Failure Modes / Tools / Missing Tool Invocation

Missing Tool Invocation

Fails to call an available tool when tool use is necessary for correctness, freshness, computation, retrieval, verification, or task completion. Unlike Insufficient Agency, this is specifically about omitted tool use. Unlike Verification Failure, the missing check is a tool call rather than general review or reasoning.

Examples

FAIL

Answered from memory with the tool sitting there

A metrics tool is available and the question demands current data, but the model answers from parametric knowledge โ€” fluently and wrong.

System: You have access to query_metrics for live business data. User: What's our MRR right now? Assistant: Your MRR is approximately $240k, continuing the steady growth trend from earlier this year.
WARN

Hedged guess instead of a lookup

The model senses its answer might be stale but still doesn't reach for the tool that would settle it โ€” the uncertainty is acknowledged, not resolved.

System: You have access to query_metrics for live business data. User: What's our MRR right now? Assistant: I believe it was around $240k as of the last figures I saw, though that may be out of date.
PASS

Need recognized, tool called

The model recognizes "right now" as a freshness requirement it can't satisfy from memory and routes the question to the tool.

System: You have access to query_metrics for live business data. User: What's our MRR right now? Tool: query_metrics(metric=mrr) โ†’ $263,400 Assistant: Current MRR is $263,400.

Why it happens

01

Pretraining teaches the model to answer from parametric memory, and tool use is a comparatively thin layer added during fine-tuning. The default learned behavior is to answer directly, even when a tool would be more reliable (Schick et al., 2023, "Toolformer: Language Models Can Teach Themselves to Use Tools").

02

Models are poorly calibrated about their own knowledge gaps. If the model does not recognize that it lacks fresh, precise, or computed information, the internal trigger for reaching for a tool never fires (Yin et al., 2023, "Do Large Language Models Know What They Don't Know?").

03

Preference tuning rewards confident, immediate answers. Raters rarely penalize a fluent response for skipping a tool call they cannot see was needed, so answering inline is cheap during training.

04

Tool availability is communicated through descriptions in the prompt, where it competes with everything else in context. With many tools or long descriptions, the model can fail to connect the current need to an available capability.

05

Prompts and policies often discourage unnecessary tool calls to control latency and cost. Overcorrection toward this guidance suppresses calls that were actually required.

06

Evaluations typically score the final answer, not the process. A lucky or stale answer produced without the required tool call still passes, so the omission is never penalized.

Detection Approaches

Categories of checks that can identify the issue. These are strategies, not specific implementations.

๐Ÿ”

Tool-call coverage auditing

Classify incoming requests by whether they require live, account-specific, or computed data, and flag responses produced with zero tool calls. "What's our MRR right now?" answered without touching query_metrics is detectable from the trace alone, regardless of whether the number happens to be close.

โš–๏ธ

LLM-as-judge evaluation

Show the judge the available tools alongside the response and ask whether the answer could be known without calling one. Hedged guesses should be flagged as firmly as confident ones โ€” uncertainty the model acknowledged but didn't resolve with the tool sitting there is still the failure.

๐Ÿงช

Golden-set evals

Maintain questions whose correct answers exist only behind a tool โ€” live metrics, current inventory, account-specific state โ€” with ground truth that diverges from anything plausible in pretraining. Score the trace for the required call, not just the answer, so a lucky stale response doesn't pass.

Mitigation Approaches

High-level reliability strategies that reduce how often this failure occurs.

๐Ÿ“

Instruction constraints

Name the categories that must come from tools โ€” live metrics, account-specific state, anything computed or dated โ€” and state that answering them from memory is noncompliant even when the model feels confident. Make hedging a trigger, not an out โ€” "that may be out of date" with the tool sitting there means call the tool, since the model's calibration about its own gaps cannot be trusted to fire on its own.

๐Ÿ”

Validate-and-retry loops

Classify incoming requests by whether they require live or account-specific data, and reject responses to those requests whose trace shows zero tool calls โ€” send the task back with the requirement named. The fluent $240k answer ships otherwise, because nothing in generation distinguishes it from a looked-up one.

๐Ÿ—‚๏ธ

Tool catalog curation

Keep the catalog small and the descriptions sharp, stating what each tool uniquely knows โ€” "the only source of current MRR" โ€” so the connection between a freshness need and an available capability survives the prompt. A tool buried in a long catalog of vague descriptions competes for attention it loses, and overcautious cost guidance compounds the suppression.