Observatory › Gemini CLI
Gemini CLI on Windows: what it can do on your computer
In short
As of 10 November 2026, according to its documentation, Gemini CLI starts in the default mode: it asks you before what needs permission.
By default, without asking you, it can read files in the folders it works in and search the web.
Mode it starts in
Starting mode: default
When an action needs permission, who gives it: you.
Official source · accessed on 7 November 2026
What it can do by default
According to the vendor's documentation or source code, before you change any setting.
| Action | Where | By default | Note | Source |
|---|---|---|---|---|
| Read files | Working folders (the project folders you open) | Without asking | Official source | |
| Edit files | Working folders (the project folders you open) | Asks first | Official source | |
| Run commands | All commands | Asks first | Official source | |
| Connect to the internet | Any website | Without asking | Google web search runs without asking. What it searches for can carry part of your work off the computer. Fetching a web page asks. | Official source |
| Use MCP tools (add-ons) | All MCP tools | Asks first | Official source |
"Asks first": the action needs permission. Depending on the mode it starts in, you give it, or another AI model does.
What RosmarOps does with this agent
Evaluated since RosmarOps 0.10.0: RosmarOps reads its configuration on your computer, without network access, and gives it an Agent Posture Score from 0 to 100: how much it can reach with the permissions it has today.
Security change history
Only changes that affect what it can do on your computer or with your accounts. Nothing is deleted: corrections stay on record.
No security changes recorded yet.
Versions observed
- 0.66.0 · released on 27 October 2026 · Official source
Sources and data
- https://geminicli.com/docs/reference/configuration · accessed on 7 November 2026
- https://github.com/google-gemini/gemini-cli/releases/tag/v0.66.0 · accessed on 30 October 2026
- This page as JSON
Vendor's reply
None received. If the vendor sends one, it is published here, signed and dated, without changing anything above.
See a factual error? Tell us, with the source: legal@rosmarops.com
Read from the vendor's documentation and source code, each fact with its date and source. Not a security guarantee or advice.