what the native agent can call

On native local/API routes the model calls DGC's own tools. Subscription turns use the vendor CLI's tools instead. The standard tool_profile (the default) offers every product tool on every request — web, image, artifact, skill-install, memory, delegation, monitor and the rest — and lets the model choose; a tool with nothing to act on (no skills installed, no background process, no active goal) still stays out. tool_profile: adaptive instead offers the core read / edit / search / shell surface and adds the others only when the request's wording asks for them, which keeps a small local context clear at the cost of a differently worded ask being told the tool does not exist. tool_profile: full offers every tool allowed by the current permission mode. Plan mode denies mutations. Full-auto omits the blocking options prompt unless your request mentions choosing.

• read_file · write_file · edit_file · multi_edit · apply_patch — read, overwrite, exact-string edit, several edits to one file, or an atomic unified diff.
• read_file on a document (.docx, .xlsx, .pptx, .odt, .ods, .odp, .rtf, .pdf) returns the text extracted from it, with a note saying so — layout, images and embedded objects are not there, and an answer about how a document looks cannot come from this. Line numbers, offset and limit behave as they do for any other file. See Attaching a document. Any other binary is still refused rather than decoded into noise.
• view_image — look at a PNG/JPEG/GIF/WebP in the workspace (see Viewed images). For a model without vision, a configured vision model looks and answers its question (see Sub-agents).
• glob · grep — find files; search contents.
• repo_map · code_intel — inventory and symbols (see Code intelligence).
• git_diff — local Git without a shell (see Git changes).

• bash — a command; background: true returns a task id at once (dev servers, watchers). It holds the workspace lease only while it starts. Do not use a background command to change files.
• bash_output · bash_kill — page or search retained output; stop a background task. Handles belong to the originating agent and expire after 30 minutes.
• python — persistent interpreter, off until /code-action on (see Python code-action).
• !cmd in the composer uses the same sandbox, bounds, cancellation, and lease without asking the model to interpret the command.

• web_search · web_fetch — search, then read a URL as text (see Web search).
• browser — a real page: open, snapshot, click, type (see Looking at a page).
• artifact · present_document — serve a page, or show Markdown in the browser (see Artifacts and Plan mode).

• task — a sub-agent: agent picks explorer / researcher / critic / verifier / worker (or a named definition); background: true runs on after the turn, except in a one-shot dgc -p run (see Sub-agents).
• list_tasks · wait_tasks — what this chat's sub-agents are doing, and block for a background one's result. Read-only, and offered only while there is a background child or a result nobody has read (see Sub-agents).
• todo · skill · add_skill · save_memory · update_goal · notes
• present_plan — plan mode only, for approval.
• propose_options — ask you to decide, and wait (see Questions).
• ask_user — ask you something and keep working (see Questions).
• monitor · monitor_stop — watch a long-running command (see Background monitors).

MCP tools join this catalog as mcp__<server>__<tool> when a server is connected.