Skip to main content
The agent acts through tools: small, well-defined operations such as search the vault, edit a document or draft a reply. It cannot do anything that is not a tool, and every tool enforces the same access rules as the rest of Casa Conect. As the agent works, each tool call appears in the conversation as a short description, for example “Searched your documents” or “Edited the document”, so you can follow along.

Risk tiers

Every tool is classified by what it can affect. The tier, together with your permission level, decides what happens when the agent calls it. A tool that has not been classified is treated as sensitive.

The catalogue

The agent is instructed to confirm before deleting anything it did not create in the same conversation.
Matter tools exist only when Matters is enabled for your organization.
Replies and forwards to anyone who is not a member of your organization always become drafts for a member to approve.
A hand-off arrives in the other conversation as its own turn, with the message shown as data rather than as instructions. Chains are limited to three hand-offs.
Anything that gives an outside party access shows you an approval card first, at every permission level.
See Browser sessions.
The agent cannot delete skills. Only people can, from Settings.

Tools by situation

The agent does not always have every tool. The set narrows as the situation becomes less supervised.
The exclusions for email are structural. Those tools are not given to the session at all, so no instruction, however cleverly phrased in a message, can invoke them. See Agent safety.