Guides

Is Grok Bot safe? Approvals, Auto Review, and privacy

Risky actions can stop for your approval, Auto Review checks actions before they run, and you enter passwords and 2FA codes yourself.

What you need

• A list of actions you always want to approve: sending, publishing, deleting, purchasing, production changes

Steps

1. Write standing boundaries in each Bot's description.
2. Add narrow Ask first rules for sending, publishing, deleting, purchasing, and production changes.
3. When an approval appears, check the target, scope, and values, then choose Allow once, Always allow, or Deny.
4. Set Execution on Local Computer to Ask every time, Always allow, or Never allow.
5. Enter passwords, 2FA codes, and CAPTCHAs yourself when the Bot hands you control.

Prompt to copy

List every action you could take with my connected accounts that sends, publishes, deletes, or spends money, and suggest an Ask first rule for each.

Tips

• All your Bots share one computer and its logins. Isolation is between users, not between Bots.
• Grok Bot needs cloud data storage, so Legacy Privacy Mode isn't supported. It runs only on Cursor-hosted computers.

FAQ

Sources

• https://docs.x.ai/grok-bot/approvals-security-and-privacy
• https://cursor.com/docs/grok-bot/security-faq