Tools Configuration

Tools Configuration

CortexPrism exposes a comprehensive Web UI and REST API for configuring tools, API keys, and integrations without editing config files.

Tools & APIs Settings

Accessible in Settings → Tools & APIs tab.

Supported Tool Integrations

Tool	Configuration	Vault Key
Brave Search	API key	brave_api_key
Tavily Search	API key	tavily_api_key
SerpAPI	API key	serpapi_api_key
Firecrawl	API key + self-hosted URL	firecrawl_api_key

Key Management

• Add — enter API key through the UI, stored encrypted in the AES-256-GCM vault
• Edit — update existing key
• Remove — delete key from vault
• Masked display — configured keys shown with first 6 and last 4 characters (e.g., sk-abc...xyz)

Fallback

Tool API keys use a resolution chain:

1. Vault (AES-256-GCM encrypted store) — primary
2. Environment variable — fallback (e.g., BRAVE_API_KEY)
3. Config file — last resort

Tool Registry

The Tools page in the Web UI displays all 60 built-in tools with:

Column	Description
Name	Tool identifier (e.g., file_read)
Category	Grouping (file system, web, code, etc.)
Description	What the tool does
Parameters	Input schema with types and descriptions
Capabilities	Required permission badges
Enabled	Toggle to enable/disable the tool

Tool Stats

Each tool card shows:

• Total invocations
• Success rate (green/yellow/red bar)
• Average execution time
• Last used timestamp

API Endpoints

Method	Path	Description
GET	/api/tools/config	Get tool API key configs
PUT	/api/tools/config	Update tool API key config
DELETE	/api/tools/config	Remove a tool API key
GET	/api/tools/registry	List all tools with schemas
POST	/api/tools/:name/toggle	Enable/disable a tool
GET	/api/tools/:name/stats	Tool usage statistics

Web Search Cache

The enhanced web search tools use a persistent cache:

• TTL: 1 hour default
• Max entries: 1000
• Auto-cleanup: expires stale entries automatically
• Provider: Brave Search → Tavily → DuckDuckGo fallback chain

Docs Search (Context7)

The docs_search tool requires no API key — it queries Context7's free API endpoint with 24-hour result caching and fuzzy library name resolution for 25+ libraries.

See Also

• Built-in Tools — Complete tool catalog
• WebSocket Protocol — Tool calls over WebSocket
• Security — Policy validation for tools