Chat SDKがAI SDK Toolsを統合:エージェント機能は権限設計から始めるべきだ
この統合により、チャットUIとエージェントtoolを結ぶ実装は短くなります。しかし実行が簡単になるほど、権限、承認、監査ログ、復旧経路の設計が重要になります。
開発者コミュニティで目立つ論点は、どのtoolを開放するか、いつユーザー承認を求めるか、失敗をどう説明して戻すかです。
What changed
Vercel announced on May 20, 2026 that Chat SDK now includes an AI SDK toolset. The important pieces are chat/ai and createChatTools(chat), which make chat state and agent actions easier to connect.
Practical takeaway
- Separate read-only tools from write tools.
- Require approval for actions that change external systems.
- Log inputs, actor, approver, result, and failure reason.
- Design rollback or human escalation before launch.
- Keep hard restrictions in server policy, not only prompts.
Risk
The risk is not tool calling itself. The risk is giving a model product authority without a visible control surface. Good agent UX automates low-risk work and slows down only where trust requires it.