remoteagent.online  the open-source control plane for secure, cost-controlled AI agents

Allow an agent to access specific file paths

Grant an agent access to folders outside its workspace — like a shared project directory — without opening up the whole filesystem.

Updated 2026-08-22Reading time 3 min

The workspace is the default

Every agent works inside its own workspace folder by default. That boundary means a wrong tool call cannot reach your Documents or Downloads.

Grant an extra path

  1. Open the agent’s Capabilities tab.
  2. Find Allowed file paths.
  3. Add a path, e.g. /Users/you/Desktop/project.
  4. Save capabilities.

Why not just allow everything

Each extra path is a wider surface. Grant only what the task needs, and keep deletes-to-trash on so a mistake is recoverable.

Workspace + paths + secure mode

In secure mode, extra paths are ignored — only the workspace is reachable. That is the point of secure mode: it cannot be widened by config or prompt.