# See every tool your people built

> Substrait registers every tool, agent, Slate, skill and knowledge base with an owner, a purpose, a risk tier and a version, and gives every one a switch that stops it.

URL: https://substrait.build/capabilities/tool-registry/  
Last updated: 2026-11-06

Substrait keeps one registry of everything your people build. Every entry has an owner, a purpose, a risk tier, a version and a switch that stops it, whichever AI model built it.

## Five kinds of tool, one way to govern them

| Kind | The question Substrait answers about it |
|---|---|
| Slate | Who may see it, and who may change it? |
| Knowledge base | Who may see which parts, and is it current? |
| Skill | What does it allow, and what does it instruct? |
| Web app | What data may it reach? |
| Agent | What may it do on its own, and as whom? |

Every kind shares the same spine: identity, data access, audit, a review before release, and a life cycle of publish, version, install, retire and revoke.

## What each entry records

- The owner, and the people who hold a role on it
- Its purpose and its risk tier
- Every version, and which one is in production
- The data it was granted, and by whom
- The scaffold version it was built from, flagged when out of date

## Installing creates a link, never a copy

When a team installs a tool, Substrait links to the one registered version.
A copy could not be revoked or kept current; a link can.

## Every tool can be stopped

Every tool on Substrait can be rolled back to its last good version or switched off.

## Related

- [How to govern the apps and tools people build with AI](https://substrait.build/problems/govern-tools-built-with-ai/): People across a company now build apps, agents and Slates with AI. Substrait puts every one in one registry, with an owner, a risk tier, a security check and an audit trail.
- [Set the guardrails once, not for every change](https://substrait.build/capabilities/policies-and-approvals/): Each organisation sets its own policies and risk tiers in Substrait. Changes inside an approved boundary ship freely; only a change that crosses it goes back for approval.
- [Every tool your people use, in one place](https://substrait.build/capabilities/home-and-explore/): Substrait gives every employee a Home page with their own tools on it, and an Explore directory of what colleagues chose to share. Finding a tool never grants access to it.
- [An audit trail nobody can alter](https://substrait.build/capabilities/audit-trail/): Substrait records every access and action in an audit trail that nobody, a platform admin included, can change after the fact. It is queryable, exportable to your security monitoring, and kept in storage you control.