Skip to main content
These tools carry the introspection capability. They are selected by @introspection and by the current @default selector.

time_now

Returns the current time in an optional IANA timezone. Capability: introspection Input: Output:
Example profile tools: ["time_now"]

echo

Echoes back the provided text. Useful for testing tool connectivity. Capability: introspection Input: Output:

math_add

Adds two numbers. Capability: introspection Input: Output:

runner_info

Returns the platform reference data an agent needs before authoring a profile: valid runtimes, model providers per runtime, capability bundle names, and the model-string format per runtime. It deliberately reports no runner identity (hostname, pid, or URLs). The tool is reachable by any agent with the introspection capability and therefore by that agent’s end users, and agents repeat its payload verbatim, so runner identity here leaks infrastructure addresses to tenants and misleads sandbox-worker agents into describing the runner as their own host. Capability: introspection Input: {} (no parameters) Output:

session_info

Returns identity fields for the current session. Capability: introspection Input: {} (no parameters) Output:

profile_info

Returns identity and sizing information for the current session’s profile. Capability: introspection Input: {} (no parameters) Output:

run_info

Returns status and event counts for the current run. Conductor-backed. Capability: introspection Input: {} (requires run context) Output:
Requires CONDUCTOR_BASE_URL to be set on the runner so it knows how to reach the conductor.

usage_info

Returns token and estimated-cost totals for the current run. Conductor-backed. Capability: introspection Input: {} (requires run context) Output:

list_profiles

Lists all profiles registered on the conductor. Conductor-backed. Capability: introspection Input: {} (no parameters) Output:

list_sessions

Lists active sessions from the conductor. Conductor-backed. Capability: introspection Input: {} (no parameters) Output:

list_mcp_servers

Lists all entries in the MCP server catalog. Conductor-backed. Capability: introspection Input: {} (no parameters) Output:

search_connected_app_tools

Searches the tools exposed by a connected app attached to the current profile. The result includes exact tool names and input schemas for a follow-up call_connected_app_tool request. Conductor-backed. Capability: introspection Input: The profile must contain the matching managed reference, such as catalog://composio-gmail. Search returns a tool-level error when the app is not attached.

call_connected_app_tool

Executes one connected-app tool through the tenant-isolated MCP bridge. Search first, then pass the exact returned tool name and arguments that conform to its input schema. Conductor-backed. Capability: introspection Input: The bridge keeps provider credentials out of the profile, worker run envelope, and sidecar.

topology_info

Returns the current runner pool view. Conductor-backed. Reading this tool triggers on-demand probes down the topology tree; it is observation-driven so idle runners and sidecars can still scale to zero. Do not treat it as a continuously polled metric. The result uses the tenant-facing topology shape: runner and sidecar addresses, PIDs, and Node versions are omitted, and each sidecar instanceId is reduced to its distinguishing suffix. Infrastructure addresses in probe errors are also redacted. Capability: introspection Input: {} (no parameters) Output:
state describes runner membership (live, draining, or unreachable), which is separate from point-in-time healthy status. process, sessionsByRuntime, and sidecars are null when the runner did not answer the topology probe; render those values as unknown, not zero. A sidecar’s cold state means configured but quiet, not broken. observedInstances is a lower bound on replicas: connection pooling can hide idle workers, and slots sharing a sidecar process can report the same process, so do not sum it as a replica count. Repeated reads within the short topology-cache window may be served from the shared cache rather than re-probing the fleet.
Searches the web using the Tavily API. Capability: introspection Requires: TAVILY_API_KEY set on the runner. Input: Output:

web_extract

Extracts readable content from one or more URLs using Tavily. Capability: introspection Requires: TAVILY_API_KEY set on the runner. Input: Output:
Combine web_search and web_extract for deep research: search first to discover URLs, then extract for full content.