Access levels
Decide what an agent may do without asking you, and answer its requests from any device.
An access level decides what the agent can do on its own and what it has to ask you about first. Each agent has its own set of levels, named the way that agent names them.
Every agent starts at full access
By default each agent runs at its most open level: it edits files and runs commands without asking. Pick a stricter level for work where you want to approve each step.
Choose a level
Open the run settings pill in the composer and look at Mode. The list is titled What can the agent do without asking? Each option says what it does, and the default is marked · default.
You can choose it when you start a session, and change it while the session runs. The change applies straight away. Codex and Antigravity pick it up from their next turn.
When a session isn't on the agent's default, a small chip with the level's name sits next to the pill, so you can see it at a glance.
The levels per agent
| Level | What it does |
|---|---|
| Bypass (default) | Never asks before using a tool. |
| Accept edits | Edits files without asking; asks for other tools. |
| Ask | Asks before tool calls. |
| Plan | Looks around and proposes a plan, without editing. |
| Auto | Approves routine calls by itself and asks about the rest. |
| Don't ask | Refuses instead of asking. |
Answer a request
When the agent needs your OK, a card appears just above the composer. It shows what the agent wants to do, for example the exact command, and says Waiting for you. The agent waits until you answer, from any of your devices.
The buttons come from the agent. They're usually:
- Allow once: allow this one call.
- Allow always: allow this kind of call from now on, when the agent offers it.
- Reject once: refuse it. Tap it once to add an optional note telling the agent why, then again to send.
Agents can also ask you questions. Claude Code, Codex and Grok show them as a card with options. Answer and press Submit, or Decline.
Agents started by other agents
Sessions that an agent starts in the background can't wait for a person, so they only get levels that never ask. See Staying in control.