How Tools Work

User: Create a file named greeting.js that logs a greeting message

Kilo Code: (Proposes the write tool)

The extension shows the file path and proposed content for review. Click Approve to execute or Deny to cancel.

Every tool use is subject to a permission check. The default action for any tool with no matching rule in your config is ask — meaning Kilo will pause and prompt you before executing it.

Default permissions by tool:

No tools are auto-approved out of the box. You must explicitly grant allow in your config, or approve them at runtime.

At runtime, the Permission Dock floating UI in the chat panel shows each pending approval. For each tool call you can:

• Approve once — execute this call only
• Approve always — save an allow rule to your config so future matching calls are auto-approved
• Deny — cancel the tool call

To pre-configure permissions in your config file:

{
  "permission": {
    "read": "allow",
    "glob": "allow",
    "grep": "allow",
    "edit": "ask",
    "bash": "ask"
  }
}

This safety mechanism ensures you maintain control over which files are modified, what commands are executed, and how your codebase is changed.