Gated and Surface-Specific Tools
These tools appear only when a gate, a plan, or a session mode turns them on.
Most of them serve onboarding, design work, connectors, or self-hosted runners.
For example, PushNotification sends a notice to your terminal when a long task ends.
For most of them a server-side flag decides, so you cannot switch them on yourself.
These tools work only if your account, plan, or session mode has the gate on. A hidden server-side flag decides, with few exceptions. A few have an env var or setting, such as CLAUDE_CODE_SKILL_PROPOSALS.
Gated Tools
All of these are available in the main session only, and background subagents do not keep them, unless the Notes column says otherwise.
The Yes and No columns are explained on Tools.
Source: Tools Reference for the tools marked as documented, and the program (the tool definitions and their searchHint text) for the rest.
| Tool | Status | What It Does | Parameters and Gate | Read-Only | Parallel | Deferred |
|---|---|---|---|---|---|---|
Read | Undocumented Gated | Reads queued external notifications (webhooks, triggers). | No parameters. | ✅ | ✅ | ❌ |
Share | Documented Gated | Uploads ONBOARDING. and returns a team share link. | mode (check, update, create, delete, default check), short_ (string, optional). | ❌ | ❌ | ❌ |
Show | Undocumented Gated | Shows the Cowork onboarding role picker. | No parameters. | ❌ | ❌ | ❌ |
Offer | Undocumented Gated | Offers Claude in Chrome setup. | reason (string, max 200, optional). | ❌ | ❌ | ✅ |
Send | Undocumented Gated | Sends a message to the user (brief or assistant mode). | message (string, required, markdown), attachments (paths or file objects, optional), status (normal or proactive). Has an alias. | ✅ | ❌ | ❌ |
Send | Documented Gated | Drafts product or model-behavior feedback. | type (enum), title (string, required), details (string, required), area, failure_, task_ (optional). | ❌ | ❌ | ❌ |
Suggest | Undocumented Gated | Renders a plugin install card. | context (string, max 128), plugins (1 to 16), trigger. | ❌ | ❌ | Runtime check |
Suggest | Undocumented Gated | Renders addable claude.ai skills by keyword. | keywords (1 to 8 strings, required), context, trigger. | ❌ | ❌ | Runtime check |
Fetch | Undocumented Gated | Reads a relayed inbox message from a linked thread. | file_ (string, required). | ✅ | ❌ | ✅ |
Publish | Undocumented Gated | Publishes a plugin or mod to the organization library. | path (string, required), destination (organization), description, replace (boolean), shown, question. | ❌ | ❌ | ✅ |
Artifact | Documented Gated | Renders an HTML file to a claude.ai web page. | The saved sub-agents docs list Artifact among the tools a background subagent keeps. | ❌ | ❌ | ❌ |
Appifact | Undocumented Gated | Runs appifact SDK JavaScript against an artifact. | skill, artifact (strings, optional), code (string, required). | ❌ | ❌ | ❌ |
Send | Undocumented Gated | Sends files to another Claude Code session. | to (string, required), files (string array, 1 up to a maximum), message (optional). | ❌ | ❌ | ✅ |
Poll | Documented Gated | Waits for and receives queued harness events. | No parameters. | ✅ | ❌ | ❌ |
Push | Documented Gated | Sends a notification to the terminal and optionally to mobile. | message (string, required, under 200 characters), status (proactive). Also an entry-point rule for remote_. | ❌ | ❌ | ✅ |
Design | Undocumented Gated | Syncs local design system components to a claude.ai/design project. | method, project, path, writes, deletes, plan, files, paths, name, assets, local. | ❌ | ❌ | ✅ |
Claude | Undocumented Gated | Works with Claude Design projects. | operation, arguments (object, default {}). | ❌ | ❌ | ❌ |
Projects | Undocumented Gated | Reads and writes the attached claude.ai project. | method union, with method-specific fields. | ❌ | ❌ | ❌ |
End | Documented Gated | Ends the conversation (abuse, or on request). | No parameters. Removed from subagents. | ✅ | ❌ | ✅ |
Remote | Documented Gated | Manages scheduled cloud agent routines. | action, trigger_, session_, cursor, body. | ❌ | ❌ | ✅ |
Search | Undocumented Gated | Finds MCP connectors by keyword. | keywords (1 to 8 strings). | ❌ | ❌ | ✅ |
Suggest | Undocumented Gated | Resolves MCP connector payloads by directory. | uuids (1 to 32 strings). | ❌ | ❌ | Runtime check |
List | Undocumented Gated | Lists installed MCP connectors. | keywords (optional filter). | ❌ | ❌ | ✅ |
Send | Documented Gated | Delivers files to the user. | files (string array), caption, status (normal or proactive), display (render or attach). | ❌ | ❌ | Runtime check |
propose_ | Undocumented Gated | Proposes skills from recurring procedures. | proposals: an array of objects with name, kind (new or improvement), target, description, evidence, skill. | ❌ | ❌ | ❌ |
Self-Hosted Runner Tools
These nine tools exist only in self-hosted runner sessions. All are Undocumented and Gated. All are deferred.
| Tool | What It Does | Read-Only | Parallel |
|---|---|---|---|
self_ | Reads self-hosted environment aggregates and queue counts. | ✅ | ✅ |
self_ | Lists queued and assigned sessions in a self-hosted environment. | ✅ | ✅ |
self_ | Lists registered self-hosted runners for an environment. | ✅ | ✅ |
self_ | Lists self-hosted environment secrets (metadata only). | ✅ | ✅ |
self_ | Probes the local runner / endpoint. | ✅ | ✅ |
self_ | Reads runner Prometheus gauges from /. | ✅ | ✅ |
self_ | Requeues a stuck session onto another runner. | ❌ | ❌ |
self_ | Starts a local runner process for a try-out. | ❌ | ❌ |
self_ | Tails the runner log file with secret redaction. | ✅ | ✅ |
Tools without an Inventory Row
The inventory file does not list these tools, because their definitions do not use a plain searchHint text.
| Tool | Status | What It Does | How It Works | Available In | Read-Only | Parallel | Deferred |
|---|---|---|---|---|---|---|---|
Tool | Documented | Loads the schema of deferred tools. | See ToolSearch. | Main session and subagents. | ❌ | ❌ | ❌ |
Wait | Documented Gated | Waits for pending MCP servers. | Removed from subagents. | Main session. | ❌ | ❌ | ❌ |
Structured | Undocumented | Returns the final JSON for -- runs. | Never deferred. | Main session in print mode. | ❌ | ❌ | ❌ |
List, Read, Read | Documented | List and read MCP resources. | Deferred. Offered when an MCP server has resources. | Main session. | ✅ | ✅ | ✅ |
Agent, Monitor, ScheduleWakeup, Workflow, and SubagentHandback are on Agents, Tasks, and Planning and Shell, Web, and Background Tasks.
Example
Turn on skill proposals for one shell session.
CLAUDE_CODE_SKILL_PROPOSALS=1 claude
How It Works
A gated tool is built only when its gate passes. Gates are a login type, a policy, an entry point, an env var, or a server-side flag.
A tool with a server-side flag appears for some accounts and not for others, so the same version can show different tools.
Most of these tools are deferred, so Claude finds them with ToolSearch and not in the first tool list.