ToolFailBench: Diagnosing Tool-Use Failures in LLM Agents
On the map: LLM agents and tool use → Tool learning and function calling
Abstract (arXiv)
Tool calling is central to modern language model agents, but aggregate benchmark scores often hide where tool use fails. A model that never calls a needed tool and a model that calls the tool but ignores the result can look similar under final task accuracy. We introduce ToolFailBench, a diagnostic benchmark for measuring tool-use failures across 1,000 tasks in finance, medicine, law, cybersecurity, and real estate. Tool-required tasks return values the model wouldn't guess, forcing it to trust the tool while control tasks attach the same tools but should be answered directly. We label each trace with Tool-Skip, Result-Ignore, Output-Fabrication, and Unnecessary-Tool-Use, using a rule classifier and two LLM judges aggregated by majority vote. Across 19 headline models, the best reaches 86.33% Clean Tool-Use Rate, showing that faithful tool use is not saturated. More importantly, models with similar aggregate scores fail in different ways: most stay disciplined on no-tool controls, while Llama-3.1 models show an Always-Call pattern, and at the same parameter scale Llama-3.1-70B and Qwen2.5-72B differ by 89 percentage points on control-task accuracy. Tool-use evaluation should measure not only whether agents call tools, but whether they use tool outputs correctly and avoid tools when none is needed.
Key facts. Cited by 8 papers in the map (data through 7 Oct 2026). Placed in Tool learning and function calling, one of 16 directions in LLM agents and tool use. Builds on 17 of its 42 references that are in the map. First posted on arXiv 6 Jul 2026.
Builds on
17 of 42 references.
Closest ancestors · 6
Same direction, newest first
- 2025SMART: Self-Aware Agent for Tool Overuse Mitigation17 Feb
- 2024StableToolBench: Towards Stable Large-Scale Benchmarking on Tool Learning of Large Language Models12 Mar
- 2023ToolLLM: Facilitating Large Language Models to Master 16000+ Real-world APIs31 Jul
- 2023Gorilla: Large Language Model Connected with Massive APIs24 May
- 2023API-Bank: A Comprehensive Benchmark for Tool-Augmented LLMs14 Apr
- 2023Toolformer: Language Models Can Teach Themselves to Use Tools9 Feb
Other references · 11
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,393
- 2023Efficient Memory Management for Large Language Model Serving with PagedAttentioncited by 5,767
- 2023SWE-bench: Can Language Models Resolve Real-World GitHub Issues?cited by 3,193
- 2024τ-bench: A Benchmark for Tool-Agent-User Interaction in Real-World Domainscited by 1,280
- 2024AppWorld: A Controllable World of Apps and People for Benchmarking Interactive Coding Agentscited by 359
- 2024ToolSandbox: A Stateful, Conversational, Interactive Evaluation Benchmark for LLM Tool Use Capabilitiescited by 272
- 2024The Effect of Sampling Temperature on Problem Solving in Large Language Modelscited by 168
- 2024The Good, The Bad, and The Greedy: Evaluation of LLMs Should Not Ignore Non-Determinismcited by 113
- 2025Finance Agent Benchmark: Benchmarking LLMs on Real-world Financial Research Taskscited by 63
- 2025MedAgentBench: A Realistic Virtual EHR Environment to Benchmark Medical LLM Agentscited by 56
- 2024ToolBeHonest: A Multi-level Hallucination Diagnostic Benchmark for Tool-Augmented Large Language Modelscited by 25
Built on by
Citing papers per year: 2026: 8.
8 papers.
- 2026Execution-First Synthetic Tool-Use Trace Generation for LLM Agentscited by 1
- 2026Policy-Masked Private Experts: Auditable and Reversible Capability Access Control in Sparse MoE Modelscited by 0
- 2026Source-Dependent Deference in Medical Imaging Agents Under Falsified Findings: A Pilot Auditcited by 0
- 2026Interface-Induced Trajectory Censoringcited by 0
- 2026Fabrication After Tool Failure: Tool-Augmented Agents Assert Values Their Tools Did Not Returncited by 0
- 2026BLINDSPOT: A Benchmark for Safety and Refusal Calibration in Long-Horizon Tool-Using Agentscited by 0
- 2026What Stops a Small Language Model From Driving a Database Agentcited by 0
- 2026Silent Failures in Agent-Tool Interaction: An Audit of ToolUniversecited by 0
- 2026Silent Failures in Agent-Tool Interaction: An Audit of ToolUniverse21 Sep 2026
- 2026What Stops a Small Language Model From Driving a Database Agent18 Sep 2026
- 2026BLINDSPOT: A Benchmark for Safety and Refusal Calibration in Long-Horizon Tool-Using Agents14 Sep 2026
- 2026Fabrication After Tool Failure: Tool-Augmented Agents Assert Values Their Tools Did Not Return13 Sep 2026
- 2026Interface-Induced Trajectory Censoring3 Sep 2026
- 2026Source-Dependent Deference in Medical Imaging Agents Under Falsified Findings: A Pilot Audit30 Aug 2026
- 2026Policy-Masked Private Experts: Auditable and Reversible Capability Access Control in Sparse MoE Models7 Aug 2026
- 2026Execution-First Synthetic Tool-Use Trace Generation for LLM Agents31 Jul 2026
Similar, not cited
Close in wording, no citation either way
- 2026ToolRobustBench: Stage-Wise Perturbation Evaluation and Failure Diagnosis for Tool-Calling Agents
- 2026ToolMenuBench: Benchmarking Tool-Menu Filtering Strategies for Reliable and Efficient LLM Agents
- 2026Calibration is the Bottleneck: An Action-Class Diagnostic of Multi-Turn Tool-Calling
- 2026The Calls are Coming from Inside the Model: Investigating Probe-based Detection of Tool-Calling Errors in LLMs
- 2026AgentProcessBench: Diagnosing Step-Level Process Quality in Tool-Using Agents
- 2026Benchmarking the Benchmarks: A Validity Audit of Tool-Calling Evaluation
- 2026Loud Failures, Quiet Failures: Fault Detection and Recovery in Tool-Using Language Model Agents
- 2025TRAJECT-Bench:A Trajectory-Aware Benchmark for Evaluating Agentic Tool Use