Zulip + Memtro

Only when you ask, and only what it has been granted: send a Zulip message to a channel topic or to people directly (they are notified); save a Zulip draft for the connected user (nothing is sent); edit a Zulip message, or move it (and optionally later or all messages in its topic) to another topic; delete a Zulip message (permanent); add an emoji reaction to a Zulip message; remove the connected account's emoji reaction from a Zulip message; mark Zulip messages read or unread, starred or collapsed, for the connected account only; schedule a Zulip message to send later (recipients are notified when it sends); edit a scheduled Zulip message's text, topic or send time; cancel a scheduled Zulip message (permanent); set a Zulip reminder about a message for the connected account; set the connected account's Zulip status text or emoji (everyone sees it); create a Zulip channel and subscribe people to it; rename a Zulip channel or change its description, privacy or defaults; archive a Zulip channel; subscribe people to Zulip channels (an unknown name creates a channel); remove people from Zulip channels; email invitations to join the Zulip organisation (each invitee is emailed); create a Zulip user group. Every other tool reads, searches or lists. The Connections page labels the tools that act, an administrator grants each one by name to the teams that may use it, and a personal connection acts only after its owner allows it.

A personal connection serves only your own requests. A shared connection serves the organisation: everyone, or only the teams an admin chooses. Admins can always add shared connections; other members need the permission.

Credentials are encrypted at rest. Tool results are cached briefly so agent loops do not repeat identical calls, and the facts the model extracts are saved to your organisation's memory with provenance (system, record and link) so they can be checked and superseded.

Organisation host, bot email and API key. In Zulip open Personal settings → Bots → Add a new bot, choose Generic bot, name it Memtro, and copy its email and API key. A personal key has every right of your account, so prefer a bot.

Yes. Turn events on in the connection's Events tab on the Connections page, then add the address it shows as a webhook in Zulip, choosing the same kinds; the tab shows Zulip's own steps. A job set to start "When an event arrives" then runs once for each matching event, with the event as its input. The run treats the event as outside data, never as instructions, and anything the run remembers is kept as unverified.