Control what AI apps can do

In short

You control each AI app in two ways. First, you give it "View only" or "View and make changes". Second, you set each tool to Always allow, Needs approval or Blocked. Clikso checks both on every request, whatever the AI app allows.

You need

A connected app

Any app you connected. See Use Clikso from AI apps.

A place

Settings → AI connections in the Clikso dashboard. Pick the app from the list.

View only, or changes too

When you connect an app, you choose what it may do:

• View and make changes — it can read, and use the create, change and delete tools your settings allow.
• View only — it can only read and search. Clikso hides every tool that makes changes.

To switch later, open the app in Settings → AI connections and press Edit access.

The three settings for each tool

• Always allowThe tool runs straight away when the AI app calls it.
• Needs approvalThe tool waits for you. You press Approve on a Clikso card in the chat, or on a Clikso page the app links to. Nothing changes before that.
• BlockedThe AI app does not see the tool, and Clikso refuses it if the app calls it anyway.

Out of the box, read and create tools are set to Always allow. Change and delete tools are set to Needs approval. You can set any tool to any of the three, even a read tool.

To change them, open the app and find Tool permissions. Pick a setting next to each tool, or use Set all tools to change them all at once.

Bulk tools never beat their single twin

Two tools work on many links at once. Each one follows the stricter of its own setting and its single-link twin:

• delete_links (Delete several links) follows delete_link (Delete link).
• bulk_update_links (Move or archive links) follows update_link (Update link).

So if Delete link is Blocked, Delete several links is blocked too, whatever it says. The settings page notes when this happens.

When changes take effect

Clikso applies a new setting on the app's next request. Some apps keep the old tool list until you start a new chat. If a tool still shows after you blocked it, Clikso refuses it anyway.

Your role and plan still count

• Your role. An app can never do more than you can in a workspace. If you are a viewer there, it can only read.
• Your workspaces. The app only reaches the workspaces you ticked. To add or remove one, press Edit workspaces.
• Your plan. Plan limits apply exactly as they do for API keys.

Where you approve

When a tool needs approval, Claude, ChatGPT and VS Code show a Clikso card right in the chat, once Clikso has verified the app at sign-in. Other apps give you a link to a Clikso page. Both show exactly what will change. See Approvals.

Clikso and your app both check

Some apps have their own tool settings too. Claude's connector settings, for example, have Always allow, Needs approval and Blocked for each tool. ChatGPT and VS Code can also ask before they use a tool.

Both layers apply, and your app cannot skip Clikso's check. Clikso's setting is the one enforced for every app.

Good to know

• Some things are never open to AI apps, whatever you set. These are link passwords, billing, API keys, members, domain settings and workspace settings.
• Each app's page in Settings → AI connections has an Activity list. It shows each action and whether it ran, waited or was refused.
• To cut an app off completely, press Disconnect on its page. It must connect again from scratch.