Skip to main content

Permissions Model

AgentLogs gives you fine-grained control over which repositories are captured and how transcripts are shared.

Capture Modes

AgentLogs supports two capture modes:

Denylist Mode (Default)

By default, AgentLogs captures transcripts from all repositories except those you explicitly deny. This is the easiest way to get started.
# Deny a specific repo from being captured
agentlogs deny /path/to/private-repo

Allowlist Mode

For stricter control, you can enable allowlist mode where only explicitly allowed repositories are captured.
# Enable allowlist mode
agentlogs settings --mode allowlist

# Allow a specific repo
agentlogs allow /path/to/my-repo
When switching to allowlist mode, no repositories will be captured until you explicitly allow them.

Visibility Levels

Each transcript can have one of three visibility levels:
LevelWho can see
PrivateOnly you
TeamYou and your team members
PublicAnyone with the link

Default Visibility

By default, visibility is determined automatically:
  • Public repositories → Team visibility
  • Private repositories → Private visibility

Override Visibility

You can override the default visibility when allowing a repo:
# Always make transcripts from this repo private
agentlogs allow /path/to/repo --visibility private

# Always make transcripts from this repo public
agentlogs allow /path/to/repo --visibility public

Configuration File

Your permission settings are stored in ~/.config/agentlogs/settings.jsonc:
{
  // "denylist" (default) or "allowlist"
  "mode": "denylist",

  // Repository-specific settings
  "repos": {
    "github.com/myorg/public-repo": {
      "allow": true,
      "visibility": "team",
    },
    "github.com/myorg/private-repo": {
      "allow": false,
    },
  },
}
The settings file uses JSONC format, which supports comments. This makes it easy to annotate why certain repos have specific settings.

Team Permissions

When you’re part of a team:
  • Team members can see transcripts with team or public visibility
  • Only you can see your private transcripts
  • Team admins can invite new members and manage team settings
To create or join a team, visit the Team settings page.