Toolkit & Connectors
Controlling What Torki Can Do
Overview
Every tool Torki can use in one of your apps has its own setting: Always, Ask or Never. You change them in Toolkit → Permissions, and Torki checks them every time it is about to use a tool.
The three settings
- Always — "Run without asking".
- Ask — "Confirm before running": Torki shows an approval card first.
- Never — "Block this tool": Torki does not run it.
The page puts it in one line: "Decide when Torki can use each tool. Always allow runs without asking, Ask each time shows an approval card, Never blocks it."
Every tool is tagged Read or Write. Read tools only offer Always and Never — reads never show an approval card, so they run unless you block them. Write tools start on Ask.
Get started
1. Open Toolkit → Permissions
Tools are grouped by app, each group headed with the app's logo and name.
2. Find a tool
Type in Search tools…. It matches tool names and descriptions, word by word and in any order, and tells you how many matched — for example "3 tools in 2 apps." While you search, each row shows the tool's description too.
3. Change a setting
Click Always, Ask or Never. The change saves straight away. If it cannot be saved, you see "Couldn't update the permission" and the control goes back to what it was.
You can make the same change on a connected app's own page in Toolkit → Connectors, under Tool permissions ("Choose when Torki can use each tool.").
What is listed
Every connected app appears, including one that needs reconnecting — its group is marked "Reconnect required", with a link back to Connectors.
Google Workspace, Microsoft 365 and Spotify appear as their own groups once any of their services is connected. For Google the tools are Google Calendar View and Create, Google Docs Create, Google Sheets Create, Google Slides Create, Google Drive Search and Google Drive Read; for Microsoft, Outlook Mail View and Outlook Calendar View. Their permissions are only here — their pages in Connectors have no Tool permissions section.
If you have connected nothing at all, the tab says "No MCP-connected apps yet." and "Google, Microsoft and Spotify are managed per-service under Connectors." As soon as a Google service is connected, the Google Workspace group appears here instead.
The approval card
When a tool is set to Ask, Torki stops before running it and shows a card in the chat:
- the app's logo and the action — for example Create calendar event;
- "Wants to run this in Google Workspace" (or whichever app it is);
- one line saying exactly what will happen — for example create the calendar event "Standup" on tomorrow at 15:00;
- Show details, which reveals the exact values Torki will send.
Then choose:
- Allow once — runs it this time. This is the highlighted button.
- Always allow — runs it and sets that tool to Always, so it will not ask again.
- Decline — nothing runs. The card is replaced with "Cancelled — nothing was changed."
If you allow an action and it fails, the card is replaced with "Couldn't complete the action" and the reason. If one request needs several writes, each gets its own card, one after another.
When a tool is set to Never
Torki does not run it and tells you it is switched off in your permissions. The same setting applies outside the chat: the Open in Google Sheets, Google Docs and similar buttons on an export card refuse with "That's switched off in your permissions." Skills respect it too — a skill step that needs a blocked tool is skipped.
Good to know
Disconnecting an app such as GitHub, Notion or Linear clears its permissions. If you connect it again, every tool starts back at its default.
FAQ
I pressed Always allow by mistake.
Open Toolkit → Permissions, find the tool and set it back to Ask.
Why is there no Ask option on some tools?
They are read tools. Reads never show a card, so the choice is Always or Never.
Does Never apply to Skills?
Yes. A skill step that needs a blocked tool is skipped and the answer says so.
Where do I stop Torki creating Google Calendar events?
Set Google Calendar Create to Never under the Google Workspace group.