Choose how much agents do on their own
Agent Permission Level decides when a Claude agent stops to ask you, from asking before every change to never asking.
Agent Permission Level decides how much a Claude agent does on its own before it stops and asks you. Pick less freedom when you want to check each step, more when you trust the work and want fewer interruptions.
Change the level#
Open Settings > Workflow.
Under Agent Permission Level, pick one of the four levels.
The change applies to the next thing an agent asks to do, in every chat that has no level of its own. You may have picked a level the first time you opened Yardmaster; this is the same choice.
What each level does#
Read-only: the agent reads and suggests, but asks before writing any file or running any command.
Guarded (the default): edits files inside the project on its own. Asks before running commands, changing config files, or writing outside the project.
Autonomous: edits files and runs commands inside the project on its own. Asks only before writing outside it.
Full trust: never asks, except about sensitive files (see below).
If your agent asks about every command, that is Guarded working as designed. Pick Autonomous to let it run commands inside the project.
When an agent does stop to ask, Approve what your agents ask for shows how to answer, and how to stop being asked about one kind of request.
Give one chat a different level#
To loosen or tighten a single chat, open its menu (the three dots above the conversation) and pick a level under Chat permissions. That chat keeps its own level; every other chat follows Settings.
What is always protected#
Whatever level you pick, an agent still asks before it touches sensitive files, such as SSH keys, cloud passwords, system files and the files your terminal runs at startup. A chat started by an email has even tighter limits: some actions are refused outright.
The one exception is Full Send, which you turn on for a single chat from the arrow next to Allow or from the chat's Chat permissions menu. After you confirm a warning, that chat stops asking about anything, sensitive files included, until you close or archive it or Yardmaster restarts. A red Full Send badge shows while it is on; click it to turn it off. Approve what your agents ask for has the steps.
Which agents it covers. Claude sessions, including sessions on engines that run through Claude's own tools, such as DeepSeek and Kimi. Codex has its own Codex permission level in Settings > Accounts. Other engines manage their own approvals.
Config files. Auto-Approve Config File Writes (on at first) lets Claude change its own settings files, such as CLAUDE.md, without asking, but only at Autonomous and Full trust. At Guarded and Read-only those changes always ask.
If you used Yardmaster before this setting existed. The first time an older install started with it, Yardmaster set it to Full trust, so your agents kept working as before. A new install starts on Guarded.
Related
- See everything that needs you in the InboxThe Inbox lists every question, approval, alert and message waiting for you, in one place.
- Approve what your agents ask forAgents stop and ask before risky steps. Allow or deny them, approve requests in the Inbox, and choose how often they ask.
- Get alerts from your agentsAn agent can leave a note in your Inbox that stays until you deal with it: a heads-up, a link, a file or a report.