Execute SQL queries against a SQLite database (SELECT, INSERT, UPDATE, DELETE). Use operation 'list-tables' to discover available tables. Mutation queries require 'allow_mutation: true' for safety.

Make HTTP requests to any REST API with custom headers, JSON body, retry, and configurable timeout. Returns the response status, headers, and body.

Read the contents of a text file. The path must be relative to the sandbox base directory.

Write content to a text file. Creates parent directories if needed. Set overwrite to true to replace existing files.

List entries in a directory. Returns files and subdirectories sorted with directories first.

Search for files matching a glob pattern (e.g. '**/*.ts'). Returns relative paths within the sandbox.

Get metadata about a file or directory including size, modification date, and permissions.

Key-value cache with TTL and namespaces. Operations: set, get, delete, list, clear.

Index a document into a collection for semantic search. Text is automatically chunked and embedded using a local ML model (no API calls). Use document_id to replace an existing document.

Search a collection for documents semantically similar to a query. Returns top-k results ranked by cosine similarity. The collection must have been indexed first with semantic_index.

Clear all indexed documents from a collection. This action is irreversible.

Register a webhook callback URL to receive event notifications. Specify the URL, event types to subscribe to, and an optional HMAC secret for signature verification.

Send a notification to all registered webhooks matching the event type. Supports idempotency keys to prevent duplicate deliveries and HMAC-SHA256 signatures.

Create an async task for tracking long-running operations. Tasks have a TTL and can optionally trigger webhook notifications on status changes.

Get the current status of an async task, or update its status. Supports status transitions: pending->running, running->completed/failed. When a task reaches a terminal state, its configured webhook event is fired.