Skip to main content
The following tools can be specified in the tools.list field of an agent YAML. Use allowlist mode to restrict an agent to only the tools it needs; use denylist mode to remove specific tools from the default set.
No tools block = full tool access — except for the explicit-allowlist tools below, which are never available unless named in an allowlist block.

Filesystem
Web & Docs
SQL & Terminal
Orchestration
Subagents run with a reduced toolset. A subagent spawned via run_subagent gets the read-oriented base tools (filesystem reads, web search, docs, warehouse metadata, Bolt inspection, connected integrations) but not write_file, run_sql_query, run_terminal_command, multi-repository tools, or orchestration tools.

Agent Skills
Skills discovered in the repository are listed in the agent’s context automatically; the agent calls load_skill_instructions to pull in the full instructions when needed. If your agent uses allowlist mode, remember to include load_skill_instructions — omitting it disables Agent Skills for that agent.

Multi-Repository
Slack
find_slack_thread and attach_session_to_slack_thread are explicit-allowlist tools — they read channel history and rebind the session, so an agent YAML must name them in an allowlist block to use them. They are built for self-healing agents triggered via the external API that need to run inside an incident thread already posted by an alerting tool.

Integrations
Integration tools require a connected integration. Linear, Jira (Jira Cloud or Jira Data Center), Confluence, Google Drive / Docs / Sheets, and Notion tools only become available when the workspace has the corresponding connection. Issues created by an agent are automatically tagged with a dinoai label and include a “Created by DinoAI” attribution line in the description.

Bolt The background agent can both inspect and trigger / retry Bolt schedules and runs. Triggered runs go through Paradime’s normal scheduler — custom commands are validated server-side before dispatch, so an agent cannot run arbitrary shell.
Custom commands are gated. When an agent passes commands to trigger_bolt_schedule_run, each entry is checked against Paradime’s allow-list of safe commands (is_allowed_command). Disallowed commands return an [ERROR] and the run is not dispatched.
Typical pattern: list_bolt_schedulestrigger_bolt_schedule_run (or retry_latest_bolt_schedule_run) → get_bolt_run_logs with the returned run_id to inspect outcome.

Explicit-allowlist tools

The following tools perform real, billable side effects on the workspace (triggering or retrying Bolt runs) or grant sensitive capabilities (reading Slack channel history, rebinding a session to another Slack thread). They are never available unless the agent’s YAML explicitly names them in an allowlist block — Slack-triggered sessions, sessions without an agent YAML, and denylist-mode agents never see them:
  • trigger_bolt_schedule_run
  • retry_bolt_run
  • retry_latest_bolt_schedule_run
  • find_slack_thread
  • attach_session_to_slack_thread

Data Warehouse Warehouse tools are automatically available based on your workspace’s connected data warehouse. Each warehouse adds its own schema-navigation tools (list databases → schemas → tables → columns), e.g. list_all_snowflake_databases, list_all_schemas_in_snowflake_database, list_all_tables_in_snowflake_schema, list_all_columns_in_snowflake_table. Supported warehouses:
  • Snowflake
  • BigQuery
  • Redshift
  • Databricks
  • Trino
  • SQL Server
  • ClickHouse
  • Microsoft Fabric