Permissions

View and revoke tool permission grants for this workspace.

Location: Workspace Settings → Permissions

Every time the agent asks to use a tool and you approve, a permission grant is saved. This panel shows all active grants for the current workspace. You can revoke individual grants or clear them all.

Active vs revoked

The list is split into active grants (currently in effect) and revoked grants (no longer active). Active grants let the agent use that tool without asking again.

Revoke a grant

Click revoke next to any active grant. The agent will ask for permission again next time it tries to use that tool.

Revoke all

Click Revoke All to revoke every active grant in the workspace. Use this if you want a fresh start. The agent will ask for approval on every tool call until you re-approve.

How auto-approve interacts

The session-level auto-approve setting controls whether grants are checked at all. If auto-approve is set to a severity level, tools at or below that level run without asking, regardless of saved grants.

What's next