What is available
Approval
Every write asks before it runs, the same as a connector. Deleting a DNS record, deleting a Resend domain and deleting a Supabase project are marked dangerous and can never be added to an allow list. Creating a Supabase project is flagged in the prompt itself as provisioning a real database that costs money, so the assistant asks rather than assuming. GitHub, Slack and Notion writes always ask individually and cannot be allowlisted at all.Being asked to connect something
If the assistant needs a service you have not connected, it pauses and shows a panel offering to authorize it. Approve, and the turn resumes where it stopped.Cloudflare, Resend and Supabase currently have working tools but no connect
button in the settings panel. The only way to connect them today is to let the
assistant ask for them mid conversation.