An agentic system reads data and calls tools to act on your behalf.
LLMs can select actions, but will not explain why, or which evidence influenced them.
search_calendar_eventsReads the calendar. Content comes from others, so it can’t be trusted.
query_ai_assistantA walled-off helper that pulls facts out of untrusted text.
get_unread_emailsReads the inbox — private, sensitive content.
send_emailSends an email. A risky action: it can move data out.
printShows the answer to you. The safe way to reply.