The workspace is the default
Every agent works inside its own workspace folder by default. That boundary means a wrong tool call cannot reach your Documents or Downloads.
Grant an extra path
- Open the agent’s Capabilities tab.
- Find Allowed file paths.
- Add a path, e.g.
/Users/you/Desktop/project. - Save capabilities.
Why not just allow everything
Each extra path is a wider surface. Grant only what the task needs, and keep deletes-to-trash on so a mistake is recoverable.
Workspace + paths + secure mode
In secure mode, extra paths are ignored — only the workspace is reachable. That is the point of secure mode: it cannot be widened by config or prompt.