Choose tools and understand which need approval

An agent can only do what its tools allow. On the agent's page, the Tools section lists everything available. Tick the ones this agent needs and nothing else.

Where to set tools

1. Open an agent from Agents.
2. In Tools, tick the checkboxes. Tools are grouped, and each shows its name, a one-line description and the permission it uses.
3. Choose Save changes.

A badge reading Needs approval means each use of that tool pauses the run and asks you first.

The tools

Web

• http.fetch reads a public web page or web service (GET or HEAD). Private and internal addresses are refused and responses are size-limited.

PGB

• pgb.database.query runs one read-only query on a project database you have access to. It returns up to 100 rows and cannot change data.

Marketplace

• registry.search searches PGB Marketplace.
• registry.plan shows what installing a package would add, without changing anything.
• registry.install installs a package. Needs approval.

Memory

• memory.save remembers a note for future runs; memory.recall looks notes up by keyword. Each agent can keep 200 notes.

Notify

• notify.email sends an email to you only. Needs approval.

PGB Business (needs an API key, see below)

• business.mail.search, business.mail.draft (saves a draft, sends nothing), business.mail.send (Needs approval), calendar.list, calendar.create (Needs approval) and drive.search.

There is also a group of tools for connected servers, covered below.

PGB Business access

If you tick a mail, calendar or drive tool, a PGB Business access section appears. Enter the Mailbox address and an API key you created in PGB Business, then choose Save key. Give that key only the access this agent needs. Afterwards only the last four characters are shown, and you can Remove key at any time.

Connected servers

If you tick a connected-servers tool, a Connected servers box appears. Add one web address per line. The agent may only call servers listed there.

Good to know

• Approval rules are re-checked when you approve: the agent must still be active, still own the tool, and the target must still be allowed.
• Package authors can also require approval for other tools. You will see Needs approval on those too.
• Fewer tools means fewer surprises. Start small and add tools one at a time.
• See The approvals inbox for what happens when a run pauses.