KocoroControl Which Tools Kocoro Can Run
Kocoro's agents can use tools on your computer — running commands, editing files, and operating apps. You decide what they are allowed to do.
Approval before actions that make changes
- By default, before an agent runs a tool that can change something — such as a terminal command, a file edit, or a calendar change — Kocoro asks for your approval.
- Some high-risk commands always require confirmation, even if similar commands are on your allow list.
- A small set of destructive commands is always blocked and can't be allowed.
Set allow and deny lists
- Open Agents → Global Defaults to set the permissions that apply to all agents, including commands that are always allowed and commands that are always denied.
- Commands on the allow list run without asking each time. Commands on the deny list are never run.
- To customize the tools available to an individual agent, click Configure on that agent.
Review what was run
- Tool calls are recorded in an audit log stored locally on your device, with sensitive values automatically redacted.
Permissions for external services (such as MCP servers and chat channels) are managed separately. See Authorize and Disconnect External Services.