Towards Reliable Benchmarking: A Contamination Free, Controllable Evaluation Framework for Multi-step LLM Function Calling
On the map: LLM agents and tool use → Tool learning and function calling
Abstract (arXiv)
Existing benchmarks for tool-augmented language models (TaLMs) lack fine-grained control over task difficulty and remain vulnerable to data contamination. We present FuncBenchGen, a unified, contamination-free framework that evaluates TaLMs by generating synthetic multi-step tool-use tasks to stress-test TaLMs. The key idea is to cast tool use as traversal over a hidden function-dependency DAG where models must infer the correct sequence of calls to compute a target value. FuncBenchGen allows precise control over task difficulty (e.g., graph size, dependency depth, and distractor functions) while avoiding pretraining/test-time leakage. Our evaluation demonstrates reasoning-optimized models consistently outperform general-purpose models with GPT-5 significantly outperforming other available models. Performance declines sharply as dependency depth increases. Furthermore, connected distractors -- irrelevant functions sharing type-compatible variables with relevant functions -- prove especially difficult to handle. Also, strong models often make syntactically valid function calls but propagate incorrect or stale argument values across steps, revealing brittle state tracking by LLMs in multi-turn tool use. Motivated by this observation, we introduce a simple mitigation strategy that explicitly restates prior variable values to the agent at each step. Surprisingly, this lightweight change yields substantial gains across models. e.g., yielding an improvement in success rate from 62.5% to 81.3% for GPT-5.
Key facts. Cited by 13 papers in the map (data through 14 Oct 2026). Placed in Tool learning and function calling, one of 16 directions in LLM agents and tool use. Builds on 25 of its 32 references that are in the map. First posted on arXiv 30 Sep 2025.
Builds on
25 of 32 references.
Closest ancestors · 11
Same direction, newest first
- 2025MCP-Universe: Benchmarking Large Language Models with Real-World Model Context Protocol Servers20 Aug
- 2025ToolHaystack: Stress-Testing Tool-Augmented Language Models in Realistic Long-Term Interactions29 May
- 2025LongFuncEval: Measuring the effectiveness of long context models for function calling30 Apr
- 2025ToolDial: Multi-turn Dialogue Generation Method for Tool-Augmented Language Models1 Mar
- 2025ComplexFuncBench: Exploring Multi-Step and Constrained Function Calling under Long-Context Scenario17 Jan
- 2025CallNavi, A Challenge and Empirical Study on LLM Function Calling and Routing9 Jan
- 2024ToolACE: Winning the Points of LLM Function Calling2 Sep
- 2024Tool-Planner: Task Planning with Clusters across Multiple Tools6 Jun
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIs31 Jul
- 2023Gorilla: Large Language Model Connected with Massive APIs24 May
- 2023API-Bank: A Comprehensive Benchmark for Tool-Augmented LLMs14 Apr
Other references · 14
- 2025Gemini 2.5: Pushing the Frontier with Advanced Reasoning, Multimodality, Long Context, and Next Generation Agentic Capabilitiescited by 3,796
- 2024RULER: What's the Real Context Size of Your Long-Context Language Models?cited by 1,346
- 2023Large Language Models Can Be Easily Distracted by Irrelevant Contextcited by 841
- 2024GSM-Symbolic: Understanding the Limitations of Mathematical Reasoning in Large Language Modelscited by 550
- 2025The Illusion of Thinking: Understanding the Strengths and Limitations of Reasoning Models via the Lens of Problem Complexitycited by 302
- 2024CRUXEval: A Benchmark for Code Reasoning, Understanding and Executioncited by 300
- 2024LiveBench: A Challenging, Contamination-Limited LLM Benchmarkcited by 262
- 2022FOLIO: Natural Language Reasoning with First-Order Logiccited by 235
- 2024Reasoning Runtime Behavior of a Program with LLM: How Far Are We?cited by 45
- 2024Multi-LogiEval: Towards Evaluating Multi-Step Logical Reasoning Ability of Large Language Modelscited by 39
- 2024Tools Fail: Detecting Silent Errors in Faulty Toolscited by 25
- 2025Search-Time Data Contaminationcited by 19
Built on by
Citing papers per year: 2025: 2; 2026: 11.
13 papers.
Sort:
By area:
- 2026The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestrationcited by 14
- 2026Agent-Diff: Benchmarking LLM Agents on Enterprise API Tasks via Code Execution with State-Diff-Based Evaluationcited by 13
- 2025Natural Language Tools: A Natural Language Approach to Tool Calling In Large Language Agentscited by 3
- 2026RODS: Reward-Driven Online Data Synthesis for Multi-Turn Tool-Use Agentscited by 2
- 2026AgentJudgeBench: A Multi-Difficulty Benchmark for Evaluating LLM Judges on Agentic Tool-Callingcited by 2
- 2026Enhancing Tool Calling in LLMs with the International Tool Calling Datasetcited by 1
- 2025From Proof to Program: Characterizing Tool-Induced Reasoning Hallucinations in Large Language Modelscited by 0
- 2026PluginEval: A Diagnostic Benchmark for Fine-Grained Error Attribution in Function Callingcited by 0
- 2026Agent Seer: Synthesizing Scenarios from Specification Understandingcited by 0
- 2026Invocation-Level Reliability of Tool-Using Agentscited by 0
- 2026Multi-Step Tool-Calling over Korean Open Public APIs: A Benchmark and a Data-Synthesis Recipecited by 0
- 2026EDGEGEN: Improving Tool-Calling Agents Beyond Happy Paths with Synthetic Edge Case Generationcited by 0
- 2026Quantization Thresholds Replicate, Failure Modes Do Not: A Three-Model Study of Agentic Tool Use in Polish from 8-bit to 2-bit25 Sep 2026
- 2026EDGEGEN: Improving Tool-Calling Agents Beyond Happy Paths with Synthetic Edge Case Generation21 Sep 2026
- 2026Multi-Step Tool-Calling over Korean Open Public APIs: A Benchmark and a Data-Synthesis Recipe4 Sep 2026
- 2026AgentJudgeBench: A Multi-Difficulty Benchmark for Evaluating LLM Judges on Agentic Tool-Calling27 Aug 2026
- 2026Invocation-Level Reliability of Tool-Using Agents23 Aug 2026
- 2026PluginEval: A Diagnostic Benchmark for Fine-Grained Error Attribution in Function Calling9 Aug 2026
- 2026Agent Seer: Synthesizing Scenarios from Specification Understanding24 Jun 2026
- 2026RODS: Reward-Driven Online Data Synthesis for Multi-Turn Tool-Use Agents17 Jun 2026
- 2026The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration24 Mar 2026
- 2026Agent-Diff: Benchmarking LLM Agents on Enterprise API Tasks via Code Execution with State-Diff-Based Evaluation11 Feb 2026
- 2026Enhancing Tool Calling in LLMs with the International Tool Calling Dataset21 Jan 2026
- 2025From Proof to Program: Characterizing Tool-Induced Reasoning Hallucinations in Large Language Models14 Nov 2025
- 2026The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestrationcited by 14
- 2026Agent-Diff: Benchmarking LLM Agents on Enterprise API Tasks via Code Execution with State-Diff-Based Evaluationcited by 13
- 2025Natural Language Tools: A Natural Language Approach to Tool Calling In Large Language Agentscited by 3
- 2026AgentJudgeBench: A Multi-Difficulty Benchmark for Evaluating LLM Judges on Agentic Tool-Callingcited by 2
- 2026Enhancing Tool Calling in LLMs with the International Tool Calling Datasetcited by 1
- 2026PluginEval: A Diagnostic Benchmark for Fine-Grained Error Attribution in Function Callingcited by 0
- 2026Agent Seer: Synthesizing Scenarios from Specification Understandingcited by 0
- 2026Multi-Step Tool-Calling over Korean Open Public APIs: A Benchmark and a Data-Synthesis Recipecited by 0
- 2026EDGEGEN: Improving Tool-Calling Agents Beyond Happy Paths with Synthetic Edge Case Generationcited by 0
- 2026Quantization Thresholds Replicate, Failure Modes Do Not: A Three-Model Study of Agentic Tool Use in Polish from 8-bit to 2-bitcited by 0
- 2026Quantization Thresholds Replicate, Failure Modes Do Not: A Three-Model Study of Agentic Tool Use in Polish from 8-bit to 2-bit25 Sep 2026
- 2026EDGEGEN: Improving Tool-Calling Agents Beyond Happy Paths with Synthetic Edge Case Generation21 Sep 2026
- 2026Multi-Step Tool-Calling over Korean Open Public APIs: A Benchmark and a Data-Synthesis Recipe4 Sep 2026
- 2026AgentJudgeBench: A Multi-Difficulty Benchmark for Evaluating LLM Judges on Agentic Tool-Calling27 Aug 2026
- 2026PluginEval: A Diagnostic Benchmark for Fine-Grained Error Attribution in Function Calling9 Aug 2026
- 2026Agent Seer: Synthesizing Scenarios from Specification Understanding24 Jun 2026
- 2026The Evolution of Tool Use in LLM Agents: From Single-Tool Call to Multi-Tool Orchestration24 Mar 2026
- 2026Agent-Diff: Benchmarking LLM Agents on Enterprise API Tasks via Code Execution with State-Diff-Based Evaluation11 Feb 2026
- 2026Enhancing Tool Calling in LLMs with the International Tool Calling Dataset21 Jan 2026
- 2025Natural Language Tools: A Natural Language Approach to Tool Calling In Large Language Agents16 Oct 2025
- 2026Invocation-Level Reliability of Tool-Using Agentscited by 0
- 2026Invocation-Level Reliability of Tool-Using Agents23 Aug 2026
Similar, not cited
Close in wording, no citation either way
- 2026Benchmarking the Benchmarks: A Validity Audit of Tool-Calling Evaluation
- 2026Try, Check and Retry: A Divide-and-Conquer Framework for Boosting Long-context Tool-Calling Performance of LLMs
- 2026ToolMenuBench: Benchmarking Tool-Menu Filtering Strategies for Reliable and Efficient LLM Agents
- 2025Dynamic Benchmarking of Reasoning Capabilities in Code Large Language Models Under Data Contamination
- 2025FunReason: Enhancing Large Language Models' Function Calling via Self-Refinement Multiscale Loss and Automated Data Refinement
- 2026ToolRobustBench: Stage-Wise Perturbation Evaluation and Failure Diagnosis for Tool-Calling Agents
- 2025ToolPRM: Fine-Grained Inference Scaling of Structured Outputs for Function Calling
- 2026The Calls are Coming from Inside the Model: Investigating Probe-based Detection of Tool-Calling Errors in LLMs