RoTBench: A Multi-Level Benchmark for Evaluating the Robustness of Large Language Models in Tool Learning
On the map: LLM agents and tool use → Tool learning and function calling
Abstract (arXiv)
Tool learning has generated widespread interest as a vital means of interaction between Large Language Models (LLMs) and the physical world. Current research predominantly emphasizes LLMs' capacity to utilize tools in well-structured environments while overlooking their stability when confronted with the inevitable noise of the real world. To bridge this gap, we introduce RoTBench, a multi-level benchmark for evaluating the robustness of LLMs in tool learning. Specifically, we establish five external environments, each featuring varying levels of noise (i.e., Clean, Slight, Medium, Heavy, and Union), providing an in-depth analysis of the model's resilience across three critical phases: tool selection, parameter identification, and content filling. Experiments involving six widely-used models underscore the urgent necessity for enhancing the robustness of LLMs in tool learning. For instance, the performance of GPT-4 even drops significantly from 80.00 to 58.10 when there is no substantial change in manual accuracy. More surprisingly, the noise correction capability inherent in the GPT family paradoxically impedes its adaptability in the face of mild noise. In light of these findings, we propose RoTTuning, a strategy that enriches the diversity of training environments to bolster the robustness of LLMs in tool learning. The code and data are available at https://github.com/Junjie-Ye/RoTBench.
Key facts. Cited by 45 papers in the map (data through 7 Oct 2026). Placed in Tool learning and function calling, one of 16 directions in LLM agents and tool use. Builds on 21 of its 34 references that are in the map. First posted on arXiv 16 Jan 2024.
Builds on
21 of 34 references.
Closest ancestors · 7
Same direction, newest first
- 2023MetaTool Benchmark for Large Language Models: Deciding Whether to Use Tools and Which to Use4 Oct
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIs31 Jul
- 2023ToolQA: A Dataset for LLM Question Answering with External Tools23 Jun
- 2023ToolAlpaca: Generalized Tool Learning for Language Models with 3000 Simulated Cases8 Jun
- 2023ToolkenGPT: Augmenting Frozen Language Models with Massive Tools via Tool Embeddings19 May
- 2023Tool Learning with Foundation Models17 Apr
- 2023Toolformer: Language Models Can Teach Themselves to Use Tools9 Feb
Other references · 14
- 2020Language Models are Few-Shot Learnerscited by 32,199
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2023Llama 2: Open Foundation and Fine-Tuned Chat Modelscited by 12,865
- 2022ReAct: Synergizing Reasoning and Acting in Language Modelscited by 8,355
- 2022Constitutional AI: Harmlessness from AI Feedbackcited by 2,950
- 2022Self-Instruct: Aligning Language Models with Self-Generated Instructionscited by 2,674
- 2023Extending Context Window of Large Language Models via Positional Interpolationcited by 721
- 2023AgentTuning: Enabling Generalized Agent Abilities for LLMscited by 319
- 2023A Comprehensive Capability Analysis of GPT-3 and GPT-3.5 Series Modelscited by 244
- 2023On the Robustness of ChatGPT: An Adversarial and Out-of-distribution Perspectivecited by 208
- 2023Foundation Models for Decision Making: Problems, Methods, and Opportunitiescited by 160
- 2023How Robust is GPT-3.5 to Predecessors? A Comprehensive Study on Language Understanding Taskscited by 58
Built on by
Citing papers per year: 2024: 7; 2025: 19; 2026: 19.
45 papers.
Sort:
By area:
- 2024Tool Learning with Large Language Models: A Surveycited by 221
- 2024ToolSword: Unveiling Safety Issues of Large Language Models in Tool Learning Across Three Stagescited by 77
- 2025ToolHop: A Query-Driven Benchmark for Evaluating Large Language Models in Multi-Hop Tool Usecited by 48
- 2025Retrieval Models Aren't Tool-Savvy: Benchmarking Tool Retrieval for Large Language Modelscited by 46
- 2024Speech-Copilot: Leveraging Large Language Models for Speech Processing via Task Decomposition, Modularization, and Program Generationcited by 27
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputscited by 25
- 2025CRITICTOOL: Evaluating Self-Critique Capabilities of Large Language Models in Tool-Calling Error Scenarioscited by 19
- 2025Feedback-Driven Tool-Use Improvements in Large Language Models via Automated Build Environmentscited by 19
- 2025On the Robustness of Agentic Function Callingcited by 17
- 2024ElecBench: a Power Dispatch Evaluation Benchmark for Large Language Modelscited by 12
- 2026VLM-RobustBench: A Comprehensive Benchmark for Robustness of Vision-Language Modelscited by 12
- 2024TL-Training: A Task-Feature-Based Framework for Training Large Language Models in Tool Usecited by 11
33 more
- 2026The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestrationcited by 11
- 2025GenTool: Enhancing Tool Generalization in Language Models through Zero-to-One and Weak-to-Strong Simulationcited by 9
- 2024Can Tool-augmented Large Language Models be Aware of Incomplete Conditions?cited by 8
- 2025Impatient Users Confuse AI Agents: High-fidelity Simulations of Human Traits for Testing Agentscited by 8
- 2026SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtimecited by 8
- 2025Trustworthy Medical Question Answering: An Evaluation-Centric Surveycited by 7
- 2025Analyzing the Effects of Supervised Fine-Tuning on Model Knowledge from Token and Parameter Levelscited by 7
- 2025ToolSpectrum : Towards Personalized Tool Utilization for Large Language Modelscited by 6
- 2025DICE-BENCH: Evaluating the Tool-Use Capabilities of Large Language Models in Multi-Round, Multi-Party Dialoguescited by 6
- 2025Don't Adapt Small Language Models for Tools; Adapt Tool Schemas to the Modelscited by 6
- 2025FamilyTool: A Multi-hop Personalized Tool Use Benchmarkcited by 5
- 2026When Simulation Lies: A Sim-to-Real Benchmark and Domain-Randomized RL Recipe for Tool-Use Agentscited by 5
- 2024What Affects the Stability of Tool Learning? An Empirical Study on the Robustness of Tool Learning Frameworkscited by 4
- 2026MME-CoF-Pro: Evaluating Reasoning Coherence in Video Generative Models with Text and Visual Hintscited by 4
- 2025PEToolLLM: Towards Personalized Tool Learning in Large Language Modelscited by 3
- 2026FinToolSyn: A forward synthesis Framework for Financial Tool-Use Dialogue Data with Dynamic Tool Retrievalcited by 3
- 2026Can Agents Generalize to the Open World? Unveiling the Fragility of Static Training in Tool Usecited by 3
- 2025LLMEval-Fair: A Large-Scale Longitudinal Study on Robust and Fair Evaluation of Large Language Modelscited by 2
- 2025Tool-RoCo: An Agent-as-Tool Self-organization Large Language Model Benchmark in Multi-robot Cooperationcited by 2
- 2026Agentic Tool Use in Large Language Modelscited by 2
- 2026DART-SD: Diamond-topology Aware Retrieval and Tuning for Self-Distillation of Multi-Turn Tool-Calling Agentscited by 2
- 2026ToolRobustBench: Stage-Wise Perturbation Evaluation and Failure Diagnosis for Tool-Calling Agentscited by 2
- 2025RRTL: Red Teaming Reasoning Large Language Models in Tool Learningcited by 1
- 2026Enhancing Tool Calling in LLMs with the International Tool Calling Datasetcited by 1
- 2026Are Android GUI Agents Robust Against Runtime Anomalies? AnTrap: Evaluating Agents in Dynamic Adversarial Environmentscited by 1
- 2025OR-Toolformer: Modeling and Solving Operations Research Problems with Tool Augmented Large Language Modelscited by 0
- 2026When a Zero-Shooter Cheats: Improving Age Estimation via Activation Steeringcited by 0
- 2026Cross-View Correspondence Is a Measurement Intervention: Two-Sided Validation for Agent Evaluation and Credit Assignmentcited by 0
- 2026Invocation-Level Reliability of Tool-Using Agentscited by 0
- 2026BlueprintAgent: Constraint-Triggered Targeted Revisits for Simulation-Ready Generation from Scanned Structural Blueprintscited by 0
- 2026When Does Action Credit Need Updating?cited by 0
- 2026Action-Space Shaping for LLM Agents: Measuring and Mitigating Tool-Schema Biascited by 0
- 2026AdviSD: Learning to Advise Frontier LLMs via Targeted Multi-Turn Self-Distillationcited by 0
- 2026AdviSD: Learning to Advise Frontier LLMs via Targeted Multi-Turn Self-Distillation29 Sep 2026
- 2026Action-Space Shaping for LLM Agents: Measuring and Mitigating Tool-Schema Bias28 Sep 2026
- 2026When Does Action Credit Need Updating?24 Sep 2026
- 2026BlueprintAgent: Constraint-Triggered Targeted Revisits for Simulation-Ready Generation from Scanned Structural Blueprints7 Sep 2026
- 2026Are Android GUI Agents Robust Against Runtime Anomalies? AnTrap: Evaluating Agents in Dynamic Adversarial Environments25 Aug 2026
- 2026Invocation-Level Reliability of Tool-Using Agents23 Aug 2026
- 2026ToolRobustBench: Stage-Wise Perturbation Evaluation and Failure Diagnosis for Tool-Calling Agents23 Aug 2026
- 2026DART-SD: Diamond-topology Aware Retrieval and Tuning for Self-Distillation of Multi-Turn Tool-Calling Agents19 Aug 2026
- 2026Cross-View Correspondence Is a Measurement Intervention: Two-Sided Validation for Agent Evaluation and Credit Assignment18 Aug 2026
- 2026Can Agents Generalize to the Open World? Unveiling the Fragility of Static Training in Tool Use1 Jul 2026
- 2026When a Zero-Shooter Cheats: Improving Age Estimation via Activation Steering17 May 2026
- 2026When Simulation Lies: A Sim-to-Real Benchmark and Domain-Randomized RL Recipe for Tool-Use Agents12 May 2026
33 more
- 2026Agentic Tool Use in Large Language Models1 Apr 2026
- 2026FinToolSyn: A forward synthesis Framework for Financial Tool-Use Dialogue Data with Dynamic Tool Retrieval25 Mar 2026
- 2026The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration24 Mar 2026
- 2026MME-CoF-Pro: Evaluating Reasoning Coherence in Video Generative Models with Text and Visual Hints20 Mar 2026
- 2026VLM-RobustBench: A Comprehensive Benchmark for Robustness of Vision-Language Models6 Mar 2026
- 2026SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtime23 Feb 2026
- 2026Enhancing Tool Calling in LLMs with the International Tool Calling Dataset21 Jan 2026
- 2025Tool-RoCo: An Agent-as-Tool Self-organization Large Language Model Benchmark in Multi-robot Cooperation26 Nov 2025
- 2025Don't Adapt Small Language Models for Tools; Adapt Tool Schemas to the Models8 Oct 2025
- 2025Impatient Users Confuse AI Agents: High-fidelity Simulations of Human Traits for Testing Agents6 Oct 2025
- 2025OR-Toolformer: Modeling and Solving Operations Research Problems with Tool Augmented Large Language Models24 Sep 2025
- 2025Analyzing the Effects of Supervised Fine-Tuning on Model Knowledge from Token and Parameter Levels20 Sep 2025
- 2025Feedback-Driven Tool-Use Improvements in Large Language Models via Automated Build Environments12 Aug 2025
- 2025LLMEval-Fair: A Large-Scale Longitudinal Study on Robust and Fair Evaluation of Large Language Models7 Aug 2025
- 2025DICE-BENCH: Evaluating the Tool-Use Capabilities of Large Language Models in Multi-Round, Multi-Party Dialogues28 Jun 2025
- 2025CRITICTOOL: Evaluating Self-Critique Capabilities of Large Language Models in Tool-Calling Error Scenarios11 Jun 2025
- 2025Trustworthy Medical Question Answering: An Evaluation-Centric Survey4 Jun 2025
- 2025RRTL: Red Teaming Reasoning Large Language Models in Tool Learning21 May 2025
- 2025ToolSpectrum : Towards Personalized Tool Utilization for Large Language Models19 May 2025
- 2025FamilyTool: A Multi-hop Personalized Tool Use Benchmark9 Apr 2025
- 2025On the Robustness of Agentic Function Calling1 Apr 2025
- 2025reWordBench: Benchmarking and Improving the Robustness of Reward Models with Transformed Inputs14 Mar 2025
- 2025Retrieval Models Aren't Tool-Savvy: Benchmarking Tool Retrieval for Large Language Models3 Mar 2025
- 2025GenTool: Enhancing Tool Generalization in Language Models through Zero-to-One and Weak-to-Strong Simulation26 Feb 2025
- 2025PEToolLLM: Towards Personalized Tool Learning in Large Language Models26 Feb 2025
- 2025ToolHop: A Query-Driven Benchmark for Evaluating Large Language Models in Multi-Hop Tool Use5 Jan 2025
- 2024TL-Training: A Task-Feature-Based Framework for Training Large Language Models in Tool Use20 Dec 2024
- 2024Speech-Copilot: Leveraging Large Language Models for Speech Processing via Task Decomposition, Modularization, and Program Generation13 Jul 2024
- 2024ElecBench: a Power Dispatch Evaluation Benchmark for Large Language Models7 Jul 2024
- 2024What Affects the Stability of Tool Learning? An Empirical Study on the Robustness of Tool Learning Frameworks3 Jul 2024
- 2024Can Tool-augmented Large Language Models be Aware of Incomplete Conditions?18 Jun 2024
- 2024Tool Learning with Large Language Models: A Survey28 May 2024
- 2024ToolSword: Unveiling Safety Issues of Large Language Models in Tool Learning Across Three Stages16 Feb 2024
- 2024Tool Learning with Large Language Models: A Surveycited by 221
- 2024ToolSword: Unveiling Safety Issues of Large Language Models in Tool Learning Across Three Stagescited by 77
- 2025ToolHop: A Query-Driven Benchmark for Evaluating Large Language Models in Multi-Hop Tool Usecited by 48
- 2025Retrieval Models Aren't Tool-Savvy: Benchmarking Tool Retrieval for Large Language Modelscited by 46
- 2025CRITICTOOL: Evaluating Self-Critique Capabilities of Large Language Models in Tool-Calling Error Scenarioscited by 19
- 2025Feedback-Driven Tool-Use Improvements in Large Language Models via Automated Build Environmentscited by 19
- 2025On the Robustness of Agentic Function Callingcited by 17
- 2024TL-Training: A Task-Feature-Based Framework for Training Large Language Models in Tool Usecited by 11
- 2026The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestrationcited by 11
- 2024Can Tool-augmented Large Language Models be Aware of Incomplete Conditions?cited by 8
- 2026SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtimecited by 8
- 2025DICE-BENCH: Evaluating the Tool-Use Capabilities of Large Language Models in Multi-Round, Multi-Party Dialoguescited by 6
12 most cited of 24 All 24 (JSON)
- 2026Action-Space Shaping for LLM Agents: Measuring and Mitigating Tool-Schema Bias28 Sep 2026
- 2026Are Android GUI Agents Robust Against Runtime Anomalies? AnTrap: Evaluating Agents in Dynamic Adversarial Environments25 Aug 2026
- 2026ToolRobustBench: Stage-Wise Perturbation Evaluation and Failure Diagnosis for Tool-Calling Agents23 Aug 2026
- 2026DART-SD: Diamond-topology Aware Retrieval and Tuning for Self-Distillation of Multi-Turn Tool-Calling Agents19 Aug 2026
- 2026Can Agents Generalize to the Open World? Unveiling the Fragility of Static Training in Tool Use1 Jul 2026
- 2026Agentic Tool Use in Large Language Models1 Apr 2026
- 2026FinToolSyn: A forward synthesis Framework for Financial Tool-Use Dialogue Data with Dynamic Tool Retrieval25 Mar 2026
- 2026The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration24 Mar 2026
- 2026SOK: A Taxonomy of Attack Vectors and Defense Strategies for Agentic Supply Chain Runtime23 Feb 2026
- 2026Enhancing Tool Calling in LLMs with the International Tool Calling Dataset21 Jan 2026
- 2025Tool-RoCo: An Agent-as-Tool Self-organization Large Language Model Benchmark in Multi-robot Cooperation26 Nov 2025
- 2025Feedback-Driven Tool-Use Improvements in Large Language Models via Automated Build Environments12 Aug 2025
12 newest of 24 All 24 (JSON)
- 2026MME-CoF-Pro: Evaluating Reasoning Coherence in Video Generative Models with Text and Visual Hintscited by 4
- 2025RRTL: Red Teaming Reasoning Large Language Models in Tool Learningcited by 1
- 2025OR-Toolformer: Modeling and Solving Operations Research Problems with Tool Augmented Large Language Modelscited by 0
- 2026MME-CoF-Pro: Evaluating Reasoning Coherence in Video Generative Models with Text and Visual Hints20 Mar 2026
- 2025OR-Toolformer: Modeling and Solving Operations Research Problems with Tool Augmented Large Language Models24 Sep 2025
- 2025RRTL: Red Teaming Reasoning Large Language Models in Tool Learning21 May 2025
- 2024Speech-Copilot: Leveraging Large Language Models for Speech Processing via Task Decomposition, Modularization, and Program Generationcited by 27
- 2024ElecBench: a Power Dispatch Evaluation Benchmark for Large Language Modelscited by 12
- 2025GenTool: Enhancing Tool Generalization in Language Models through Zero-to-One and Weak-to-Strong Simulationcited by 9
- 2025Impatient Users Confuse AI Agents: High-fidelity Simulations of Human Traits for Testing Agentscited by 8
- 2025Trustworthy Medical Question Answering: An Evaluation-Centric Surveycited by 7
- 2025Analyzing the Effects of Supervised Fine-Tuning on Model Knowledge from Token and Parameter Levelscited by 7
- 2025ToolSpectrum : Towards Personalized Tool Utilization for Large Language Modelscited by 6
- 2025Don't Adapt Small Language Models for Tools; Adapt Tool Schemas to the Modelscited by 6
- 2026When Simulation Lies: A Sim-to-Real Benchmark and Domain-Randomized RL Recipe for Tool-Use Agentscited by 5
- 2025LLMEval-Fair: A Large-Scale Longitudinal Study on Robust and Fair Evaluation of Large Language Modelscited by 2
- 2026Cross-View Correspondence Is a Measurement Intervention: Two-Sided Validation for Agent Evaluation and Credit Assignmentcited by 0
- 2026Invocation-Level Reliability of Tool-Using Agentscited by 0
12 most cited of 15 All 15 (JSON)
- 2026AdviSD: Learning to Advise Frontier LLMs via Targeted Multi-Turn Self-Distillation29 Sep 2026
- 2026When Does Action Credit Need Updating?24 Sep 2026
- 2026BlueprintAgent: Constraint-Triggered Targeted Revisits for Simulation-Ready Generation from Scanned Structural Blueprints7 Sep 2026
- 2026Invocation-Level Reliability of Tool-Using Agents23 Aug 2026
- 2026Cross-View Correspondence Is a Measurement Intervention: Two-Sided Validation for Agent Evaluation and Credit Assignment18 Aug 2026
- 2026When Simulation Lies: A Sim-to-Real Benchmark and Domain-Randomized RL Recipe for Tool-Use Agents12 May 2026
- 2025Don't Adapt Small Language Models for Tools; Adapt Tool Schemas to the Models8 Oct 2025
- 2025Impatient Users Confuse AI Agents: High-fidelity Simulations of Human Traits for Testing Agents6 Oct 2025
- 2025Analyzing the Effects of Supervised Fine-Tuning on Model Knowledge from Token and Parameter Levels20 Sep 2025
- 2025LLMEval-Fair: A Large-Scale Longitudinal Study on Robust and Fair Evaluation of Large Language Models7 Aug 2025
- 2025Trustworthy Medical Question Answering: An Evaluation-Centric Survey4 Jun 2025
- 2025ToolSpectrum : Towards Personalized Tool Utilization for Large Language Models19 May 2025
12 newest of 15 All 15 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2024ToolEyes: Fine-Grained Evaluation for Tool Learning Capabilities of Large Language Models in Real-world Scenarios
- 2025ToolACE-R: Model-aware Iterative Training and Adaptive Refinement for Tool Learning
- 2024Learning Evolving Tools for Large Language Models
- 2024StableToolBench: Towards Stable Large-Scale Benchmarking on Tool Learning of Large Language Models
- 2025ToLeaP: Rethinking Development of Tool Learning with Large Language Models
- 2025ToolACE-DEV: Self-Improving Tool Learning via Decomposition and EVolution
- 2025Enhancing Tool Learning in Large Language Models with Hierarchical Error Checklists
- 2025Alignment for Efficient Tool Calling of Large Language Models