What Balt does alone

Choose, action by action, what Balt does without asking, what he asks about and what he never does.

Each tool offers actions, sorted into Reading, Writing and Deleting. Each one has three settings.

Setting	What Balt does
Automatic	He runs the action without asking, and tells you afterwards.
Ask	He asks for your approval each time. See Approvals.
Deny	He can’t use this action. If he needs it, he says so and points you to an administrator.

With no setting, Balt reads freely and asks before writing or deleting.

​

For the whole organization

On an organization account, an administrator opens the How Balt works for them menu, then Customise by action….

• Pick Deny, Ask or Automatic on each action.
• Set all to applies the same setting to every action.
• The setting covers the whole tool, across all its accounts.
• People with a role of their own aren’t affected.

​

For one person

In the list of people, open their role menu, then Customise by action…. Their settings start from their role, and your changes win.

• Copy from… takes another person’s settings.
• Reset to level clears the changes and goes back to the role.
• An action marked Switched off by the organization stays denied: a personal setting can’t reopen it.

​

Which setting wins

1. An action the organization set to Deny stays denied for everyone.
2. Otherwise, a person’s own setting beats their role.
3. Their role beats the organization’s setting.

When a tool of an MCP server changes, its setting goes back to Ask.

​

In routines

A routine runs when no one is around. What it may do without asking is approved in a conversation with Balt, and shows on its page under Allowed without asking. These approvals only apply to that routine. See A routine’s page.