An agent invoking an external capability. Tool authorization is the new sitemap: the document of what the agent can do.