Tools Catalog

# /home/.aihummer/etc/gateway.env
AIHUMMER_APPROVAL_TOOLS=mail,code_exec

AIHUMMER_AIRGAPPED=1

During a turn the agent can call **tools**. AiHummer ships a built-in tool runtime: some tools are on by default, others activate only when you provide the required configuration. Tools are SSRF-guarded and sandboxed where relevant, and risky tools can be put behind a human approval gate. ## Enabled by default These tools work out of the box (some depend on a configured model or knowledge base). | Tool | What it does | How to enable | |---|---|---| | `web_fetch` | Fetch the contents of a URL. SSRF-guarded. | On by default | | `http_request` | Make an outbound HTTP request. SSRF-guarded. | On by default | | `doc_generate` | Generate documents (CSV / TSV / XLSX). | On by default | | `image_generate` / `edit_image` | Generate or edit images. | On by default | | `github_get_file` | Fetch a single file from a GitHub repository. | On by default | | `generate_pairing_code` | Issue a device pairing code. | On by default | | `search_knowledge` | Search the knowledge base (RAG) and ground answers with citations. | With a knowledge base configured | | `deep_research` | Run multi-step research and produce a cited report. | On by default | ## Enable on configuration These tools stay off until you point them at the resource they need. | Tool | What it does | How to enable | |---|---|---| | `web_search` | Search the web. | `SEARXNG_URL` (SearXNG instance) | | `browser` / `computer` | Drive a real browser via the Chrome DevTools Protocol. | `CLOAKBROWSER_CDP_URL` (CDP, default port `:9222`) | | `filesystem_read` | Read files, sandboxed under a root directory. | `AIHUMMER_FS_ROOT` | | `db_query` | Run read-only SQL queries. | `AIHUMMER_DB_QUERY_DSN` | | `mail` | Send and read email. | SMTP / IMAP credentials | | `tts` | Synthesize speech (text-to-speech). | `AIHUMMER_TTS_URL` (TTS sidecar) | | `code_exec` | Execute code in a sandbox. | `AIHUMMER_CODE_EXEC` | > [!DANGER] > `code_exec` is **off by default on shared hosts**. Only enable it in an > environment you control and trust, because it runs model-authored code. Even > sandboxed, treat it as a privileged capability. ## Integration tools When the matching connection is configured, the agent also gets domain tools: | Tool | What it does | How to enable | |---|---|---| | Bitrix24 CRM / task / calendar tools | Read and act on Bitrix24 CRM records, tasks and calendar. | Bitrix24 connection configured | | 1C (БИТ.ФИНАНС OData) | Query 1C accounting data over the БИТ.ФИНАНС OData interface. | 1C OData connection configured | ## Approval gate Any tool can be put behind a **human-in-the-loop approval gate**. List the tool names in `AIHUMMER_APPROVAL_TOOLS`; before such a tool runs, an operator must approve the call. A rejected call is **not** executed. ```ini # /home/.aihummer/etc/gateway.env AIHUMMER_APPROVAL_TOOLS=mail,code_exec ``` ## Air-gapped mode Set `AIHUMMER_AIRGAPPED=1` to block model-controlled public egress. In this mode the agent cannot reach the open internet through tools, which is appropriate for sovereign or isolated deployments. ```ini AIHUMMER_AIRGAPPED=1 ``` > [!NOTE] > Beyond the built-in catalog, AiHummer can synthesize tools from any OpenAPI 3.x > spec and expose any MCP server's tools with no integration code. See the > Marketplace & Plugins section of the docs. ## Where to next - The variables referenced here in full: [Environment variables](/en/v1.0/reference/env-vars). - Manage the running instance: [CLI reference](/en/v1.0/reference/cli).