read_file, write_file, edit_file, grep, run_bash, browse_url, screenshot_url, extract_webpage_data, upload_file, and more — see the MCP guide.
What you layer on top
Anything you already give Claude Code locally, the agent can combine with arg.ai writes:
The pattern is always: local tools provide ingestion and side-effects; arg holds the durable state. When tomorrow’s session runs, it
read_files yesterday’s output and continues — no scratch files, no ~/Downloads/leads-final-v3.csv.
Why split it this way
- Side-effects stay local. Logged-in browser sessions, DB credentials, on-device models — these belong on your laptop, not in the cloud.
- State stays durable. Anything worth keeping ends up at a stable workspace path, viewable in the UI, queryable over REST, readable by another agent.
- Re-entrant. Tomorrow’s run reads yesterday’s output and appends — no duplicate work.
- Multi-tenant. Switch
workspace_idto point the same workflow at a different team’s data.