> ## Documentation Index
> Fetch the complete documentation index at: https://docs.xpander.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Trusted folders and access levels

> Agents only see the folders you trust on your computer, each read only or read and write. Add them in Settings or the composer, or answer an agent's request for a folder during a task.

Agents see nothing on your computer until you trust a folder. Each trusted folder has one access level:

| Access | Agents can |
| - | - |
| **Read only** | List the folder and read its files. |
| **Read and write** | Also create and change files. |

Agents cannot delete a file through a trusted folder. A file saved under a name already taken is saved beside it, for example `report (2).md`, unless the agent was asked to replace it.

## Add a folder

Add, change or stop trusting a folder in [Settings](https://docs.xpander.ai/desktop/settings.md) > **Trusted folders** (**Add folder**), or from the folder chip in the composer's laptop strip (**Trust a folder** while none is trusted). **Read and write** asks you to confirm: **Let agents change files?**, then **Allow changes**. Stopping only removes the folder from the list. Nothing on disk changes.

![Trusted folders list: one folder marked read only because the organization does not allow changes, another outside what the organization allows](https://mintcdn.com/xpanderai-099931d1/5kO48nCPjVxjKi_K/images/desktop/trusted-folders.png?fit=max\&auto=format\&n=5kO48nCPjVxjKi_K\&q=85\&s=17e56786a5fa1e7013d7c1901b4bd3f3)

Trusted folders in Settings, with notes where your organization's policy narrows them. Shown with sample data.

## The folder for new files

With more than one **Read and write** folder, one is the **Default for new files**: where an agent saves a file without a full path, and where files from the cloud land. Change it with **Make default for new files** in the composer's folder list.

Files an agent leaves only in its cloud workspace are saved into this folder for you, never replacing existing files. To review them first, turn off **Save new files to this Mac automatically** in [Settings](https://docs.xpander.ai/desktop/settings.md) > **Notifications**. The conversation then offers **Save to** the folder, or **Choose a folder**.

![Card reading 2 files created in the cloud, with Save to acme-site and a close button](https://mintcdn.com/xpanderai-099931d1/5kO48nCPjVxjKi_K/images/desktop/save-to-mac.png?fit=max\&auto=format\&n=5kO48nCPjVxjKi_K\&q=85\&s=2e8d6c1eaf7a84ad21501345195eb085)

Files an agent left in the cloud, ready to save to your Mac. Shown with sample data.

## When an agent asks for a folder

An agent that needs an untrusted folder asks during the task: **Allow access to a folder?**, with the folder, its reason, and a note when the folder is outside what your organization allows or only reading is allowed. Choose **Read only**, **Read and write** or **Not now**.

![Allow access to a folder dialog for \~/code/app with the reason, and Not now, Read only, Read and write](https://mintcdn.com/xpanderai-099931d1/5kO48nCPjVxjKi_K/images/desktop/trust-prompt.png?fit=max\&auto=format\&n=5kO48nCPjVxjKi_K\&q=85\&s=92fbcd921a632f55e9dcab19ac183705)

An agent asking for a folder, with its reason. Shown with sample data.

With the window in the background, a notification says **An agent asks to use a folder**, and macOS shows the same question. Your answer is saved: the folder stays trusted for every conversation until you remove it in Settings.

## What your organization's policy changes

Your organization's [Desktop policy](https://docs.xpander.ai/desktop/admin.md#desktop-policy) and your own **Files** switch in [Settings](https://docs.xpander.ai/desktop/your-controls.md) limit every trusted folder:

* **Files off**: agents cannot use files on this computer.
* **Read only**: every folder is read only, and a read-and-write folder reads **Read only: your organization does not allow changes**.
* **Folder rules**: only certain folders allowed. Others read **Outside what your organization allows** and agents cannot use them.

The app and your xpander both check every file request. A path outside your trusted folders is refused, even through a shortcut or symbolic link.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.