner's PHI attestation at claim (1.61.0), the value of tool.connection_phi at on_tool_call: dispatch sets it on the frozen bindings of the Session configuration; absent on the Agent version, whose copy is frozen at publish, and from an api before 1.61.0, when it reads as unknown. |
connector_id | ConnectorId or null | yes | |
connector_version | string or null | yes | |
mcp_server_id | McpServerId or null | yes | |
origin | ConnectionOrigin | yes | |
revision | integer | yes | The binding revision that was frozen. |
tool_binding_id | ToolBindingId | yes | |
tools | array of FrozenBindingTool | yes |