Install a ready-made worker, connect your own accounts and trusted sources, and put it to work. You inherit the job definition — not the publisher's private files, credentials, or account data. The original keeps its track record; your copy starts fresh.
Runs real code in an isolated sandbox
code.execute runs Python in a sandboxed VM with network egress denied — on the managed cloud, never on your machine.
Reads the web with a real browser
web.browse drives a real remote Chromium for pages a plain HTTP fetch cannot read, alongside a vetted Puppeteer screenshot tool.
Full shell on your own machine (AgentMug Desktop)
shell.execute exists only where you run the worker yourself — AgentMug Desktop today, not the CLI. The cloud deliberately refuses it and names a host that can, which is a deliberate split rather than a gap.
75 executable tools are wired today across 20 connected providers. Extend your workers with MCP, webhooks, and HTTP when the job needs more. Read the generated capability matrix