Observatory › Grok Bot
Grok Bot on Windows: what it can do on your computer
In short
As of 13 November 2026, according to its documentation, Grok Bot starts in the ask_every_time mode: the documentation does not say who gives permission.
It keeps its configuration in 2 kinds of files on Windows, none of them with keys.
Mode it starts in
Starting mode: ask_every_time
When an action needs permission, who gives it: not documented.
For work on your own computer. Auto Review, where another AI model decides, is on by default: for each action it either lets it run or has the Bot ask you first. The documentation does not say whether it also applies to work on your computer.
Official source · accessed on 13 November 2026
What it can do by default
According to the vendor's documentation or source code, before you change any setting.
| Action | Where | By default | Note | Source |
|---|---|---|---|---|
| Read files | Any path | Asks first | Only on your own computer, through the desktop app, and only while «Execution on this computer» allows it. The default is «Ask every time»; xAI recommends «Never allow» unless a Bot needs your local files. | Official source |
| Run commands | All commands | Asks first | Only on your own computer, through the desktop app, and only while «Execution on this computer» allows it. The default is «Ask every time»; xAI recommends «Never allow» unless a Bot needs your local files. | Official source |
| Edit files | Any path | Asks first | It moves files between its cloud computer and yours, under the same «Execution on this computer» setting. | Official source |
"Asks first": the action needs permission. Depending on the mode it starts in, you give it, or another AI model does.
Where it keeps configuration and keys
Paths on Windows. %USERPROFILE% is your user folder (C:\Users\your-name); <project> is the folder of each project.
| What | Path on Windows | Keys | Note | Source |
|---|---|---|---|---|
| Local project settings | %LOCALAPPDATA%\Programs | Not known | Where the desktop app installs, per user. Where it keeps its settings and session is not documented. | Official source |
| Account keys and logins | Cursor's backend (not on this computer) | No keys | Connector tokens stay on Cursor's backend, according to xAI; tokens are never stored on the computer. | Official source |
What RosmarOps does with this agent
RosmarOps doesn't read it yet.
Security change history
Only changes that affect what it can do on your computer or with your accounts. Nothing is deleted: corrections stay on record.
No security changes recorded yet.
Sources and data
- https://docs.x.ai/grok-bot/approvals-security-and-privacy · accessed on 13 November 2026
- https://docs.x.ai/grok-bot/deployment · accessed on 13 November 2026
- https://docs.x.ai/grok-bot/security · accessed on 13 November 2026
- https://docs.x.ai/grok-bot/security-faq · accessed on 13 November 2026
- This page as JSON
Vendor's reply
None received. If the vendor sends one, it is published here, signed and dated, without changing anything above.
See a factual error? Tell us, with the source: legal@rosmarops.com
Read from the vendor's documentation and source code, each fact with its date and source. Not a security guarantee or advice.