When an agent wants to control an app on your Mac, a permission dialog appears — you choose exactly how much access to grant.
Three options are available: Deny (blocks access to this app), Allow App (allows access to this app only), or Allow All Apps (allows access to every app the agent requests).
- The agent requests access to an app during a chat.
- A dialog appears in the Mac app — choose Deny, Allow App, or Allow All Apps.
- Press Esc at any time to immediately stop all computer use in that chat.
Where: Mac app. The dialog appears inline whenever the agent needs a new app.
Good to know: you can review and adjust per-app approvals in Settings › This Mac. Granting "Allow All Apps" applies only to the current session by default.