Built-in Tools

These tools are available to the agent in every session.

Filesystem

Tool	What it does
ReadFile	Reads a file's contents. Always runs through PathGuard first.
Glob	Lists files matching a pattern. Protected paths are excluded from results.
SearchCode	Grep-style search returning file + line + snippet. Capped at 50 results.
EditFile	str_replace edit — old_str must appear exactly once or the edit is refused.
WriteFile	Creates a new file. Refuses if the path already exists.

Execution

Tool	What it does
RunArtisan	Runs php artisan <command> in a subprocess. Allowlist-gated.
RunTests	Runs Pest or php artisan test in a subprocess. Returns a structured summary — pass/fail counts and, per failure, the test name, file:line, and assertion — not the raw log.
RunPint	Runs Laravel Pint to format files. Called before finishing a task.
RunLarastan	Runs PHPStan / Larastan static analysis and returns the findings. Accepts an optional path and level override. No-ops gracefully if vendor/bin/phpstan is not present.
RunShell	General shell — governed by the shell config mode.
RunComposer	Composer with the dangerous parts fenced off — a fixed set of read-only and mutating subcommands, mutations always --no-scripts, scripts re-enabled only by a human at the terminal. Used by ai:upgrade.
ReadPackageDocs	Reads an installed package's upgrade guide, changelog, or composer.json from vendor/ — a docs-only carve-out of the vendor/* protected path; package code stays unreadable. Used by ai:upgrade.

Observability

Tool	What it does
ReadLog	Returns the last N lines of storage/logs/laravel.log. Accepts an optional filter string.
QueryDatabase	Runs a read-only SELECT query and returns results as JSON. Capped at 100 rows.
MutateDatabase	One UPDATE, INSERT, or DELETE, run inside a transaction that is only committed once a human has confirmed the exact affected-row count. Off by default — see Database writes.
ListRoutes	Returns a formatted table of all registered routes with method, URI, name, and action.
DescribeSchema	Real DB schema from the live connection — tables, columns, types, indexes, foreign keys. Authoritative, not guessed from migrations.
DescribeModels	The application map for one model — real columns and types from the live connection, casts, fillable, relations (type, related model, foreign key), local and global scopes, accessors, observers, policy, and factory states. With no argument, lists every model. Schema only, never rows.
DescribeRoute	One route as the framework resolved it — the middleware stack with groups and aliases expanded, route-model bindings, the FormRequest and its validation rules, and the authorization guarding it. ListRoutes answers what exists; this answers what happens.
AppInfo	The application stack — Laravel/PHP versions, drivers (via artisan about), and notable installed packages (Livewire/Inertia/Filament, Pest/PHPUnit, Fortify, …).
GitDiff	Shows a git diff — supports staged, a specific commit, a branch range, or a path.
ReadTelescopeEntry	Reads Telescope exception entries. Pass a job UUID for a specific lookup, or omit to return recent exceptions. No-ops gracefully if Telescope is not installed.
ReadSentryIssue	Fetches a Sentry issue by ID — exception, stacktrace, breadcrumbs, and request context. Omit the ID to list recent unresolved issues for the configured project. No-ops gracefully if SENTRY_AUTH_TOKEN / SENTRY_ORG are not set.
ReadGitHubIssue	Fetches a GitHub issue by number — title, body, labels, and all comments. Omit the number to list recent open issues. No-ops gracefully if GITHUB_TOKEN / GITHUB_REPO are not set.
ReadPullRequest	Fetches a GitHub pull request by number — title, body, branch name (head ref), base branch, state, author, and comments. Use this (not ReadGitHubIssue) when the user references a PR number, especially when the branch name is needed for CommitAndPush.
CreateGitHubIssue	Opens a new GitHub issue with a title and body.
CreatePullRequest	Creates a branch, commits all worktree changes, pushes to origin, and opens a GitHub pull request.
CommitAndPush	Stages all changes, fetches the remote branch tip, rebases onto it, commits, and pushes via HEAD:<branch> — without checking out the branch. Use this to add follow-up commits to an existing PR from a worktree session. Always pass the branch parameter (get it from ReadPullRequest).
AskUser	Presents the user with a select() or multiselect() prompt and returns their choice. The agent calls this when there are multiple valid paths and it wants the user to decide.
ConfirmAction	Presents the user with a confirm() prompt before a destructive or irreversible operation. Returns "confirmed" or "cancelled".
Delegate	Runs a self-contained task in a subagent — a separate agent with its own fresh context and narrower toolset — and returns only its final report. Present only when tackle.subagents is non-empty.

All file reads happen in-process. Everything that executes code runs as a subprocess, so a broken generated file cannot crash the agent session.

DescribeSchema, DescribeModels, and DescribeRoute are the tools an agent running outside your application cannot have — see The Application Map for what they return and why it beats reading the files.

Want to add your own? See Custom Tools.