Auto-approve

Before Bob runs a tool, an approval prompt appears in the terminal. Prompts appear one at a time so you have a clear, deliberate view of each action before it runs.

Editable commands: When Bob proposes a terminal command, you can edit the command directly in the approval prompt before approving it. This lets you make precise adjustments without canceling the task and rephrasing.

Task-level approvals: In addition to global auto-approve settings, you can configure tool group approvals per task. Task-level overrides apply only to the current task.

Auto-approve is controlled by the approval key in ~/.bob/settings/settings.json. Add the permission group IDs you want to auto-approve to the allowed_permissions array:

You can also toggle auto-approve interactively during a Shell session using the /permissions slash command.

For the full JSON schema — including per-command allowlists, denylists, and per-group options — see Approval settings.

When you auto-approve an action, Bob completes the respective action without asking for permission.

Auto-approve is most beneficial in these scenarios:

Each action controls a specific workflow that Bob can complete.

Bob accesses and reads files in your project without asking for permission.

This includes viewing file contents, listing directory structures, and searching through your codebase. This permission involves information gathering rather than making changes to your system.

Bob creates, modifies, and deletes files without asking for permission.

Bob can apply code changes, refactor existing code, and manage file structure automatically. This directly modifies your codebase and involves high risk.

Bob can run terminal commands automatically without asking permission. This includes running build scripts, package managers, and other command-line tools.

Commands can perform system-level operations and possibly run harmful processes. This action involves high risk.

Bob can use configured Model Context Protocol (MCP) servers without asking permission.

MCP servers provide additional tools and resources that extend Bob's capabilities. The risk level depends on what the specific MCP servers can access and modify.

Bob can automatically activate skills you have defined without asking for permission.

Skills are reusable instruction sets that teach Bob specialized workflows and tasks. When enabled, Bob loads and follows skill instructions based on your request and the skill's description. The risk level depends on what actions the skill instructions direct Bob to perform, but skills operate within Bob's existing tool constraints.

For more information, see Skills.

Bob can automatically update the todo list without asking for permission.

This allows Bob to track progress and manage task completion as work proceeds. This permission relates to task management rather than system access.

Subtasks are separate task instances that Bob creates to break down complex work into manageable pieces. Bob can create and complete these subtasks automatically without asking for confirmation.

This permission relates to workflow organization rather than system access.

Bob can automatically spawn subagents to handle focused, self-contained tasks without asking for permission.

Subagents run in their own isolated context and return a summary when done. This permission relates to workflow delegation rather than direct system access.

For more information, see Subagents.

Bob can change between different modes automatically based on task requirements.

This action involves workflow organization and does not affect system access.

Follow these guidelines to use auto-approving actions safely: