Tools and permissions

The agent can read and search your project, create and edit files, run commands, and connect to configured MCP servers. Every tool call passes through the permission policy.

Mutating tools default to ask. Set a different default for automation:

SIGIT_PERMISSIONS=allow sigit

You can also configure per-tool rules in settings.toml, use /permissions to inspect the active policy, or use /plan to deny all mutations while planning. Read-only tools such as read_file, search_files, and read_website run without a prompt.