OpenClaw Tool Not Available
Fix a missing exec, browser, web search, message, or plugin tool by inspecting effective profiles, allowlists, provider restrictions, and sandbox policy.
The agent says a tool is unavailable, the tool is absent from the turn, or a sub-agent cannot use a tool that exists for another agent.
Tool availability is resolved before the model turn. Prompting the model more strongly cannot restore a tool removed by policy.
Inspect the effective layers
openclaw status --all
openclaw config get tools
openclaw plugins listCheck, in order:
- Root tool profile
- Global allow and deny rules
- Agent-specific tool rules
- Provider restrictions
- Sandbox and elevated policy
- Channel or runtime restrictions
- Owning plugin installation and enabled state
The minimal, messaging, coding, and full profiles expose different surfaces. Full access should be reserved for trusted operator-controlled agents.
For delegated work, sub-agent allow rules are applied after the parent profile. A tool removed at the profile stage cannot be restored only by adding it to the sub-agent allowlist.
Verify with a harmless call
Reload or restart when the owning plugin requires it, open a fresh session, and ask for a non-destructive tool action. Existing sessions may retain older resolved behavior.
Expected result
- Status explains the active tool profile.
- The owning plugin is enabled.
- The tool appears only for intended agents.
- A harmless test call succeeds.
- Restricted agents still cannot access it.
Source notes
Technical facts on this page were checked against primary sources.