Give it tools and understand approvals

Tools define what an agent can do

An agent with no tools can only write text. Tools let it act. The rule that keeps you safe: an agent can only use the tools you tick. The Tools section lists them in groups. Each shows its name, a description and the permission it uses.

Tick a tool

1. Open your "Page summariser" agent.
2. In Tools, under Web, tick http.fetch.
3. Choose Save changes.

http.fetch reads a public web page or web service with a GET or HEAD request. It refuses private and internal addresses, limits how much it reads and how long it waits, and hands the agent up to 20,000 characters.

The tool groups

• Web: http.fetch.
• PGB: pgb.database.query runs one read-only query on a project database you can access. It returns at most 100 rows and cannot change anything.
• Marketplace: registry.search and registry.plan are read-only. registry.install installs a package.
• Memory: memory.save and memory.recall let the agent keep notes between runs, up to 200 per agent. You see them in the Memory panel and can remove any with Forget.
• Notify: notify.email emails you, and only you.
• PGB Business: business.mail.search, business.mail.draft, business.mail.send, calendar.list, calendar.create and drive.search.
• Connected servers: tools for calling servers you list on the agent.

Which tools need approval

A Needs approval badge means every use pauses the run and waits for you. These always need approval:

• registry.install
• notify.email
• business.mail.send
• calendar.create

Everything that only reads, or only saves a draft, runs without asking. A package author can also require approval for other tools, and you will see the badge for those too.

PGB Business access

If you tick a mail, calendar or drive tool, a PGB Business access section appears. Enter the Mailbox address and an API key that you created in PGB Business, then choose Save key. Give the key only the access this agent needs. After saving, only the last four characters show, and Remove key takes it away.

Connected servers

Tick a connected-servers tool and a Connected servers box appears. List one address per line. The agent can only call servers on that list.

What approval looks like

When a run reaches a tool that needs approval, the run's status changes to Waiting for your approval. An approval card appears on the run page and in the Approvals inbox, where the top-bar link shows a number badge. The card says what the agent wants to do. You press Approve or Deny. We practise this in the next lesson with an agent that asks to email you.

Try it yourself

1. Make sure http.fetch is ticked and saved.
2. Also tick notify.email. Notice the Needs approval badge.
3. Add one line to your instructions: "When you finish, email me the summary." Save.

Recap

• An agent can only use ticked tools.
• Tools that send, share, spend or install carry Needs approval.
• Mail, calendar and drive tools need a PGB Business key you control.
• Start with the fewest tools that do the job.