Agent Permissions

The agent’s capabilities are controlled by a permission system that limits what it can access and modify.

Tool Categories

Category	Approval Required	Description
query	No	Read-only data queries (orders, shipments, stats)
propose	Yes	Creates a pending action for approval
execute	Yes (pre-approved)	Runs an approved action
memory	No	Reads and writes agent memory
system	No	Internal tools (formatting, calculations)

What the Agent Can Do

Without Approval (Auto)

Query orders, shipments, operations
Search and filter data
Generate reports and summaries
Access agent memory
Provide recommendations

With Approval (Pending Action)

Update order status
Add/remove tags
Create operations
Trigger bridge syncs
Push fulfillments

Never

Delete data
Modify organization settings
Change user roles or permissions
Access other organizations’ data

Configuring Permissions

Organization admins can configure agent permissions under Settings > Agent:

Enable/disable specific tool categories
Set the maximum affectedItemCount for auto-approval
Configure approval expiration time
Restrict which users can interact with the agent

Scheduled Tasks Embed System