Static ReadonlyAuthorizesTrue when the action authorizes its caller itself, so a public entry point such as the
RunAction mutation may run it for an authenticated user without an MJ: Action Authorizations link. Set it only on an action that either checks an authorization the caller
must hold, or reads and writes only with the caller's own permissions. Leave it false for an
action that acts with more authority than its caller, or that reaches data or sends messages
the caller chooses but could not otherwise reach.
The engine reads the marker only from the class that runs, never from its parent classes. A subclass that overrides a marked action must declare the marker again.
Whether this action can bound what it returns to an audience (RunActionParams.Audience): everyone
besides the caller who will see its output, such as the other participants of a shared conversation.
false by default, and the engine enforces it: when a run's audience adds a reader beyond the caller,
ActionEngineServer.RunAction refuses the action with result code AUDIENCE_UNSUPPORTED, without running
it. Override to return true only when the action honours the audience in full — every record, snippet
and count it returns is something every reader may see (pass the audience to the search engine, check each
reader's entitlement to anything it scopes by, and leave out aggregates computed before that filtering).
ProtectedInternalExecutes the search.
The action parameters containing:
Normalised results plus which provider served them
Executes the action with the provided parameters.
The action execution parameters including context
Promise resolving to the action result
Action that performs a web search through whichever provider the administrator has configured.
This is the provider-neutral entry point agents should bind to. It holds no vendor logic of its own: it extracts parameters, hands them to WebSearchEngine, and maps the result back. Which vendor actually serves the request — Brave, Tavily, Perplexity, or a fallback when the first choice is rate-limited — is decided by the
MJ: Web Search Providersrecords and theirPriority, not by the caller and not by the agent.That is the point. An LLM choosing between named vendor actions is making an infrastructure decision it has no information for: it cannot know which key is configured, which is cheaper, or which is rate-limited right now. Swapping vendors here is a metadata edit, with no change to any agent.
Provideris the escape hatch for a caller who genuinely knows better. When set, the engine fails rather than substituting — a silent substitution is how you discover months later that a deliberate choice stopped being honoured.Example