capabilities object: three switches that decide what the node is allowed to do during execution.
You don’t pick individual tools. Asteroid selects the right toolset from these switches and from the workflow’s environment, so the agent always gets tools that work where it is running.
The three capabilities
Browser use
Navigate and interact with web pages (
browser_use)Computer use
Vision-based mouse and keyboard control (
computer_use)Ask user question
Pause mid-run and ask the user for input (
ask_user_question)settings.yaml, all three are required on every Agent node:
Browser use
Gives the node the browser toolset — navigating, clicking, typing, filling forms, reading page content, and capturing snapshots. This is the default way agents work on the web. Turn it on when the node drives a website. It is enabled by default on browser environments.Computer use
Gives the node vision-based control of a full desktop: it looks at the screen and moves the mouse and keyboard directly, rather than working through the DOM. Use it for native applications, or for pages that a DOM-based approach cannot handle. It is slower and more expensive than browser use, so prefer browser use when both would work.Ask user question
Lets the node stop and ask a person for input in the middle of a run — a missing value, a decision, a confirmation. The execution moves topaused_by_agent until someone answers. See Execution statuses.
Turn it on for workflows with a human in the loop. Leave it off for unattended runs, where a paused execution has nobody to answer it.
Environment gating
Browser use and computer use are resolved against the workflow’s environment, and the environment wins:Always available
Some tools are not capabilities and never need enabling. They are exposed to every Agent node, and each becomes usable once its own prerequisite is met:Google Sheets
Read and write spreadsheet data. Needs
browser_use, and the sheet open in the active tab.Two-factor codes
Generate TOTP codes. Needs a TOTP secret stored as a credential on the agent profile.
Send and read mail. Needs an agent profile attached, since the inbox belongs to the profile.
These are skills rather than capabilities: there is no toggle to turn them on, but they only work where their prerequisite holds. An agent that cannot use one will tell you which prerequisite is missing rather than guess. See Agent Profiles and Emails.

