Enhance Spring AI Tool Calling with @RequiresConsent

[vinsguru]

Current Spring AI's tool calling mechanism allows Large Language Models (LLMs) to suggest and execute methods annotated with @tool. It is powerful, it lacks a built-in, declarative way to signify that a particular tool's execution by enabling a clear "human-in-the-loop" mechanism for tool execution.

@Tool(description = "Deletes the given book by id")
@RequiresConsent(message = "The book {bookId} is going to be deleted. Do you approve?")
public void deleteBookById(String bookId) {
    // Actual logic to delete a book
}

[sunyuhan1998]

Indeed, we need a control mechanism that allows users to confirm again whether to proceed with the tool call. This is common in many Agent applications.

[dawn83679]

I'm also encountering a similar use case where user confirmation is needed for certain tool executions.

In my server-side application scenario, when a client makes a request and the AI model needs to call tools, some tools require explicit user approval before execution - especially for sensitive operations like data modifications, external API calls, or actions that could have significant impact.

The current internalToolExecutionEnabled = false approach requires manual handling of the entire tool execution flow, but having a built-in @RequiresConsent mechanism would be much more elegant and would standardize this common pattern.

This feature would be particularly valuable for:

• Enterprise applications where certain operations need approval workflows
• Security-sensitive tools that modify data or external systems
• Interactive applications where users should have control over AI actions

Looking forward to seeing this enhancement implemented! 👍