clawdbot/docs/cli/approvals.md

summary, read_when

summary	read_when
CLI reference for `moltbot approvals` (exec approvals for gateway or node hosts)	You want to edit exec approvals from the CLI You need to manage allowlists on gateway or node hosts

moltbot approvals

Manage exec approvals for the local host, gateway host, or a node host. By default, commands target the local approvals file on disk. Use --gateway to target the gateway, or --node to target a specific node.

Related:

• Exec approvals: Exec approvals
• Nodes: Nodes

Common commands

moltbot approvals get
moltbot approvals get --node <id|name|ip>
moltbot approvals get --gateway

Replace approvals from a file

moltbot approvals set --file ./exec-approvals.json
moltbot approvals set --node <id|name|ip> --file ./exec-approvals.json
moltbot approvals set --gateway --file ./exec-approvals.json

Allowlist helpers

moltbot approvals allowlist add "~/Projects/**/bin/rg"
moltbot approvals allowlist add --agent main --node <id|name|ip> "/usr/bin/uptime"
moltbot approvals allowlist add --agent "*" "/usr/bin/uname"

moltbot approvals allowlist remove "~/Projects/**/bin/rg"

Notes

• --node uses the same resolver as moltbot nodes (id, name, ip, or id prefix).
• --agent defaults to "*", which applies to all agents.
• The node host must advertise system.execApprovals.get/set (macOS app or headless node host).
• Approvals files are stored per host at ~/.clawdbot/exec-approvals.json.