NapNapHelp center/Explore
Permissions & security
Permission control, boundaries and data handling
Updated Sep 2026
Approvals can't be bypassed
Every command and file write shows an approval card: idempotent double-click, no implicit answer on interrupt, no auto timeout; declined actions never show as done.
Credentials stay off disk
Encrypted by the system keychain; tool shells don't inherit secret env vars.