Tools
Agentrail provides a set of built-in tools through @agentrail/capabilities. Tools are registered on a profile and exposed to the agent at runtime.
Tool categories
Filesystem
| Tool | Description |
|---|---|
| Bash | Execute shell commands |
| Read | Read files from the local filesystem |
| Write | Write files to the local filesystem |
| Edit | Exact string replacement in existing files |
| Grep | Regex search powered by ripgrep |
| Glob | Find files by glob pattern |
Web
| Tool | Description |
|---|---|
| WebFetch | Fetch a URL and return readable Markdown |
| WebSearch | Search the web via a provider adapter |
Interaction
| Tool | Description |
|---|---|
| AskUserQuestion | Pause execution and ask the user a question |
| TodoWrite | Maintain a structured task list for the session |
| Sleep | Pause execution for a bounded duration |
Sandbox-only
These tools are available only when the agent runs inside a Docker sandbox container (see @agentrail/capabilities sandboxed capability set).
| Tool | Description |
|---|---|
| Python | Execute Python code inside the sandbox |
| BrowserNavigate | Navigate the in-sandbox Chromium browser to a URL |
| BrowserContent | Read the current browser page's visible text |
| BrowserScroll | Scroll the current browser page or an element |
| BrowserAction | Click, fill, select, hover, press, or evaluate JavaScript |
Orchestration
Orchestration tools are available when the multi-agent orchestration capability is enabled.
| Tool | Description |
|---|---|
| spawn_agent | Spawn a session-scoped orchestration sub-agent |
| close_agent | Close a sub-agent and resolve dependent waits |
| send_input | Queue structured input for a sub-agent |
| wait_agent | Wait for one or more agents to satisfy a condition |
Additional capability tools
The following tools are provided by optional capability packages and documented inline:
- KbList / KbRead / KbSearch — knowledge base tools from the
knowledgecapability - Skill — skill delegation tool from the
skillscapability
Permissions
Several tools (Bash, Read, Write, Edit, and their sandbox counterparts) support a checkPermissions hook that evaluates the active ToolPermissionPolicy before execution. See the Tool Permissions Guide for details.