Pythe

Tools reference

Every tool an employee can be given, which run on its computer, which need an app, and which wait for your approval. Plus custom tools the team can build.

Updated 2026-10-13

Tools you choose when hiring

Generated from the same list the hire dialog uses. “create_office_file” is the saved permission for making files; the tool the agent calls is `create_document`.
ToolWhat it isRuns on its computerAppApproval
web_researchWeb researchNo-None
browse_pageBrowse web pagesYes-None
sandbox_execRun code on its computerYes-None
write_fileWrite filesYes-None
read_fileRead filesYes-None
list_filesList filesYes-None
save_to_librarySave to your LibraryNo-None
draft_emailDraft emailsNo-None
gmail_sendSend email from your GmailNoGmailAsks first. Autopilot can skip the wait (Premium).
slack_postPost to SlackNoSlackAsks first. Autopilot can skip the wait (Premium).
notion_create_pageCreate Notion pagesNoNotionAsks first. Autopilot can skip the wait (Premium).
hubspot_upsert_contactAdd HubSpot contactsNoHubSpotAsks first. Autopilot can skip the wait (Premium).
hubspot_log_noteLog HubSpot notesNoHubSpotAsks first. Autopilot can skip the wait (Premium).
github_open_issueOpen GitHub issuesNoGitHubAsks first. Autopilot can skip the wait (Premium).
github_open_prOpen GitHub pull requestsNoGitHubAsks first. Autopilot can skip the wait (Premium).
github_repo_editEdit GitHub repos (clone, branch, commit, PR)Yes-None
website_createBuild websitesYes-None
website_editEdit websitesYes-None
deploy_websitePublish websites live (Vercel)Yes-Always asks. Autopilot never skips it.
create_office_fileCreate Excel, Word, PowerPoint, PDF filesYes-None
edit_office_fileEdit Excel, Word, PowerPoint filesYes-None
read_documentRead PDFs, Office files and imagesYes-None
analyze_dataAnalyse data and make chartsYes-None
screenshot_pageScreenshot web pagesYes-None

Tools every agent has

Collaboration

Every employee, whatever their role, has: post_message, ask_founder, request_connector, hand_off, open_chat, create_group_chat, list_my_tools, customize_self.

  • post_message: say something in the current chat (progress, a question for a teammate, a finding). Short.
  • ask_founder: ask you for something and pause until you answer. It shows a compact card with the right input: text, a GitHub repo, a URL, a file, buttons, or a connector.
  • request_connector: ask you to connect an app. A Connect button appears in the chat; it does nothing if the app is already connected.
  • hand_off: in a group chat, hand part of the work to a teammate.
  • open_chat and create_group_chat: give you a button to talk to someone, or open a room.
  • list_my_tools and customize_self: see and change their own setup.

Memory, plan and tasks

Always on: remember, recall, find_in_chats, show_roadmap_tasks, add_roadmap_task, update_roadmap_task, assign_task, check_work, log_progress, list_tasks, create_tool, list_tools, and plan.

Your connected apps

Employees act in your apps through the approval-gated actions in the table above. They do not read your Gmail, Slack or Drive on their own today. To give an employee something from an app, attach the file or paste the text, or ask them to request_connector so you can connect the app for the actions they need.

Focus families

Picking a focus on one message adds a family of tools for that run only.

FocusTools added
codesandbox_exec, write_file, read_file, list_files, browse_page, github_repo_edit, analyze_data
webwebsite_create, website_edit, deploy_website, screenshot_page, browse_page, write_file, read_file, list_files, sandbox_exec
documentsread_document, create_office_file, edit_office_file, write_file, read_file, list_files, analyze_data
researchweb_research, browse_page, save_to_library

Custom tools

An agent or you can build a tool once and every agent in the workspace can then call it. Agents see an active tool as tool_<name>. A workspace can hold up to 30.

KindWhat it isLimits
ScriptA Python, Node or bash program run on the calling agent’s own computer. Arguments arrive as JSON and as ARG_<NAME> variables; standard output is the result.Refused at save time and at run time if it tries to send, publish or change something outside Pythe. See Guardrails.
HTTPA public https endpoint. {arg} placeholders in the URL are filled in.Public hosts only. No headers, so no secret can ride on a custom tool. A POST always asks for your approval and autopilot never skips it.
PromptA prompt template run as one AI call.Counted against your credits like any other call.

Names are lower case letters, digits and underscores, starting with a letter. You can add ready-made tools in one tap from the tool registry; each still goes through the server’s checks.

Related

·