Capabilities
Everything your agents can be given. By name.
Every model they can think with, every service they can act through, every channel they can reach you on, every tool they hold. Counted, not summarised, because a list you can check is worth more than an adjective.
Models
371 models. Not one account to open.
Every one of them is reachable the moment your company exists: no sign-ups, no 35 vendor keys to collect and rotate. Pin a model to any agent, or put your own key behind a provider. 58 inference providers serve these models, and several serve the same one.
- openai75
- alibaba44
- google30
- xai21
- zai17
- anthropic16
- mistral14
- bytedance13
- meta12
- voyage12
- bfl11
- deepseek10
- minimax10
- fish-audio8
- klingai8
- moonshotai8
- recraft8
- nvidia6
- amazon5
- cohere5
- inclusionai5
- perplexity5
- tencent5
- kwaipilot4
- xiaomi3
- inception2
- morph2
- poolside2
- sakana2
- stepfun2
- thinkingmachines2
- arcee-ai1
- interfaze1
- prodia1
- quiverai1
Connectors
Connect a service. Its operations arrive one by one.
118 services on the roster, 61 of them over MCP. Most connect with a sign-in on the provider’s own screen, the rest with a key or an installed app, and either way the platform keeps what comes back. Every operation appears as its own tool and binds to one agent on its own. Reading tools just work. Tools that write ask you first, until you tell that connector otherwise.
- Airtable
- AsanaMCP
- BambooHR
- CalendlyMCP
- ClickUpMCP
- Docusign
- FathomMCP
- Harvest
- JiraMCP
- Linear
- MiroMCP
- monday.comMCP
- Salesforce
- TickTickMCP
- TodoistMCP
- TypeformMCP
- Workday
- Auth0
- CircleCI
- Clerk
- CloudflareMCP
- Datadog
- Firecrawl
- Gitee
- GitHubMCP
- GitLabMCP
- KernelMCP
- ManufactMCP
- NetlifyMCP
- ngrok
- npm
- Okta
- PagerDutyMCP
- PostmanMCP
- Railway
- Render
- SentryMCP
- VercelMCP
- WorkOS
- BoxMCP
- CanvaMCP
- CloudinaryMCP
- CodaMCP
- Contentful
- Context7MCP
- CrowdinMCP
- DropboxMCP
- EgnyteMCP
- FigmaMCP
- Microsoft
- NotionMCP
- O’ReillyMCP
- SanityMCP
- Spotify
- Twitch
- WebflowMCP
- WixMCP
- Zeplin
- CandidMCP
- ClickHouseMCP
- Convex
- Databricks
- Dovetail
- G2MCP
- Local FalconMCP
- MixpanelMCP
- Neon
- Pinecone
- PlanetScaleMCP
- PostHogMCP
- Segment
- SimilarwebMCP
- Snowflake
- SupabaseMCP
- Tinybird
- WHOOP
- Discord
- IntercomMCP
- Linq
- Photon
- Slack
- Telegram Bot
- Zoom
- AgentMailMCP
- beehiivMCP
- BitlyMCP
- HubSpot
- Mailgun
- ResendMCP
- SendGrid
- ZernioMCP
- AgentcardMCP
- BrexMCP
- EmbatMCP
- RazorpayMCP
- Shopify
- StripeMCP
- Ticket TailorMCP
- XeroMCP
- ZomatoMCP
- Anthropic
- Cohere
- Deepgram
- DeepSeek
- ElevenLabs
- Google Gemini
- Hugging FaceMCP
- Mem0MCP
- OpenAI
- OpenRouter
- Perplexity
- Replicate
- MakeMCP
- n8n
- ZapierMCP
Not on the roster? Add any HTTPS MCP server by its address, and its tools join the same list under the same rules.
Channels
The company comes out of the browser.
Message it from an app you already use and Opu answers there. Only you can talk to your company: a message from anyone else is refused before any agent sees it.
WhatsApp
Your company answers your own number and nobody else’s. When an agent needs a decision, the question arrives with its options as buttons — one tap, and the run carries on.
Slack
Mention Opu in the channel you already live in and it answers there, with the company behind it. It admits the person who connected the workspace, and the word “stop” cancels the turn.
Telegram
The lightest way to keep a company in your pocket: the same agents, the same record, the same rule that only you may speak to them.
Tools
The 67 that ship, by their real names.
What every company starts with, before a single service is connected. A floor of them lands with every hire and cannot be taken away. The rest you bind or take away agent by agent, live at the agent’s next step. No business-specific tools ship, on purpose: the platform is business-agnostic and you bring the domain.
Work the code
Held by every agent. They write only inside an armed run, in its sandbox.
load_repositoryBring a repository into the session at a pinned commitread_fileRead a fileglobFind files by patterngrepSearch file contentsgit_blameAsk who changed a line, and wheneditEdit a file in placewrite_fileWrite a filebashRun a command in the sandboxrun_checksRun the checks the repository itself declares, and record each exit code
Run the task cycle
Held by every agent: capture, plan, execute, hand in, judge.
create_taskCapture a piece of real work as a taskread_taskRead a task’s contract and where it standspropose_planAnswer a task with a plan and its acceptance criteriaabandon_planDeclare the plan wrong and send the task backbegin_executionArm the run and open its work branchtodoKeep its own working listsubmit_workHand the work in for a verdictread_product_fileRead what was handed in, byte for byteread_attempt_tool_callsRead every call a run actually maderecord_verdictPass or fail each criterion, citing the calls that prove it
Look things up
Held by every agent.
web_searchSearch the webweb_fetchRead a page on the weblist_connectorsSee which services the company could reachcheck_connectorCheck whether a service is reachable right now
Ask, never take
Held by every agent. A request records an ask and can grant nothing.
list_capabilitiesSee what it currently holdsrequest_capabilityAsk you for a capability it lacks, and say whyrequest_skillAsk you for a skill it has writtenask_questionStop at a real fork and ask you
Always at hand
Held by every agent and never withheld: delegating, remembering, finding the right connection.
agentHand a piece of the work to a subagentresearcherSend a researcher off in the background and get a cited report backload_skillLoad a skill it has been givenconnection_searchFind the right connection for the jobnotes__save_memorySave a short fact for its later sessionsnotes__remove_memoryRemove one
Run the company
Opu’s alone: goals, hires, responsibilities, and the controls over every run.
set_company_profileWrite down what the company isset_goalTurn an intent into a goal with a metricedit_goalRevise a goalachieve_goalClose a goal as achievedabandon_goalClose a goal as abandonedhire_agentPropose a hire for your approvalcreate_responsibilityGive an agent a standing obligationedit_responsibilityRevise a responsibilityactivate_responsibilityPut a responsibility to workfire_responsibility_nowRun a responsibility ahead of its schedulepause_responsibilityPause a responsibilityresume_responsibilityResume a responsibilityretire_responsibilityRetire a responsibilityedit_task_contractRevise what a task must deliverreassign_taskMove a task to another agentreplan_taskSend a task back for a new planhold_taskPark a taskrelease_taskRelease a parked taskcancel_taskCancel a taskadd_task_attemptsGive a task more attempts, on your wordstart_runStart a runinterrupt_runInterrupt a live runinstruct_runTell a live run what to do nextend_runEnd a runanswer_decisionCarry your answer to the run that askedbind_toolGrant a tool to an agent, on your wordunbind_toolTake a tool awaybind_skillGrant a skill to an agent, on your wordunbind_skillTake a skill awayconnect_connectorStart connecting a service, for you to finish yourselfdisconnect_connectorDisconnect a serviceset_write_policySet whether a service’s writing tools ask firstchoose_repositoryChoose the repository the company works inclear_gateway_breachResume dispatch after the spend ceiling is raised
Skills
Whole procedures, installed in a sentence.
Install
From the public registry, by reference
Name a skill as owner, repository and directory, and it is fetched for you. Everything the package holds is shown before anything is written, with its license and any published audit.
Bind
To one agent at a time
A skill is data, so installing one needs no deploy. Binding it takes effect at the agent’s next turn, and unbinding it takes it away just as fast.
Author
Your agents can write their own
An agent that has worked out a procedure can package it as a skill and ask you for it. The request lands in your inbox. It grants nothing until you say so.
Sandbox
Code runs in a sandbox. A machine of its own, every session.
Isolation
A microVM per session
Every hosted session gets a machine of its own, built from the same definition as every other. Nothing an agent executes runs on this site.
Egress
Created with no way out
A sandbox starts with no network egress and with its push remote disabled. Repositories are loaded at a pinned commit by an explicit call, never cloned in advance.
Exit
Only a verdict leaves
Work leaves the sandbox as a hand-in to be judged. When the verdict is a pass, the app, never the agent, pushes the branch and opens the pull request.
Runtimes
The best agent for each job, under one org chart.
Same positions, same bindings, same approvals, same record, whichever runtime the work lands on.
Hosted
OPU’s own agents, inside your company’s deployment. Models metered through the gateway on managed credits or your own key, and every session in a sandbox of its own.
Your subscription, in the cloud
Drive Claude or Codex inside an OPU sandbox, under the subscription you already pay for. Its credential is injected from outside and never enters the machine.
Your subscription, on your machine
A local bridge runs the same assistants in your own terminal, in your real development environment — orchestrated remotely, executed locally.
Name your company. Watch it come into existence.
One name is all it takes. What comes back is a company of your own, at an address of its own, with your Chief of Staff already at their desk.