# Inspect a tool



Read installed entrypoints, native input schemas, qualification, prerequisites and runtime limits.



`GET /v1/tools/{tool_id}`



## Check commands before you run



Substitute the tool ID returned by discovery. Read the run operation’s entrypoints, prerequisites, limits and current readiness.



## What to do next



Choose an executable alias from the response. Do not use a filesystem path as the alias.



[Read the step-by-step guide →](https://www.security.run/docs/native-invocations.html)



### Parameters



#### `tool_id` · `path · string` · required



#### `authorization` · `header · string | null` · required



### Responses



- `200` Successful Response

- `422` Validation Error

## Request

```bash
curl -X GET "$SECURITY_RUN_URL/v1/tools/yara" \
  -H "Authorization: Bearer $SECURITY_RUN_API_KEY"
```

## Request

```python
import os, httpx

headers = {}
headers["Authorization"] = "Bearer " + os.environ["SECURITY_RUN_API_KEY"]
response = httpx.request('GET', os.environ["SECURITY_RUN_URL"].rstrip("/") + '/v1/tools/yara',
    headers=headers)
response.raise_for_status()
print(response.text)
```

## Request

```javascript
const base = process.env.SECURITY_RUN_URL.replace(/\/$/, "");
const headers = {};
headers.Authorization = `Bearer ${process.env.SECURITY_RUN_API_KEY}`;
const response = await fetch(base + "/v1/tools/yara", {
  method: "GET",
  headers
});
if (!response.ok) throw new Error(`HTTP ${response.status}`);
console.log(await response.text());
```