Agent permissions
Every agent runs under an explicit capability grant — it can only use the tools you gave it.
Agents don't get blanket access. Each one carries a capability grant — the specific tool families it may use — and the system enforces it: tools outside the grant aren't just hidden, calls to them are refused.
The grant families, roughly in order of trust:
- Read — transcripts, sources, edits, logs
- Analyze — watch frames, detect music beats (spends credits)
- Comment — leave comments on cards and timeline moments
- Mark — favorite/reject b-roll, label sources
- Cut — create and modify edits, tracks, subtitles, multicam angles
- Reframe — crops and output canvas
- Generate — AI media (spends purchased credits)
- Recipes / Skills / Ask — automation, knowledge, and interview powers
This mirrors human board roles: a review agent shaped like a commenter can never touch your cut, no matter what its instructions say — the grant wins. Marketplace agents show their grant before you add them, so you always know what you're inviting in.