Connecting an app does not mean your Hand may perform every action. For supported Hands Plugins, Action rules let you decide which actions can run and which require your approval. These Hands rules are separate from the access you granted on the provider’s website.
Set up your action rules
- Open the Hands Console and select your Hand.
- Go to Integrations → Plug-ins.
- Select the linked Plugin’s Settings icon.
- Open Capabilities to see the available access, then switch to Action rules.
- Choose the preferred mode for each configurable action.
- Select Update my Hand to apply your changes, or Discard to keep the previous settings.
- Reopen the settings to verify what was saved. If Hands reports a sync problem, follow the error and retry only when that option is available.
Understand the choices
| Option | What it does |
|---|---|
| Block | Prevents your Hand from running the action. |
| Allow | Permits the specified read action. |
| Ask | Requires your approval each time a supported changing action is about to run. |
| Automatic | Allows a supported changing action without an additional Hands approval, provided other access and safety controls allow it. |
For read operations you may see Block and Allow. For writing or deleting you may see Block, Ask, and Automatic. Some high-impact actions do not offer Automatic at all. Only the options shown for that particular action are valid; unavailable choices should not be bypassed.
Access and safety limits
- Provider permissions remain the outer boundary. Hands cannot override a denied OAuth scope or missing provider grant.
- Your AI client may also request confirmation, even if Hands allows Automatic.
- A temporarily unavailable Plugin or older Hand runtime may prevent you from increasing access. Read the status message before retrying.
- A read permission is different from permission to change or delete data. Use Ask or Block when in doubt.
To stop using a service, choose Pause or Remove from its Settings when available, and revoke access at the provider if needed. For permissions per MCP tool, see Approve or automate MCP tool actions.