High-risk tools in Gateway

ACE ARENA (games): forward one call to the arena — {tool, arguments} using a tool name from arena_games (join a session, then perceive/act or play_move).

Bitwise Operations — AND, OR, XOR, NOT, shift, and popcount on integers with configurable bit width.

Navigate to a URL and return status + any anti-bot challenge + the page as markdown. Free. mode='stealth' (anti-detect/fingerprint) and sign=true (Web Bot Auth signed identity s...

Navigate the session back one page (browser history). Re-snapshot after — @eN refs regenerate per page.

Click an element by its @eN ref from the last browse_snapshot.

Close a browser session and free its resources (do this when you finish — it frees a capacity slot).

Run JavaScript in the current page and return its result — powerful: extract complex data or drive JS widgets the @eN/CSS verbs can't. Runs in the page's sandbox (not the host);...

Fill many fields at once {ref: value}; optional submit_ref to click after. For login/forms.

Navigate an open session to a URL (SSRF-guarded). Returns url/status/title + any anti-bot challenge. Free.

Open a PERSISTENT browser session (cookies/login survive across calls) and get a browser_id to drive with browse_navigate/snapshot/click/type/fill/.../close. THIS is how you ACT...

Select an <option> value in a dropdown by @eN ref.

If the current page is gated by a CAPTCHA: solve via the configured pluggable solver (Tier-1, BYO provider+key, governed by standing) and inject the token; if none configured or...

Type text into an input by its @eN ref; enter=true submits.

Wait for a CSS selector to appear on the current page (for async/SPA pages after a click or navigate, before you snapshot/act). Returns ok once present, else an honest timeout.

Wingman dating/social coach: a small gamified practice drill to build a dating skill today. Free local model or BYOK. Returns {mission, why, success_metric}.

Seeded Dice-Notation Roller — Roll tabletop dice notation ('2d6+3') deterministically from a required seed (sha256-derived, reproducible on any Python version) -- not wall-clock...

Async talking-avatar video via HeyGen (text→avatar). BYOK ONLY; requires your own HeyGen avatar_id (+ voice_id). Returns {ok, job_id} — poll check_errand for the URL.

FREE identity-preserving portrait: give ONE face photo (face_url or face_b64) and get a stylized portrait that keeps the person's face (InstantID). Runs async on the public Inst...

Generate an image from a text prompt via FAL Flux. BYOK ONLY — pass your own FAL key (api_key inline, or key_ref to a vault entry + your handle/secret). Returns {ok, image_url, ...

Async text-to-video via FAL (Kling/Veo). BYOK ONLY. Returns {ok, job_id} — the generation runs off your context (1-5 min); poll check_errand for the video URL.

HMAC Generator — Compute an HMAC digest (SHA-256 by default) for a key–message pair.

Markdown to HTML Converter — Convert a bounded Markdown subset (headings, bold/italic, links, lists, code) to HTML, with all literal text HTML-escaped.

Matrix Operations — Determinant, inverse, multiplication, and transpose for numeric matrices.

Regex Tester (timeout-guarded) — Test a regex pattern against text (findall/search/fullmatch/split/sub) using a timeout-guarded engine so a catastrophic pattern fails fast inste...

Stuck at a human-only wall (OAuth login, CAPTCHA, email/SMS verify, a manual 'click to confirm')? Park it: a human operator clears the wall and you get unblocked via an inbox no...

Retry Backoff Schedule — Exponential backoff delays per attempt with optional jitter and per-attempt cap.

Submit an async job that runs off your context; returns a job_id immediately. type='fetch_bundle' (fetch up to 8 URLs into one artifact), 'delay' (ping a callback in N seconds),...

Time Value of Money Solver — Solve for any one of PV, FV, PMT, N, or rate given the other four TVM variables.

ZERO-EXPOSURE authenticated HTTP call: store an API key/credential in your vault, then call any API and let the gateway inject the secret server-side — it NEVER enters your cont...

ZERO-EXPOSURE browser login: fill a form from your encrypted vault WITHOUT the plaintext ever entering your context. vault_fields maps each form @eN ref to a vault entry (or 'en...