Read / write / edit filesOpen, create, and modify workspace files with safety checks and approval prompts before changes.
Agent Tools
Tools are the assistant's hands. Friday uses them only when they improve the result, treats their output as evidence, and asks for approval before sensitive actions such as writing files, sending messages, deleting data, or touching accounts.
Read / write / edit filesOpen, create, and modify workspace files with safety checks and approval prompts before changes.
Apply patchMake precise, surgical edits to existing files when a targeted diff is safer than rewriting content.
Run commands & processesExecute shell commands and longer-running processes to build, test, inspect, or automate work.
Web searchLook things up on the internet when a request needs fresh or verifiable information.
Web fetchPull readable content from a specific page or URL and treat it as evidence for the answer.
Web browserDrive a real browser to interact with pages when simple fetching is not enough.
Create imageGenerate images from text descriptions using the configured text-to-image provider and model.
Schedule (cron)Create, update, pause, resume, list, delete, and run scheduled assistant jobs.
Load skillsPull in reusable skill instructions, references, templates, schemas, or optional executable behavior.
SubagentsSpin up focused helper agents for independent parts of larger work.
MCP toolsUse tools exposed by connected Model Context Protocol servers.
The assistant decides whether a tool is useful for the request and skips tools for direct answers.
Sensitive tools require the appropriate permission path before they can touch files, accounts, private data, or outside services.
Friday selects the files, commands, web search, browser, image generation, scheduler, skill, subagent, or MCP tool that fits the task.
Writing, deleting, publishing, sending messages, or accessing private data pauses for explicit confirmation.
Friday checks the result against the request and returns a concrete answer, file, image, scheduled job, or other artifact.
Permissioned actions
The assistant will not send messages, change records, delete data, or touch production systems without clear authorization.