Files, with a way back
Read, list, glob, grep, write, edit, multi-edit, move and delete - nine tools, on the device you are on. Every write keeps the previous version and a delete goes to a trash you empty yourself.
Tools
Thirty-four tools, one run.
The agent does not hand you instructions to follow. It reads your files, runs your commands, searches the live web, queries your data, converts your documents and publishes your work - on one balance, under permissions you set, from the first turn to the last.
34 toolsDeclared on every turn
244 conversions33 formats in, 31 out
8 categoriesPermission, not trust
What you getTools that reach
Tools that reach
the real thing.
Not a sandbox with sample data. The files are yours, the shell is real, the pages are live, and the database it reads is the one you run.
The web as it is now
Search and fetch read live pages, not a snapshot. Ask for a screenshot and the page comes back as an image, with its JavaScript errors and its slowest requests - one capture, one credit.
Convert, and perceive
244 conversions between 33 formats: documents, spreadsheets, images, audio and video. The agent also reads what it converts - a PDF, a photo, a recording or a clip is attached to its answer, not described to it.
Permission before power
Eight categories, four modes. Reading is always free, a write asks, a database change asks even in Auto - and sending, publishing and spending are asked every single time, even in Full access.
ConvertOne file in,
One file in,
the format you need out.
244 conversions between 33 formats, in one tool call: a PDF to Markdown, a spreadsheet to JSON, a video to MP3, a scan to text. Ask for a target that does not exist and the answer is the list of the ones that do, not an error. And what the agent converts it can also read - over 15 MB it refuses, then proposes the conversion that would make the file readable.
The familiesThirty-four tools,
Thirty-four tools,
and what each one asks.
A tool belongs to a permission category, and the category - not the tool - decides what is asked of you. Reading never asks. The three acts that cannot be taken back can never be approved in advance.
CountAsks permission
Workspace files9On a write
Shell and terminals2On every command
Live web2Never - reading is free
Conversion1Never
Media creation4On a write
Connected data2On a write, even in Auto
Platform services10Publish, send and spend, always
Run control4Never
Sending a message, publishing on the internet and spending credits are asked every time, in every mode, with no way to say always.See full pricing
Questions
Tools, in detail.
Do the tools cost extra?
No. All thirty-four are part of the agent on every plan, the free one included. You pay for what a step actually uses - a model turn, a web capture, a conversion. Reading your own files costs nothing at all.
Where do the file tools run?
On the device you are on. From a computer they work on that computer's files through the SDK; from a phone they work on that phone's own files. Nothing is copied to our servers to be read.
Can I stop a tool?
Yes. Four modes decide what is asked: Plan reads only, Ask asks before every change, Auto lets ordinary writes through, and Full access still asks before sending, publishing or spending.
Can I add my own tools?
Yes, three ways. Custom tools beside the built-in ones; skills and sub-agents, which belong to your account and work from any device; and any MCP server, since the SDK is an MCP client — no adapter to write.