> ## Documentation Index
> Fetch the complete documentation index at: https://openclaw.veiseule.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Asboblarni chaqirish API

# Asboblarni chaqirish (HTTP)

OpenClaw Gateway bitta asbobni to‘g‘ridan-to‘g‘ri chaqirish uchun oddiy HTTP endpoint taqdim etadi. U har doim yoqilgan, biroq Gateway autentifikatsiyasi va asbob siyosati bilan cheklangan.

* `POST /tools/invoke`
* Gateway bilan bir xil port (WS + HTTP multiplex): `http://<gateway-host>:<port>/tools/invoke`

Standart maksimal payload hajmi 2 MB.

## Autentifikatsiya

Gateway autentifikatsiya konfiguratsiyasidan foydalanadi. Bearer token yuboring:

* `Authorization: Bearer <token>`

Eslatmalar:

* `gateway.auth.mode="token"` bo‘lsa, `gateway.auth.token` (yoki `OPENCLAW_GATEWAY_TOKEN`) dan foydalaning.
* `gateway.auth.mode="password"` bo‘lsa, `gateway.auth.password` (yoki `OPENCLAW_GATEWAY_PASSWORD`) dan foydalaning.
* Agar `gateway.auth.rateLimit` sozlangan bo‘lsa va autentifikatsiya xatolari juda ko‘p yuz bersa, endpoint `429` va `Retry-After` bilan javob qaytaradi.

## 11. So‘rov tanasi

```json theme={"theme":{"light":"min-light","dark":"min-dark"}}
{
  "tool": "sessions_list",
  "action": "json",
  "args": {},
  "sessionKey": "main",
  "dryRun": false
}
```

Fields:

* `tool` (string, required): tool name to invoke.
* `action` (string, optional): mapped into args if the tool schema supports `action` and the args payload omitted it.
* `args` (object, optional): tool-specific arguments.
* 12. `sessionKey` (string, ixtiyoriy): maqsadli sessiya kaliti. If omitted or `"main"`, the Gateway uses the configured main session key (honors `session.mainKey` and default agent, or `global` in global scope).
* `dryRun` (boolean, optional): reserved for future use; currently ignored.

## Policy + routing behavior

13. Asboblar mavjudligi Gateway agentlari ishlatadigan xuddi shu siyosat zanjiri orqali filtrlanadi:

* `tools.profile` / `tools.byProvider.profile`
* `tools.allow` / `tools.byProvider.allow`
* `agents.<id>.tools.allow` / `agents.<id>.tools.byProvider.allow`
* group policies (if the session key maps to a group or channel)
* subagent policy (when invoking with a subagent session key)

If a tool is not allowed by policy, the endpoint returns **404**.

Gateway HTTP ham standart tarzda qat’iy deny ro‘yxatini qo‘llaydi (hatto session policy ushbu vositaga ruxsat bergan bo‘lsa ham):

* `sessions_spawn`
* `sessions_send`
* `gateway`
* `whatsapp_login`

Ushbu deny ro‘yxatini `gateway.tools` orqali moslashtirishingiz mumkin:

```json5 theme={"theme":{"light":"min-light","dark":"min-dark"}}
{
  gateway: {
    tools: {
      // HTTP /tools/invoke orqali bloklanadigan qo‘shimcha vositalar
      deny: ["browser"],
      // Standart deny ro‘yxatidan vositalarni olib tashlash
      allow: ["gateway"],
    },
  },
}
```

To help group policies resolve context, you can optionally set:

* `x-openclaw-message-channel: <channel>` (example: `slack`, `telegram`)
* `x-openclaw-account-id: <accountId>` (when multiple accounts exist)

## 14. Javoblar

* `200` → `{ ok: true, result }`
* `400` → `{ ok: false, error: { type, message } }` (noto‘g‘ri so‘rov yoki vosita kiritish xatosi)
* `401` → unauthorized
* `429` → autentifikatsiya rate-limit’ga uchradi (`Retry-After` o‘rnatilgan)
* `404` → tool not available (not found or not allowlisted)
* `405` → method not allowed
* `500` → `{ ok: false, error: { type, message } }` (kutilmagan vosita bajarilish xatosi; tozalangan xabar)

## Example

```bash theme={"theme":{"light":"min-light","dark":"min-dark"}}
curl -sS http://127.0.0.1:18789/tools/invoke \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  -H 'Content-Type: application/json' \
  -d '{
    "tool": "sessions_list",
    "action": "json",
    "args": {}
  }'
```