What it can reach
Its tools are the platform’s own API operations, run in-process as you. It gets the slice that concerns tools, and nothing else.
That list is the whole surface. Everything on it is either about this tool, or a
read it needs to name something it cannot invent.
What it deliberately cannot do
It also never sees a secret’s value. It can read the names in your workspace and write{{secrets.STRIPE_API_KEY}} into the tree; the value stays in the
vault. And it runs as you, with your role — an editor drives it, a viewer can
watch the conversation but cannot send a message.
What it is good at
- Building a tree from a description of an API. Paste the endpoint, the
auth scheme and an example response, and say what the agent should do with it.
It writes the
httpoperation, thepublish_fieldsthat pick the values out, and thesayorgenerate_replythat uses them. - Fixing a validation error. Paste the error, or just say “validate and fix it”. Validation errors are precise about which operation and which token, and the CoPilot acts on them well.
- Writing a
json_schema. Including the property descriptions, which are the part people skip and the model actually reads. - Reshaping a response. “The API returns a nested array; get the first
delivery’s date into tooldata” is a
codeoperation it can write.
How to prompt it
Give it the endpoint and the behaviour, not the tree.The tool should look up a booking by reference.Things worth saying explicitly, because it will otherwise pick a default and tell you which one it picked:GET https://api.acme.example.com/bookings/{ref}withAuthorization: Bearerfrom theACME_API_KEYsecret. It returns{booking: {date, time, table_size}}. The agent should read the date and time back to the caller and ask if they want to change it.
- Whether a value should go in
tooldata(this tool run only) oruserdata(the rest of the session). - Whether the agent should speak the result verbatim (
say) or phrase it (generate_reply). - What should happen when the endpoint fails —
on_erroris a real choice.
Running your tool
Publishing
In this editor, publishing is your call. ToolCoPilot publishes when you ask it to, not on its own, and it says when a change is still only in the draft. Remember the other half: publishing the tool does not change live calls until the agents that attach it are published too. See testing and publishing.Limits
The conversation is stored per tool, so you can close the editor and come back to
it. Each CoPilot has its own thread against its own subject.
Next
AgentCoPilot
The builder in the agent editor, which has the whole API surface.
Testing and publishing
What validate and run actually check.
Build from your terminal
The same operations, pointed at Claude Code or Codex.