Skip to content

Permissions

By default, Crush asks for your permission before running tool calls that could modify your system (editing files, running commands, etc.). Read-only operations like viewing files are always allowed.

Permission Prompts

When Crush wants to run a command or edit a file, a popup appears with options:

  • Allow once: Approve this single tool call
  • Allow for session: Approve all future calls to this tool for the current session
  • Deny: Block this tool call

Navigate with the arrow keys and press Enter to confirm.

Allowing Tools Permanently

You can configure tools to always run without prompting in your crush.json:

json
{
  "$schema": "https://charm.land/crush.json",
  "permissions": {
    "allowed_tools": [
      "view",
      "ls",
      "grep",
      "edit",
      "mcp_context7_get-library-doc"
    ]
  }
}

Use this with care. Allowing destructive tools like bash or write means Crush can make changes without confirmation.

YOLO Mode

YOLO mode disables all permission prompts. Crush can edit and run any files it wants, except for a maintained list of banned commands.

WARNING

Be very careful with YOLO mode. LLMs can hallucinate and do dangerous things. Only use it in environments you can easily recover.

Enable YOLO mode from the command palette (Ctrl+P) by searching for "yolo", or start Crush with:

bash
crush --yolo
crush -y

When YOLO mode is active, the prompt box at the bottom of the screen turns yellow as a visual warning.

Disabling Built-In Tools

If you'd like to prevent Crush from using certain built-in tools entirely, you can disable them via the options.disabled_tools list. Disabled tools are completely hidden from the agent.

json
{
  "$schema": "https://charm.land/crush.json",
  "options": {
    "disabled_tools": ["bash", "sourcegraph"]
  }
}

To disable tools from MCP servers, see the MCP config section.