Permissions
Choose how much an agent may do on its own, and approve the rest from your computer or your iPhone.
- Choose a level for each task
- Read Only, Edit Files, Ask First, Auto, and Bypass Permissions are in the composer. A runtime that doesn't support one leaves it out.
- Set the default
- Settings has a default level for new tasks. Until you change it, new tasks start with Edit Files.
- Approve on your computer or your iPhone
- A request appears as a card on the computer and on a paired iPhone. Accept it on the iPhone and the card clears on the computer.
- Let Auto judge routine steps
- Your decision model judges each step against your request and your Auto rules, and a step it is unsure about asks. Set the rules and how sure it must be under Decision model in Settings.
- Use the same names in Chat
- In Chat, the + menu sets what plugins may change. A plugin change that moves money always asks, even in Auto and Bypass Permissions.
Approving a test run from an iPhone
Permission levels
- Read Only: the agent reads files and changes nothing.
- Edit Files: the agent edits files in the project and asks before running commands.
- Ask First: the agent asks for your approval before it acts.
- Auto: routine steps you asked for run, and anything else asks.
- Bypass Permissions: the agent runs without approvals.
Questions
Read Only, Edit Files, Ask First, Auto, and Bypass Permissions. A runtime that doesn't support one of them leaves it out of the composer.
Yes, when your iPhone has permission to answer approvals. The request appears on the computer and on the iPhone, and an answer on the iPhone clears the card on the computer.
Auto asks your decision model, which reads your request and your Auto rules. A step it is unsure about asks you. In Settings you can write the rules and set how sure the model must be.
Yes, by default. Chat shows an approval card that names the plugin and the tool and has Allow and Don't allow. Any device that shows the chat can answer it, and the first answer counts.
Yes. In Chat, a Robinhood Trading order, a Stripe change, or a Vercel domain purchase always asks you first.
Only when its Permissions allow it. Each scheduled task has its own Permissions. In Chat, a run that needs your approval stops at a card and notifies you. In Code, you choose Read Only, Edit Files, or Bypass Permissions for the task.