See what an agent is allowed to do
Settings, AI & extensions, Tools lists every capability an agent could call, banded by the worst thing a mistaken call could do.
Last checked against the app on · View as Markdown
Steps
- Open Settings, then AI & extensions, then Tools.
- Read the consequence band on each one. The bands escalate: reads only, changes your vault, leaves this machine, cannot be undone.
- The band is about damage, not frequency. A rarely used tool that cannot be undone still sits in the worst band, which is the point.
How to tell it worked
The list matches the tools your build actually has, with a band against each.
If it does not work
- You want to switch a tool off from this screen.
- This pane reports, it does not control. What an agent may actually reach is decided by connector grants (Settings, AI & extensions) and by the approval step before a write.