Tools & Approval

You are the safety boundary

Tools that change your system — terminal, file writes, automation — show an approval prompt with the exact command before running. Nothing mutates your Mac without your OK.

How gating works

Each approval shows the exact command and working directory — approve or deny per call.
Autonomous mode (per conversation) skips the prompts when you want full freedom.
MCP-server tools are gated per server with a “require approval” toggle.
The dispatcher fails closed: a gated tool with no approval handler is denied, not run.

Built-in tools

Terminal — a real shell, streamed output.
Filesystem — read, write, list, search; patch files with diffs.
Python — run scripts for data work and chart generation.
PDF — info, extract, merge, split.
Vision — attach images; vision-capable models describe and analyze them.
Web search — live results with your own free Tavily/Brave key (Settings → Tool APIs).
Query data (jq) — the agent queries a large JSONL/JSON file (logs, event histories) with a jq filter and gets back only the matching records — no loading the whole file into context.