How about submitting a prompt for a REST request and then the LLM decides what information you are allowed to access and what actions you are allowed to take? And it works like a batch job of sorts. One request but it can enter many flows.