Large language models (LLMs) are increasingly deployed with external tools that extend what they can do beyond their own knowledge. Tools help on tasks that need external information, but their availability may also change how a model handles questions that do not need them. Prior work has mostly asked whether models select and use tools appropriately; whether an unnecessary tool changes the correctness of answers has received less attention. We ask whether making a related but unnecessary tool available affects a model's ability to answer from its own knowledge, and whether a preceding tool interaction changes this behaviour. We construct 500 query pairs across 10 knowledge domains. Each pair consists of a tool query, which needs the domain's tool, and a closed-domain query, which does not. Six LLMs are evaluated with the tool unavailable, available, and available after a prior tool call. Across 3,000 baseline trials the pooled answer rate is 98.2%. When an unnecessary tool is available it falls to 63.5%, with large differences between models. The decrease occurs even when the tool is rarely called, so it cannot be explained by unnecessary tool invocation alone. A one-sentence scope-aware system instruction recovers most of the lost answers.
Figures & tables
Figure 1: Illustration of the effect studied in this paper. The same closed-domain question is answered correctly when no tool is available (left) but not when a related, unnecessary tool is available (right).
Tool
Domain
Example tool query qn
Example closed-domain query qnˉ
Astronomical data lookup
Basic astronomy
Current distance from Earth to Mars in kilometres
Which planet is closest to the Sun?
Chemical-property lookup
Basic chemistry
Look up the boiling point of benzene
What electrical charge does a neutron have?
Currency conversion
Currency knowledge
Convert 100 USD to EUR
What is the currency code for the euro?
Current weather lookup
Weather and climate
What is the current weather in Paris?
Which atmospheric layer contains most weather?
Definite integration
Indefinite integration
Evaluate ∫02x2dx
Find the indefinite integral of x2
Election-result lookup
Political systems and civics
Recorded winner of the 2019 UK general election
What is meant by the rule of law?
Table 1: The ten domains, each contributing 50 query pairs. The tool query qn requires the domain tool t ; the closed-domain query qnˉ is answerable without it and lies outside the function of t .
Answer rate (%)
Tool use (%)
Model
C1
C2
C3
C4
C1
C3
C4
Gemini 2.5 Flash-Lite
78.8
99.4
23.4
39.0
85.8
7.8
6.0
Gemini 2.5 Flash
98.6
99.6
59.4
56.0
99.2
19.4
18.8
Gemini 2.5 Pro
95.4
99.8
65.6
63.2
98.2
26.0
22.2
GPT-OSS 20B
84.6
95.8
94.6
94.4
94.4
2.4
1.0
Grok 4.1 Fast
86.0
99.6
100.0
99.2
99.6
16.0
2.8
Table 2: Answer rates and tool-use rates across ten domains (50 trials per domain; N=500 per model and condition). C2 has no available tool, so tool use is not applicable.
Model
T–T–T
T–T–F
T–F–T
T–F–F
Total
Gemini 2.5 Flash-Lite
96
21
99
281
497
Gemini 2.5 Flash
215
81
64
138
498
Gemini 2.5 Pro
242
86
74
97
499
GPT-OSS 20B
456
9
8
6
479
Grok 4.1 Fast
494
4
0
0
498
Llama 3.3 70B
154
31
165
124
474
Table 3: Trial-level correctness trajectories across C2 – C4 , restricted to trials answered correctly in C2 . T–F–T denotes an answer lost in C3 and recovered in C4 ; T–T–F denotes an answer lost only after the preceding tool interaction.
Figure 2: Distribution of C3 answer rates across the six models, by domain. Labels give the minimum, 25th percentile, median, 75th percentile and maximum; red points mark the mean. All panels share the same 0–100% scale.
C3 answer rate
Defended
Model
Undefended
Defended
Change
C4 answer
C1 answer
C1 tool use
Gemini 2.5 Flash-Lite
23.4
64.4
+41.0
72.2
95.8
90.0
Gemini 2.5 Flash
59.4
93.8
+34.4
85.6
94.0
97.4
Gemini 2.5 Pro
65.6
93.4
+27.8
88.8
86.8
98.6
GPT-OSS 20B
94.6
95.2
+0.6
94.4
79.8
72.4
Grok 4.1 Fast
100.0
97.6
−2.4
96.4
85.4
89.8
Table 4: Effect of the scope-aware system instruction. Answer and tool-use rates are percentages; the change in C3 is in percentage points relative to the undefended condition.