Skip to main content
The Trusted Folders feature is a security setting that gives you control over which projects can use the full capabilities of the Gemini CLI. It prevents potentially malicious code from running by asking you to approve a folder before the CLI loads any project-specific configurations from it.

​
Enabling the Feature

The Trusted Folders feature is disabled by default. To use it, you must first enable it in your settings. Add the following to your user settings.json file: 
{
  "security": {
    "folderTrust": {
      "enabled": true
    }
  }
}

​
How It Works: The Trust Dialog

Once the feature is enabled, the first time you run the Gemini CLI from a folder, a dialog will automatically appear, prompting you to make a choice:

Trust folder

Grants full trust to the current folder (e.g., my-project).

Trust parent folder

Grants trust to the parent directory (e.g., safe-projects), which automatically trusts all of its subdirectories as well. This is useful if you keep all your safe projects in one place.

Don't trust

Marks the folder as untrusted. The CLI will operate in a restricted “safe mode.”
Your choice is saved in a central file (~/.gemini/trustedFolders.json), so you will only be asked once per folder.

​
Understanding Folder Contents

Before you make a choice, the Gemini CLI performs a discovery phase to scan the folder for potential configurations. This information is displayed in the trust dialog to help you make an informed decision. The discovery UI lists the following categories of items found in the project:
Custom .toml command definitions that add new functionality.
Configured Model Context Protocol servers that the CLI will attempt to connect to.
System or custom hooks that can intercept and modify CLI behavior.
Local agent skills that provide specialized capabilities.
Any project-specific configurations that override your global user settings.

​
Security Warnings and Errors

The trust dialog also highlights critical information that requires your attention:
Security Warnings: The CLI will explicitly flag potentially dangerous settings, such as auto-approving certain tools or disabling the security sandbox.
Discovery Errors: If the CLI encounters issues while scanning the folder (e.g., a malformed settings.json file), these errors will be displayed prominently.
By reviewing these details, you can ensure that you only grant trust to projects that you know are safe.

​
Impact of an Untrusted Workspace

When a folder is untrusted, the Gemini CLI runs in a restricted “safe mode” to protect you. In this mode, the following features are disabled:
1

Workspace settings are ignored

The CLI will not load the .gemini/settings.json file from the project. This prevents the loading of custom tools and other potentially dangerous configurations.
2

Environment variables are ignored

The CLI will not load any .env files from the project.
3

Extension management is restricted

You cannot install, update, or uninstall extensions.
4

Tool auto-acceptance is disabled

You will always be prompted before any tool is run, even if you have auto-acceptance enabled globally.
5

Automatic memory loading is disabled

The CLI will not automatically load files into context from directories specified in local settings.
6

MCP servers do not connect

The CLI will not attempt to connect to any Model Context Protocol (MCP) servers.
7

Custom commands are not loaded

The CLI will not load any custom commands from .toml files, including both project-specific and global user commands.
Granting trust to a folder unlocks the full functionality of the Gemini CLI for that workspace.

​
Managing Your Trust Settings

If you need to change a decision or see all your settings, you have a couple of options:

​
Change Current Folder’s Trust

Run the /permissions command from within the CLI. This will bring up the same interactive dialog, allowing you to change the trust level for the current folder. 
> /permissions

​
View All Trust Rules

To see a complete list of all your trusted and untrusted folder rules, you can inspect the contents of the ~/.gemini/trustedFolders.json file in your home directory. 
cat ~/.gemini/trustedFolders.json

​
The Trust Check Process (Advanced)

For advanced users, it’s helpful to know the exact order of operations for how trust is determined:
1

IDE trust signal

If you are using the IDE Integration, the CLI first asks the IDE if the workspace is trusted. The IDE’s response takes highest priority.
2

Local trust file

If the IDE is not connected, the CLI checks the central ~/.gemini/trustedFolders.json file.
When using Gemini CLI within VS Code or another IDE with workspace trust, the IDE’s trust settings will take precedence over the CLI’s local trust configuration.

Build docs developers (and LLMs) love

Get started for freeTalk to us