Permissions and approvals

Every tool Gluon can use has a permission that decides whether it runs straight away or asks you first. Reading and looking things up usually just runs; actions with side effects, such as sending an email or opening a website as you, ask.

The four permissions

Permission	What happens
Allow	The tool runs without asking.
Auto	An AI reviewer checks each call. It runs when the call is routine, or when your message clearly asked for exactly that action; otherwise Gluon asks you.
Ask	Gluon always asks before the tool runs.
Off	Gluon can’t use the tool at all.

Some tools offer only Allow or Off, because approving them would mean nothing: the chat, utility, recall, guide and background-task tools, and web search, which runs at the search provider as soon as it’s called.

What counts as “you asked for it” under Auto

Auto lets a call through when the message that started the reply explicitly names the action, its target and its scope, such as “Email the invoice to priya@example.com”. Earlier messages only help it understand words like “it”. Goals (“sort out my inbox”), questions, negations and text you pasted or forwarded never count as consent. Each request authorizes an action once; Gluon asks again if it tries to repeat it. Work Gluon started on its own, such as a scheduled task, is judged on the call alone.

Change a permission

• Settings → Connectors & tools → Gluon lists every built-in tool by group. Choose a permission for each; choosing the default clears your change.
• Your connected servers’ tools are under Settings → Connectors & tools, one server at a time. See Connectors.
• Memory and recall are switched in Settings → Memory. See Memory and recall.
• The info button beside a tool shows exactly what the model receives: its description and input schema.

Your permissions apply to every chat and every agent. Groups have their own permissions for the group’s tools; see Assistants in groups.

Approving a call

When a tool asks, an approval card shows what will happen: the email with its recipients and attachments, the website and action for the browser, or the exact changes to a calendar item. Choose:

• Approve to run this call once;
• Deny to refuse it; Gluon carries on without it;
• Always allow to switch the tool to Allow everywhere, after confirming.

Approvals also wait in Needs you, with a push notification, so you can answer from any page or device. A scheduled task that reaches an Ask tool pauses until you answer.

If you switch a tool to Ask or Off while a call is waiting, the new setting wins: even an approved call that hasn’t run yet won’t run under Off.

Tools that ask by default

Everything else defaults to Allow. These default to Ask:

• email__send: sending email
• browser__open and browser__act: opening and using a website as you
• files__share_link: creating a link anyone holding it can open
• files__share_to_group: copying a private file into a group
• calendar__create_task and calendar__update_reminder: scheduling and changing agent tasks and reminders
• sandbox__reset: deleting every file in a workspace

Some calls ask whatever the permission, except Off: in a group, when the group owner’s Gluon changes, deletes or cancels a calendar item another member created, it asks first and names the creator.

Built-in tools lists every tool with its default.

Limits that permissions can’t lift

• Email only goes to addresses on your allowed email addresses list, whatever the permission. See Email.
• Allow never lets Gluon act for another member, or approve something in a group on their behalf.