Calendly booking detection: polls scheduled events and advances deals to the meeting stage. Activates with calendly.token.
Create Meta (Facebook/Instagram) ad campaigns - paused, behind an approval and a daily ad-budget ceiling. Insights poll into Analytics. Activates with a Meta token (system user or page) + meta.ad_account_id.
Decision-maker email lookup by domain (Hunter). Activates with hunter.api_key.
Search the owner's uploaded documents (the Knowledge page). Activates once any document is ingested.
Find businesses by type + location for prospecting (Google Places or web search).
Outbound AI voice calls (Vapi) for campaign call steps and ad-hoc calls. Every call is held for approval first. Activates with vapi.api_key + vapi.phone_number_id.
Publish videos to TikTok via the Content Posting API. Needs an approved TikTok developer app. Activates with tiktok.client_key + tiktok.refresh_token.
Publish posts to X (Twitter) via the API v2 write path (OAuth2). Approval-gated through the content calendar. Activates with x.client_id + x.refresh_token.
Upload videos to YouTube via the Data API v3 (OAuth). Approval-gated. Activates with youtube.client_id + youtube.refresh_token.
The Prospector: ICP-driven discovery hunts that crawl candidate websites (robots-respecting, SSRF-guarded), score fit, and queue a Dirty 30 working set for the owner to promote. Activates with a Brave or Google Places key.
Outbound email via Gmail SMTP. Every send is held for Connor's approval first (requester is never the approver). Activates when smtp.password is in the vault.
E-signature for contracts (DocuSign): renders an agreement to a branded PDF and sends it for signing, held for approval first. Activates with docusign.integration_key (+ user/account/private key).
Stripe payment link emailed to close a deal (approval-gated). Activates with stripe.api_key.
Meta (Facebook/Instagram) page posting + ad insights. Activates with a Meta token (system user or page) + meta.page_id.
Structured venture intake write-back: merges grounded facts (positioning, services, brand voice, socials, ICP seed, lexicon, open questions) into the venture profile. Writes the venture row only; always available.
Fetch and read public web pages. SSRF-guarded, content treated as untrusted data. Always available to specialists.
Live web search for specialists (Brave). Activates when brave.api_key is in the vault.
The web division builds websites in an isolated Docker sandbox: agents write files, run deps + build offline, preview at /preview/<project>, and deploy only after the owner approves. Always available; deploys to Vercel need vercel.token.
Delegation backbone: tasks, leases, checkpoints, retry-then-escalate, cost ledger. The store IS the bus.
Live SSE feed of swarm events to the cockpit; liveness only, store remains truth.
Encrypted key storage by handle; agents never see values; every change journaled to secret_audit.
New tools register here automatically as they're wired in: web search, email, image generation, MCP servers. A tool that needs a key references a vault handle, never a raw value.