configuration

the current configuration map

scope	canonical place
personal defaults	~/.grok/config.toml
repository tools and permission rules	.grok/config.toml
shared agent instructions	AGENTS.md
extensions	.grok/ skills, plugins, hooks, and MCP servers

grok inspect shows the configuration discovered for the current directory. project configuration is intentionally narrower than user configuration. Grok Build settings

Grok documents approval mode and sandbox access as separate controls. ask, auto, and always approve decide which tool calls may run. the sandbox still limits what an approved call can reach. Grok Build permissions

this page records the official shape. field tested defaults are coming later.