Tool permissions
Explicit controls over agent tools, operations, or access.
Yes Documented within scope Partial Limited form of the feature No Explicit evidence of absence Unknown No evidence recorded. These are support assessments, not quality scores or runtime verification.
| Product | Support | Implementation & evidence | Screenshots |
|---|---|---|---|
 NimbalystWorkspace | Yes | Configures tools and filesystem permissions per project. Documentation claim for the cited product surface; not runtime-tested. See source locator and dossier limitations. | |
 ConductorOrchestrator | Yes | Delegates tool permissions to configured agent harnesses. Documentation claim for the cited product surface; not runtime-tested. See source locator and dossier limitations. | |
 CloudCLIWorkspace | Yes | Documents selective tool enablement, disabled by default. Documentation claim for the cited product surface; not runtime-tested. See source locator and dossier limitations. | |
 OpcodeWorkspace | Yes | Documents per-agent file and network access controls. Documentation claim for the cited product surface; not runtime-tested. See source locator and dossier limitations. | |
 CodexMonitorWorkspace | Yes | Handles agent approval prompts and access modes. Documentation claim for the cited product surface; not runtime-tested. See source locator and dossier limitations. | |
 ClineCoding platform | Yes | Supports human approvals and optional auto-approval. Documentation claim for the cited product surface; not runtime-tested. See source locator and dossier limitations. | |
 Kilo CodeCoding platform | Yes | Documents an explicit flag that disables permission prompts. Documentation claim for the cited product surface; not runtime-tested. See source locator and dossier limitations. | |
 OpenCodeCoding agent | Yes | Plan mode denies edits and asks before shell commands. Documentation claim for the cited product surface; not runtime-tested. See source locator and dossier limitations. | |
 WarpCoding platform | Yes | Documents centrally configured agent permissions. Documentation claim for the cited product surface; not runtime-tested. See source locator and dossier limitations. | |
 SupersetOrchestrator | Unknown | No evidence recorded. This does not mean unsupported. | |
 Vibe KanbanOrchestrator | Unknown | No evidence recorded. This does not mean unsupported. | |
 CursorCoding platform | Unknown | No evidence recorded. This does not mean unsupported. | |
 DevinCoding platform | Unknown | No evidence recorded. This does not mean unsupported. | |
 OpenHandsCoding platform | Unknown | No evidence recorded. This does not mean unsupported. | |
 EmdashOrchestrator | Unknown | No evidence recorded. This does not mean unsupported. | |
 Claude SquadTerminal manager | Unknown | No evidence recorded. This does not mean unsupported. | |
 cmuxTerminal manager | Unknown | No evidence recorded. This does not mean unsupported. | |
 Roo CodeArchived project | Unknown | No evidence recorded. This does not mean unsupported. | |
 AiderCoding agent | Unknown | No evidence recorded. This does not mean unsupported. | |
 ZedCoding platform | Unknown | No evidence recorded. This does not mean unsupported. |