Agent tool reference

exec_command

Run a shell command inside the execution workspace. command contains the complete command; files and installed dependencies belong to that environment.

install_packages

Install workspace dependencies with the selected package manager and a package-name list. This does not install software on your laptop.

list_files

List a workspace directory. Use path to inspect the location before changing its files.

read_file

Read a workspace file by path, including the current content needed before an edit.

write_file

Create or replace the content of a workspace file. An existing file is overwritten; use edit_file for a targeted change.

edit_file

Replace exact old_text with new_text in a UTF-8 file. Read first; a single match is required unless replace_all is true. Empty replacement text deletes the match.

delete_file

Delete the file identified by path, on your request. Check the file and its consumers before deleting persistent data.

wget

Download a remote file directly to a workspace path. Prefer this for saving an original document or archive without copying it through chat.

workspace_history

List recent recorded file changes, with commit identifiers. limit controls how many entries are returned.

workspace_restore

Restore one path from a commit found in workspace_history. The restoration is recorded as a new change; this does not restore the database or Docker volumes.

widget

Create, update, list or remove dashboard widgets. content is self-contained HTML; resources links their backend dependencies. Sharing actions publish, browse or copy group widgets; description explains a publication.

resources

Inspect dependencies, link dedicated resources to a widget and preview cleanup. Use exact returned IDs. cleanup is a preview unless dry_run=false; applying cleanup needs your explicit request. Shared consumers protect resources.

docker_run

Start a service from image, name and its internal port; purpose explains what it serves. Deployment Docker mode and permissions determine where it runs. This is useful for a real service behind a widget.

docker_manage

List, inspect logs, execute a command in or stop managed containers. Select action and the service name; stopping a service does not erase all persistent data.

docker_compose

Operate a multi-service application from a Compose file already written in the workspace. file identifies it; action chooses up, down, inspection or execution. Review persistent volumes separately.

register_tool

Register a reusable Python backend tool from code and its TOOL metadata. Its declared parameters become callable by the agent and widgets. Store credentials in secrets rather than script source.

list_tools

List available custom tools and their usage information before reusing or changing them. This is distinct from the complete built-in catalogue on this page.

No parameters.

show_in_editor

Open a workspace text file in Prism’s file editor. This editor is separate from the Notes, email, task and event forms handled by editor.

http_request

Send an HTTP request with method, URL, optional headers and body. Use it for an API response; use wget when the goal is saving a remote file unchanged.

web_search

Search the web for query. Results help locate sources; they are not a substitute for reading the relevant page.

deep_research

Investigate question through several research rounds. max_rounds bounds that process; larger investigations take longer and make more model/tool calls.

browser_get

Open a URL in the server-side browser and inspect the rendered page. An optional script can inspect its state; this is not your signed-in personal browser.

browser_act

Interact with a web page using the browser action list. Useful for forms, clicks and checks that require a rendered interface. Authentication and reachable hosts still depend on that browser environment.

add_attachment

Attach an existing workspace file to the conversation so you can download it. path must identify the completed file.

editor

Open, read or update a note, email composer, task or event form. Read its current revision before updating, including unsaved text. Notes save immediately; other forms await user save/send. This tool never sends mail.

email

Connect, read, search, send and organize mail, folders and inbox rules. UIDs belong to a folder; use returned IDs and exact folder names. Use password_secret for credentials, and rule_preview before applying a new rule.

note

Create, list, update, delete or share Markdown notes. An omitted update field is preserved; an empty body clears it. For the note currently being edited, editor includes unsaved state.

task

Create, filter, update, complete, reopen or delete personal tasks. Use an ID from list; due and priority describe deadlines and urgency. Scheduled automation jobs are separate.

calendar

List, create, update or delete events on the active calendar source. start/end and all_day determine timing; an all-day end date is exclusive.

pim_source

Inspect or change calendar, task and Notes sources. CalDAV and Todoist use stored secret names and test connections; Google/Microsoft consent remains in the browser. A vault path is inside the server container.

rag_search

Search a named document collection by meaning, with query and an optional result limit. Use the collection description to choose relevant material and cite returned sources.

rag_ingest

Index one workspace file through source_path, or supplied content, into collection. Use one file per call; configured embeddings are required.

rag_manage

List collections/documents, describe a collection or delete selected content. Descriptions explain when to search. Shared-mode changes require group administration rights.

save_user_info

Remember a user fact under topic and content, such as a preference. This is personal memory, not a reference document collection.

save_learning

Save a useful learned fact or lesson with a title and content for later retrieval. Use skill for a structured reusable procedure.

search_history

Find relevant saved conversation history with query and an optional limit. Results are bounded and cannot reconstruct details that were never saved.

skill

Store, retrieve, update or delete a reusable procedure. name, description, when_to_use and body explain when and how to apply it. Skills guide tool use; they do not grant new permissions.

cron

Create, list, update, pause or remove a scheduled workspace command. schedule is a cron expression; command is executed in the workspace and description explains its purpose. New schedules use the applicable user timezone.

webhook

Create or manage an incoming HTTP trigger for the agent. prompt can include {{content}}; session chooses the conversation and respond waits synchronously. Keep the generated URL/token private.

notify

Show a notification with message, optional title, level and delay. A local notification is not proof that an external recipient received an email or chat message.

subagent

Delegate an independent bounded task, inspect its status, wait or cancel. Helpers share the model, workspace, permissions and task budget; they cannot delegate again. The parent collects results.

mcp

List, connect, refresh, toggle or remove MCP servers. Use a stored auth_secret for Bearer authentication. Shared-mode changes require a group admin; a new OAuth grant needs browser consent.

request_secret

Open a secure credential form using name and description. The value is stored without being pasted into chat; subsequent tools refer to its name.

secrets

List secret names, delete one on request or share a personal secret with an eligible group. Values are not returned to the model by listing.

channel

Inspect channel connections, connect a Telegram bot with token_secret or unlink its chat. Slack and group Webex administration use their respective settings screens.

agent_settings

Read/change personal agent behavior or manage permitted AI sources and model settings. Keys are stored secret names; embedding reindexing requires agreement. Deployment AI changes are global-admin-only in shared mode.

update_system_prompt

Change the personality for this dashboard workspace. Use agent_settings for the default personality across workspaces. Neither overrides platform access rules.

prism_help

Read Prism’s embedded help by topic, or get the topic index and current connection status. Ask the agent where a setting is or how to use a capability.

place_call

Queue an outbound phone mission using contact_name or phone_number and a self-contained mission. Only the supplied mission is given to the calling agent; scheduling a call is not evidence it succeeded.

list_calls

Inspect queued and recent outbound calls and read their summaries. done means the call ended, not necessarily that the requested outcome was obtained.

No parameters.

cancel_call

Cancel a still-pending outbound call using call_id returned by list_calls. It cannot cancel a call already being dialed.