The technical mechanism under tool calls: the model outputs a precisely formatted request ("call `send_email` with these fields"), and the surrounding software executes it. The model asks; the software acts.
Why it matters: worth knowing because the model never truly does anything — it requests. Every real safety control lives in the software layer that decides whether to honor the request.
Related: Tool / tool call
More in “Giving an agent hands”