跳到主要内容Skip to main content

权限Permission

Permission

  • 智能体Agents
  • 第一站 · 进门Station 1 · Getting In
  • 引用核验 2026-11-03refs checked 2026-11-03
解决什么问题What problem it solves

决定这个工具能碰你的哪些东西:读文件、改代码、发请求、花钱。The set of operations a tool is allowed to perform. Wider is more convenient and more dangerous.

这是什么What it is

指一个工具被允许做的操作范围。范围越大越方便,也越容易出事。

好的工具会分级授权:读要批准、写要批准、删要二次确认。

The permitted action scope of a tool. A wider scope is easier to use and easier to get into trouble with.

Good tools authorise in tiers: reading needs approval, writing needs approval, deleting needs confirmation.

为什么需要知道Why it matters

这是AI 工具安全的第一道闸门。给一个能写文件和跑命令的工具不给权限限制,等于把电脑交出去。It is the first gate on AI tool safety. Giving a tool that writes files and runs commands no permission limits is handing over the machine.

出处Sources
  • FileSystem server 为什么强制声明目录Why Filesystem requires declared dirs ↗
  • OpenHands 的受限模式OpenHands Restricted Mode ↗
  • CLI 的权限询问机制CLI permission prompts ↗