Agents are just a stream of text, they cannot access anything. Some kind of interpreter is needed that recognizes special patterns and runs real code.

Do you mean directly == raw shell access on your production server?