Tools & app accounts
Give your agent actions to take by enabling toolsets and tools, and pin it to specific connected accounts with app accounts.
Tools are the actions an agent can take — sending an email, creating a ticket, looking up a Shopify order, or anything a custom app exposes. You manage them in the Tools tab on the agent detail page.
Toolsets vs. tools
A tool is a single action. A toolset is a bundle of related tools you can enable as a unit. Toolsets come from three sources:
| Source | Examples |
|---|---|
| Native — built into Auxx | Core, email, knowledge, entities |
| Apps — one per installed app | Shopify, Slack, and other installed apps |
| MCP servers — your connected servers | Any tool exposed by a connected MCP server |
You can enable an entire toolset, or open it and pick individual tools with a per-tool allow-list.
How a tool becomes enabled
A tool can be turned on three ways:
- Manually — you add it from the Add tools dialog.
- By default — a starter set of toolsets is added when the agent is created.
- By mention — referencing a tool in the persona prompt or a procedure automatically enables and locks it on.
Locked tools show a lock badge. To remove one, delete the mention that locked it first.
App accounts
When an app is connected to more than one account — say two Shopify stores — you can pin the agent to a specific one with an app account. This makes sure the agent always acts on the right store, workspace, or inbox.
Chat agents get a filtered set
Chat agents that serve customers only see tools marked safe for untrusted callers. Sensitive actions are hidden from the chat surface automatically, even if the same tool is available to internal agents.
Tools that need approval
Some tools require a person to confirm before they run. See Tool approvals.
Next steps
The persona prompt
Write the instructions that define your agent's personality, tone, and rules, and reference tools directly from the prompt to lock them on.
Knowledge scope
Control exactly which records and knowledge bases your agent can read and reason about, so it stays focused, private, and efficient.