Allowlist vs everything
The safest setup lists only the commands a task needs. The convenient setup uses * to allow all. Most people land in between: a curated list plus a couple of extras.
Add commands
- Open the agent’s Capabilities tab.
- Find Extra shell commands.
- Add one command per line: mkdir, cp, mv, python3, open, touch.
- Or click "Allow all commands" for
*. - Save capabilities.
The command catalog
The Commands page lists safe, useful commands with a short description. Click through, then copy the names you want into the allowlist field.
How execution stays safe
Commands run argv-based, never as a raw shell string, which closes the classic injection hole. Always-blocked patterns — sudo, rm -rf /, pipe-to-shell downloads — are refused regardless of the allowlist.
Dynamic tools
For named, reusable commands you can define dynamic tools in Settings. They are pushed to devices automatically, so a whole fleet gets the same helper at once.