EERRAA // TOOLS & MCP
It doesn’t just talk. It calls your tools.
// two ways to give the agent hands: your own APIs as guarded webhooks, or any remote MCP server whose toolset imports itself. no glue code.
GIVE IT HANDS
Describe a tool once and point it at your endpoint. Every call is SSRF-guarded. Auth is none, bearer, header, or OAuth. Templated fields pull in per-user secrets and a live JWT, so the tool acts as the right person.
Connect any Streamable-HTTP MCP server and its whole toolset auto-imports. Discovered tools arrive disabled; you flip on the ones you want. Re-Discover later and your choices are preserved.
Tavily, Exa, Firecrawl, Context7, DeepWiki, and Hugging Face are one click away. Search, crawl, docs lookup, and models, wired in without touching config.
MCP OAUTH 2.1
Connect once for the team, or let each user connect as themselves.
You connect the server once as admin and every user of the agent shares that access. Good for a team knowledge source or an internal system.
The end user connects from inside the widget with their own account. OAuth 2.1 with authorization_code plus PKCE. The agent acts as them, never as everyone.
SAFE BY DEFAULT
Webhook targets are checked before the call goes out, so a tool cannot be pointed at your internal network.
Write actions pause. The widget shows an Approve / Cancel card with the exact input before anything fires.
Per-user credentials are injected into tool auth server-side. The raw secret is never sent to the model.
Imported tools default to disabled. Nothing runs until you turn it on, and re-Discovery keeps your selections.
THE CONFIRMATION GATE
Reads are free. Writes wait for a yes.
When the agent wants to run a tool that changes something, the widget stops and shows the exact call. The user approves or cancels. Nothing happens until they do.
CONFIRMATION REQUIRED
upgrade_plan
{
"account_id": "acct_8f21",
"plan": "business"
}Wire up your first tool.
// one MCP server on the free tier. connect the catalog in a click.