Tools and access
The Tools tab sets what the coworker may call. Anyone who can mention it in Slack can use these tools with the creator’s access, so allow only what the job needs.
- Connectors: each connector on the coworker is All tools or Only these. Only these lists the tools enabled for the project, with Select all and Only read-only tools. The project’s Connectors page sets what any agent can get, and a coworker can only narrow it. Available, not added lists the project’s servers that the coworker does not have yet; click Add to give it one.
- Built-in tools: All tools or Only these, from
Read,Grep,Glob,Write,Edit,Bash,WebFetchandWebSearch. All tools means those 8 and no others. With nothing checked, the coworker gets no built-in tools.
Click Save tool access. Changes apply from the coworker’s next task, and a task already running keeps its tools.
The Highflame gateway enforces both lists outside the sandbox, so the coworker cannot turn a tool back on. With Bash on, the coworker can still write files and run commands, even with Write and Edit off. To stop that, turn Bash off too.
- Connectors: set up the tools a coworker can use.
- Tools and MCP: how tool access is enforced.
- Egress: what each internet access level allows.