Tool Server as a First-Class, Shared Resource

Right: multiple agents share one tool server resource with its own lifecycle and permissions. Left: the anti-pattern — a tool server hiding inside a single agent's config.
ANTI-PATTERN Agent "Policy Lookup" owns tool logic internally redeploy = breaks callers 3 other agents quietly depend on it hidden dependencies, invisible until it breaks Fraud CS Agent Renewals FIRST-CLASS RESOURCE Claims Fraud CS Agent Renewals Tool Server: Policy Lookup own lifecycle, own permissions caller-scoped capability grants dependents visible in resource graph