Chaque outil que le serveur local expose, la capacité qu’il réclame, ses paramètres et les rôles qui le tiennent, engendré depuis le registre du cœur, pas maintenu à la main.
Livré dans la construction courante. Vous pouvez le faire sur votre machine aujourd’hui.
LimiteIl n’existe aucune API web Deskworth publique. Rien sur l’internet n’accepte une requête Deskworth, et aucune clé n’en ouvre une. Ce que cette page documente est la surface d’outils locale : un point d’accès lié à l’adresse de bouclage de votre propre machine, qui sert les agents tournant dans votre propre application.
Le serveur parle le Model Context Protocol en HTTP simple. Une carte liste ce qu’elle peut appeler, puis l’appelle. Les deux requêtes portent le jeton porteur délivré à cette carte ; un appel sans jeton connu est refusé sans qu’on lui dise pourquoi, parce qu’un message précis apprendrait à celui qui frappe ce qui l’aurait fait entrer.
{
"jsonrpc": "2.0",
"id": 1,
"method": "tools/call",
"params": {
"name": "ohlcv",
"arguments": { "symbol": "AAPL", "interval": "1d", "range": "1y" }
}
}Deux réponses sont possibles, et elles ne sont pas de même nature. Un outil qui a tourné et échoué revient comme un résultat portant un drapeau d’erreur, pour que l’agent lise la raison et se corrige. Un message malformé, une méthode inconnue ou un jeton inconnu reviennent comme une erreur de protocole. Les confondre fait prendre un mauvais argument pour un serveur cassé, la spécification les sépare exactement pour cela 3.
| Situation | Ce qui revient |
|---|---|
| L’outil a tourné | Un résultat portant la sortie texte de l’outil |
| L’outil a refusé | Un résultat portant la raison, marqué en erreur |
| La méthode est inconnue | Une erreur de protocole, méthode introuvable |
| Le message n’est pas du JSON valide | Une erreur de protocole, erreur d’analyse |
| Le jeton est inconnu | Une erreur de protocole, sans explication de ce qui aurait marché |
| Le message ne porte aucun identifiant | Rien. Une notification n’obtient pas de réponse |
L’outil de classeur prend un titre, un sujet, des faits, des sources, des hypothèses et des contrôles, et aucun chemin de fichier, aucune formule. Le chemin est composé par la partie du cœur qui possède la salle de données, parce que deux endroits qui écrivent un chemin finiront par en écrire deux différents. Une garde inspecte pour cela les clés du schéma déclaré, pas la description humaine : une version antérieure de cette garde lisait la prose, y trouvait le mot « chemin » dans une phrase expliquant qu’il n’y en a pas, et rougissait sur sa propre explication.
Un outil qui signale une source l’écrit au journal avec son adresse, la période couverte, la métrique, l’unité et la date de lecture, et le rédacteur caviarde d’abord tout secret embarqué dans l’adresse. Un agent peut déclarer une source portant une clé sans s’en rendre compte ; le caviardage n’est pas facultatif.
PreuveUne capacité de la table ci-dessous est déclarée par un rôle et réclamée par aucun outil : la capacité de calcul quantitatif est tenue par le seul mandat quantitatif, et rien dans le registre courant ne la demande. Cela se voit ici parce que la table est dérivée plutôt que composée, une référence écrite à la main ne l’aurait simplement pas montré 1.
33 tools, read from the core registry when this page was built. Nothing below is maintained by hand on this site: a tool removed from the server disappears from here, and a tool added makes the build fail until someone writes its sentence.
Reads real candles from Yahoo Finance and returns the resolved company name and exchange alongside the series, so a ticker without its venue cannot silently become another company.
Daily bars from one named vendor, used as a fallback and as a cross-check: two vendors rarely publish the same figure for the same day, and the gap is information. Three of them need a key and refuse cleanly without one.
The full option chain for a US underlying, strikes, expiries, bid and ask, implied volatility, Greeks, open interest. The feed is delayed, and the timestamp returned is the exchange’s, not the moment of reading.
Quotes a crypto asset on three venues at once, each price carrying its own quote currency. When those currencies differ the prices are not the same instrument, and the result says so rather than averaging them.
Resolves a company name into listed instruments and returns candidates, never a verdict: an ordinary share, a preference share and an ADR are not the same investment, and the choice is left to the operator.
Reads a macro series from FRED and returns the unit, the frequency and the seasonal adjustment with the points, a bare number is not a rate. Missing observations are counted and dropped, never filled in.
Returns a FRED series as it stood on a past date, with what has been revised since and, the field that matters for a point-in-time claim, which dates existed later but had not been published yet.
Reads a European Central Bank series from the public SDMX portal, with its full title, unit, frequency and construction. No key is required.
The public state of a source repository, last push, stars, forks, open issues, licence, archived or not. A verifiable diligence fact for a company whose product is open software, and an observation to cite with its date, not a thesis.
Reads the **broken-down** figures of an SEC filing, by product, by geography, by segment, from the filing’s own XBRL instance. `filings` serves the consolidated series; this one serves what consolidation erases. Called without an axis it lists the axes the filing actually carries, which is the right first question: a filer arranges its breakdowns however it likes. Each fact comes back with its full period, its unit, its precision and its accession. It never adds members together, at Apple, iPhone plus Mac plus iPad plus Wearables *is* Product, and summing the six would count revenue almost twice. A breakdown is not a partition, and only the filing’s own note says which one is.
Reads a company’s filed accounts where it actually files, the US regulator for a domestic or New York-listed issuer, the European mechanisms for a European listing. Called without a concept it returns what that issuer actually tags, which is where a reading starts.
Searches the private-placement notices filed with the US regulator over the last 180 days, the only public, dated trace of a private raise.
Searches the operator’s **local corpus**, the documents they imported and indexed on this machine, and returns the closest passages, **each with its provenance**: the document, its accession number, its digest, the passage rank and the measured proximity. The agent cites by that provenance, never by a reference it composes. The search runs on this machine, over vectors already computed. An empty corpus, nothing close enough or a question that anchors nothing is said as such, it is reported, not treated as an empty result.
Collects newswire items on a topic from publisher feeds.
Searches the open web and returns ranked pages, title, address, extract, and a date when the source publishes one. Never an article copied out. Without a key on the machine, it refuses and says so instead of substituting another source.
Builds the implied volatility surface from the delayed chain and mounts it as a module. Contracts the exchange did not price are counted and dropped rather than set to zero, which would carve a dip into the smile that does not exist.
Mounts the wire items already collected for this card as a module. It supplies no headlines of its own: it re-reads what the feeds actually returned, and an empty list is mounted as an empty list.
Mounts a price chart on a real series and returns its bounds with the resolved company and venue. This is the call that makes the operator see the same data the agent reasoned over.
Computes technical indicators on the same series and draws them onto the open chart. The agent assembles nothing: the tool reads the candles, computes, and mounts the result.
Puts a location on the globe: where the event being discussed happened. A place outside the world is refused.
Brings a live broadcast into the card. Only recognised broadcasters are mounted; an arbitrary address is refused.
Draws one mark on the open chart, and answers immediately whether it was accepted, a price outside the series would be drawn into empty space.
Files **one** contribution into the mission’s shared dossier, the same one the other roles write. A contribution is immutable and never replaces another: two roles asserting different figures under one identifier create a **named conflict**, and the dossier refuses to seal until someone settles it with a reason. The agent supplies no path, no filename, no URL, no read date and no digest, for a source it gives back the reference an earlier tool actually returned, and Deskworth attaches the address, the read time and the digest from what it read. A reference nobody read is refused, which is what stops a dossier from citing an imagined source.
Files into the shared dossier **what a screen showed**: where it was seen, what it displayed, and for which research. It is not a fact and is never filed as one, a fact carries a citable source, a period, a unit and a precision. The role that finds the observation well-founded checks it at its source and files it under its own name, and the observation enters no deliverable.
Reads the mission’s shared dossier: its state, its revision, what each role has filed, the sources this desk has **actually** read, each with the reference token that is the only one quotable, and the open conflicts. It is meant to be called before contributing: a role that cannot see what the others filed either repeats their work or contradicts it without knowing. A failed state means a render broke, not that nobody worked.
Seals the shared dossier and composes it into **one** bundle: workbook, deck and memo composed from the same sealed dossier, plus a manifest carrying the revision, the sources and the digests. Sealing refuses while a conflict is unsettled, while the frame is missing, or if any fact has no source. Composition is atomic, the three files appear together or not at all, and a failure leaves the last valid bundle untouched. A contribution filed after the bundle is composed opens the next revision; it never edits a bundle already written.
Writes the card’s financial dossier as a workbook. The agent supplies no path and no spreadsheet formula: it describes facts, an identifier, a value, a unit, a period, whether it was observed or estimated, and the source that carries it, and the engine composes the file, reopens it to check it, and mounts it on the canvas. Calculations are written in a bounded language, which the engine turns into live formulas pointing at those facts, so the workbook still pulls under an analyst’s fingers. A fact without a source is refused, and so is an assumption without a justification.
Composes the card’s committee deck in 16:9 from the same dossier as the workbook. No path, no template, no layout: a section the dossier does not carry is simply not written, because a deck padded with empty slides teaches people not to read it. The figures shown are the ones the model computes, not numbers copied across, which is what keeps the deck and the workbook saying the same thing.
Composes the dossier in several formats at once. The agent describes it once and lists the formats; the engine writes them, reopens them, checks that the same figures appear in each, and keeps them together or not at all. A manifest travels with the files, sizes, digests, sources, computed values, limits and missing data. One format failing takes the others with it: a half-written bundle is the one where two files out of three get attached to an email.
Writes the card’s memo as an A4 document with selectable text, from the same dossier. The engine reopens it and refuses a page that carries no text: a memo rendered as images cannot be searched, quoted or checked by a reviewer. Limits are a section of their own, a memo that hides what it does not cover makes people decide on what it shows.
Runs a Python file from the agent’s own data room and returns the exit code, the output, the errors and the duration. The sandbox has no network, for the script or for anything it spawns, and writes nowhere but that data room.
Deposits a BLOCKED artefact when the question cannot be answered as asked. It is a result, not a failure, and often the most honest one available. The contract refuses it unless it carries what was attempted and why it stopped.
Experimental. Makes **one** gesture in the driving session the operator opened, and reports what it sees. Four classes, not negotiable: **observe** (capture, read the screen, locate) moves nothing; **reversible** (scroll, point, click, go back, open) undoes with the opposite gesture; **sensitive** (typing) needs the operator’s named consent beforehand, for that gesture only; **forbidden**, password, keychain, payment, order, signature, deletion, publication, no consent opens it. A target off the declared list is a refusal. The session has an action cap and a deadline, stop is always available, and there is no field where a command could pass.