Core concepts
Tool approvals
Decide what Flash can do without asking, and what always needs your confirmation.
Three approval modes
Manually approve is the default. Use /permissions to change the mode of the current conversation, and Settings → Permissions or flash.toml to set the default for new ones.
| Mode | Runs without asking | Asks before |
|---|---|---|
| Manually approve | Reading files | Editing files, running commands, network and device actions |
| Auto-approve file edits | Reading and editing project files | Running commands, network and device actions |
| Skip approval prompts | Everything, including commands, network and device actions | Only the cases listed below |
flash.toml
[agent]permission_mode = "manual" # manual | accept_edits | bypassWhat Skip approval prompts never skips
These apply in every mode:
- Writing firmware to a board, or launching the debugger with a new build, always asks first.
- Plan mode is always read-only.
- Rules that block an action or always ask for it still apply, including your organisation’s.
- Skipping prompts never gives the agent wider access to your computer.
Keep in mind
Use Skip approval prompts in a project you trust, for work you will review afterwards. Flash for VS Code asks you to confirm before turning it on.
Answer a request
Pick the narrowest answer that covers what you want to allow.
| Answer | Allows |
|---|---|
| Allow once | Only this action. |
| Allow for this session | The same action on the same command, path, host or device, until the task ends. |
| Always allow in this project | The same action from now on in this project. Saved on your computer, not in the repository. |
| Deny | Nothing. The agent explains or finds another way. |
- Flash CLI: y allows once, n or Esc denies. Use ↑ ↓ and Enter for the other answers.
- Flash IDE and VS Code: the same answers appear in the chat as This time, This task and This project.
Keep in mind
Remembered answers match exactly what you approved. To revoke one, open
/permissions and select it.Programming the board
Before writing to a board, Flash shows the target, device and firmware, plus any erase. Choose flash now, allow for this session, or skip: f, a or s in Flash CLI.
Allowing for the session covers only that operation, device and erase choice. Allowing a plain flash does not allow a later erase.