Tarseek API · Pre-production

Tool / function calling

Tarseek uses OpenAI function tools: tools[].type = "function" with a JSON schema. tool_choice: none | auto | required | { type: "function", function: { name } }.

Assistant messages may include tool_calls. You send results back as role: "tool" with tool_call_id.

Partial

Client function calls, tool results, parallel calls and streamed argument deltas are supported on eligible deployments. Unsupported parameters are rejected before provider execution. External MCP and provider-specific beta tools remain outside this compatibility contract.

With hosted_tools, tool_choice may be auto, none or required. A named function uses the tool name, such as web_reader. A required or named selection applies to the first model round; later rounds may produce the final answer.

Hosted tools and shared secrets

Create web search, web reader, date and time, weather, or HTTP tools in the project's Tools page. Owners and admins approve a version and its connection; members can use approved tools in chat. Public definitions are discoverable, but secrets and connections remain private to each project.

In Chat Completions, add "hosted_tools": [{"id":"web_reader","version":1}]. The gateway executes managed calls and returns the result to the model. Responses and Messages currently support client tools only.

Use max_tool_rounds (default 4, maximum 8) and max_tool_calls (default 8, maximum 16) to bound execution. Writes require approval on the connection and allow_tool_writes: true in the request. Mixed hosted/client calls in one model turn are rejected before executing that turn's actions.

Every model round uses the project's BYOK credential and counts against provider and project limits. Responses include aggregate usage, model_request_ids and tool_executions. Request inspection includes a separate tool_workflow status. Managed streaming delivers text as the model generates it, including after tool execution. Heartbeat comments keep silent periods alive; intermediate hosted-tool arguments stay internal.

Search returns source URLs, titles, and excerpts. If one source fails, the rest are still returned. A citation only points at a source that was returned. It does not prove the source supports the claim.

The web reader accepts a public HTTPS URL and returns cleaned text, page metadata and a continuation index for long pages. Date and time accepts an optional IANA timezone and returns the exact timestamp, weekday, UTC offset, daylight-saving state and Unix time. Weather resolves a place name and returns current-hour, dated-hour or full-day data in metric or imperial units. Forecasts are limited to 16 days ahead; older dates use historical data. Weather is sourced from Open-Meteo and commercial deployments require configured customer endpoints and credentials.

The Secrets page stores encrypted, write-only credentials. Owners and admins can rotate or disable them; saved values cannot be retrieved. A secret is not tied to a stored origin allowlist. An HTTP tool has its own fixed public HTTPS destination, and that destination receives the authentication header. A tool never sends a secret to the model. Disabling access prevents future dispatch, but cannot undo an action already sent.