Agent Configuration
In a nutshell: an Agent is a combination of "role + tool whitelist + model preferences" that determines what it can do in a session, what it can see, and how it responds.
When to create a new Agent
- A dedicated Agent for Code Review, monitoring, or copywriting.
- Restrict an Agent from using bash or network access.
- Share an Agent with your team without exposing the system prompt.
Creating a minimum-viable Agent
- Settings β Agent β New.
- Fill in name, description, and icon.
- Write the system prompt (recommended structure: role / objectives / output format).
- Choose enabled tools (all selected by default).
- Set visibility (public / private).
- Save β available immediately in new conversations.
Writing the system prompt (three-block style)
- Start with "You are β¦" to define the role.
- Follow with "Core objectives" and "Output format".
- Avoid hard-coding machine configuration in the prompt β use Memory and Skill instead.
Tool whitelist β keep open or tighten
Built-in tools include but are not limited to:
bash: execute shell commands (supports attached desktop mode, see Desktop Power)write/read/edit: file read/writeweb_search: user-level search (see LLM & Credentials)todo_write: maintain the Agent's own todo listmemory_recall/memory_write/memory_update: access long-term memoryskill: load the instruction body of a host-local Skillask_user_question/notify_user: interactive questions and notifications
All tools are enabled by default; restrict per task to reduce accidental use.
Agent Prompt Boost
Admins maintain a "global prompt boost template" in Admin; all enabled Agents share it. Users can also define their own global template (appended after the admin template). Each Agent has an explicit opt-in toggle, enabled by default.
Public / private / built-in visibility
- Public: visible to all users.
- Private: visible only to the creator.
- Built-in: created by admins; regular users can use the Agent but cannot see the system prompt.
Home-screen Agents and personal tags
Each user can maintain personal tags and a home-screen toggle for any visible Agent. The conversation entry point shows only "home-screen Agents" by default, with a one-tap switch to "all Agents".
Risk and boundaries
Do not put credentials in the system prompt
Credentials should be configured in LLM Connection. The prompt is visible to the LLM β storing credentials in plain text is a security risk.
Disabling ask_user_question prevents the Agent from talking back
This is the trade-off for "unattended" mode. Trigger-driven sessions can use it this way, but keep it enabled for human-in-the-loop scenarios.
Built-in Agent system prompts are hidden but editable
Admin changes take effect immediately for all users β evaluate the blast radius carefully.