defaultTools / --tools) uses allowlist names such as read and bash; model-facing names include read_file and run_command.
Tool overview
bash / powershell correspond to platform shells. Use the left column for configuration. Extensions and MCP can add other tools.
read
Reads text and JPG, PNG, GIF, WebP, and BMP images. Long text is truncated at the line or KB limit, whichever comes first. Useoffset / limit to read sections.
Images are attached to model requests and resized to within 2,000 px by default.
bash (powershell on Windows)
Commands run in the working directory and stream output. Configure the environment withshellPath and shellCommandPrefix.
Using run_command with run_in_background starts a detached command and immediately returns its PID and log file. Read the log to check readiness and use kill to stop it. Processes still running at session end are cleaned up. This differs from the input box’s ! prefix.
The shell has the same system permissions as the account running Step Code. Check working directories, credentials, and side effects before execution.
edit
Performs exact replacements in a single file. EacholdText must match uniquely, and edits must not overlap. Combine adjacent changes into one replacement. If a match fails, reread the file rather than editing from stale content.
write
Creates or completely overwrites a file, creating parent directories as needed. To preserve existing content, use a partial edit or confirm the complete replacement first.grep
Parameters includepattern, path, ignoreCase, literal, and glob, supporting literal or regex searches. Backend order is ripgrep (downloaded or system), git grep inside a Git repository, then POSIX grep. If none are available, it reports an error.
See Built-in tool cache for cache and network details.
find
Finds paths by filename or glob, including dotfiles. Use a read tool to inspect returned files.ls
Lists entries alphabetically, marks directories with/, and includes dotfiles. Long output is truncated; narrow the directory scope to continue.
Enabling and disabling tools
defaultTools controls the built-in allowlist. An empty array leaves extension tools. Launch options override configuration for one session:
Bypass skips individual approval for ordinary calls; it does not mean tools cannot modify files or access networks. See Approval flow.

