Built-in Tools

8 built-in tools, all implemented natively in Rust. No external process required.

General Tools

file_read

Read file contents with path validation.

Parameter	Required	Description
path	Yes	Absolute path to the file
encoding	No	Text encoding (default: utf-8)

file_write

Write content to a file with path validation.

Parameter	Required	Description
path	Yes	Absolute path for the output file
content	Yes	Content to write

shell_exec

Execute shell commands in a sandboxed environment.

Parameter	Required	Description
command	Yes	Shell command to execute
timeout	No	Timeout in seconds (default: 30, max: 30)

Runs in capability-based sandbox: no network, isolated filesystem, OS-level memory limits.

http_request

Make HTTP requests with retry logic and circuit breaker.

Parameter	Required	Description
url	Yes	Target URL
method	No	HTTP method (default: GET)
headers	No	Request headers
body	No	Request body
timeout	No	Timeout in seconds (default: 30)

NDA Tools

convert_to_nda_document

Convert any file to a cryptographically signed .nda binary document.

Parameter	Required	Description
filePath	Yes	Absolute path to input file
outputPath	No	Output path (defaults to input + .nda)

Supports: C#, PDF, CSV, Excel, DOCX, Images, Zip, and more.

convert_to_nda_tool

Convert a JSON-RPC tool call to NDA binary format.

Parameter	Required	Description
jsonRequest	Yes	JSON-RPC request to convert
outputPath	No	Output path (or returns base64)

read_nda

Read and inspect a .nda binary file.

Parameter	Required	Description
ndaPath	Yes	Absolute path to .nda file

Returns: semantic triples, display commands, string pool, Merkle status, Ed25519 signature status.

execute_nda

Execute a runnable .nda container in the sandbox.

Parameter	Required	Description
ndaPath	Yes	Absolute path to .nda file
arguments	No	Command-line arguments

Dynamic Tools

Additional tools can be loaded from:

• Plugins — via the Plugin-Marketplace
• C# engine — optional, via VELOCITY_CSHARP_PATH env var

See also: NDA-Format, Security-Model