Enable globally, arm per chat
- Open Settings → Tools and enable the capabilities you are willing to make available.
- Grant the operating-system permissions required by Calendar, speech, files, or other integrations.
- In Chat, open the tools menu and arm only the tools the current conversation should use.
- Use a tool-capable model. A tool being installed does not force the model to call it.
Callable chat tools
| Tool | Purpose |
|---|---|
| Web | Research, open, and find across supported web evidence. |
| Python | Local sandboxed calculations, parsing, and structured computation; compatible MLX models are not categorically excluded. |
| Memory | Store or retrieve user-approved durable notes. |
| Calculator | Deterministic arithmetic. |
| Unit Converter | Deterministic measurement conversion. |
| Dataset Search | Search indexed datasets and Knowledge Packs. |
| PDF Reader | Read supported PDF text; it becomes available automatically when applicable. |
| Calendar | Read calendar data and create events after confirmation and permission checks. |
| Charts | Turn structured values into a visual chart. |
| Phone a Friend | Let a local model request an Autopilot handoff when configured. |
Permissions and confirmations
Calendar writes require confirmation. File, speech, and calendar access remain subject to platform permissions. Remote tools or models may receive the arguments and results required for the turn; review Privacy & Network Activity before combining sensitive material with a remote route.
Python is local and constrained
- Runs in a temporary local workspace with execution limits.
- Has no general network access.
- Returns structured output so the model can inspect stdout, stderr, exit state, timing, and errors.
- Availability depends on the current model’s tool-calling support and device runtime, not a blanket MLX prohibition.
Chat tools are not the Tools tab
Callable tools are functions the active chat model can invoke. The separate Tools tab contains user-facing workflows such as study and utility surfaces; opening that tab does not arm tools for a conversation.