Local models are trained on tool calling these days, and they can be pretty good at it, too.
The only way I'd ever let AI read my mail ...