Keli Your accounts
Approvals
Review a proposed action before Keli carries it out.
Keli stops and asks when an action needs your decision. Read the tool, destination, and proposed change on the approval card—not just the name of the task.
Choose the scope
| Choice | What it means |
|---|---|
| Approve once | Let this proposed action proceed once. |
| Allow for this task | Repeat this exact action with these exact inputs until you switch tasks or reload. |
| Always allow | Save the displayed permission for future matching actions. |
| Deny | Refuse the proposed action. Tell Keli what to do instead if needed. |
The choices offered depend on the action. A saved permission is scoped; it is not permission for every tool or destination. Review and remove persistent grants in Settings → Saved permissions. They are saved for your account in this browser or app on this device; they do not automatically follow you to another device. Changed inputs require approval again. Actions that depend on the current screen or page cannot be saved safely.
What still needs a decision
Credentials, unfamiliar actions, external requests, and changes to files or accounts are reviewed unless an applicable explicit grant covers the action. Installing a skill or connecting an account does not bypass this boundary. If Keli cannot safely classify an action, it asks.
Automatic permissions allow a narrow set of observations. In Code, Auto mode can run eligible commands inside an enforced local sandbox; it does not turn every host command into an automatic action. Its isolated actions have no network access. An install that needs the network must ask for permission to proceed outside that boundary.
Stop desktop control
During computer control, Keli displays a banner. Esc stops control and interrupts in-flight terminal commands. After revocation, a later attempt must ask again. You can also stop a run from its visible controls.
Approve on your phone
Open Cowork and look for Waiting for you. Read the action and use Allow once when that is the permission you intend. Keep the app open while checking the result; backgrounding can interrupt the connection. Never approve a request you do not recognize.