What the agent can do
The full list of tools the agent has access to, and what they can't do.
On this page
Tools available #
| Tool | What it does |
|---|---|
| read_file | Reads any file in the project. |
| write_file | Creates or overwrites a file. |
| edit_file | Applies targeted edits without rewriting the whole file. |
| delete_file | Removes a file. |
| list_files | Lists files in a folder. |
| get_schema | Reads your bound Tadabase app's schema. |
| create_page | Scaffolds a new React page and wires the route. |
| update_nav | Edits the sidebar in tada.config.json. |
| run_command | Runs npm install or scripts inside the dev container. |
| add_secret | Declares an environment variable — value injected at runtime, never written to a file. |
Guardrails #
- npm scripts run with --ignore-scripts and a package allowlist.
- The agent cannot edit lib/tada-server.js, lib/tada.ts, or server.js — these are SDK files.
- The agent cannot reach outside your project workspace.
- Secrets values never enter the agent's context — only the name does.