Populate from CICS found dozens of programs. Which ones become tools?

Populate from CICS listed far more programs than this agent should call. Do we publish all of them?

No. Bulk populate discovers programs through CMCI, matches COBOL and copybooks, and can publish them as REST system APIs. Publish only the operations the agent is allowed to run. A browsed catalog entry is not a tool until you publish it. The call then runs as that API, under the credential you assigned, not as a copy of the data.