How to protect tools

[psociety]

I've have an auth middleware set and i want to return the user a list of tools depending on what tools can he use.
Can tools be a callback so it can be dynamically set? Or what's the proper way to do it?