--- title: What is extensibility? Meaning, examples, and extensible AI canonical: https://telnyx.com/learn-ai/extensibility-in-ai --- # What is extensibility? Meaning, examples, and extensible AI [Start building](https://telnyx.com/sign-up) ### Ask AI * [![GPT](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/chatgpt_icon-ea55e09d.jpeg?width=92&format=webp)](https://chat.openai.com/?q=What makes Telnyx's global network different, breakdown call quality for normal phone calls and voice AI calls.) * [![Claude](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/claude_icon-c7c8eef3.webp?width=92&format=webp)](https://claude.ai/new?q=What makes Telnyx's global network different, breakdown call quality for normal phone calls and voice AI calls.) * [![Perplexity](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/perplexity_icon-cd5b74f1.webp?width=92&format=webp)](https://www.perplexity.ai/search?q=What makes Telnyx's global network different, breakdown call quality for normal phone calls and voice AI calls.) * [![Gemini](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/gemini_icon-4ff1cbf4.webp?width=92&format=webp)](https://www.google.com/search?udm=50&aep=11&q=What makes Telnyx's global network different, breakdown call quality for normal phone calls and voice AI calls.) * [![Grok](https://d2efw2akbx8gaf.cloudfront.net/https://dotcom-payload-assets-prod.s3.us-east-1.amazonaws.com/cms-media/grok_icon-e588e5bd.webp?width=92&format=webp)](https://x.com/i/grok?text=What makes Telnyx's global network different, breakdown call quality for normal phone calls and voice AI calls.) [Back to Glossary](https://telnyx.com/learn-ai) # What is extensibility? Meaning, examples, and extensible AI Extensibility means adding capabilities without rebuilding the core. What it means in software, and how AI models and agents are extended with tools and MCP. Editor: [Andy Muns](https://www.linkedin.com/in/andy-muns/) **Updated October 2026** Extensibility is the ability of a system to take on new capabilities without being rebuilt. In software, new features attach without changes to the core. In AI, extensibility means adding tasks, knowledge or actions to a model or an AI agent, by adapting its weights or by connecting documents and tools, without retraining it from scratch. ## What is extensibility? An extensible system exposes extension points, such as plugin interfaces, APIs, hooks and event callbacks, where new behavior can attach without editing the code that already works. [D. L. Parnas](https://doi.org/10.1109/TSE.1979.234169) argued in 1979 for designing software "for ease of extension and contraction", so a program can gain or drop features without a rewrite. This content was generated with the assistance of AI. Our AI [prompt chain](https://telnyx.com/learn-ai/promptchain-ai) workflow is carefully [grounded](https://telnyx.com/learn-ai/grounding-ai) and preferences .gov and .edu citations when available. **All content is reviewed by a Telnyx employee to ensure accuracy, relevance, and a high standard of quality.** ## Sign up and start building. [Sign Up](https://telnyx.com/sign-up)[Contact Us](https://telnyx.com/contact-us) Extensions attach through a published interface, such as a plugin API. A stable interface keeps them compatible: an extension written today keeps working after the core is updated. In anatomy, extensibility means a muscle's ability to stretch. That sense is unrelated to software and AI. ## How does extensibility work in AI? Extensibility in AI works in two places: inside the model, by changing its weights, and around the model, by changing what it can read and what it can do while it runs. Changing the weights, through fine-tuning, adapters or further training, changes how the model behaves on its own and takes data and compute. [Code Llama](https://arxiv.org/abs/2308.12950) was built this way. Its authors started from Llama 2, a general language model, and trained it further on 500 billion to 1 trillion tokens, mostly code. Changing what surrounds the model leaves the weights alone: retrieved documents and instructions change what it sees, and tools change what it can do, from the next request onward. Each kind of capability has a natural home, shown here for a support assistant at an online store: * Tone, format and abilities the model needs on every request, such as the store's house style for replies, belong in the weights. * Reference facts, such as the returns policy and product manuals, belong in retrieval, where they can be updated and traced to a source. * Actions and live lookups, such as checking a customer's order status or issuing a refund, belong in tools. * Tools that several applications share, such as a ticketing system used by the support assistant and an internal IT assistant, belong on an MCP server. So do tools another team maintains. [Lewis and colleagues](https://arxiv.org/abs/2005.11401) updated their retrieval model's knowledge by swapping its document index. They asked it about 82 world leaders who changed between 2016 and 2018. With the 2016 index, it answered 70% of questions about 2016 leaders correctly. After a swap to the 2018 index, it answered 68% about 2018 leaders correctly. With the wrong year's index, it scored 12% or lower. A model that stores knowledge only in its weights needs further training to change what it knows. ## Extending AI models: fine-tuning, adapters, and transfer learning An AI model is extended by adapting what it already learned, instead of training a new model for every task. Transfer learning reuses what a model learned on one task for another. [Yosinski and colleagues](https://arxiv.org/abs/1411.1792) found that features learned on one image dataset carry over to others. [Fine-tuning](https://telnyx.com/resources/what-is-fine-tuning-ai) continues training a pretrained model on a smaller dataset for the new task. It costs far less than training from scratch, because the model starts with general features it already has. Full fine-tuning still produces a complete new copy of the model for each task. [Adapters](https://arxiv.org/abs/1902.00751) avoid that: a small trainable module per task, with the pretrained model frozen. Houlsby and colleagues describe the result as "a compact and extensible model", where new tasks are added without revisiting old ones. On the GLUE language benchmark, those adapters came within 0.4% of full fine-tuning while adding 3.6% of the parameters per task. [LoRA](https://arxiv.org/abs/2106.09685) freezes the weights and trains small low-rank matrices inside each layer. Against full fine-tuning of GPT-3 175B, its authors report 10,000 times fewer trainable parameters, a third of the GPU memory, and no added delay at inference. Adapters and LoRA need access to the model's weights. On a hosted model, the open routes are the provider's own fine-tuning service, where one exists, or extensions around the model. Multi-task learning is the up-front alternative to adding tasks later: one model trains on several related tasks at once, with shared layers. [Caruana](https://doi.org/10.1023/A:1007379606734) showed in 1997 that what one task teaches the shared layers can improve generalization on the others. Training a model on a new task can overwrite what the model learned for old ones, a failure called catastrophic forgetting. [Kirkpatrick and colleagues](https://arxiv.org/abs/1612.00796) reduced it by slowing learning on the weights most important to earlier tasks. ## Extending AI agents: tools, retrieval, and MCP An AI agent is extended by giving its language model new things to call or read: tools for actions, retrieval for knowledge, and standard connectors such as the Model Context Protocol (MCP). ### Tools and function calling With function calling, a developer describes a tool to the model by name, purpose and parameters. The model never runs the tool itself: it returns a structured request, a tool name plus arguments, and the application executes it. The result goes back to the model. Current models can call a new tool without retraining; calling it correctly is a separate question. [Telnyx Inference](https://developers.telnyx.com/docs/inference/functions) documents tool support on every model in its API. [ReAct](https://arxiv.org/abs/2210.03629) prompted a model to interleave reasoning with tool calls, with only one or two examples on its two decision-making benchmarks. [Toolformer](https://arxiv.org/abs/2302.04761) and [Gorilla](https://arxiv.org/abs/2305.15334) studied training tool use into a model. The Gorilla authors fine-tuned a model just for writing API calls, because general models often produced wrong arguments or used an API the wrong way. ### Retrieval Retrieval extends what an agent knows without retraining it. In [retrieval-augmented generation](https://arxiv.org/abs/2005.11401), the system searches an index at question time and the model writes its answer from the passages it finds. Retrieval fails when the index goes stale, when the search returns the wrong passage, or when a passage carries planted instructions the model will read. Write access to the index needs the same care as write access to code. ### Skills and plugins Skills and plugins package instructions, examples and tools for one job, and load only when a task needs them. Telnyx's [agent skills](https://telnyx.com/resources/ai-agent-skills-claude-code) for AI coding assistants teach an assistant to use each Telnyx SDK. Skills are text the model follows, so they can carry planted instructions. Telnyx's [prompt injection scanner](https://telnyx.com/resources/scan-agents-md-prompt-injection) flags risky instructions in agent instruction files such as AGENTS.md before an agent relies on them. ### The Model Context Protocol (MCP) The [Model Context Protocol](https://modelcontextprotocol.io/specification/2025-06-18) is an open standard for connecting AI applications to external systems, which [Anthropic](https://www.anthropic.com/news/model-context-protocol) open-sourced in November 2024. An MCP server offers tools, data and prompt templates over JSON-RPC 2.0, so any MCP-capable application can connect to it without custom integration code. The specification credits the Language Server Protocol, which did the same for code editors. To the model, an MCP tool is an ordinary function: the MCP client asks the server for its tool list and passes those definitions to the model. The choice between a built-in tool and an MCP server turns on who maintains the tool, how many applications share it, and whether the team controls the server. ## Examples of extensibility A support assistant that files a ticket mid-call is an example of extensibility in AI. Telnyx [voice AI agents](https://telnyx.com/products/voice-ai-agents) connect to Salesforce, Zendesk, ServiceNow and similar systems through built-in integrations. A coding assistant connected to the [Telnyx Local MCP Server](https://telnyx.com/resources/setting-up-telnyx-local-mcp-server) can buy phone numbers and set them up for an AI assistant from a chat prompt. Outside AI, a browser extension is the everyday example: an ad blocker or a password manager adds a feature through the browser's extension interface without changing the browser. ## Benefits and risks of extensible AI Extensible AI gains speed and reuse, since a new tool or retrieval source works from the next request, at the cost of a larger attack surface and more ways to fail. Fine-tuning carries two risks. A model trained on a new task can lose an old one, and the training data stays in the weights. [Carlini and colleagues](https://arxiv.org/abs/2012.07805) extracted hundreds of verbatim training sequences from GPT-2, including names, phone numbers and email addresses. Their attack recovered pretraining data; the same risk applies in principle to customer records used for fine-tuning. Retrieval and tools open the door to indirect prompt injection: instructions planted in data the model reads. LLM-integrated applications "blur the line between data and instructions", as [Greshake and colleagues](https://arxiv.org/abs/2302.12173) put it. They showed that planted text can steer the model and "control how and if other APIs are called". Anything a tool or a search returns is untrusted input. Third-party MCP servers and skills add the same risk one step earlier: the model reads their tool descriptions and instructions as text. The [MCP specification](https://modelcontextprotocol.io/specification/2025-06-18/server/tools) tells clients to treat descriptions of tool behavior as untrusted unless the server is trusted. A server earns that trust when the team runs it or has vetted who does, when it authenticates its clients, and when its tool definitions are reviewed again after every change. Servers that declare the capability send a notification when their tool list changes, which gives that review a trigger. Tools also turn wrong answers into wrong actions: a tool that can delete records will delete the wrong one if the model asks. The MCP specification says there "SHOULD always be a human in the loop with the ability to deny tool invocations." Two more controls follow from the same logic: make tools read-only unless they must write, and log every call with its arguments. In [AI guardrails](https://telnyx.com/learn-ai/ai-guardrails), checks on a tool's inputs can stop a bad call before it runs, and checks on its outputs can stop a bad result before the model reads it. Each tool call also adds a round trip and sends part of the conversation to another system. Latency and data exposure grow with every extension. ## Extensibility vs scalability Extensibility is about adding new kinds of capability; [scalability](https://telnyx.com/learn-ai/ai-scalability) is about handling more of the same work, such as more data, more users or a larger model, without losing performance. Elasticity is capacity that grows and shrinks with demand. [NIST's cloud definition](https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-145.pdf) describes it as capacity provisioned and released, in some cases automatically, to match demand. Flexibility is how easily an existing system can be reconfigured, such as swapping one model for another behind the same interface. For a voice agent, adding a refund tool is extensibility and handling ten times the calls is scalability. Adding servers for the evening peak and releasing them overnight is elasticity. Moving the agent to a faster model without changing its tools is flexibility. ## Extensibility in voice AI agents A voice agent is extended through its tools. On a phone call, each tool has a cost the caller hears: a slow lookup is silence. Slow lookups should run asynchronously. A standard webhook tool blocks the conversation until it returns; an [async tool](https://developers.telnyx.com/docs/inference/ai-assistants/async-tools) lets the assistant keep talking and add the result when it is ready. Each tool should get the narrowest permission its job needs. That permission lives in the credential the tool uses. New tools belong on a test assistant first, especially tools that create, update or delete records. On a call, the human confirmation is spoken: the agent reads back a change, such as a refund amount, and acts only after the caller agrees. Telnyx AI Assistants take these kinds of tools, defined once in a [Tools Library](https://developers.telnyx.com/docs/inference/ai-assistants/tools-library) and shared across assistants: * Webhook tools call the developer's own server, with credentials stored as integration secrets. * Retrieval tools search a knowledge base. * Client-side tools run in the user's browser or app, on WebRTC conversations only. * Transfer tools send the call to another number or a person. * Handoff tools pass the conversation to another assistant. * Hangup tools end the call. Built-in [integrations](https://developers.telnyx.com/docs/inference/ai-assistants/integrations) connect assistants to CRM, ticketing and IT systems. An assistant can also attach [MCP servers](https://developers.telnyx.com/docs/development/mcp/assistant-mcp-servers), whose tools join the ones above. Transfer and hangup tools use call control, the commands the Telnyx [Voice API](https://telnyx.com/products/voice-api) exposes for answering, transferring and ending calls. ## Frequently asked questions ### What does extensible mean in coding? Code is extensible when new behavior can be added through interfaces it already exposes, without editing the existing code. An extensible program is designed in advance for features its authors have not written yet. ### What is muscle extensibility? Muscle extensibility is a muscle's ability to stretch beyond its resting length. It shares a word with software and AI extensibility and nothing else. ### What is an AI extension? An AI extension is an add-on that brings AI features into another application, such as a browser or a code editor. Extending an AI system is the reverse direction: adding capabilities to the AI itself. ### Is extensibility the same as extendability? In software, extensibility and extendability are used as synonyms. Extensible is the established technical term in software design and AI. ### What is another word for extensibility? Expandability and extendability are the closest synonyms. Scalability is a different property: it means handling more of the same work. ## Sources * Parnas, D. L. (1979). [Designing software for ease of extension and contraction](https://doi.org/10.1109/TSE.1979.234169). IEEE Transactions on Software Engineering, SE-5(2), 128-138. * Caruana, R. (1997). [Multitask learning](https://doi.org/10.1023/A:1007379606734). Machine Learning, 28, 41-75. * Yosinski, J., Clune, J., Bengio, Y., and Lipson, H. (2014). [How transferable are features in deep neural networks?](https://arxiv.org/abs/1411.1792) NeurIPS 2014. * Houlsby, N., et al. (2019). [Parameter-efficient transfer learning for NLP](https://arxiv.org/abs/1902.00751). ICML 2019. * Hu, E. J., et al. (2022). [LoRA: low-rank adaptation of large language models](https://arxiv.org/abs/2106.09685). ICLR 2022. * Kirkpatrick, J., et al. (2017). [Overcoming catastrophic forgetting in neural networks](https://arxiv.org/abs/1612.00796). PNAS. * Rozière, B., et al. (2023). [Code Llama: open foundation models for code](https://arxiv.org/abs/2308.12950). arXiv 2308.12950. * Lewis, P., et al. (2020). [Retrieval-augmented generation for knowledge-intensive NLP tasks](https://arxiv.org/abs/2005.11401). NeurIPS 2020. * Yao, S., et al. (2023). [ReAct: synergizing reasoning and acting in language models](https://arxiv.org/abs/2210.03629). ICLR 2023. * Schick, T., et al. (2023). [Toolformer: language models can teach themselves to use tools](https://arxiv.org/abs/2302.04761). NeurIPS 2023. * Patil, S. G., Zhang, T., Wang, X., and Gonzalez, J. E. (2023). [Gorilla: large language model connected with massive APIs](https://arxiv.org/abs/2305.15334). * Carlini, N., et al. (2021). [Extracting training data from large language models](https://arxiv.org/abs/2012.07805). USENIX Security 2021. * Greshake, K., et al. (2023). [Not what you've signed up for: compromising real-world LLM-integrated applications with indirect prompt injection](https://arxiv.org/abs/2302.12173). * Model Context Protocol. [Specification, version 2025-06-18](https://modelcontextprotocol.io/specification/2025-06-18), including the [Tools](https://modelcontextprotocol.io/specification/2025-06-18/server/tools) section. * Anthropic (2024). [Introducing the Model Context Protocol](https://www.anthropic.com/news/model-context-protocol). * Mell, P., and Grance, T. (2011). [The NIST definition of cloud computing](https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-145.pdf). NIST Special Publication 800-145. * Telnyx. [Tools Library](https://developers.telnyx.com/docs/inference/ai-assistants/tools-library), [Async tools](https://developers.telnyx.com/docs/inference/ai-assistants/async-tools), , , and . Telnyx developer documentation. Share on Social ## Jump to: [What is extensibility?](#what-is-extensibility)[How does extensibility work in AI?](#how-does-extensibility-work-in-ai)[Extending AI models: fine-tuning, adapters, and transfer learning](#extending-ai-models-fine-tuning-adapters-and-transfer-learning)[Extending AI agents: tools, retrieval, and MCP](#extending-ai-agents-tools-retrieval-and-mcp)[Examples of extensibility](#examples-of-extensibility)[Benefits and risks of extensible AI](#benefits-and-risks-of-extensible-ai)[Extensibility vs scalability](#extensibility-vs-scalability)[Extensibility in voice AI agents](#extensibility-in-voice-ai-agents)[Frequently asked questions](#frequently-asked-questions)[Sources](#sources) ## Sign up for emails of our latest articles and news [Integrations](https://developers.telnyx.com/docs/inference/ai-assistants/integrations) [MCP servers for assistants](https://developers.telnyx.com/docs/development/mcp/assistant-mcp-servers) [Function calling](https://developers.telnyx.com/docs/inference/functions) What is extensibility? Meaning, examples, and extensible AI