The agent dips into each tool in turn. Every tool sits behind its own network boundary and carries its own configuration and management controls.