Workspace tool allowlist
These are the mesh capabilities agents in this workspace may call. Enable the tools you want; tick approval on any tool whose calls should pause for your sign-off (over XMPP + email). Approval is 100% your choice — write & destructive tools are pre-ticked as a safe default, but you can untick any of them. Whatever you set here is a global override that takes precedence over each agent's own settings.