Skip to content

Tools

Tools let an Agent do more than produce text: read files, search the web, run commands, use memory, operate a browser, create media, or start other xopc features. Each Agent should receive only the tools needed for its job.

Common tool groups

GroupTypical useMain risk
FilesRead, create, and edit workspace filesUnwanted file changes
ShellRun local commandsCode execution and data loss
WebSearch and retrieve public pagesSending queries to external services
BrowserInteract with websitesActing in signed-in accounts
MemoryFind user-owned context and past informationRevealing private context to a model
Messaging and mediaSend messages, files, speech, or imagesExternal side effects and cost
Automation and workflowsStart repeatable or scheduled workUnattended actions
Delegation or code runtimeSplit work or execute generated codeBroader compute and access

Actual availability depends on the installation, Agent policy, credentials, and optional dependencies.

Enable tools for an Agent

  1. Open Agents and select an Agent.
  2. Open its Tools or capability section.
  3. Enable the smallest group that completes the task.
  4. Save and start a new test Session.
  5. Ask for a read-only action first, then verify any write or external action.

If a tool is installed but not available, the Agent policy may deny it. If the Agent can see it but execution fails, check its provider, runtime, or credential.

Safe defaults

  • Keep shell, browser, message sending, and destructive file actions disabled unless needed.
  • Restrict file tools to the intended workspace.
  • Require confirmation before irreversible or externally visible actions.
  • Use a separate Agent for high-trust capabilities rather than enabling everything on the default Agent.
  • Review unattended Workflow and Automation tool access separately.

Optional setup

Some tools need more preparation:

  • Web search needs a configured search provider.
  • Browser automation needs a supported browser runtime.
  • Image generation, voice, and transcription need compatible providers.
  • Local code execution may need the tool runtime.
  • MCP tools need an active MCP server.
  • Extension tools need an enabled extension.

Troubleshooting

SymptomCheck
Agent says a tool does not existThe tool is installed and allowed for that Agent
Tool asks for a missing credentialConfigure the provider or connector shown in the error
File tool cannot access a pathThe path is inside the Agent workspace and permissions allow it
Browser tool fails on first useInstall the required browser runtime and confirm the Agent permits browser use
Tool works in one Agent onlyCompare the two Agents' capability policies

Inspect Settings → Logs or run xopc logs tail after one failed call. The first tool error usually identifies the missing permission, dependency, or credential.

Released under the MIT License.