clawdbot/docs/cli/approvals.md

summary, read_when

summary	read_when
CLI reference for `clawdbot approvals` (exec approvals for gateway or node hosts)	You want to edit exec approvals from the CLI You need to manage allowlists on gateway or node hosts

clawdbot approvals

Manage exec approvals for the gateway host or a node host. By default, commands target the gateway. Use --node to edit a node’s approvals.

Related:

• Exec approvals: Exec approvals
• Nodes: Nodes

Common commands

clawdbot approvals get
clawdbot approvals get --node <id|name|ip>

Replace approvals from a file

clawdbot approvals set --file ./exec-approvals.json
clawdbot approvals set --node <id|name|ip> --file ./exec-approvals.json

Allowlist helpers

clawdbot approvals allowlist add "~/Projects/**/bin/rg"
clawdbot approvals allowlist add --agent main --node <id|name|ip> "/usr/bin/uptime"

clawdbot approvals allowlist remove "~/Projects/**/bin/rg"

Notes

• --node uses the same resolver as clawdbot nodes (id, name, ip, or id prefix).
• The node host must advertise system.execApprovals.get/set (macOS app or headless node host).
• Approvals files are stored per host at ~/.clawdbot/exec-approvals.json.