Risk tiers
Every tool is classified by what it can affect. The tier, together with your permission level, decides what happens when the agent calls it.
A tool that has not been classified is treated as sensitive.
The catalogue
Core: find, read and ask
Core: find, read and ask
Projects
Projects
Vault: organize files
Vault: organize files
The agent is instructed to confirm before deleting anything it did not create in the same conversation.
Documents: draft and edit
Documents: draft and edit
Matters
Matters
Matter tools exist only when Matters is enabled for your organization.
Inbox and email
Inbox and email
Replies and forwards to anyone who is not a member of your organization always become drafts for a member to approve.
Hand-offs between conversations
Hand-offs between conversations
A hand-off arrives in the other conversation as its own turn, with the message shown as data rather than as instructions. Chains are limited to three hand-offs.
Browser
Browser
See Browser sessions.
Skills
Skills
The agent cannot delete skills. Only people can, from Settings.
Planning and helpers
Planning and helpers
Tools by situation
The agent does not always have every tool. The set narrows as the situation becomes less supervised.The exclusions for email are structural. Those tools are not given to the session at all, so no instruction, however cleverly phrased in a message, can invoke them. See Agent safety.