---
title: Tools & agentic behavior
description: How IsonAI uses tools — web search, page reading, market data, places, Google connectors — plus its consent boundaries and privacy protections.
last_verified: 2026-07-17
---

# Tools & agentic behavior

For questions that need outside data, IsonAI works **agentically**: it picks a tool, runs it, reads the results, then decides the next step — over several rounds if needed — before composing the answer.

## Available tools

| Tool | Purpose |
|---|---|
| Web search | Finding current facts across search engines and [Ison Search](/en/ison-search/) |
| Page reading | Opening URLs (from search results or ones you paste) and reading their contents |
| Knowledge search | The official IsonAI product knowledge base |
| Stock prices | Current market data, IDX and global |
| Local places | Curated Indonesian places and business data |
| Academic search | Journals and scholarly articles across many sources |
| Document editing | [Doc Edit](/en/documents/) for attached PDFs |
| Google connectors | Calendar, Gmail, and Drive — only after you connect them; see [Connected services](/en/connected-services/) |

While tools run, progress lines in the interface show what is being searched and read — the process is never fully hidden.

## Recovery when tools fail

If a search or page read fails or returns irrelevant results, IsonAI tries another path — a different query or a different source. If the evidence remains inadequate, IsonAI states its limitations instead of making things up.

## Consent boundaries (authority)

- **Google connectors** only activate after you grant permission through the official Google sign-in flow, and can be disconnected at any time from Settings.
- IsonAI **does not take official outbound actions** on your behalf — it does not send emails, pay, sign, or submit anything. It prepares the drafts and the steps; you execute them.
- In [Naya](/en/naya/), plans with real-world impact stop at an **approval gate** for you to review first.

## Privacy protections in tool use

Personalized tool use is protected by the following principles, enforced server-side:

- Personal data from your [memory](/en/memory/) and history is **never sent out** through search queries or requests to external sites. Only what you write in the current message becomes search material.
- Web content and document contents are treated as **data to analyze** — instructions embedded in web pages or files are not followed as commands.
- Links that appear in answers are restricted to sources that were actually used and come from legitimate places.

The above is a behavioral contract, not a technical specification; the internal mechanisms are not published.

## Limits

- The number of tool rounds per answer is capped to keep responses reasonable; genuinely broad research is better suited to [Deep Research](/en/deep-research/).
- Third-party connectors other than Google are not yet available.

## Related

- [Connected services (Google)](/en/connected-services/)
- [Search & grounding](/en/search/)
- [Naya](/en/naya/) — structured missions with approval gates.
- [Memory & privacy](/en/memory/)