Full access via MCP
You connect a file server and share a path, often a whole drive. Quick to set up, but the AI can read, change and delete anything in it. No levels, no log, no safety net.
The most reliable way to control an AI's file access is a local permission gateway like Kobel. You share individual folders and give each one of five colours, from full access to blocked. Windows folder permissions, a separate user account or a virtual machine work too, but they are coarser, more work and keep no log.
Free basic version. No account, no cloud. Your files stay on your computer. Last checked: September 2026
As soon as you give an AI assistant file access, one question comes up: how tightly can you limit it? Most damage, meaning accidentally deleted data, leaked passwords and overwritten projects, happens because the AI had more access than it needed.
A local app sits between your files and every AI program. You share individual folders and give each one a colour. Every AI follows it, every change and every blocked attempt is logged, and changes are backed up automatically. No programming, no cloud.
checks every requestEach approach has its place. What matters is how finely you can control it and whether you can see afterwards what happened.
You connect a file server and share a path, often a whole drive. Quick to set up, but the AI can read, change and delete anything in it. No levels, no log, no safety net.
You create separate folders and work with file permissions. It works, but it is tedious. The system cannot tell AI apps apart, does not log what the AI does and keeps no backups.
The AI runs under a restricted account or in a virtual machine. Strong separation, but impractical day to day and without fine control per folder.
An app between your files and every AI program. Five colours per folder, a log the AI cannot change, and automatic backups. Set up in two minutes.
| Criterion | Full MCP access | Windows permissions | Account or VM | Kobel |
|---|---|---|---|---|
| Access per folder | partly | yes | partly | yes |
| Levels of permission | no | no | no | yes |
| Control each AI separately | no | no | partly | yes |
| Log the AI cannot change | no | partly | no | yes |
| Backup before every change | no | no | no | yes |
| Setup effort | low | high | very high | low |
Every folder, program and account in Kobel has exactly one of these levels. You can change it with one click at any time.
An app like Kobel. You drag in the folders the AI may see and pick a colour for each. Anything you do not drag in stays invisible to the AI.
For a rough separation, yes. But Windows cannot tell individual AI apps apart, does not log what the AI does and keeps no backup before changes.
Yes. That is the best way to start: one folder, set to yellow, meaning read only. You can share more at any time.
With Kobel, yes. The log shows every change with time and result, including the blocked attempts, and every read if you want. The AI cannot reach the log.
The basic version is free. Pro costs 49 euros once or 3.90 euros per month.
Install Kobel, drag in folders, pick colours, connect your AI. Free, no account, no cloud.