computer_use_task). They are LLM-only — designed for the model to call during a background UI loop, not for manual one-off execution in most cases.
The subagent also receives the primitive tools Perform, Scroll, and Wait. This page covers the agent-specific tools and shared window-targeting rules.
Start here
Read the Computer Use overview for how to invoke the agent with a
goal string.Shared workflow
Window ID formats
list_windows returns two ID styles:
Pass the same
windowID to read_screen_ax, perform, perform_sequence, scroll, and computer_use_screenshot for every step on that window.
Resolution order
WhenwindowID is omitted:
- Explicit
windowIDin the tool call - Tracked target — window recorded by
open_app,open_urls, or prior tools in this conversation - Session fallback — during a background run, the window shown in the live preview (prevents drift when you refocus another app)
- Frontmost window
Blocked apps
Computer Use refuses to open, read, or control apps on your blocklist (Settings → Computer use → Blocked apps). Password managers are blocked by default. Tools return a clear error so the agent stops looping and reports the block to you.Standalone vs inside the agent
Workspace tools (
workspace_read, workspace_bash, etc.) are not available inside Computer Use.
read_screen_ax
Display name: Read Screen (AX)
Returns the accessibility tree of a window as text. Interactive elements include an @elementID suffix for use with perform and perform_sequence. No screenshot and no vision analysis — strict AX-only.
Parameters
When the agent calls it
- First step on a window (before any click or fill)
- After navigation, dialogs, scrolling, or shortcuts that change the UI
- Before choosing combobox/list options that were not visible in the prior read
Output
Wrapped in<activeAppContext>…</activeAppContext>. During Computer Use runs, matching apps may append <appGuidance> (Calculator, Discord, Spotify, X.com, etc.) with faster techniques.
Example
Goal step: agent already opened Mail viaopen_app and received windowID: 5123/Mail — Inbox.
Unread message row 1@MessageRow_0 for subsequent perform clicks.
vs get_active_app_context
Get Active App Context adds OCR from screenshots. The Computer Use agent prefers read_screen_ax for speed and privacy unless the goal requires visual capture via computer_use_screenshot.
perform_sequence
Display name: Perform Sequence
Runs multiple UI actions in one tool call — faster than separate perform invocations when every target element is already visible in the current AX read.
Parameters
Each step object:
Batching rules
- All
elementIDvalues must come from the sameread_screen_axresult - Only batch actions that do not change layout between steps (multi-field form, calculator expression via
type) - Stop batching before navigation, app switch, or opening menus/dialogs — then re-read
- Execution stops at the first failing step and reports which step failed
Example
Fill a three-field form visible in one read:type vs fill, shortcut format).
computer_use_screenshot
Display name: Computer Use Screenshot
Captures a specific app window as PNG. Does not use global screenshot shortcuts, screencapture, or interactive region selection.
Parameters
When to use
- Goal explicitly asks for screenshots or visual artifacts
- Avoid for routine UI inspection — use
read_screen_axinstead
Output
Text metadata (app, title, windowID, dimensions) plus an image attachment for the model.
Example
list_windows
Display name: List Windows
Enumerates open windows from running applications. No parameters.
Returns
For each window:- App name and bundle identifier
- Window title
- Window ID (
pid/title) - Stable Window ID when available
- PID
- ⭐ (ACTIVE) marker on the frontmost window
When the agent calls it
- Target window is not the frontmost app and was not opened via
open_app/open_urlsin this run - Once per run is usually enough — reuse returned IDs instead of listing repeatedly
Example output (abbreviated)
4280/87 to read_screen_ax for a background scrape while you work in another app.
open_app
Display name: Open Application
Launches or focuses a Mac application. Returns the target window ID for immediate follow-up — often without calling list_windows.
Parameters
Behavior
- Background runs: If the app is already running, Alter does not steal focus. New launches use non-activating open when possible and restore your previous frontmost app.
- Blocked apps: Refused with blocklist error
- Success response includes
Window IDand optionalStable Window IDto pass to subsequent tools
Example
Primitive tools in the same agent
These have dedicated pages; the subagent uses them with the samewindowID rules:
get_active_app_context is not in the subagent tool set — use read_screen_ax instead.