From 80f4684e49e47f1683dc72c00e5ab7bd6c746bb6 Mon Sep 17 00:00:00 2001 From: "openclaw-docs-sync[bot]" Date: Mon, 27 Apr 2026 22:46:48 +0000 Subject: [PATCH] chore(sync): mirror docs from openclaw/openclaw@c51e315f3ac67aba7d7f0663c7af02807e21f293 --- .openclaw-sync/source.json | 4 ++-- docs/tools/index.md | 20 +++++++++++++++++++- 2 files changed, 21 insertions(+), 3 deletions(-) diff --git a/.openclaw-sync/source.json b/.openclaw-sync/source.json index a59da92a8..2f0c25165 100644 --- a/.openclaw-sync/source.json +++ b/.openclaw-sync/source.json @@ -1,5 +1,5 @@ { "repository": "openclaw/openclaw", - "sha": "94f5827c6e1d130edd007d9389ad39795b4da459", - "syncedAt": "2026-04-27T22:41:02.534Z" + "sha": "c51e315f3ac67aba7d7f0663c7af02807e21f293", + "syncedAt": "2026-04-27T22:45:16.590Z" } diff --git a/docs/tools/index.md b/docs/tools/index.md index 7e2d1293f..31ea6e358 100644 --- a/docs/tools/index.md +++ b/docs/tools/index.md @@ -140,11 +140,19 @@ Per-agent override: `agents.list[].tools.profile`. | Profile | What it includes | | ----------- | ------------------------------------------------------------------------------------------------------------------------------------------------- | -| `full` | No restriction (same as unset) | +| `full` | Unrestricted baseline for broader command/control access; same as leaving `tools.profile` unset | | `coding` | `group:fs`, `group:runtime`, `group:web`, `group:sessions`, `group:memory`, `cron`, `image`, `image_generate`, `music_generate`, `video_generate` | | `messaging` | `group:messaging`, `sessions_list`, `sessions_history`, `sessions_send`, `session_status` | | `minimal` | `session_status` only | + +`tools.profile: "messaging"` is intentionally narrow for channel-focused +agents. It leaves out broader command/control tools such as filesystem, runtime, +browser, canvas, nodes, cron, and gateway control. Use `tools.profile: "full"` +as the unrestricted baseline for broader command/control access, then trim +access with `tools.allow` / `tools.deny` when needed. + + `coding` includes lightweight web tools (`web_search`, `web_fetch`, `x_search`) but not the full browser-control tool. Browser automation can drive real sessions and logged-in profiles, so add it explicitly with @@ -156,6 +164,16 @@ under the plugin key `bundle-mcp`. Add `tools.deny: ["bundle-mcp"]` when you want a profile to keep its normal built-ins but hide all configured MCP tools. The `minimal` profile does not include bundle MCP tools. +Example (broadest tool surface by default): + +```json5 +{ + tools: { + profile: "full", + }, +} +``` + ### Tool groups Use `group:*` shorthands in allow/deny lists: