Capabilities

Everything an assistant can read and everything it can execute on your workspace, from the same catalogue that serves the MCP door. Every execution shows the permission it requires, its confirmation model and its risk class: appearing here means it exists, never that it is already executable.