aiqbench analysis
This research dissects the internal decision-making process of agentic LLMs, identifying a specific causal vector that determines whether a model invokes external tools or responds directly. By isolating how request verbs like "discuss" suppress tool-use priors compared to "write," the study reveals a compact internal state governing this behavior across multiple architectures including Qwen and Mistral. The findings provide critical mechanistic insight into agentic reasoning, moving beyond black-box performance metrics to explain the specific features that trigger tool invocation in noisy, scaffolded contexts.
How Do Agentic LLMs Decide to Call Tools? A Tool-Call Vector Shaped by Suppression
arXiv:2610.09624v1 Announce Type: cross Abstract: Tool calling, invoking external tools on demand, is central to agentic LLMs, yet the mechanism that decides whether a model calls a tool or responds directly remains poorly understood. Agentic prompts are long and heavily scaffolded, combining role instructions, tool schemas, format templates, and the user's request across hundreds of tokens, creating a noisy, highly entangled context in which no single controllable variable for mechanistic analysis is obvious. To obtain such a variable, we propose a method that converts complex agentic prompts into minimal contrastive pairs in which a single request verb determines the tool-call decision: replacing an execution-verb (e.g., \textit{write}) with an analysis-verb (e.g., \textit{discuss}) reliably flips the decision, suggesting it is mediated by a compact internal state. We construct 500 such paired prompts across Python, Java, and C++ (300 for mechanistic analysis, 200 held out for evaluation). We trace the decision to a vector, $\mu_\Delta$, that is both causally necessary and sufficient and generalizes beyond the discovery prompts to native multi-turn $\tau^2$-Bench trajectories and verb-free requests. Behavioral ablations show that the scaffold establishes a tool-call prior; Transcoder decomposition then reveals that analysis verbs suppress this prior through features signaling that tool use is unnecessary, whereas execution verbs largely leave it intact. Downstream scaffold-reading attention heads and MLP features read out the resulting state, and the same mechanism recurs across seven models from the Qwen, Mistral, and Granite families. Our code is available at https://github.com/XijieGo/MI4ToolCalling.
Title:How Do Agentic LLMs Decide to Call Tools? A Tool-Call Vector Shaped by Suppression
Abstract:Tool calling, invoking external tools on demand, is central to agentic LLMs, yet the mechanism that decides whether a model calls a tool or responds directly remains poorly understood. Agentic prompts are long and heavily scaffolded, combining role instructions, tool schemas, format templates, and the user's request across hundreds of tokens, creating a noisy, highly entangled context in which no single controllable variable for mechanistic analysis is obvious. To obtain such a variable, we propose a method that converts complex agentic prompts into minimal contrastive pairs in which a single request verb determines the tool-call decision: replacing an execution-verb (e.g., \textit{write}) with an analysis-verb (e.g., \textit{discuss}) reliably flips the decision, suggesting it is mediated by a compact internal state. We construct 500 such paired prompts across Python, Java, and C++ (300 for mechanistic analysis, 200 held out for evaluation). We trace the decision to a vector, $\mu_\Delta$, that is both causally necessary and sufficient and generalizes beyond the discovery prompts to native multi-turn $\tau^2$-Bench trajectories and verb-free requests. Behavioral ablations show that the scaffold establishes a tool-call prior; Transcoder decomposition then reveals that analysis verbs suppress this prior through features signaling that tool use is unnecessary, whereas execution verbs largely leave it intact. Downstream scaffold-reading attention heads and MLP features read out the resulting state, and the same mechanism recurs across seven models from the Qwen, Mistral, and Granite families. Our code is available at this https URL.
Artificial Intelligence (cs.AI); Machine Learning (cs.LG)
arXiv:2610.09624 [cs.AI]
(or arXiv:2610.09624v1 [cs.AI] for this version)
https://doi.org/10.48550/arXiv.2610.09624 Focus to learn more arXiv-issued DOI via DataCite (pending registration)
arXivLabs is a framework that allows collaborators to develop and share new arXiv features directly on our website.
Both individuals and organizations that work with arXivLabs have embraced and accepted our values of openness, community, excellence, and user data privacy. arXiv is committed to these values and only works with partners that adhere to them.
Have an idea for a project that will add value for arXiv's community? Learn more about arXivLabs.
Full text under the publisher's open licence · 349 words
Related coverage

Presentation: Postgres for Production Agents: Your Relational Foundation for Enterprise AI
InfoQ · Jul 15, 2026

Presentation: Building Reusable Evaluation Frameworks for Agentic AI Products
InfoQ · Oct 5, 2026

Presentation: Beyond Prompting: Context Engineering for Production-Grade AI
InfoQ · Sep 2, 2026

Presentation: Autonomous Data Products for the Autonomous Era: Rethinking Data Architecture for GenAI
InfoQ · Jul 24, 2026