Agent capabilities

Configuration → Agent capabilities decides which capabilities people with a role can use, such as code execution, web search, file search or subagents. This lets you limit costly or risky capabilities to individual roles without blocking them for everyone.

The selection applies to people with the role in question: in the agent builder, for the tools in the chat and for the tools of every agent they use. What people may do in CompanyGPT beyond that is decided by the feature rights of the role.

Also affects existing agents

CompanyGPT checks the capabilities while chatting, for the person who is writing. If their role lacks a capability, the matching tool is missing from every agent they use, including shared agents and agents from the marketplace.

• Without tools, no MCP tools and no other tools run any more.
• In the normal chat, missing capabilities such as web search, run code, file search, artifacts or skills disappear from the tools menu.

Switching management on

In the Management section, tick Govern agent capabilities from companyADMIN. As long as the box is unticked, everyone gets the capabilities from the base configuration.

If no role has an own selection yet when you switch it on, companyADMIN immediately creates an own selection for ADMIN, as a copy of the base configuration. If you then shrink For everyone, this therefore does not affect ADMIN.

To stop managing, untick Govern agent capabilities from companyADMIN. The dialog Stop managing? asks first; Stop managing removes every selection. Afterwards the base configuration applies to everyone again.

For everyone

The For everyone section is the selection every role without an own selection gets. Set the ticks and click Save.

Own selection per role

1. Under Own selection per role, pick a role (Pick a role).
2. Click Create own selection. The selection starts as a copy of For everyone.
3. Adjust the ticks and save the role’s section.

An own selection replaces the selection For everyone for everyone with this role; it does not add to it. Remove own selection gives the role For everyone again. The last own selection cannot be removed; to lift management completely, stop it above.

USER is a role like any other. If ADMIN has no own selection, administrators get For everyone too. companyADMIN itself is not affected.

The capabilities

Capability	Meaning
execute_code	Run code – badge costly
web_search	Web search – badge costly
file_search	File search in the agent’s file context
artifacts	Artifacts as an output format
subagents	Subagents – badge costly
actions	Actions through external interfaces
skills	Use skills
ask_user_question	Ask the person follow-up questions
tools	Use tools

The costly badge marks capabilities that are expensive or risky – the main reason to use this page at all. not in librechat.yaml means that the base configuration does not provide the capability.

All other capabilities your environment provides are not controlled on this page. They follow the base configuration and stay in every selection. The page lists them under For everyone.