Ryvos ships with 86+ built-in tools across 18 categories. The agent selects tools automatically based on your request — you do not need to invoke them directly. Every tool implements the Tool trait with a name, description, JSON Schema input, security tier, and timeout.
Tool Categories
Core Tools (12)
The foundational tools available in every Ryvos installation:
Tool
Tier
Description
bash
T3
Execute shell commands. Supports any shell command with full stdin/stdout/stderr capture.
read
T0
Read file contents. Returns the full file or a specified line range.
write
T2
Write content to a file. Creates parent directories if needed.
edit
T2
Apply targeted edits to a file using search-and-replace.
Semantic search across Viking memory with tier selection (L0/L1/L2).
viking_read
T0
Read a specific memory path at a specific tier.
viking_write
T0
Write or update a memory entry (auto-generates L0/L1 summaries).
viking_list
T0
Browse the viking:// memory filesystem.
Google Workspace Tools (6)
Tool
Tier
Description
gmail_search
T1
Search Gmail messages by query.
gmail_read
T1
Read a specific Gmail message by ID.
gmail_send
T2
Send a Gmail message.
gcal_list_events
T1
List Google Calendar events for a date range.
gcal_create_event
T2
Create a Google Calendar event.
gdrive_search
T1
Search Google Drive files.
Notion Tools (4)
Tool
Tier
Description
notion_search
T1
Search Notion pages and databases.
notion_read_page
T1
Read a Notion page's content.
notion_create_page
T2
Create a new Notion page.
notion_update_page
T2
Update an existing Notion page.
Jira Tools (3)
Tool
Tier
Description
jira_search
T1
Search Jira issues using JQL.
jira_create_issue
T2
Create a new Jira issue.
jira_update_issue
T2
Update an existing Jira issue.
Linear Tools (3)
Tool
Tier
Description
linear_search
T1
Search Linear issues.
linear_create_issue
T2
Create a new Linear issue.
linear_update_issue
T2
Update an existing Linear issue.
Communication Tools (1)
Tool
Tier
Description
notification
T1
Send a notification to configured channels or the system notification service.
Security Tiers
Tiers are used for classification and audit purposes. The constitutional safety system handles execution decisions — no tool is blocked based on tier alone.
Each tool has an assigned security tier:
Tier
Level
Auto-Approved By Default
Examples
T0
Safe
Yes
read, glob, grep, memory_search
T1
Low
Yes
web_fetch, http_request, git_clone
T2
Medium
Approval required
write, edit, git_commit, sqlite_create_table
T3
High
Approval required
bash, spawn_agent, process_kill
T4
Critical
Requires explicit constitutional reasoning
Unparseable bash commands
Configure classification thresholds in config.toml:
[security]auto_approve_up_to = "T1" # Auto-approve T0 and T1
Tool Registry
All tools are registered in the ToolRegistry at startup. MCP tools are bridged with the naming convention mcp__{server}__{tool}. Skill-based tools use skill__{name}.