What you can ask Metnos to do

Finds, reads, creates, converts, moves, shares, and analyses local files or files supplied by a provider. This includes documents, spreadsheets, PDFs, OCR, archives, hashes, and lines of code.

Limits. This domain concerns the file container. Use Images for the visual meaning of a photo and URLs for a public web page.

Lists, finds, creates, and deletes directories, including on a remote device when the plan requires it.

Limits. A folder organises files; it does not represent their content. Unsafe deletion remains subject to the normal gates.

Checks whether an executable command or program is available in the selected system PATH.

Limits. It detects availability and location; it does not automatically install unrequested packages.

Computes descriptive statistics over numeric values: count, minimum, maximum, mean, and other admitted summaries.

Limits. It receives explicit numbers or values produced by a previous step; it is not a persistent spreadsheet.

Filters and transforms text already available, at granularities such as lines, paragraphs, or segments.

Limits. It works on in-memory text; extracting it first from a file, message, or page requires the corresponding source domain.

Sorts, filters, groups, classifies, compares, extracts, and summarises structured rows produced during the same turn.

Limits. This is an internal composition domain: people describe the desired result and do not need to know the name entries.

Compares two result sets to find common, new, or missing items using explicit keys.

Limits. Lists must come from the same plan or an identifiable source; comparison does not invent matches.

Finds, reads, sends, replies to, labels, moves, or deletes messages through configured accounts, including IMAP/SMTP, Gmail, and admitted channels.

Limits. The account can be selected when several exist. Sending, replying, and deleting retain consent and traceability.

Reads, creates, and deletes appointments and finds free intervals in accessible calendars.

Limits. An event is an appointment. Calendars manages containers; Scheduled tasks executes requests in the future.

Finds and reads address-book records containing names, email addresses, and phone numbers, locally or from a connected account.

Limits. A contact is an address-book record. Persons instead represents local identities and recognition in photos.

Creates, reads, changes, and deletes reminders or recurring requests and retains execution history. It covers only the internal Metnos scheduler.

Limits. A task executes a request at a time or trigger; it is neither a calendar appointment nor a remote automation, which belongs to Remote automations.

Creates and removes calendar containers, distinct from the appointments they contain.

Limits. Deleting a calendar may also delete its events and is therefore a destructive gated operation.

Finds real-world places from text or coordinates and converts GPS coordinates into geographic names.

Limits. The user's current location is a separate system utility; Places interprets or searches destinations.

Searches the web, fetches known URLs, and reads public HTML pages or PDFs, extracting text and metadata.

Limits. A public page without session state belongs to URLs. Use Sites for an authenticated, interactive website.

Describes images, builds and queries local indexes, searches by content, person, or similarity, searches web images, and accesses Google photos created through Metnos.

Limits. Generic path operations remain in Files. Google Photos exposes only items allowed by its API and mandate.

Manages a local named-person registry and links recognised faces to people in photographs; it can also read the current actor's profile.

Limits. It is not an address book: email addresses and phone numbers belong to Contacts. Biometric data and deletion have dedicated controls.

Opens a persistent browser session, reaches login using protected credentials, reads page state, and performs narrow-mandate web actions.

During collection, it can return directly to a previously reached page and verify its content and context before continuing. If verification fails, it follows the previous path again within the session limits.

For invoices from one specific year, reaching an earlier year can stop the search within the same list when its dates and order can be verified. Details of the requested invoices still need to be read. Views of the same document can be merged using the observed link to its detail; equal dates and amounts alone do not prove a duplicate. Verifying written rows does not certify archive completeness.

Limits. Credentials are injected by the broker and never shown to the model. Sensitive actions require confirmation.

Starts automations already present in a repository and lists their runs with outcome, branch, and duration.

Limits. It is distinct from scheduled tasks, which are the internal Metnos scheduler, and from processes, which are software running on a machine.

Through a provider skill, finds, reads, creates, updates, or closes project issues with state, labels, and assignees.

Limits. The currently documented provider is GitHub and requires configured credentials; effective capabilities depend on the skills admitted by the instance.

Finds and reads pull requests, diffs, and review state; updates or merges a request when the provider and mandate allow it.

Limits. It is distinct from issues because it includes code changes, reviews, and merge. Mutating operations are gated.

Writes and deletes comments on a provider's discussion items: issues and pull requests.

Limits. A comment is not mail: it has no recipient, folder, or delivery. Approving or requesting changes on a pull request is a verdict instead, and belongs to Pull requests.

Lists and manages installed extensions that can add executors, providers, and specialised knowledge to the local catalog.

Limits. A skill is admitted through verification and policy; installing one does not bypass vocabulary, sandboxing, or consent.

Obtains a snapshot of processes and system-health signals on the local system or an eligible device.

Limits. This is observation, not arbitrary shell administration: available actions remain those of admitted executors.

Computes, reads, and curates canonical signatures used to classify system commands and actions into allowed, uncertain, or forbidden policy sets.

Limits. This is an administrative security domain, not cryptographic signing of user documents.

Exposes local proposals awaiting review. The current nightly producer proposes deduplication; generalisation and specialisation remain readable only in historical records.

Limits. Reading a proposal does not approve it. Acceptance, rejection, and rollback occur through the designated administrative surfaces.

Collects missing information in typed dialogs and forms, including choices, dates, files, and sensitive fields.

Limits. It is an interaction capability used inside an operation; people normally do not invoke it by name.

Presents an Approve/Reject choice and continues along the allowed branch while preserving preview, actor, and traceability.

Limits. It is a gate, not a shortcut: approval does not expand executor authority or make a forbidden action permissible.

Configures, lists by metadata, and deletes encrypted bindings for mailboxes, APIs, cloud services, and authenticated sites.

Limits. Clear-text secrets never return to the planner or Tutor. Multiple accounts of the same type remain selectable through distinct bindings.

Lists, sets, and removes the preferences with which a user decides how Metnos behaves towards them: reply length and tone, units, language, browser mode.

Limits. Keys and values form a closed vocabulary, and each person sees only their own preferences. A preference that is recorded but not yet applied by any answer path is declared as such.

Provides reliable date and time, the last observed location, undo for the latest reversible turn, and expert consultation when admitted.

Limits. These are cross-domain primitives, not new data domains. Undo operates only on effects with a recorded compensation.