Agent Permissions
The agent’s capabilities are controlled by a permission system that limits what it can access and modify.
Tool Categories
| Category | Approval Required | Description |
|---|---|---|
| query | No | Read-only data queries (orders, shipments, stats) |
| propose | Yes | Creates a pending action for approval |
| execute | Yes (pre-approved) | Runs an approved action |
| memory | No | Reads and writes agent memory |
| system | No | Internal tools (formatting, calculations) |
Available Tools
Read Tools (Auto-Execute)
| Tool | Description |
|---|---|
search_orders | Search orders by status, date, customer, tracking |
get_order | Get full order details by ID or order number |
get_order_items | Get line items for an order |
count_orders_by_status | Count orders grouped by status |
search_shipments | Search shipments by status, carrier, tracking, date |
get_shipment | Get full shipment details by ID |
get_shipping_rates | Get rates from a carrier account |
list_carrier_accounts | List carrier accounts |
get_order_activity | Get audit trail / activity history for an order |
track_package | Get tracking checkpoints by shipment ID or tracking number |
list_bridges | List configured bridges with status (no credentials) |
list_dispatchers | List dispatchers with priority and assignment counts |
order_summary | Aggregate order stats (revenue, AOV, status counts) |
shipment_summary | Aggregate shipment stats by status and carrier |
fulfillment_performance | Fulfillment speed metrics and rates |
recall | Search agent memory |
Write Tools (Require Approval)
| Tool | Description |
|---|---|
update_order | Update tags, note, status, or fulfillment_status |
release_orders | Release held orders (batch) |
cancel_order | Cancel an order with optional reason |
bulk_update_orders | Batch update status/tags on multiple orders |
assign_dispatcher | Assign an order to a dispatcher |
trigger_sync | Trigger a bridge task (e.g. grab-orders) |
create_shipment | Create a shipment record for an order |
update_shipment_status | Update the status of a shipment |
remember | Store a fact or preference in agent memory |
forget | Delete a memory entry |
What the Agent Can Do
Without Approval (Auto)
- Query orders, shipments, and operational data
- Search and filter across all entities
- View order activity history and tracking checkpoints
- List bridges and their sync status
- List dispatchers and routing rules
- Generate reports and summaries
- Access agent memory
- Provide recommendations
With Approval (Pending Action)
- Update order status, tags, or notes
- Release held orders
- Cancel orders
- Bulk update multiple orders
- Assign orders to dispatchers
- Trigger bridge syncs
- Create or update shipments
Never
- Delete data
- Modify organization settings
- Change user roles or permissions
- Access other organizations’ data
- Expose bridge credentials
Configuring Permissions
Organization admins can configure agent permissions under Settings > Agent:
- Enable/disable specific tool categories
- Set the maximum
affectedItemCountfor auto-approval - Configure approval expiration time
- Restrict which users can interact with the agent