Skip to main content

Menu

Sign In Register

Fix Permission And File Access Issues

Troubleshoot Apprentice agent file access, mounted folders, RO and RW volume modes, capabilities, permission prompts, blocked commands, and blocked websites.

Fix Permission And File Access Issues

When an agent cannot read, write, or run something, check folder access, capabilities, and permissions in that order.

Agent Cannot See Files

Open Config > Directories.

Check:

  • The folder is added as a volume.
  • The mount name is correct.
  • The agent prompt refers to the mounted path, such as ~/project.
  • Duplicate mount names are not present.

If the folder is not mounted, the agent should not be expected to see it.

Agent Cannot Write Files

Check whether the volume is RO.

RO means read-only. Use it for summarizing, searching, and answering questions.

RW means read-write. Use it only for folders where edits are intended.

If writes are expected, switch only the needed volume to RW.

Tool Is Blocked Before A Prompt

Open Config > Capabilities.

Check whether the relevant tool family is enabled:

  • Filesystem Tools for file read, write, edit, glob, grep, and listing.
  • Shell Process Tools for command execution.
  • Web Network Tools for provider-native web fetch or search.
  • External MCP Tools for external MCP servers.

If a capability is disabled, the tool can be blocked before a normal prompt appears.

Permission Prompt Appears Too Often

Use Ask for Approval while testing.

After reviewing repeated safe requests, add a narrow saved pattern or move a specific MCP tool from Ask to Allow.

Avoid broad saved patterns such as *.

Command Or Website Is Blocked

Open Config > Permissions.

For Auto-Accept Safe Operations, check:

  • Blocked Commands.
  • Allowed Commands.
  • Blocked Websites.
  • Allowed Websites.

Blocked rules take priority over allowed rules.

Unexpected Tool Request

If the agent asks for a surprising tool:

  1. Deny the request.
  2. Review the prompt and instructions.
  3. Check the tool family capability.
  4. Add a blocked command, website, or MCP tool policy if needed.
  5. Run the same task again.

Still Failing

Open Activity and Run Detail.

Record:

  • Tool name.
  • Tool input shown in the permission prompt.
  • Capability state.
  • Permission mode.
  • Folder mount and RO/RW mode.
  • Any blocked rule involved.