SpyBara
Go Premium

Documentation 2026-10-27 23:58 UTC to 2026-10-28 23:01 UTC

25 files changed +3,174 −1,419. View all changes and history on the product overview
2026
Thu 29 23:01 Wed 28 23:01 Fri 23 23:57 Wed 21 23:02 Mon 19 23:59 Fri 16 22:57 Wed 14 23:01 Tue 13 23:59 Mon 12 23:02 Sun 11 23:58 Thu 8 23:58 Mon 5 22:59 Sat 3 23:58 Fri 2 23:57
Details

29 29 

30## Review an action30## Review an action

31 31 

32When an action needs approval, the conversation shows the proposed operation32Auto Review checks each action your Bot is about to take, for example before it

33and its inputs. Review the target, scope, and values before approving.33runs a command, uses a connected app, or uses its computer. Most actions run on

34**Allow once** lets the Bot continue with that action, **Always allow** can34their own. When one needs your OK, the Bot shows an approval card in your chat

35save a matching rule, and **Deny** blocks it. The controls are the same on35with the proposed operation and its inputs, and waits for your answer. An action

36iPhone.36that matches one of your **Ask first** rules always gets a card. Review the

37 37target, scope, and values before approving.

38An Auto Review approval from a chat you are in waits for your answer. An38 

39approval from work that started without you, such as a routine, a trigger, or a39Auto Review takes into account what you asked for in your own messages. Text

40message from another Bot, expires after about 10 minutes; the card then shows40from somewhere else, such as an email or a web page, doesn't count as your

41**Expired**, and the action does not run. An expired card may offer **Always allow this in41request. Some cards carry a warning, such as **This can't be undone**, **This

42the future**, which adds the proposed rule to your **Allow automatically** rules42changes sign-in or security settings**, or **This shares your data outside this

43without running the expired action. To finish the task, ask the Bot to try43chat**.

44again.44 

45* **Allow once:** the Bot does the action now. No rule is saved.

46* **Always allow:** the Bot does the action now and saves an Allow rule to your

47 Custom Rules, so similar actions run on their own. The card shows **Saved to

48 Custom Rules**.

49* **Deny:** the Bot doesn't do it. It won't try that action again or ask you

50 about it until you send another message.

51 

52Some cards use other labels. A card for a terminal command shows **Allow** and

53**Skip**, plus **Manage settings**, which opens your Auto Review settings. A

54card paused by one of your **Ask first** rules shows **Allow** and **Not now**,

55and **Edit rule** opens your Custom Rules. When the card has no rule to offer,

56you see **Allow** instead of **Allow once**, and no **Always allow**. On the

57phone, tap a card to see the full request and all of its buttons.

58 

59For email the Bot sends from [its own

60address](/grok-bot/computer-and-apps#give-your-bots-an-email-address):

61 

62* When you ask for an email in chat, it goes out once Auto Review allows it. If

63 Auto Review needs you, you see an approval card first.

64* Email from a routine, an incoming message, or other work you didn't start

65 with that request waits as a draft until you press **Send**.

66* A forward, or an email with an attachment Auto Review can't fully read,

67 always waits for your OK.

45 68 

46Do not approve an action whose target or effect you cannot identify. Ask the Bot69Do not approve an action whose target or effect you cannot identify. Ask the Bot

47to explain it in plain language or produce a draft first.70to explain it in plain language or produce a draft first.

48 71 

72### If you don't answer

73 

74When the work started from a chat message, the card waits for an answer and

75doesn't expire on a timer. When a routine, an incoming message, or other

76background work raised the card, it expires after 30 minutes. If you send a new

77message instead of answering, any open card in that chat closes, and changing

78your Auto Review settings also closes open cards.

79 

80A closed card shows **Expired** and says the Bot didn't do the action. If the

81card offered a rule, you can still press **Always allow next time**; the Bot

82saves the rule and can go ahead the next time. To finish the task now, ask the

83Bot to try again.

84 

85### Shared Bots and group chats

86 

87On a [shared Bot](/grok-bot/shared-bots), each teammate answers cards for their

88own requests in their own chat with the Bot. In a Slack thread, the card has

89**Allow once**, **Deny**, and **View details**, and only the person who asked

90can answer. In a group chat, only the person whose message the Bot is answering

91can approve; everyone else sees who the card is waiting on, and group chat cards

92don't offer **Always allow**.

93 

94An approval card asks whether the Bot may take an action. A [Secure

95Form](/grok-bot/vault#secure-forms) collects a password, key, or other secret,

96and a connect card asks you to sign in to an [app](/grok-bot/computer-and-apps#connect-an-app)

97so the Bot can use it.

98 

49## Configure Auto Review99## Configure Auto Review

50 100 

51With Auto Review on, Grok Bot evaluates tool calls and computer actions before101Auto Review is on by default. For each action, it either lets the action run or

52they run. Open **Settings → General → Auto-review** to add rules.102has the Bot ask you first, and your Custom Rules can change that choice for the

103actions you care about. Built-in safety checks always apply, whatever your rules

104say.

105 

106The **Auto-review** switch is in **Settings → General**, under **Bot**; on iPhone

107and Android, it's in the **Bot** group of **Settings**. With Auto Review off,

108the Bot runs actions without checking them first, and your Custom Rules are

109hidden and not used but kept; turn it back on to use them again.

110 

111While Auto Review is on, **Custom Rules** appears under the switch on desktop;

112on the phone, tap **Custom Rules** in the **Bot** group. To add a rule:

113 

1141. Under **When Grok Bot wants to:**, describe one action in plain words, like

115 “reply to emails for me.”

1162. Under **It should:**, choose **Allow automatically** or **Ask first**.

1173. Press **Add Rule**.

118 

119On desktop, use the edit button next to a rule, make your change, and press

120**Save Rule**, or press **Cancel** to keep it as it was; use the delete button to

121remove it. On the phone, tap a rule to open it, then press **Save Rule** or

122**Delete Rule**.

53 123 

54* **Ask first** rules always stop matching actions for you.124* **Ask first** rules always stop matching actions for you.

55* **Allow automatically** rules let matching actions proceed only when the125* **Allow automatically** rules let matching actions proceed only when the

56 automated review does not identify another reason to stop.126 automated review does not identify another reason to stop.

57* If both kinds of rule match, **Ask first** wins.127* If both kinds of rule match, **Ask first** wins.

58 128 

59If your team admin enforces Auto Review, the same table also shows locked team129You can have up to 20 **Allow automatically** rules and up to 20 **Ask first**

60rules that you cannot edit or delete. Your own rules apply on top and can only130rules, and each rule can be up to 1,000 characters. If you already have 20 Allow

61make behavior stricter. See131rules, **Always allow** on a card removes your oldest Allow rule to make room

132and tells you which rule it removed.

133 

134If your admin requires Auto Review, the switch stays on and shows **Required by

135your admin. You can't turn this off.** Team rules appear in the same table with

136**Required by your admin. You can't edit or delete this rule.** Team rules always

137apply; your own rules apply only to you, on top of the team's, and can only make

138behavior stricter. Your team can also share rules that apply to your Bots

139instead of your own rules; built-in safety checks still apply. See

62[Auto-review rules](/grok-bot/teams-and-enterprises#auto-review-rules).140[Auto-review rules](/grok-bot/teams-and-enterprises#auto-review-rules).

63 141 

64Write narrow rules around a known action and scope:142Write one short, narrow rule for each action, around a known action and scope:

65 143 

66* Ask first before sending any external email.144* Ask first before sending any external email.

67* Ask first before changing a production dashboard.145* Ask first before changing a production dashboard.


74Personal Auto-review rules are saved to your account, so they apply from every152Personal Auto-review rules are saved to your account, so they apply from every

75desktop and the mobile app.153desktop and the mobile app.

76 154 

77## Enter passwords and verification codes yourself155## Keep passwords and payment details out of the chat

78 156 

79For passwords, passkeys, two-factor codes, CAPTCHAs, and payment confirmations,157Bots sign in and check out without seeing secret values. A Bot uses a login

80the Bot should hand you control of the computer.158saved in [Vault](/grok-bot/vault) first, then a connected password manager such

159as 1Password, then asks you with a Secure Form. Values from Vault and Secure

160Forms are filled into the page without being shown to the model.

81 161 

821. Choose **Take over** on the request in the conversation, or open the162When a form can't do the step, such as single sign-on, a passkey, a CAPTCHA, an

83 computer and choose **Take control**.163approval on another device, or a bank card verification, the Bot hands you the

164computer:

165 

1661. Choose **Take over** on the request in the conversation, or open the computer

167 and choose **Take control**.

842. Complete the sensitive step.1682. Complete the sensitive step.

853. Choose **I'm done**, then tell the Bot to continue.1693. Choose **I'm done**, then tell the Bot to continue.

86 170 

87Do not send a password or one-time code in ordinary chat.171Do not send a password, one-time code, or API key in ordinary chat. For an API

88 172key or another secret, enter it in the secure secret card when the Bot asks; the

89If the Bot presents a secure secret request for a supported connection, enter

90the value in that request. It is not a general-purpose password manager. The

91value is masked, excluded from the transcript, and not shown to the model.173value is masked, excluded from the transcript, and not shown to the model.

92 174 

93When a web page needs you to type something yourself, such as a login, a175A card saved in Vault fills in at checkout without a separate approval each

94checkout address, or a phone number, the Bot can show a form in the chat, one176time. If you want to approve every payment, don't save the card: leave

95form per step, and fill your answers into the page for you.177**Securely save to Bot's vault** unchecked when you enter it in a Secure Form,

178or remove it in **Settings → Vault**.

96 179 

97If you sign in with a hardware security key, such as a YubiKey, the Bot's180If you sign in with a hardware security key, such as a YubiKey, the Bot's

98browser can use a key plugged into your desktop while **Use hardware security181browser can use a key plugged into your desktop while **Use hardware security


116team's applies. These settings do not prevent the Bot from using its cloud199team's applies. These settings do not prevent the Bot from using its cloud

117computer.200computer.

118 201 

202Your team's cap also applies when a Bot uses apps on your phone. See

203[Let a Bot use your phone's apps](/grok-bot/mobile#let-a-bot-use-your-phones-apps).

204 

119The first time a Bot asks to run a command on your computer, the conversation205The first time a Bot asks to run a command on your computer, the conversation

120shows **Allow Grok Bot and all Bots to run commands on your local computer?**206shows **Allow Grok Bot and all Bots to run commands on your local computer?**

121with **Always allow**, **Allow once**, **Never**, and **Deny once** (Esc).207with **Always allow**, **Allow once**, **Never**, and **Deny once** (Esc).


146URLs in a Bot you share. See [Share a Bot](/grok-bot/bots#share-a-bot) and the232URLs in a Bot you share. See [Share a Bot](/grok-bot/bots#share-a-bot) and the

147[third-party bot terms](https://x.ai/legal/bot-sharing-terms).233[third-party bot terms](https://x.ai/legal/bot-sharing-terms).

148 234 

235A [shared Bot](/grok-bot/shared-bots) is different: teammates chat with the same

236Bot, and the apps, secrets, skills, and files its owner adds work in every

237teammate's chat. Only add keys and files you're happy for everyone you share it

238with to use.

239 

149## Cursor account and data settings240## Cursor account and data settings

150 241 

151Grok Bot uses Cursor authentication and account data settings.242Grok Bot uses Cursor authentication and account data settings.


185* Review installed connectors and active routines regularly.276* Review installed connectors and active routines regularly.

186* Pause a routine when its source system or expected workflow changes.277* Pause a routine when its source system or expected workflow changes.

187* Preserve source links and an action log for important decisions.278* Preserve source links and an action log for important decisions.

188 

189For information on using Grok Bot in X Chat, see

190[Using Grok Bot in X Chat](https://help.x.com/using-x/about-grok#using-grok-bot-in-x-chat).

bots.md +188 −60

Details

15* Approval boundary15* Approval boundary

16* Recurring schedule16* Recurring schedule

17 17 

18Good jobs include **Talent Scout**, **Expense Manager**, and **Bug18Jobs like **Talent Scout**, **Expense Manager**, and **Bug Reproduction** give a

19Reproduction**. A job such as **General Helper** gives the Bot less guidance and19Bot guidance and make its saved context reusable; a **General Helper** does

20makes its saved context harder to reuse.20neither.

21 21 

22Describe the role in operational terms:22Describe the role in operational terms:

23 23 


28 28 

29## Create a Bot29## Create a Bot

30 30 

311. Choose **New chat** (the **+** button) in the sidebar or press `Cmd/Ctrl+N`.311. Choose **New Bot** (the **+** button) at the top of the sidebar, or press

322. In **New chat**, select **Create new Bot**, or type a name and choose32 `Cmd/Ctrl+N`. On a team, the **+** button opens a menu; choose **Create a

33 **Create “name” Bot**.33 Bot**.

343. Grok Bot creates and opens a Bot named **New Bot**.342. In **Create New Bot**, type a name, pick a shape and color for its picture,

35 and choose **Create**.

363. Grok Bot opens a chat with the new Bot.

354. In your first message, give the Bot its job, sources, and approval374. In your first message, give the Bot its job, sources, and approval

36 boundaries, and ask it to remember them. Send a real first task with a38 boundaries, and ask it to remember them. Send a real first task with a

37 clear finish line; see [use cases](/grok-bot/use-cases) for starter prompts.39 clear finish line; see [use cases](/grok-bot/use-cases) for starter prompts.

385. To rename the Bot, add a label, or change its picture, click the Bot's name405. To rename the Bot, add a label, or change its picture, click the Bot's name

39 at the top of the chat to open its details. See [Change a Bot's name,41 at the top of the chat to open its details. See [Change a Bot's name,

40 picture, and what it does](https://cursor.com/help/grok-bot/edit-bot).42 picture, and label](#change-a-bots-name-picture-and-label).

41 43 

42Your existing Bots can also suggest or create a focused Bot when a job should44Your existing Bots can also suggest or create a focused Bot when a job should

43have a long-lived owner. Ask before creating several Bots if you want to keep45have a long-lived owner. Ask before creating several Bots if you want to keep

44the roster small.46the roster small.

45 47 

48## Your primary Bot

49 

50Your primary Bot is your main point of contact. It checks in with you on its

51own and coordinates work with your other Bots.

52 

53If you don't have a primary Bot, Grok Bot shows **Introducing your primary

54Bot**. Choose **Create primary Bot** to add one, or choose **Choose an existing

55Bot**, select one of your Bots, and choose **Confirm**.

56 

57To pick a different one later, right-click your primary Bot in the sidebar and

58choose **Replace with different Bot**. On iPhone and Android, use **Replace

59Primary Bot…** in the Bot's menu. A [shared Bot](/grok-bot/shared-bots) can't

60be your primary Bot.

61 

46## Edit a Bot62## Edit a Bot

47 63 

48When you discover a durable preference, boundary, or responsibility that should64When you discover a durable preference, boundary, or responsibility that should


53 approval.”69 approval.”

54* **Task:** “Draft follow-ups for these twelve accounts.”70* **Task:** “Draft follow-ups for these twelve accounts.”

55 71 

56A [Team Bot](/grok-bot/team-bots) also has a description, which its owner or a72The Bot keeps lasting rules in its memory. Personal Bots no longer have a

57manager edits under **About** in the Bot's details.73description or a **Bot settings** page; to change what a Bot does, tell it in

74chat. A [shared Bot](/grok-bot/shared-bots) still has a description, which its

75owner or a Manager edits under **About** in the Bot's details.

76 

77### Change a Bot's name, picture, and label

78 

79Each Bot has its own name, picture, and label. Only the Bot's owner can change

80these; **Rename Bot** does not appear for a Bot you don't own.

81 

82To rename a Bot on desktop, right-click it in the sidebar and choose **Rename

83Bot**, or double-click its name in the sidebar. Type the new name and press

84Enter. If the sidebar is collapsed to icons, expand it first. You can also click

85the Bot's name at the top of the chat to open its details, then click the name

86to edit it. The label under the name works the same way; it shows **Add a

87label** when the Bot doesn't have one.

88 

89To change the picture on desktop, open the Bot's details and click its picture,

90then choose a tab:

91 

92* **Bot** changes the look of the Bot's character.

93* **Generate** makes a picture from a short description. Describe the picture,

94 choose **Generate**, then choose **Set avatar**.

95* **Upload** uses your own image. Drag in an image or choose **Browse files**,

96 adjust it, then choose **Set avatar**. The image must be smaller than 25 MB.

58 97 

59## Pin or hide a Bot98On the phone, tap the Bot's name at the top of the chat to open its profile and

99tap **Edit**. Change the **Name** or the **Title** (the phone's name for the

100label) and tap **Done**. To change the picture, tap the picture or **Avatar**

101and choose **Shape**, **Generate**, or **Upload**. **Upload** offers **Choose

102from Photos** or **Take Photo**, then lets you crop the image; images can be up

103to 25 MB.

104 

105## Organize your roster

60 106 

61* **Pin** active Bots to keep them at the top of the sidebar.107* **Pin** active Bots to keep them at the top of the sidebar.

62* Group Bots by project, client, or business with sections: right-click a Bot108* Group Bots by project, client, or business with sections: right-click a Bot

63 and choose **Move to new section**, or **Move to** once you have sections.109 and choose **Move to new section**, or **Move to** once you have sections.

64 Sections sync between desktop and iOS.110 Sections sync between desktop and iOS.

65* **Hide from sidebar** removes a Bot from the main list without deleting its111* **Hide from sidebar** removes a Bot from the main list without deleting its

66 work.112 work or pausing its routines. Hidden Bots stay active and keep their history.

67* Open **Hidden Bots** at the bottom of the sidebar and choose **Show in113* To restore a hidden Bot, open **Hidden Bots** at the bottom of the sidebar and

68 sidebar** from the Bot's menu. On iPhone and Android, choose **Unhide** in114 choose **Show in sidebar** from the Bot's menu. On iPhone and Android, choose

69 the hidden Bots list; when every Bot is hidden, the home screen shows **Show115 **Unhide** in the hidden Bots list; when every Bot is hidden, the home screen

70 Hidden Bots**.116 shows **Show Hidden Bots**.

71 

72Hiding does not pause the Bot or its routines.

73 

74## Duplicate a Bot

75 

76On iPhone, duplicate a Bot when you want the same role as a starting point for

77a different scope—for example, one Account Health Bot per region.

78 117 

79The copy is named "`<name>` copy" and carries the profile, settings, enabled118On iPhone, **Duplicate** a Bot to reuse a role for a different scope, like one

80skills, routines, and avatar. It does not copy conversation history, learned119account-health Bot per region. The copy carries the profile, settings, enabled

81memory, or chat attachments. Rename it and provide the new scope before120skills, routines, and avatar, but not conversation history, learned memory, or

82assigning work.121attachments, so rename it and give it the new scope before assigning work.

83 122 

84## Share a Bot123## Share a Bot

85 124 

86Share a template when someone else should start from the same Bot.125Share a template when someone else should start from the same Bot.

87 126 

881. Open the **Share menu** and choose **Create template**. The Bot builds1271. Click the Bot's name at the top of the chat to open its details, choose

89 the template; when it is ready, **Copy link**, **View template details**,128 **Share**, then choose **Create a copy**. The Bot builds a template and posts

90 and **Update template** appear.129 it in the chat.

912. Choose who can open the link: **Public link** or **Team-only**. Accounts on1302. Choose **Publish** on the template card, then **Copy link**.

92 an Enterprise plan default to **Team-only**; other accounts default to a1313. Send the link. The recipient opens a preview on [x.ai](https://x.ai) and can

93 public link.132 choose **Add to Grok Bot**. They need the Grok Bot app to finish adding it.

943. Send the link. The recipient opens a preview on133 

95 [x.ai](https://x.ai) and can choose **Add to Grok Bot**. They need the Grok134On iPhone and Android, open the Bot's menu and choose **Share as Template**.

96 Bot app to finish adding it.135 

97 136After you publish, the same **Share** menu offers **View template details**,

98A public link can be opened by anyone who has it and shows the Bot's shared137**Update template** to push your latest changes to the shared copy, and

99configuration, including its identity, description, skills, and routines; a138**Delete Template** to turn off the link.

100Team-only link opens only for members of your team. Remove API keys, internal139 

101URLs, customer data, and anything else you would not put in a public document140A new template link is public. If your team allows only team-only sharing or

102before you share.141has turned template sharing off, the app doesn't offer **Create a copy**, and

103 142publishing a template shows `Your team doesn't allow public templates` or

104Adding a shared Bot creates a copy on the recipient's account. It does not give143`Template sharing is turned off`. Enterprise teams start with template sharing

105them your computer, logins, or conversation history. To give the team one Bot144limited to the team; an admin can change it under

106they all talk to, publish a [Team Bot](/grok-bot/team-bots).145[Public template sharing](/grok-bot/teams-and-enterprises#public-template-sharing).

107 146 

108Shared Bots are created by other users, not by . Adding one accepts147A public link can be opened by anyone who has it and exposes the Bot's shared

109the [third-party bot terms](https://x.ai/legal/bot-sharing-terms).148configuration: its identity, description, skills, and routines. A team-only

149link opens only for members of your team. Remove API keys, internal URLs,

150customer data, and anything else you would not put in a public document before

151you share.

152 

153Adding a shared template creates a copy on the recipient's account. They never

154get your computer, logins, or conversation history. To give your team one Bot

155to chat with instead of a copy each, [share the Bot

156itself](/grok-bot/shared-bots).

157 

158Shared templates are created by other users, not by Grok Bot. Adding one

159accepts the [third-party bot terms](https://x.ai/legal/bot-sharing-terms) shown

160at that point.

110 161 

111On the Teams plan and the Enterprise plan, admins control whether members can162On the Teams plan and the Enterprise plan, admins control whether members can

112publish Bot templates publicly. See [Public template163publish Bot templates publicly. See [Public template

113sharing](/grok-bot/teams-and-enterprises#public-template-sharing).164sharing](/grok-bot/teams-and-enterprises#public-template-sharing).

114 165 

115## Add a Bot from Marketplace166## Add a Bot from a template

116 167 

117**Marketplace** in the sidebar also lists Bots that you can add. Choose **Add**168To browse Bot templates, open **Connect apps** in the sidebar and choose

118on a Bot, or open it and choose **Import Bot**, to create your own copy from169**Bot templates**. The gallery opens on x.ai in your browser. Open a template

119its template.170link and choose **Import Bot** to add your own copy of that Bot.

120 171 

121## Delete a Bot172## Delete a Bot

122 173 

123Deleting a Bot removes its active profile, conversation, and routines from Grok174To delete a Bot, right-click it in the sidebar and choose **Delete**. This

124Bot. Shared computer files and sign-ins are not isolated by Bot and may remain175erases its profile, conversations, memory, routines, and attachments, including

125on the computer. Backend retention follows the applicable Cursor terms.176the shared facts it saved for your other Bots. It can't be undone. Files and

177sign-ins on the shared computer aren't isolated per Bot and can remain there;

178clean them up separately. Backend retention follows the applicable Cursor terms.

126 179 

127If you may need the work later, hide the Bot instead.180If you may need the work later, or want to keep the Bot's memory, choose **Hide

181from sidebar** instead.

128 182 

129## What a Bot remembers183## What a Bot remembers

130 184 

131A Bot can retain stable working preferences, important facts, and summaries185A Bot retains stable preferences, important facts, and summaries from its work,

132from its work. This helps it keep a role over time without replaying every prior186which lets it keep a role over time without replaying every prior message. It

133message.187saves lasting things, such as:

188 

189* How you like to work, and your preferences

190* Rules you ask it to keep, like “Always ask before you send an email.”

191* Facts about you, like your name and time zone

192* A dated log of what it has worked on with you

193 

194Logins, cards, and contact info, like addresses and phone numbers, belong in

195[Vault](/grok-bot/vault), not in memory.

196 

197### When a Bot saves something

198 

199A Bot decides on its own when something is worth keeping. It doesn't ask first.

200It often mentions a save in its reply, but not every save shows up in the chat.

201To make sure it keeps something, ask it to remember, for example: “Remember that

202I'm out every Friday.”

203 

204### Across chats, Bots, and calls

205 

206What a Bot saves in one chat, it remembers in all your chats with it. Each Bot

207has its own memory, but a few facts about you, such as your name and time zone,

208are shared by all your Bots. When one Bot learns one of these, your other Bots

209know it too.

210 

211In a [voice chat](/grok-bot/chat-and-collaboration#start-a-voice-chat), a Bot

212can draw on your earlier calls and your recent chat with it. After you hang up,

213you can ask it about the call in chat.

214 

215In a [group chat](/grok-bot/chat-and-collaboration#start-a-group-chat), your

216Bot can use what you told it in your private chat. If something should stay out

217of a group chat, tell your Bot. Each Bot in a group keeps its own memory; your

218Bot's memory isn't shared with the other Bots there, but everyone in the group

219can read what your Bot says.

220 

221### See, correct, or remove a memory

222 

223There is no memory screen for a personal Bot. Ask in chat instead:

224 

225* To see it: “What do you remember about me?”

226* To correct it: “That's out of date. I moved to Denver.”

227* To remove it: “Forget that I'm on the launch team.”

228 

229If a fact that all your Bots share is wrong, tell any of your Bots the right

230version. To remove a shared fact completely, ask the Bot that saved it.

231 

232### What resets or deletes memory

233 

234| What you do | What happens to memory |

235| -------------------- | --------------------------------- |

236| Reset a conversation | Memory is kept. |

237| Delete a Bot | That Bot's memory is deleted. |

238| Delete your account | All your Bots' memory is deleted. |

239 

240When a message is blocked, the notice can offer **Reset**. If you choose it, you

241see **Reset this conversation?** The conversation history starts over, and the

242Bot's memory, files, routines, and settings are kept.

243 

244### Who can see or change memory

245 

246A personal Bot's memory is yours, and only you can change it. A [shared

247Bot](/grok-bot/shared-bots) can save things it learns for the whole team, and

248it tells you when it does. It doesn't save anything about you personally for

249the team; what it remembers about working with you stays between you and the

250Bot. A teammate's shared Bot doesn't get the facts your own Bots share about

251you.

252 

253### Import memory from another assistant

254 

255To bring over what another AI assistant knows about you, open Settings →

256**General** and choose **Start Import** under **Import**. Copy the prompt into

257a chat with your other assistant, paste its answer into the second box, and

258choose **Add to Memory**. Grok Bot sends it to your

259[primary Bot](#your-primary-bot) and opens that chat.

260 

261### Memory is not a source of truth

134 262 

135Memory is not a substitute for an authoritative source:263Memory is not a substitute for an authoritative source:

136 264 

Details

3# Message and collaborate3# Message and collaborate

4 4 

5Grok Bot is designed to feel like messaging a teammate. Keep requests natural,5Grok Bot is designed to feel like messaging a teammate. Keep requests natural,

6but make the outcome and decision boundary explicit.6but make the outcome and the decision boundary explicit: what the Bot may

7change, and where it must stop for you.

7 8 

8## Message a Bot9## Message a Bot

9 10 


14* Dictate into the composer15* Dictate into the composer

15* Start a voice chat16* Start a voice chat

16* Play a voice memo a Bot sent17* Play a voice memo a Bot sent

17* Reference a saved skill with `/`18* Ask for a saved [skill](/grok-bot/skills-routines-and-automations) by name

18* Mention a Bot, group, routine, or app with `@`19* Mention a Bot, group, routine, or app with `@`

19* Reply to a specific message20* Reply to a specific message

20* React to a message21* React to a message


25 26 

26### Dictate a message27### Dictate a message

27 28 

29Voice typing turns your speech into text in the composer. You read it, edit it,

30and send it like any other message, and the Bot replies in text.

31 

28On desktop, choose **Start voice input** in the composer, or press `Cmd/Ctrl+D`32On desktop, choose **Start voice input** in the composer, or press `Cmd/Ctrl+D`

29while the prompt is focused. Speak, then stop; the app types what you said33while the prompt is focused. You can also hold the keys while you talk.

30into the composer so you can edit it before you send.

31 34 

32On iPhone and Android, use **Start dictation** in the composer. See35On iPhone and Android, use **Start dictation** in the composer. Stop dictation

33[Grok Bot for Mobile](/grok-bot/mobile).36before you start a voice chat. See [Grok Bot for Mobile](/grok-bot/mobile).

34 37 

35### Play a voice memo38### Play a voice memo

36 39 


40 43 

41### Start a voice chat44### Start a voice chat

42 45 

43Choose **Start voice chat** when the composer is empty to talk with the Bot46A voice chat is a live spoken conversation with one Bot: the Bot answers out

44live. While you are on the line, the app shows **Voice chat**. On desktop the47loud and keeps listening until you hang up. Voice chat works in the desktop app

45sidebar can show **Voice chat in progress**. When the call ends, the48and the phone app.

46conversation can include a **Voice chat** card.49 

501. Open the chat with the Bot and leave the composer empty.

512. Choose **Start voice chat**, the waveform button in the composer.

523. Allow microphone access if your computer or phone asks.

53 

54The call shows **Connecting…** on desktop or **Calling…** on the phone, then the

55Bot starts talking. **Start voice chat** shows only when the composer is empty;

56if the composer is empty and you still don't see it, update Grok Bot. While you

57are on the line, the app shows **Voice chat**, and on desktop the sidebar can

58show **Voice chat in progress**.

59 

60During a call you can **Mute** or **Unmute** your microphone, **Hang up**, or

61choose **Show transcript** to read along. In a call with your own Bot, **Show

62settings** changes the **Voice**, the **Speed**, and the **Language**;

63**Auto-detect** picks the language from what you say. You can open other chats

64while the call runs; on desktop, choose **Return to the voice chat** to go back.

65Only one voice chat runs at a time, so starting another asks **End the current

66voice chat?**; choose **End and Chat** to switch.

67 

68Voice chat works with one Bot at a time, not in group chats; open that Bot's

69own chat to start a call. On desktop you can also voice chat with a teammate's

70[shared Bot](/grok-bot/shared-bots) from your own chat with it.

71 

72If the connection drops, Grok Bot tries to reconnect on its own first, so a

73short drop usually picks back up without you doing anything. If it can't, the

74call ends with **Voice chat failed**, and the notice may say **Connection

75lost**, **No connection**, or **The call ended unexpectedly**. Choose

76**Dismiss**, check your internet connection, and choose **Start voice chat**

77again.

78 

79If Grok Bot says microphone access was denied, allow it to use the microphone in

80your system settings. If it says no microphone was found, connect one and try

81again. To choose which microphone the desktop app uses, open **Settings** and

82pick one under **Microphone**.

83 

84When the call ends, the conversation includes a **Voice chat** card with the

85call's length; open it to read the full transcript. If the call left work to

86do, the Bot may follow up in the chat with next steps or results. Grok Bot may

87ask **How was the call?**; choose **Good** or **Bad** to send feedback.

47 88 

48### Review a draft before it is sent89### Review a draft before it is sent

49 90 


52or **Send message** for a Slack draft in the desktop app. Choose **Discard** to93or **Send message** for a Slack draft in the desktop app. Choose **Discard** to

53drop the draft.94drop the draft.

54 95 

96Bots draft outgoing messages for your review by default. A draft card shows

97**Needs approval**. If you'd rather have a Bot send without preparing drafts,

98open that menu on one of its drafts and choose **Disable drafts for Bot**. The

99Bot then sends directly, subject to your

100[Auto Review](/grok-bot/approvals-security-and-privacy#configure-auto-review)

101settings. The choice applies to that Bot only, and only its owner sees it; it

102isn't offered in group chats. Email from the Bot's [own

103address](/grok-bot/computer-and-apps#give-your-bots-an-email-address) that you

104didn't request in chat, such as email from a routine, always waits as a draft. To get

105drafts back, choose **Needs approval** on a draft card or ask the Bot. If the

106change doesn't save, the card shows `Couldn't save. Try again.`; choose

107**Retry**.

108 

55### Redirect work in progress109### Redirect work in progress

56 110 

57Send a new message when priorities change. A direct message from you takes111Send a new message when priorities change. A direct message from you takes


60Send a direct “Stop now” message when work should end immediately. This does not114Send a direct “Stop now” message when work should end immediately. This does not

61undo actions the Bot already completed.115undo actions the Bot already completed.

62 116 

117### Chat in X Chat

118 

119You can also chat with your Bots in X Chat, in the X app on iOS and Android and

120on x.com. They're the same Bots you use in the Grok Bot app. X Chat support is

121rolling out gradually, so it may not show up for you yet even if your plan

122includes it, and it needs the latest version of the X app.

123 

124You need a plan that includes Grok Bot. On [The X

125Subscription](/x-subscription/overview), that's **Premium**, **Super**, or

126**Ultra**; **Plus** doesn't include Grok Bot. Legacy Cursor plans and linked

127SuperGrok or X Premium+ accounts that include Grok Bot also work. See [Grok Bot

128on The X Subscription](/x-subscription/grok-bot).

129 

130Your Grok account also needs to be connected to a Cursor account. Connecting

131from X Chat works only for personal accounts. It isn't available when your

132email is on a domain your company manages, your Cursor account is on a team, or

133your Cursor account is on a [legacy request-based

134plan](https://cursor.com/docs/models-and-pricing#legacy-request-based-pricing).

135If a Cursor account already uses your email, you need to agree before it's

136connected.

137 

138| What's happening | What to do |

139| --- | --- |

140| Your plan doesn't include Grok Bot | Choose **Premium** or higher on The X Subscription. |

141| Your Cursor account, or its team, uses Privacy Mode (Legacy) | Switch your Cursor account to Privacy Mode. On a team, a team admin changes the team's privacy setting. |

142| Your Cursor account is on a legacy request-based plan | Grok Bot isn't available on legacy request-based plans. |

143| Your email is on a domain your company manages, or your Cursor account is on a team | Connecting from X Chat isn't available. Use Grok Bot in the Grok Bot app instead. |

144| Your Grok account's email isn't verified | Verify your email on Grok, then try again. |

145| More than one Cursor account uses your email | [Contact support](/grok-bot/troubleshooting) with the email address. |

146| You've used up your Grok Bot usage | See [How does Grok Bot usage work?](https://cursor.com/help/grok-bot/plans#how-does-grok-bot-usage-work) |

147| Your Bots don't show up in X Chat | Update the X app to the latest version, then quit and reopen it. |

148| You see a new Bot instead of your own, or tapping your Bot shows **Something went wrong** | Your X account may be connected to a different Grok account. Follow the steps below. |

149 

150X Chat uses the Grok account your X account is connected to. If you have more

151than one Grok account, that may not be the one you use with Grok Bot, and

152trying again doesn't help. To connect your X account to the Grok account you

153use with Grok Bot:

154 

1551. In a browser, sign in at [accounts.x.ai](https://accounts.x.ai) with the Grok

156 account you use with Grok Bot.

1572. In the same browser, sign in to [x.com](https://x.com) with your X account.

1583. Open [x.com/i/jf/grok/entry](https://x.com/i/jf/grok/entry). Choose to link

159 another account, then allow access for the Grok account you signed in with.

1604. Quit and reopen the X app, or reload x.com, and open your Bots again.

161 

162If that Grok account is already connected to a different X account, this

163doesn't work. If none of these match, [contact

164support](/grok-bot/troubleshooting) with your X handle and the email on your

165Grok account.

166 

63## Start a group chat167## Start a group chat

64 168 

65Use a group when several Bots need one shared outcome and visible handoffs.169Use a group when several Bots need one shared outcome and visible handoffs.

170You can also add a Bot a teammate [shared with you](/grok-bot/shared-bots), but

171not alongside Bots that run on your own computer.

66 172 

671. Choose **New chat** (the **+** button) in the sidebar.1731. Choose **New chat**, press `Cmd/Ctrl+Shift+N`, or open the command palette

682. In **New chat**, select two to six Bots.174 with `Cmd/Ctrl+K` and choose **New group chat**.

1752. In the **To:** field, add two to six Bots.

693. Open the group, then edit its generated name if needed.1763. Open the group, then edit its generated name if needed.

704. Describe the shared outcome and who owns the next step.1774. Describe the shared outcome and who owns the next step.

71 178 

72On iPhone or Android, use **+ → New Group Chat**. Group membership can be179On iPhone or Android, use **+ → New Group Chat**. Group membership can be

73edited later.180edited later.

74 181 

182To rename a group on desktop, right-click it in the sidebar and choose **Rename

183chat**, or click the group's name at the top of the chat and click the name in

184its details to edit it. On the phone, tap the group's name at the top of the

185chat, tap **Edit**, change the **Name**, and tap **Done**. To change what the

186group is for, tell the Bots in the group.

187 

188Group chats don't have the per-Bot **Notifications** switch. See [Control

189notifications](/grok-bot/settings-and-notifications#control-notifications).

190 

75### Direct a message191### Direct a message

76 192 

77* Write normally to let the participating Bots decide who should respond.193* Write normally to let the participating Bots decide who should respond.


81* Use `@everyone` sparingly for a group-wide update.197* Use `@everyone` sparingly for a group-wide update.

82 198 

83Bots can post into the group and pass work among themselves. A useful kickoff199Bots can post into the group and pass work among themselves. A useful kickoff

84looks like:200assigns one owner per stage:

85 201 

86> @Researcher gather the source material and link every claim. @Writer turn the202> @Researcher gather the source material and link every claim. @Writer turn the

87> findings into a launch draft. @Reviewer check the draft against the sources203> findings into a launch draft. @Reviewer check the draft against the sources


91include files, questions, and forms, as in a one-to-one conversation, and your207include files, questions, and forms, as in a one-to-one conversation, and your

92answer to a question or form goes back to the Bot that asked. Approval208answer to a question or form goes back to the Bot that asked. Approval

93requests, secret and login requests, and email or Slack drafts do not appear in209requests, secret and login requests, and email or Slack drafts do not appear in

94a group. Bot-to-group handoff messages are currently text-only, so a Bot should210a group. Bot-to-group handoff messages are text-only, so a Bot should send an

95send an image directly to another Bot when that teammate must inspect it.211image directly to another Bot when that teammate must inspect it.

212 

213### Keep replies in the group

214 

215When you write in a group chat, the Bots answer there. A Bot can also message

216you in its own chat, or message another Bot to hand off work; those messages

217show up in the Bots' own chats, not in the group.

218 

219To keep a Bot's replies in the group, tell it there: “Reply here in the group.

220Don't message me privately about this.” To make it a lasting rule, ask each Bot

221to remember it: “Remember: in group chats, reply in the group.”

222 

223### Stop Bots from messaging each other

224 

225There is no switch for this. Bots message each other to hand off work, and they

226follow your instructions about it.

227 

2281. Tell the Bots in the chat, for example: “Don't message other Bots. Ask me

229 first.”

2302. To keep the rule, ask each Bot to remember it.

2313. If a Bot keeps starting new work, open that Bot's chat and ask it to stop.

232 

233To quiet a helper Bot without deleting it, turn off its notifications or hide

234it. Every Bot reply counts toward your usage, including replies in a group and

235messages between Bots, so fewer Bots in a group means fewer replies.

96 236 

97## Let Bots hand work off237## Let Bots hand work off

98 238 


107* A blocker belongs to another role247* A blocker belongs to another role

108* A long-running job should continue without you coordinating every step248* A long-running job should continue without you coordinating every step

109 249 

110Ask for a single owner at each stage. Too many parallel handoffs can create250Ask for a single owner at each stage. Parallel handoffs create duplicate work

111duplicate work and noisy updates.251and noisy updates.

112 252 

113A handoff needs a Bot acting for one person. From the app or your own Slack DM,253A handoff needs a Bot acting for one person on that turn. Where you talk to it,

114any Bot can hand off work. From a Slack channel thread, only a254and whether it's a personal Bot or a [shared Bot](/grok-bot/shared-bots),

115[Team Bot](/grok-bot/team-bots) can, on behalf of the person who mentioned it.255decide this:

116See [Can a Bot message other Bots from256 

117Slack?](https://cursor.com/help/grok-bot/group-chats#can-a-bot-message-other-bots-from-slack)257| Bot | Where you ask | Can it message other Bots? | Acting for | Where the reply lands |

258| --- | --- | --- | --- | --- |

259| Personal Bot | The app, or your own Slack DM with it | Yes | You | The app chat, not Slack |

260| Personal Bot | A Slack channel thread | No | Nobody, the thread is shared | The Bot says it can't do that |

261| Shared Bot | A Slack channel thread or Slack DM | Yes, to that person's own Bots | The teammate who mentioned it | The same Slack thread |

262 

263To hand work between Bots from a Slack channel, share a Bot and add it to Slack.

264A shared Bot has its own Slack app and handle, and anyone in the channel can

265give it work. See [How do I add a shared Bot to

266Slack?](/grok-bot/shared-bots#how-do-i-add-a-shared-bot-to-slack)

118 267 

119## Use threads and reactions268## Use threads and reactions

120 269 


149 298 

150* Jump to / search palette: `Cmd/Ctrl+K`299* Jump to / search palette: `Cmd/Ctrl+K`

151* Search Bots: `Cmd/Ctrl+Shift+F`300* Search Bots: `Cmd/Ctrl+Shift+F`

152* New Bot / new chat: `Cmd/Ctrl+N`301* New Bot: `Cmd/Ctrl+N`

302* New group chat: `Cmd/Ctrl+Shift+N`

303* Show all keyboard shortcuts: `Cmd/Ctrl+/`

153* Find in this chat: `Cmd/Ctrl+F`304* Find in this chat: `Cmd/Ctrl+F`

154* Compact sidebar: `Cmd/Ctrl+B`305* Compact sidebar: `Cmd/Ctrl+B`

155* Focus prompt: `Cmd/Ctrl+I`306* Focus prompt: `Cmd/Ctrl+I`


173* Zoom in, out, or reset: `Cmd/Ctrl+=` / `Cmd/Ctrl+-` / `Cmd/Ctrl+0`324* Zoom in, out, or reset: `Cmd/Ctrl+=` / `Cmd/Ctrl+-` / `Cmd/Ctrl+0`

174* Fullscreen: `F11`; on macOS also `Control+Cmd+F`325* Fullscreen: `F11`; on macOS also `Control+Cmd+F`

175 326 

327To see every shortcut in the app, open the account menu and choose

328**Support → Keyboard shortcuts**, or press `Cmd/Ctrl+/`.

329 

176## Keep conversations effective330## Keep conversations effective

177 331 

178* Lead with the result you need, not a detailed imitation of every click.332* Lead with the result you need, not a detailed imitation of every click.

Details

2 2 

3# Use the computer and apps3# Use the computer and apps

4 4 

5Grok Bot works from a persistent cloud computer. It can use a browser, command5Your Bots work from a persistent cloud computer with a browser, command line,

6line, files, and connected tools without depending on your laptop remaining6and filesystem. Work continues while your laptop is closed, and files,

7open.7sign-ins, and browser sessions persist between tasks.

8 8 

9## One computer, shared by all your Bots9## One computer, shared by all your Bots

10 10 


31## Watch computer work31## Watch computer work

32 32 

33Click the computer preview in the right-hand panel of a conversation to open33Click the computer preview in the right-hand panel of a conversation to open

34the computer and view the shared desktop. The preview34the computer and watch clicks, typing, navigation, and current status.

35shows clicks, typing, navigation, and current status.

36 35 

37You can leave the preview while work continues. Closing the Grok Bot app or36You can leave the preview while work continues. Closing the Grok Bot app or

38your laptop does not stop cloud work.37your laptop does not stop cloud work.

39 38 

40## Take over for a sensitive step39## Take over for a sensitive step

41 40 

42The Bot may ask you to take over for:41To sign in, a Bot uses a login saved in [Vault](/grok-bot/vault) first, then a

43 42connected password manager such as [1Password](#connect-1password), then asks

44* A password or passkey43you with a Secure Form. Values from Vault and the Secure Form are filled into

45* Two-factor authentication44the page without the Bot seeing them. When a site emails a one-time code, the

46* A CAPTCHA45Bot can read it from a connected Gmail or Outlook account or from [its own

47* A payment or identity check46inbox](#give-your-bots-an-email-address). At checkout, it can use a card saved

47in Vault, a card you enter in a Secure Form, or a connected wallet such as Link

48or X Money; see [Pay for things](/grok-bot/vault#pay-for-things).

49 

50The Bot hands you the computer when a form can't do the step:

51 

52* Single sign-on or a passkey

53* A CAPTCHA it couldn't get past

54* An approval on another device or a QR code

55* A bank card verification

48* A site that explicitly requires a human56* A site that explicitly requires a human

49 57 

50Open the computer, take control, complete only the blocked step, and tell the58Open the computer, take control, complete only the blocked step, and tell the

51Bot to continue. The Bot doesn't type credentials and doesn't see your59Bot to continue. Never paste passwords or one-time codes into ordinary chat. For

52password. Avoid pasting passwords or one-time codes into chat.60an API key or other secret, enter it in the secure secret card when the Bot

53 61asks: the field is masked, and the value isn't written into the chat or shown to

54For a supported connection that presents a secure secret request, enter the62the Bot. See [API keys and other

55value there instead. The value is masked, is not added to the conversation, and63secrets](/grok-bot/vault#api-keys-and-other-secrets).

56is not shown to the model. See

57[Store secrets securely](https://cursor.com/help/grok-bot/secrets).

58 64 

59## Sign in once65## Sign in once

60 66 


63available to your other Bots.69available to your other Bots.

64 70 

65Some websites expire sessions, enforce short timeouts, or request verification71Some websites expire sessions, enforce short timeouts, or request verification

66again. Ask the Bot to pause and notify you rather than attempting to bypass the72again. Ask the Bot to pause and notify you rather than attempting to work around

67check.73the check.

68 74 

69## Connect an app75## Connect an app

70 76 

71Apps give a Bot a structured way to work with services like Gmail, Notion, and77Apps give a Bot a structured way to work with services like Gmail, Notion, and

72Slack. Apps are installed as plugins from **Connect apps**.78Slack, and are more reliable than clicking through a website when one exists.

79Use the browser for services without an app or for visual workflows an app does

80not expose. App connections belong to the same account you used to sign in to

81Grok Bot.

73 82 

741. Open **Connect apps** from the sidebar, or follow an in-chat **Connect**831. Open **Connect apps** from the sidebar, or follow an in-chat **Connect**

75 card.84 card. In the mobile app, tap your avatar on the top left and choose

762. Browse or search for the app.85 **Connect apps**.

773. Choose **Add**.862. Browse or search for the app, then add it.

784. Finish the provider login in your browser if requested.873. When Grok Bot asks you to **Authorize** or **Authenticate**, finish the

795. In chat, type `@` to attach the app to the task. Type `/` to reference a88 provider login in your browser.

80 saved skill.894. If sign-in doesn't finish, choose **Reconnect** on the app, or **Reopen** on

81 90 the in-chat card, to bring the sign-in page back.

82Setup steps and known issues are in915. Confirm the app appears under **Installed**.

83[Connect apps](https://cursor.com/help/grok-bot/connect-apps).92 

84 93In chat, type `@` to attach the app to the task.

85Prefer an app when one is available: it is often more reliable than clicking94 

86through a website. Use the browser for services without an app or for visual95**Added** means the app is installed, not that you are signed in. If the Bot

87workflows an app does not expose.96says an app is missing, open the app and choose **Authenticate** (**Authorize**

97on the phone) if it shows **Needs auth** or **Disconnected**.

98 

99You can also ask a Bot to do this for you, for example “Add the Linear app.”

100The Bot searches the catalog, installs the app on your account, and shows a

101**Connect** card when the app needs you to sign in. The app's tools are ready

102from your next message. A Bot can also add an MCP server that isn't in the

103catalog, by URL or by a command that runs on its computer; a server started by a

104command is available to your other Bots too. Adding a server on a private

105network, or one that uses a private certificate authority, asks for your

106approval first.

107 

108When a Bot removes an app for you, everything the app added goes with it and

109you are signed out, so reinstalling it means signing in again. Apps your team

110requires can't be removed.

88 111 

89* **Apps are account-wide.** A connected app is available to every Bot you run.112* **Apps are account-wide.** A connected app is available to every Bot you run.

90 A teammate's [Team Bot](/grok-bot/team-bots) asks before it uses your113 A teammate's [shared Bot](/grok-bot/shared-bots) asks before it uses your

91 accounts.114 accounts.

92* **App logins stay off the computer.** OAuth tokens are held on Cursor's115* **App logins stay off the computer.** OAuth tokens are held on Cursor's

93 connector backend, and the Bot invokes tools without receiving them.116 connector backend, and the Bot invokes tools without receiving them.

94* **Team policy applies.** An app blocked by your team's117* **Team policy applies.** An app blocked by your team's

95 [connector policy](/grok-bot/teams-and-enterprises#connector-policy) shows118 [connector policy](/grok-bot/teams-and-enterprises#connector-policy) shows

96 **Disabled by team admin**. Blocking an app doesn't block that service's119 **Disabled by team admin**; ask your admin to enable it. Blocking an app

97 website. Closing that second path takes **Network Controls**, which is120 doesn't block that service's website. Closing that second path takes

98 Enterprise only. See [Network policy](/grok-bot/security#network-policy).121 **Network Controls**, which is Enterprise only. See [Network

122 policy](/grok-bot/security#network-policy).

123 

124The **Email** app is different: it gives your Bots [their own email

125address](#give-your-bots-an-email-address) instead of connecting an account you

126already have.

127 

128### What a connected app can do

129 

130An app uses the account you authorize. It can do only what that account can

131already do in that service. It cannot raise your access, and it cannot change

132sharing.

133 

134* **Google Calendar:** the Bot can read calendars you can see, create and

135 update events, check free time, and respond to invitations on calendars you

136 can edit. It cannot change Google Meet settings, such as the waiting room or

137 host controls, and it cannot add a Zoom link, because Google's Zoom add-on

138 isn't available to the app. Put the Zoom link in the event location or

139 description yourself, or create the event in Calendar and ask the Bot to

140 update the other fields.

141* **Google Sheets:** the Bot can read and edit cells in spreadsheets the

142 connected Google account can edit. A file shared as Viewer stays view-only.

143 Finding and opening files uses the **Google Drive** app, which can search and

144 read files that account can open.

145* **Slack:** the app posts as the Slack user you connected, not as a separate

146 bot that has to be invited. It can post only in channels that user can post

147 in. To use another Slack workspace, connect that workspace. This is separate

148 from a Slack message that [starts a

149 routine](/grok-bot/skills-routines-and-automations#trigger-work-from-an-event).

150* **Gmail:** the app can search and read mail, draft and send, and apply labels

151 on the connected mailbox. Gmail connects one mailbox at a time; to use a

152 different one, disconnect the current mailbox and authorize the other.

153 Disconnect Gmail if a Bot should not use that mailbox. Some other apps, like

154 Notion, can connect a second account.

155* **X:** the X plugin needs X API credits on your X developer account.

156 

157### If Google says an admin needs to review Grok

158 

159A company Google account can stop the connection before Gmail, Calendar, Drive,

160Docs, Sheets, or Slides finishes signing in. Grok Bot signs in to Google as

161**Grok**, not Cursor. This is separate from the Cursor **Disabled by team

162admin** control.

163 

164If the Google page says **Your admin needs to review Grok**, Grok is not

165approved for that Workspace yet. Request access if that button is there, and

166wait for the admin to approve Grok before you try **Authorize** again. An IT

167admin approves **Grok** in the Google Admin console:

168 

1691. Open **Security**, then **Access and data control**, then **API controls**.

1702. Open **App access control**, then **Manage third-party app access**.

1713. Add the app named **Grok**. If name search does not find it, use the client

172 ID from the blocked page or the admin review email.

1734. Set Grok to **Trusted** for the people who use Grok Bot.

174 

175That approval covers the Google apps those people connect. It does not turn an

176app back on in Cursor.

177 

178If the page says **Access blocked**, Google refused the sign-in. A personal

179Gmail account does not need a company admin; a company account often hits this

180when Grok is not on the allowlist, or when the admin has blocked third-party

181apps. Ask the Google admin to trust **Grok** with the steps above. Changing

182browsers or connecting the app again does not clear a Google admin block. If the

183page still says access is blocked, [contact support](/grok-bot/troubleshooting)

184with the Google account email and a screenshot of the blocked page.

185 

186### Connect 1Password

187 

1881Password lets your Bots sign in to websites on their computer with logins from

189your 1Password account. You approve each login in 1Password, and 1Password fills

190it in; your Bots never see the values. The new 1Password integration is rolling

191out gradually. It works with personal and Family 1Password accounts and needs

1921Password 8.12.42 or later.

193 

1941. Choose **Connect apps** and open **1Password**, under **Password Managers**.

1952. On your computer, choose **Connect 1Password**.

1963. Your browser opens. Sign in to 1Password there and approve Grok Bot. Grok Bot

197 updates when you're done.

198 

199On the phone, open 1Password from the **Password Managers** shelf in **Connect

200apps**, or search for it, then approve the connection in 1Password. If your phone

201says **1Password can only be set up on a Mac**, the new integration hasn't

202reached your account yet; set it up from Grok Bot on your computer instead. To

203stop using 1Password, open it in **Connect apps** and choose **Disconnect**.

204 

205When a login isn't saved in Vault, the Bot sends a card in the chat that names

206the website:

207 

2081. Choose **Review in 1Password**. The 1Password app opens, or 1Password opens

209 in your browser if the app isn't installed on that computer.

2102. In 1Password, choose the exact logins to share and approve the request.

2113. 1Password fills the login in the Bot's browser.

212 

213A login you share stays available in later chats. If 1Password stops allowing

214it, the Bot asks again. 1Password does not fill payment cards, and your Bots

215still ask you to help with steps it can't fill, such as a passkey, single

216sign-on, or a CAPTCHA.

217 

2181Password only offers logins from your own Personal vault, called Private on

219Family accounts, not from shared vaults. Move or duplicate the login into that

220vault, then ask the Bot to try again. If no approval prompt shows up at all,

221update the 1Password app to 8.12.42 or later.

222 

223The new integration no longer uses a service account, so if you used 1Password

224with Grok Bot before, connect it again. Logins in the vault you shared with the

225old integration aren't available until you move them to your Personal or

226Private vault; the 1Password page in **Connect apps** tells you how many. On a

227Mac, you can choose **Move to Private** instead and approve in 1Password if it

228asks. The old vault stays in 1Password.

229 

230| Message | What to do |

231| --- | --- |

232| **1Password didn't finish connecting** | Start connecting again. On the phone, if you already have a 1Password account, choose **I already have 1Password** and sign in with it. |

233| **This 1Password account is already connected to another Grok Bot account** | Disconnect 1Password from the other Grok Bot account first, or connect a different 1Password account. |

234| **Reconnect required** | 1Password no longer accepts the connection. Choose **Reconnect**. |

235| **Sign in to the 1Password account you connected to Grok Bot, then try again** | Sign in to the account you connected, then ask the Bot to try again. |

236| **Access requests aren't turned on for your 1Password account** | Ask your 1Password administrator to turn on access requests. |

237| **This request already ended in 1Password** | Ask the Bot to try again. It sends a new request. |

238| **1Password could not be opened** | Open the 1Password app yourself to review the request. |

239| A message that asks you to revoke Grok Bot's access under **Integrations** in 1Password | Revoke Grok Bot's access under **Integrations** in 1Password, then connect 1Password again. |

240 

241### Known app issues

242 

243* **Zoom error 4700:** Zoom authorization from the Grok Bot desktop app

244 currently fails with error 4700 (Invalid redirect). There is no workaround

245 yet, and no change on your end resolves it.

246* **SharePoint AADSTS50011:** when a Cursor team admin connects SharePoint from

247 the dashboard **Integrations** page with **Application-level permissions**,

248 Microsoft shows a redirect URI mismatch before the consent prompt. Nothing in

249 your tenant causes this. Connect with **Delegated permissions** instead:

250 choose **Connect team** (or **Reconnect**) on the SharePoint card, pick

251 **Delegated permissions**, enter your Microsoft tenant ID, and sign in with

252 Microsoft. Most work or school tenants need a Microsoft admin to consent once

253 to Sites.Read.All. Each member then signs in with their own Microsoft account

254 the first time a Bot uses SharePoint and sees only the sites their account

255 can already open. If members see “This team does not have the SharePoint

256 integration”, the admin needs to finish the Delegated sign-in.

257 

258For more setup help, see [Connect

259apps](https://cursor.com/help/grok-bot/connect-apps).

260 

261## Give your Bots an email address

262 

263You can claim one email address at `mail.grokbot.com`, such as

264`yourname@mail.grokbot.com`, for your Bots to use. Your Bots can then receive,

265read, search, and send email from it. With an address, a Bot can:

266 

267* Sign up for services with its own address, and pick up the verification code

268 or link with your OK

269* Collect receipts, newsletters, and reports, and summarize them for you

270* Draft email for you, such as a digest or an update, and draft replies

271* Forward an email from its inbox with the original formatting, images, and

272 attachments, which needs Grok Bot 0.75.2 or later

273* Run a routine when email arrives, optionally only from specific senders

274 

275To claim an address, ask a Bot, for example “Get yourself an email address.” It

276asks what name you want, checks that the name is free, and shows an approval

277card; nothing is claimed until you approve. You can also open **Connect apps**,

278choose **Email**, type a name in **Choose a name** under **Email address**, and

279choose **Create address**. On iPhone and Android, open **Settings → Connect apps

280→ Email**. After you claim it, the app shows your address with a button to copy

281it.

282 

283Names use lowercase letters, digits, dots, hyphens, and underscores, start and

284end with a letter or digit, and are at most 64 characters. Reserved words such

285as support, admin, billing, security, help, info, team, cursor, grok, and xai

286aren't allowed.

287 

288* **One address, for good.** You get one address, and you can't rename or

289 delete it. Addresses are never reissued, even after the account that claimed

290 one is deleted.

291* **Yours, not one Bot's.** All your Bots can use the address in your own chats

292 and routines. It isn't used in Slack threads or in chats where someone else is

293 talking to the Bot, and a [shared Bot](/grok-bot/shared-bots) doesn't have a

294 team address.

295* **Reading mail.** Anyone can send mail to the address. Mail that fails the

296 spam or virus scan is kept without its body or attachments, and it never

297 starts a routine. There's no inbox view and no new-mail notifications, so ask

298 a Bot, for example “What arrived in your inbox today?” Mail that arrived in

299 the last minute may not show up in a search yet. Each incoming message can

300 include up to 10 attachments, up to 10 MB each and 25 MB in total; attachments

301 beyond those limits are skipped.

302* **Acting on mail.** New mail doesn't start a chat or wake a Bot on its own. To

303 act on it, set up a

304 [routine](/grok-bot/skills-routines-and-automations#trigger-work-from-an-event)

305 that watches for mail from anyone, from specific addresses, or from a whole

306 domain such as `*@example.com`. By default, the routine only runs for mail

307 from senders that pass standard email authentication checks, and routines

308 can't filter by subject.

309* **Sending mail.** When you ask a Bot in chat to send an email, it goes out

310 once [Auto Review](/grok-bot/approvals-security-and-privacy#configure-auto-review)

311 allows it; if Auto Review needs you, you see an approval card first. Email

312 from a routine, or from any other turn you didn't start with that request,

313 waits as a draft until you press **Send**, and there's no option for

314 unattended sending. If you've also connected Gmail or Outlook, the Bot asks

315 which account to send from when either could work.

316* **Safety.** A Bot treats email from other people as information, not

317 instructions. Each message it reads is marked as from you or from someone

318 else, and instructions inside an email never count as your permission to send

319 or act.

320 

321Sending limits:

322 

323* Up to 50 recipients per email, across To, Cc, and Bcc

324* Up to 10 attachments, up to 10 MB each and 25 MB in total; executable files

325 can't be attached

326* Newsletters and first-contact emails go to one recipient per message and

327 include a one-click unsubscribe link

328* If a message bounces, or someone unsubscribes or marks it as spam, the Bot

329 stops emailing that address and tells you who it skipped

330* There are also limits on how many new people a Bot can email, to protect the

331 address from being flagged as spam

332 

333If you delete your Grok Bot account, your mail and attachments are deleted, and

334the address is retired.

335 

336On a Cursor team, agent email is off by default; an admin turns on [Agent

337Email](/grok-bot/teams-and-enterprises#agent-email) before members can claim an

338address. If an admin turns it off later, Bots lose their email tools and email

339routines stop running, but mail sent to existing addresses is still received and

340kept, and members keep their addresses.

341 

342| What you see | What to do |

343| --- | --- |

344| **Agent email is not enabled for this account.** | Agent email isn't available on your account yet. |

345| **Your team admin has turned off Grok Bot agent email, so this account cannot claim or use an agent email address.** | Ask your team admin to turn on **Agent Email**. |

346| **That address is taken, and addresses are never reissued, so retrying it cannot succeed. Choose a different name.** | Choose a different name. |

347| A message about allowed characters, length, or a reserved word | Pick a name that follows the name rules above. |

348| **You can have one agent email address.** | You already have an address. Ask your Bot what it is, or open the **Email** app. |

349| **Couldn't create your email address. Try again.** (phone) | Check the name rules, or try on desktop, which shows the exact reason. |

350| **Too many email addresses checked in the last minute.** | Wait a minute, then try again. |

99 351 

100## Search and read X352## Search and read X

101 353 


110 362 

111## Work with files363## Work with files

112 364 

113The computer has a shared workspace at `/workspace`. Ask Bots to keep durable365The computer has a shared workspace at `/workspace`. Keep durable project files

114project files there and use clear project folders.366there in clear project folders.

115 367 

116Files, browser state, and supported sign-ins are designed to survive normal368Files, browser state, and supported sign-ins survive normal computer updates

117computer updates and recovery. Treat temporary directories, manually installed369and recovery. Treat temporary directories, manually installed packages, and

118packages, and uncommitted application state as replaceable. Copy important370uncommitted application state as replaceable. Copy important results into the

119results into the shared workspace or attach them to the conversation.371shared workspace or attach them to the conversation.

120 372 

121## Update, recover, or reset the computer373Conversation history is stored outside the computer, so deleting files inside

122 374it, including `rm -rf`, does not delete chats. Grok Bot keeps a durable copy of

123When the computer is unreachable, use **Recover computer** from the error state375synced computer data, and reopening the computer restores from that copy, so

124(the confirmation dialog calls it **Recover Grok Bot's Computer**). Recovery is376synced files usually come back. Project folders such as `node_modules` or a

125offered only there, not in Settings. For planned maintenance or last-resort377Python virtual environment are not saved; reinstall them after a computer

126recovery, open **Settings → Computer** and use the controls under **Bot's378update, **Recover**, or **Reset**. Files that exist only on your Mac or Windows

127computer**:379machine are not covered, so keep your own backups for those.

128 380 

129* **Update Bot's Computer** rebuilds the computer on the latest version. It381When the computer is almost full, your Bot tells you once in chat, names the

130 keeps your files and logins but removes installed apps and packages.382biggest files or folders with their sizes, and offers to delete them. Nothing is

131* **Reset Bot's Computer** rebuilds the computer from your last saved383deleted unless you say yes. Low disk space is not data loss, and cleanup applies

132 snapshot. Use it only as a last resort.384only to computer files, not to chats.

133 385 

134The app and the computer update separately. A software update only refreshes386## Update, recover, or reset the computer

135Grok Bot's software and keeps installed apps. Recover and Reset both rebuild

136the computer from your last saved data; if the computer can't be reached to

137save first, very recent changes don't come back. Conversations are stored

138outside the computer, so they survive even a reset.

139 387 

140Wait for active work to finish before recovery when possible. See388Open computer controls from **Settings → Computer**, under **Bot's computer**.

141[Troubleshooting](/grok-bot/troubleshooting) for the least-destructive order.389You can also get **Recover** from the reconnect screen when the app offers it.

390The app and the computer update separately.

391 

392| Action | What it does | What it keeps | What it removes |

393| --- | --- | --- | --- |

394| **Update** | Moves the computer to the latest version. Some updates only refresh Grok Bot's software; others replace the whole computer, and you may be able to schedule those for later. The text under **Update Bot's Computer** says which kind is waiting. | Software update: everything, including installed apps. Computer update: Bots, files, and logins. | Software update: nothing. Computer update: installed apps and packages. |

395| **Recover** | Saves what it can, then builds a new computer on the latest version from your saved data. Running work is interrupted. | Bots, files, and logins that were saved | Installed apps and packages, and very recent changes if the computer could not be reached to save them |

396| **Reset** | Builds a new computer on the latest version from your last saved data. Running work is interrupted. | Bots, files, and logins that were saved | Installed apps and packages, and very recent changes if the computer could not be reached to save them |

397 

398Conversations are stored outside the computer, so they survive even a reset.

399If Bots recently disappeared, or saving failed, [contact

400support](/grok-bot/troubleshooting) before you use **Recover** or **Reset**.

401 

402When the computer is unreachable, work from the least destructive option first:

403 

4041. Wait, then choose **Retry** if the computer says **Reconnecting** or

405 **Couldn't Reach Grok Bot's Computer**, or reopen the conversation. Bots,

406 files, and logins are safe while it reconnects. Do not **Reset** during this.

4072. Fully quit Grok Bot and reopen it, and check for an app update. On Mac,

408 choose **Quit** from the menu bar, not just close the window.

4093. Use **Update Bot's Computer** in **Settings → Computer** if an update is

410 offered.

4114. Choose **Recover computer** (the confirmation dialog calls it **Recover Grok

412 Bot's Computer**) if it still cannot reconnect, or if an update looks stuck

413 and **Recover computer** is shown. On a slow update, **Keep waiting** is the

414 safe default.

4155. Use **Reset Bot's Computer** only after those steps.

416 

417Do not start a second Update or Reset while one is already running; repeated

418resets can interrupt a restore that is still finishing. **Reconnecting** and

419**Recover** usually take a few minutes, and you can choose **Continue in

420Background**. An **Update** can also take a few minutes; if it says **Update

421still running**, keep waiting. If **Recover** or **Reset** fails, use **Retry

422Recovery** or **Retry Reset** once, then stop and [contact

423support](/grok-bot/troubleshooting).

424 

425If the computer's files aren't backed up yet, **Update** says they aren't ready

426and nothing changes; wait a moment and try again rather than resetting. If

427Settings says **An agent couldn't pause in time, so the computer was not

428updated**, let that Bot finish, then choose **Update** again.

429 

430A Bot cannot finish a turn while the computer says **Reconnecting** or

431**Couldn't Reach Grok Bot's Computer**. Fix the connection with the steps above,

432then send the message again. See [Troubleshooting](/grok-bot/troubleshooting)

433for missing chats and when to contact support.

142 434 

143## Your local computer is separate435## Your local computer is separate

144 436 

145The Grok Bot cloud computer is separate from the Mac or Windows computer in437The Grok Bot cloud computer is separate from the Mac or Windows computer in

146front of you. A Bot only runs commands on your local computer when that438front of you. A Bot only runs commands on your local computer when that

147capability is enabled and you approve it under your local-computer policy:439capability is enabled and you approve it under your local-computer policy:

148**Ask every time** by default, or **Always allow** or **Never allow**. That440per-command approval with **Ask every time** by default, or **Always allow** or

149policy is separate from the approvals that govern work on the441**Never allow**. That policy is separate from the approvals that govern work on

150cloud computer.442the cloud computer.

151 443 

152Review local-computer permissions in444Review local-computer permissions in

153[Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy).445[Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy#control-access-to-your-local-computer).

computers.md +53 −39

Details

3# Manage Grok Bot computers3# Manage Grok Bot computers

4 4 

5Each member of your team gets one hosted computer where every Bot they run does5Each member of your team gets one hosted computer where every Bot they run does

6its work. The6its work. **Manage Member Computers and Data**, under **Security & Compliance**

7[Grok Bot page of the Cursor dashboard](https://cursor.com/dashboard/bot) gives7on the [Grok Bot page of the Cursor dashboard](https://cursor.com/dashboard/bot),

8organization admins and team admins on an Enterprise team two ways to manage8lets admins recreate or terminate computers across many members at once, or

9those computers. Under **Security & Compliance**, **Manage Member Computers and9[delete all of a member's Grok Bot data](#delete-all-grok-bot-data).

10Data** runs a recreate or terminate across many members at once, or deletes all10**Terminate Inactive Computers**, under **Bot Computers**, turns on

11of a member's Grok Bot data. Under **Bot11[automatic termination](#terminate-inactive-computers-automatically) for members

12Computers**, you can turn on12whose Bots go 30 days without a message. For the rest of the admin controls, see

13[automatic termination](#terminate-inactive-computers-automatically) for

14computers that go 30 days without use. For the rest of the admin controls, see

15[Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises).13[Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises).

16 14 

17**Manage Member Computers and Data is Enterprise only**. It appears for15**Manage Member Computers and Data is Enterprise only**. Organization admins

18organization admins and for team admins on an Enterprise team. Members never16and Enterprise team admins can use it. Members never see this control. Team

19see this control. Team admins can also17admins can also

20[restart the team's computers after a settings change](#restart-after-a-settings-change).18[restart the team's computers after a settings change](#restart-after-a-settings-change).

21 19 

22## Recreate or terminate20## Recreate or terminate


31| **Recreate** | Builds a replacement computer on the latest image and runs [Team Setup Scripts](/grok-bot/private-networks). The current computer stays available until the replacement is ready, then Grok Bot switches over. A Bot that is mid-turn pauses at a safe point and resumes on the new computer. If it cannot pause in time, that member's recreate is not started and shows as failed. | Roll out a new image or an updated Team Setup manifest to many members at once. [Network policy](/grok-bot/security#network-policy) changes reach computers without a recreate. |29| **Recreate** | Builds a replacement computer on the latest image and runs [Team Setup Scripts](/grok-bot/private-networks). The current computer stays available until the replacement is ready, then Grok Bot switches over. A Bot that is mid-turn pauses at a safe point and resumes on the new computer. If it cannot pause in time, that member's recreate is not started and shows as failed. | Roll out a new image or an updated Team Setup manifest to many members at once. [Network policy](/grok-bot/security#network-policy) changes reach computers without a recreate. |

32| **Terminate** | Deletes the member's computer, running or hibernated. Running work stops. The computer does not restart on its own; the member's next message starts a fresh one on the same durable disk. | End a member's current work, or clear a computer that is stuck. Terminating does not remove access; see the [FAQ](#faq). |30| **Terminate** | Deletes the member's computer, running or hibernated. Running work stops. The computer does not restart on its own; the member's next message starts a fresh one on the same durable disk. | End a member's current work, or clear a computer that is stuck. Terminating does not remove access; see the [FAQ](#faq). |

33 31 

32## Delete all Grok Bot data

33 

34**Delete All Grok Bot Data** permanently deletes a member's Bots,

35conversations, memory, routines, and computer across every team they belong to.

36That includes shared Bots that teammates use, connected apps, email inboxes,

37and files. Their Cursor account stays, and they stay on the team and start

38fresh the next time they use Grok Bot.

39 

40* **At most 100 members** per operation.

41* **It can't be undone.** Each operation is recorded in the

42 [Audit Log](https://cursor.com/dashboard/audit-log).

43 

34## Run an operation44## Run an operation

35 45 

36### Open Manage Member Computers and Data46### Open Manage Member Computers and Data

37 47 

38Go to [Grok Bot in the Cursor dashboard](https://cursor.com/dashboard/bot).48Go to [Grok Bot in the Cursor dashboard](https://cursor.com/dashboard/bot), find

39Under **Security & Compliance**, find **Manage Member Computers and Data** and49**Manage Member Computers and Data** under **Security & Compliance**, and select

40select **Manage**.50**Manage**.

41 51 

42### Select members52### Select members

43 53 


49Open **Manage selected** and pick **Recreate VMs** or **Terminate VMs**. A59Open **Manage selected** and pick **Recreate VMs** or **Terminate VMs**. A

50confirmation screen restates the action and the number of members it affects.60confirmation screen restates the action and the number of members it affects.

51The same menu also offers **Delete VMs and Data**, which removes the computer61The same menu also offers **Delete VMs and Data**, which removes the computer

52and its durable data. Use it only when you want the member to start from empty.62and its durable data, and

53 63[Delete All Grok Bot Data](#delete-all-grok-bot-data). Use either only when you

54The menu also has **Delete All Grok Bot Data**, which goes further. It64want the member to start from empty. Both delete actions ask you to type

55permanently deletes each selected member's Grok Bot data on every team they65`DELETE` to confirm.

56belong to: their Bots (including Team Bots that teammates use), conversations,

57memory, routines, connected apps, email inboxes, files, and computers. Members

58stay on the team and start fresh the next time they use Grok Bot. It cannot be

59undone and works on up to 100 members at a time. Each operation is recorded in

60the [Audit Log](https://cursor.com/dashboard/audit-log). Both delete actions

61ask you to type `DELETE` to confirm.

62 66 

63### Confirm67### Confirm

64 68 


91 95 

92## Run operations through the API96## Run operations through the API

93 97 

94Organization admins can recreate, terminate, or delete members' computers, or98To roll out across many teams from a script, start the same operations with the

95delete all of their Grok Bot data, from a script with the Organization API.99Organization API. Organization admins can recreate, terminate, or delete

96Send a team, a list of members, and an100members' computers, or delete all of their Grok Bot data. You send a team, a

97action, then poll the operation for its counts and, for operations of up to101list of members, and an action, then poll the operation for its counts and, for

981,000 members, a result for each member. The API and the dashboard share the102operations of up to 1,000 members, a result for each member.

99limit of one operation per team, so a start from either one fails while103 

100another operation for that team is running.104The API and the dashboard share the limit of one operation per team. An

105operation started from either place blocks the other until it finishes.

101 106 

102The API needs an Organization API key with the `admin:*` scope. For the107The API needs an Organization API key with the `admin:*` scope. For the

103endpoints, request fields, and error codes, see108endpoints, request fields, and error codes, see


117| **Failed**, Another deletion is in progress | This member's Grok Bot data is already being deleted. | Wait for it to finish. |122| **Failed**, Another deletion is in progress | This member's Grok Bot data is already being deleted. | Wait for it to finish. |

118| **Failed**, Grok Bot data could not be deleted | The deletion did not finish. | Run the operation again. If it fails twice, [contact support](https://cursor.com/help/grok-bot/get-help). |123| **Failed**, Grok Bot data could not be deleted | The deletion did not finish. | Run the operation again. If it fails twice, [contact support](https://cursor.com/help/grok-bot/get-help). |

119| **Failed**, Action could not be completed | The recreate or terminate did not finish. For a recreate, a Bot on the member's computer may have been unable to pause in time, and the member keeps their current computer. | Run the operation again for the affected members, once their Bots are idle if you can. If it fails twice, [contact support](https://cursor.com/help/grok-bot/get-help) with the member's email and the time of the operation. |124| **Failed**, Action could not be completed | The recreate or terminate did not finish. For a recreate, a Bot on the member's computer may have been unable to pause in time, and the member keeps their current computer. | Run the operation again for the affected members, once their Bots are idle if you can. If it fails twice, [contact support](https://cursor.com/help/grok-bot/get-help) with the member's email and the time of the operation. |

125| **Failed**, Recreation status unavailable | Cursor could not tell whether a recreate was already running on the member's computer, so it made no change. | Run the operation again in a few minutes. |

126| **Failed**, Another computer operation is in progress | Another operation was using the member's computer during **Delete VMs and Data**. | Wait for it to finish, then run again for this member. |

127| **Failed**, Computer operation lock unavailable | Cursor could not reserve the member's computer for **Delete VMs and Data**, so it made no change. | Run the operation again. |

128| **Failed**, Legacy storage must be migrated first | The member still has storage from an older version, so **Delete VMs and Data** deleted nothing. | [Contact support](https://cursor.com/help/grok-bot/get-help) with the member's email. |

129| **Failed**, Durable data could not be deleted | **Delete VMs and Data** removed the computer but not its stored data. | Run **Delete VMs and Data** again for this member. If it fails twice, [contact support](https://cursor.com/help/grok-bot/get-help). |

120 130 

121## Restart after a settings change131## Restart after a settings change

122 132 


134 144 

135A hibernated computer stays around until someone terminates it, even when the145A hibernated computer stays around until someone terminates it, even when the

136member has moved on or stopped using Grok Bot. **Terminate Inactive146member has moved on or stopped using Grok Bot. **Terminate Inactive

137Computers**, in the **Bot Computers** section, does that147Computers**, under **Bot Computers** on the same dashboard page, does that

138cleanup for you. When a member's computer goes 30 days without use, Cursor148cleanup for you. When nobody has sent a message to any of a member's Bots for

139terminates it. Using Grok Bot again restarts the count.14930 days, Cursor terminates their computer the next time it is asleep. Messages

150count from the app or Slack, whether the member or a teammate sends them.

151Routines and other work a Bot starts on its own don't count, so a Bot that

152keeps running routines doesn't keep its computer around. Sending a message

153restarts the count.

140 154 

141The setting is off by default. Turning it on opens a confirmation. Two things155The setting is off by default. Turning it on opens a confirmation. Two things

142to know before you select **Turn On**:156to know before you select **Turn On**:

143 157 

144* **Computers already past 30 days are included.** There is no grace period.158* **Members already past 30 days are included.** There is no grace period.

145 Cursor checks hibernated computers on a rolling schedule, so termination159 Cursor checks hibernated computers on a rolling schedule, so termination

146 lands in the days after the 30-day mark rather than at the exact moment.160 lands in the days after the 30-day mark rather than at the exact moment.

147* **Members lose nothing and do nothing.** An automatic terminate works like a161* **Members lose nothing and do nothing.** An automatic terminate works like a


185 199 

186### Can automatic termination interrupt a Bot that is still working?200### Can automatic termination interrupt a Bot that is still working?

187 201 

188No. The 30 days count from when the computer went to sleep after its last use.202No. Cursor only terminates a computer that is asleep. A computer that is awake,

189A computer that is awake, because a Bot is working or the member is using Grok203because a Bot is working or the member is using Grok Bot, is never terminated by

190Bot, is never terminated by this setting.204this setting, even when the member's Bots have gone 30 days without a message.

191 205 

192## Related pages206## Related pages

193 207 

deployment.md +27 −12

Details

24member devices and stops there: the hosted computer runs Linux in the cloud and24member devices and stops there: the hosted computer runs Linux in the cloud and

25isn't enrolled in MDM. To put your own tooling on hosted computers, Enterprise25isn't enrolled in MDM. To put your own tooling on hosted computers, Enterprise

26teams use26teams use

27[Team Setup scripts](/grok-bot/private-networks#install-a-networking-client-with-team-setup).27[Team Setup Scripts](/grok-bot/private-networks#install-a-networking-client-with-team-setup).

28 28 

29## Get the installers29## Get the installers

30 30 


142 142 

143| Install | How updates arrive |143| Install | How updates arrive |

144| --- | --- |144| --- | --- |

145| macOS `.dmg`, Windows Setup `.exe`, Linux AppImage | The app checks for updates automatically and offers each new version to the member. **Restart to Update**, in the [Updates](/grok-bot/settings-and-notifications#updates) section of settings, installs it. |145| macOS `.dmg`, Windows Setup `.exe`, Linux AppImage | The app checks for updates automatically and offers each new version to the member. **Restart to Update**, in the [Updates](/grok-bot/settings-and-notifications#updates) section of settings, installs it. With **Automatic Updates** on, the default, the app also installs a downloaded update while the member is away. |

146| Linux `.deb` or `.rpm` | The app doesn't install updates. New versions arrive through your package manager. |146| Linux `.deb` or `.rpm` | The app doesn't install updates. New versions arrive through your package manager. |

147 147 

148For macOS, Windows, and AppImage installs, no device policy, installer option,148For macOS, Windows, and AppImage installs, no device policy, installer option,

149or dashboard setting turns off desktop app updates. Pinning decides which149or dashboard setting turns off desktop app updates. Members can turn off

150version you install; the app still offers newer ones afterward.150**Automatic Updates** so updates wait for **Restart to Update**, but the app

151still checks for and offers new versions. Pinning decides which version you

152install; the app still offers newer ones afterward.

151 153 

152Old builds stop working. When a build loses support, the app covers its whole154Old builds stop working. When a build loses support, the app covers its whole

153window with **Update required** until the member updates. A build loses support155window with **Update required** until the member updates. A build loses support


175Either way, upgrade before the installed version loses support. A held package177Either way, upgrade before the installed version loses support. A held package

176still gets the **Update required** screen.178still gets the **Update required** screen.

177 179 

180On a `.deb` or `.rpm` install, the **Update required** screen shows the command

181to run, with **Copy command**:

182 

183* `.deb`: `sudo apt update && sudo apt install --only-upgrade grok-bot`

184* `.rpm`: `sudo dnf upgrade --refresh grok-bot`

185 

186When the repository doesn't have the new version yet, for example because you

187turned it off, the screen tells the member to download and install the latest

188package instead and links to it. After either step, the member restarts

189Grok Bot.

190 

178## Update the hosted computers191## Update the hosted computers

179 192 

180The hosted computer's image is maintained for you, so there is no image for you193The hosted computer's image is maintained for you, so there is no image for you


184| --- | --- | --- |197| --- | --- | --- |

185| New image | Idle computers are recreated on the new image in the background, gradually and without a fixed schedule. Until then, a computer stays on its current image. Member files carry over, and Team Setup runs again. | Automatic, in the background |198| New image | Idle computers are recreated on the new image in the background, gradually and without a fixed schedule. Until then, a computer stays on its current image. Member files carry over, and Team Setup runs again. | Automatic, in the background |

186| **Update Bot's Computer** | Rebuilds the member's computer on the latest image. Scheduling it for a later time isn't available to every account yet. | The member, from **Settings → Computer** in the desktop app, under **Bot's computer** |199| **Update Bot's Computer** | Rebuilds the member's computer on the latest image. Scheduling it for a later time isn't available to every account yet. | The member, from **Settings → Computer** in the desktop app, under **Bot's computer** |

187| **Recreate VMs** | Rebuilds the selected members' computers on the latest image and Team Setup scripts. | Admins on Enterprise, from [Manage Member Computers and Data](/grok-bot/computers) |200| **Recreate VMs** | Rebuilds the selected members' computers on the latest image and Team Setup Scripts. | Admins on Enterprise, from [Manage Member Computers and Data](/grok-bot/computers) |

188 201 

189Running computers pick up Team Setup manifest changes roughly once a day; to202Running computers pick up Team Setup manifest changes roughly once a day; to

190apply a change sooner, recreate the computers. On Enterprise,203apply a change sooner, recreate the computers. On Enterprise,


215 Bot on from the dashboard and scopes it with **Manage Group Access**; on228 Bot on from the dashboard and scopes it with **Manage Group Access**; on

216 Teams, every member already has access. See229 Teams, every member already has access. See

217 [Enabling Grok Bot for your team](/grok-bot/teams-and-enterprises#enabling-grok-bot-for-your-team).230 [Enabling Grok Bot for your team](/grok-bot/teams-and-enterprises#enabling-grok-bot-for-your-team).

2185. Set the admin controls in2315. Apply the recommended configuration: set the admin controls in

219 [Recommended configuration](/grok-bot/teams-and-enterprises#recommended-configuration)232 [Recommended configuration](/grok-bot/teams-and-enterprises#recommended-configuration)

220 before members start.233 before members start.

2216. Pilot the installer: install your chosen version on a few devices for each2346. Pilot the installer: install your chosen version on a few devices for each

222 platform, sign in, and confirm the app connects to the hosted computer.235 platform, sign in, and confirm the app connects to the hosted computer.

2237. Deploy the tested installer to every device whose owner has access.2367. Push to your fleet: deploy the tested installer to every device whose owner

2248. Pick a cadence for moving devices to new releases. For Linux, decide whether237 has access.

2388. Plan updates: pick a cadence for moving devices to new releases. For Linux, decide whether

225 devices upgrade from the Grok Bot repository or from packages you ship.239 devices upgrade from the Grok Bot repository or from packages you ship.

226 240 

227## FAQ241## FAQ


229### Can I turn off automatic updates for the desktop app?243### Can I turn off automatic updates for the desktop app?

230 244 

231On macOS, Windows, and AppImage installs, no. The app checks for updates and245On macOS, Windows, and AppImage installs, no. The app checks for updates and

232offers them to members. Linux `.deb` and `.rpm` installs don't update246offers them to members. Each member can turn off **Automatic Updates** so an

233themselves, so you control them with your package manager. See247update installs only when they choose **Restart to Update**, but there's no

248admin control. Linux `.deb` and `.rpm` installs don't update themselves, so you

249control them with your package manager. See

234[How desktop updates work](#how-desktop-updates-work).250[How desktop updates work](#how-desktop-updates-work).

235 251 

236### Is there an MSI or PKG installer?252### Is there an MSI or PKG installer?


243 259 

244No. The hosted computer runs Linux in the cloud and isn't enrolled in MDM.260No. The hosted computer runs Linux in the cloud and isn't enrolled in MDM.

245Enterprise teams install their own tooling on it with261Enterprise teams install their own tooling on it with

246[Team Setup](/grok-bot/private-networks). If your identity provider requires a262[Team Setup Scripts](/grok-bot/private-networks). If your identity provider requires a

247managed device, see263managed device, see

248[Allow sign-in to IdP apps from the computer](/grok-bot/identity-and-access#allow-sign-in-to-idp-apps-from-the-computer).264[Allow sign-in to IdP apps from the computer](/grok-bot/identity-and-access#allow-sign-in-to-idp-apps-from-the-computer).

249 265 


264 280 

265* [Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises)281* [Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises)

266* [Configure identity and access](/grok-bot/identity-and-access)282* [Configure identity and access](/grok-bot/identity-and-access)

267* [Connect to private networks](/grok-bot/private-networks)

268* [Configure TLS-inspecting proxies](/grok-bot/proxies)283* [Configure TLS-inspecting proxies](/grok-bot/proxies)

269* [Manage Grok Bot computers](/grok-bot/computers)284* [Manage Grok Bot computers](/grok-bot/computers)

270* [Settings and notifications](/grok-bot/settings-and-notifications#updates)285* [Settings and notifications](/grok-bot/settings-and-notifications#updates)

faq.md +248 −32

Details

8files to complete work—not only answer questions. They can continue in the8files to complete work—not only answer questions. They can continue in the

9background, keep role-specific context, and coordinate with other Bots.9background, keep role-specific context, and coordinate with other Bots.

10 10 

11## Is Grok Bot the same as the Grok app?

12 

13No. Grok (the chat app from SpaceXSI) and Grok Bot are two different apps. A

14paywall or a **Weekly SuperGrok Limit** in the Grok app is not about Grok Bot.

15Grok Bot signs in with your Cursor account. See

16[Sign in](/grok-bot/get-started#2-sign-in).

17 

11## Where do I talk to Grok Bot?18## Where do I talk to Grok Bot?

12 19 

13Use the Grok Bot desktop app on macOS, Windows, or Linux, or the companion20Use the Grok Bot desktop app on macOS, Windows, or Linux, or the companion app

14app on iOS or Android. The same Bots and conversations sync across your21on iOS or Android. The same Bots and conversations sync across your signed-in

15signed-in devices.22devices. You can also chat with your Bots in

23[X Chat](/grok-bot/chat-and-collaboration#chat-in-x-chat),

24[tag @bot on X](/grok-bot/tag-on-x) to hand a post to your Bot, and talk to a

25[shared Bot in Slack](/grok-bot/shared-bots#how-do-i-add-a-shared-bot-to-slack).

16 26 

17## Does Grok Bot keep working when my laptop is closed?27## Does Grok Bot keep working when my laptop is closed?

18 28 

19Yes. Bot work runs on the cloud computer. Closing the app, laptop, or phone29Yes. Bot work runs on the cloud computer. Closing the app, laptop, or phone

20does not stop a background turn or routine.30does not stop a background turn or routine.

21 31 

32## Does the Bot use my own computer?

33 

34Bots work on their own cloud computer. A Bot runs a command on your desktop

35only if you allow it. The setting is under

36**Settings → Computer → Your computer**, labeled

37**Execution on this computer**. If no desktop is listed there yet, the same

38page shows **Execution on Local Computer**. By default it asks you each time.

39See [Run commands on your desktop](/grok-bot/settings-and-notifications#run-commands-on-your-desktop).

40 

22## Do my Bots share one computer?41## Do my Bots share one computer?

23 42 

24Yes. Every Bot on your account uses one persistent cloud computer. They share43Yes. Every Bot on your account uses one persistent cloud computer. They share


36## What does a Bot remember?55## What does a Bot remember?

37 56 

38A Bot can retain stable preferences, role context, and summaries of prior work.57A Bot can retain stable preferences, role context, and summaries of prior work.

39Its conversation and learned role are separate from other Bots, while shared58Its conversations and learned role are separate from other Bots, but a few

40files, browser sessions, group messages, and direct handoffs can move context59facts about you, such as your name and time zone, are shared by all your Bots.

41between them.60Shared files, browser sessions, group messages, and direct handoffs can also

61move context between them. To check what a Bot remembers, ask it: "What do you

62remember about me?" See

63[What a Bot remembers](/grok-bot/bots#what-a-bot-remembers).

42 64 

43For important decisions, ask the Bot to check the current source rather than65For important decisions, ask the Bot to check the current source rather than

44relying on memory.66relying on memory.


50present a CAPTCHA, or require human confirmation. The Bot should hand those72present a CAPTCHA, or require human confirmation. The Bot should hand those

51steps to you rather than bypassing them.73steps to you rather than bypassing them.

52 74 

75Some sites block traffic from cloud computers. When that happens, the Bot hands

76you the step, and you can sign in yourself on the Bot's computer. You can also

77turn on **Route traffic through this computer** in **Settings → Computer**,

78under **Your computer**, so sites see your own connection. If a site times out

79or shows a connection error instead, see

80[A website times out or won't connect](/grok-bot/troubleshooting#a-website-times-out-or-wont-connect).

81 

53Use a connector when one is available for a more structured and reliable82Use a connector when one is available for a more structured and reliable

54integration.83integration.

55 84 


57 86 

58The answer depends on the tool, the risk of the action, and—when enforcement is87The answer depends on the tool, the risk of the action, and—when enforcement is

59enabled—your Auto-review rules. Sensitive or consequential actions can stop for88enabled—your Auto-review rules. Sensitive or consequential actions can stop for

60approval. Passwords, two-factor codes, CAPTCHAs, and similar human-only steps89approval. Bots sign in with logins from [Vault](/grok-bot/vault), a connected

61use a computer takeover.90password manager, or a Secure Form without seeing the values; single sign-on,

91passkeys, CAPTCHAs, and similar human-only steps use a computer takeover.

62 92 

63Tell each Bot its standing boundaries and ask it to remember them, and add93Tell each Bot its standing boundaries and ask it to remember them, and add

64narrow **Ask first**94narrow **Ask first**

65rules for actions such as sending, publishing, deleting, purchasing, or95rules for actions such as sending, publishing, deleting, purchasing, or

66changing production systems.96changing production systems.

67 97 

98Approvals from work that started without you, like a routine or a message from

99another Bot, expire after about 30 minutes. Approvals in a chat you are in wait

100for you. See

101[An approval expired or is blocked](/grok-bot/troubleshooting#an-approval-expired-or-is-blocked).

102 

103## Can I pick the model?

104 

105No. Grok Bot picks the model for each task, and there is no model picker. For

106each task, it uses the backend model most likely to deliver the best outcome.

107That can be a first-party SpaceXSI model or a third-party model from a provider

108on the [sub-processor list](https://trust.cursor.com/subprocessors), and the

109choice can differ from one request to the next. Users cannot be routed to or

110away from a particular model.

111 

112Grok Bot does not show the underlying model for a request. Your usage and

113spending views record this activity as Grok Bot usage, not by provider or model

114name. Routing a task to Opus 5.5 doesn't change what it costs you per token;

115how fast you use your usage depends on the kind of work you give Grok Bot and

116how much effort each task takes.

117 

118Your team's Cursor

119[model allowlist or blocklist](https://cursor.com/docs/enterprise/model-and-integration-management#model-access-control)

120does not apply to Grok Bot. Teams with a model allowlist see this notice when

121they [enable Grok Bot](/grok-bot/teams-and-enterprises#enabling-grok-bot-for-your-team).

122Only providers on the sub-processor list can process your data, and the set of

123models changes over time. See

124[Models and data](/grok-bot/security#models-and-data) and

125[Which AI models power Grok Bot?](https://cursor.com/help/grok-bot/models).

126 

68## How does Grok Bot handle data and privacy?127## How does Grok Bot handle data and privacy?

69 128 

70Grok Bot uses Cursor authentication and account data settings. Training opt-out129Grok Bot uses Cursor authentication and account data settings. Training opt-out


75[Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy) for the134[Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy) for the

76full boundary and links to current Cursor security information.135full boundary and links to current Cursor security information.

77 136 

137## Do I need a separate Grok Bot subscription?

138 

139No. Grok Bot comes with **Premium**, **Super**, and **Ultra** on The X

140Subscription, and with legacy **Cursor Pro**, **Pro+**, **Ultra**, and

141self-serve **Teams**. On a legacy Cursor account you can also link an

142individual **SuperGrok**, **SuperGrok Plus**, **SuperGrok Heavy**, or

143**X Premium+** account, or sign in with a Grok account that has an assigned

144seat on a self-serve **Grok Business** plan. On Enterprise, ask your account

145team.

146 

78## How much does Grok Bot cost?147## How much does Grok Bot cost?

79 148 

80Availability and billing depend on the account and plan. Grok Bot is included149Availability and billing depend on the account and plan. On The X Subscription,

81with every paid individual Cursor plan and with the Cursor Teams plan, and you150where new customers start, Grok Bot is included on Premium, Super, and Ultra,

82can link an individual SuperGrok, SuperGrok Plus, or SuperGrok Heavy151for individuals and team seats; Plus and Free don't include it. There, Grok Bot

83subscription or sign in with a seat on a self-serve Grok Business plan. Grok Bot subscriptions include weekly usage; eligible152draws from the same weekly usage pool as Cursor and the Grok apps, and prepaid

84accounts can add on-demand usage billed from model and token cost. If you have153credit covers usage past the pool. Super and Ultra include larger weekly pools

85both a Cursor and a SuperGrok subscription, Grok Bot uses whichever has more154than Premium. Check usage under **Usage** at

86usage. Review the current access page or155[grok.com/dashboard](https://grok.com/dashboard).

87[Cursor pricing](https://cursor.com/pricing) for current terms. Enterprise156 

157On a legacy Cursor plan, Grok Bot is included with every paid individual plan

158and with Cursor Teams, and you can link an individual SuperGrok, SuperGrok Plus,

159SuperGrok Heavy, or X Premium+ subscription. **Pro** includes weekly usage,

160**Pro+** generous weekly usage, and **Ultra** the highest weekly usage. When the

161**Weekly usage limit** runs out, extra usage continues as **On-demand usage**

162if on-demand is enabled, billed through Cursor. Grok Bot usage is metered on

163your Cursor account, not on Grok or X, and macOS and iOS share the same usage.

164 

165See [Grok Bot on The X Subscription](/x-subscription/grok-bot) and

166[Plans and billing](https://cursor.com/help/grok-bot/plans). Enterprise

88customers should contact their Cursor account team.167customers should contact their Cursor account team.

89 168 

169## Which Grok plans can I link?

170 

171Individual **SuperGrok**, **SuperGrok Plus**, **SuperGrok Heavy**, and

172**X Premium+**. **SuperGrok Lite** and **Grok Enterprise** cannot link. If you

173have a seat on a self-serve **Grok Business** plan, you don't link from the

174plan screen. Sign out, then sign back in with **Sign in with Grok** using the

175Grok account that holds the seat. On The X Subscription there's nothing to

176link: Grok Bot draws from your plan's shared weekly pool. See

177[Link SuperGrok for Grok Bot](https://cursor.com/help/grok-bot/supergrok).

178 

179## I don't see Link Grok Account.

180 

181**Link Grok Account** is on the **Get Started with Grok Bot** page at

182[cursor.com/bot/onboarding](https://cursor.com/bot/onboarding), and on the

183phone's paywall screen. If you already have access, open

184**Settings → Usage & Billing** and look under **Manage Plan** for

185**Get Access with Grok**. It appears only when linking would raise your usage.

186 

187## I linked SuperGrok to the wrong Cursor account. Can I unlink it?

188 

189No. A link is permanent, and you cannot move it yourself.

190[Contact support](/grok-bot/troubleshooting#before-contacting-support) with the

191account that got the link and the account that should have it. Linking is a

192usage grant, not a Cursor plan, so it doesn't change or cancel the Cursor plan

193on either account.

194 

195## Do a Cursor plan and SuperGrok add together?

196 

197No. On a legacy Cursor account, Grok Bot uses whichever one grants more weekly

198usage. Legacy **Pro**, **SuperGrok**, and **X Premium+** are the same tier,

199**Pro+** matches **SuperGrok Plus**, and **Ultra** matches **SuperGrok Heavy**.

200A Grok Business seat works the same way as a SuperGrok link. For more usage,

201move to a higher tier or turn on on-demand usage. Both subscriptions keep

202billing on their own; buying one does not cancel the other.

203 

204If you upgrade SuperGrok after linking, allow up to 24 hours for the

205**Weekly usage limit** to move to the new tier. You do not need to link again.

206 

207## Why doesn't my SuperGrok limit match my Grok Bot usage?

208 

209They are two separate meters for two products. Grok Bot usage lives on your

210Cursor account. See it in Grok Bot under **Settings → Usage & Billing**, not in

211the Grok app.

212 

213## How do I stop charges after my weekly usage runs out?

214 

215On The X Subscription, leave Auto Top-up off or set a monthly additional usage

216limit under **Additional usage credits** at

217[grok.com/dashboard/billing](https://grok.com/dashboard/billing). On a legacy

218Cursor plan, turn off on-demand or set a cap: in Grok Bot, open

219**Settings → Usage & Billing → On-demand monthly limit**, or on the web go to

220[cursor.com/dashboard](https://cursor.com/dashboard) and set **Monthly Limit**

221under **Spending**. The cap does not stop a Bot in the middle of a run, so a

222running task can go a little past it. If on-demand is off, Grok Bot stops when

223weekly usage runs out and resumes when weekly usage resets.

224 

225## Is there a free trial?

226 

227Some accounts can try Grok Bot before they pay: when the access screen offers

228**Start Trial**, choose it. The trial is a usage credit, and a 7-day window also

229applies. It never turns into a paid plan. The credit is drawn down by how much

230work your agents do, measured by agent steps and tokens rather than the number

231of messages you send, so start small, scope tasks tightly, and check your usage

232on the plan screen before running large or long jobs. One big task can use all

233of it, and used credit is not restored.

234 

235**Cancel Trial** appears on free-plan accounts. There is no charge to cancel.

236On a free plan, you can end it early with **Cancel Trial** in

237**Settings → Usage & Billing** on desktop or **Settings → Usage** on iPhone

238and Android. That removes any remaining trial credit, and you can't start the trial

239again. On a paid plan or Teams seat, the trial ends on its own.

240 

241An App Store free trial started in the iOS app is different: Apple runs it, and

242it turns into a paid Apple subscription unless you cancel first. See

243[Manage or cancel a phone subscription](/grok-bot/mobile#manage-or-cancel-a-phone-subscription).

244 

245## How do refunds work for Grok Bot?

246 

247Grok Bot does not have a separate subscription, so it does not have a separate

248refund path. On The X Subscription, refunds follow

249[Invoices and refunds](/x-subscription/invoices-and-refunds), and prepaid

250credit you've already spent isn't refundable. On a legacy Cursor plan,

251subscription refunds follow Cursor's

252[Refunds](https://cursor.com/help/account-and-billing/refunds) policy;

253on-demand usage Grok Bot has already consumed and mid-cycle downgrades with

254usage are not refundable. Apple or Google handles refunds for store purchases.

255SuperGrok and X Premium+ are billed by SpaceXSI or X, not Cursor; see the

256[Grok FAQ](/grok/faq#can-i-get-a-refund-for-my-grok-or-supergrok-subscription)

257for SuperGrok, and contact X for X Premium+.

258 

90## Is Grok Bot available to teams and enterprises?259## Is Grok Bot available to teams and enterprises?

91 260 

92Self-serve Cursor Teams Standard and Premium seats include Grok Bot.261Yes. On a self-serve Cursor Teams plan, every member gets Grok Bot on their

93Enterprise access is rolling out. Availability and administrative controls can262Cursor account, without a Premium seat or an admin request, and on legacy Teams

94vary by organization. Contact your Cursor account team for current enterprise263plans on-demand usage is enabled by default. On a team on The X Subscription,

95access.264every paid seat (Premium, Super, or Ultra) includes it. On Cursor Enterprise,

265an admin enables Grok Bot for the team; contact your Cursor account team.

266Request-based Teams plans and Enterprise seats do not take a personal SuperGrok

267link. See

268[Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises).

269 

270## Can I change the email on my account?

271 

272No. The email on a Cursor account cannot change. To use a different email, make

273a new account. See

274[Change your email address](https://cursor.com/help/account-and-billing/change-email).

96 275 

97## Can I dictate or talk to a Bot?276## Can I dictate or talk to a Bot?

98 277 


109 288 

110## Can I change the app language?289## Can I change the app language?

111 290 

112Yes. Open **Settings** and choose **Language**. On desktop the picker includes291Yes. On desktop, open **Settings**, go to **General**, and choose a

113**Follow System** and more than 20 languages. On iPhone and Android the292**Language** under **Appearance**. **Follow System** uses your computer's

114follow-device option is labeled **System**, and the list is shorter.293language, and desktop has 37 languages. On iPhone and Android, open

294**Settings** and choose **Language**; **System** uses your phone's language,

295and the phone app has 12 languages.

296 

297The language changes the app's menus and messages. New Bots write to you in

298that language unless you write to them in another one. Voice chat has its own

299**Language** setting.

115 300 

116## Can I use more than one account?301## Can I use more than one account?

117 302 

118On desktop, open the account menu and choose **Switch account** or **Add303On desktop, open the account menu and choose **Switch account** or

119account**. Settings lists the same accounts; inactive rows include **Remove**.304**Add account**. Settings lists the same accounts; inactive rows include

305**Remove**. On iPhone and Android, open **Settings** and, under

306**Switch Account**, choose an account to switch to it or choose

307**Add Account**. Swipe an inactive account to remove it.

120 308 

121## Which platforms are supported?309## Which platforms are supported?

122 310 


127* iPhone on iOS 18 or later315* iPhone on iOS 18 or later

128* Android 9 or later316* Android 9 or later

129 317 

130The iOS app also runs on iPad with iPadOS 18 or later.318The iOS app also runs on iPad with iPadOS 18 or later. Get the desktop app from

319the Grok Bot page at [cursor.com/dashboard/bot](https://cursor.com/dashboard/bot).

131 320 

132## What is the difference between a skill and a routine?321## What is the difference between a skill and a routine?

133 322 


146 335 

147## Can I share a Bot with someone else?336## Can I share a Bot with someone else?

148 337 

149Yes. Open the **Share menu** and choose **Create template**, then **Copy link**,338Yes. Open the Bot's details, choose **Share**, then **Create a copy**. When the

150and pick who can open it: **Public link** or **Team-only** (Enterprise accounts339Bot posts the template, choose **Publish**, then **Copy link**. Anyone with the

151default to Team-only). Anyone who can open the link can preview it on340link can preview it on [x.ai](https://x.ai) and add a copy to their account.

152[x.ai](https://x.ai) and add a copy to their account. They do not get your341They do not get your computer, logins, or conversation history. If your team

153computer, logins, or conversation history.342limits template sharing, the app doesn't offer **Create a copy**.

154 343 

155The link exposes the Bot's configuration. Strip secrets and anything344The link exposes the Bot's configuration. Strip secrets and anything

156confidential before you share. Adding a shared Bot accepts the345confidential before you share. Adding a shared Bot accepts the


158[Share a Bot](/grok-bot/bots#share-a-bot).347[Share a Bot](/grok-bot/bots#share-a-bot).

159 348 

160To give the team one Bot they all talk to, rather than a copy each person349To give the team one Bot they all talk to, rather than a copy each person

161customizes, publish a [Team Bot](/grok-bot/team-bots).350customizes, publish a [shared Bot](/grok-bot/shared-bots).

162 351 

163## What happens if I delete a Bot?352## What happens if I delete a Bot?

164 353 


166Bot. Because Bots share a computer, files and logins on that computer may355Bot. Because Bots share a computer, files and logins on that computer may

167remain. Backend retention follows the applicable Cursor terms. Hide the Bot356remain. Backend retention follows the applicable Cursor terms. Hide the Bot

168instead if you may need its work later.357instead if you may need its work later.

358 

359## How do I delete my Grok Bot account?

360 

361Grok Bot uses your Cursor account, so deleting it deletes the Cursor account.

362Deletion is self-serve and permanent. Signing out of Grok Bot or uninstalling

363the app leaves the account in place, and there is no way to delete Grok Bot

364without deleting your Cursor account.

365 

366* **On iPhone or Android:** tap your account avatar to open **Settings**, tap

367 your account, then tap **Delete Account** and confirm. In the browser page

368 that opens, sign in, type **Delete**, and confirm again.

369* **On desktop or the web:** cancel your subscription first if it is active.

370 Then go to [cursor.com/dashboard](https://cursor.com/dashboard), open

371 **Settings**, find **Delete Account** in **More**, choose **Delete**, and

372 confirm. Desktop Grok Bot can sign you out, but it doesn't delete the

373 account.

374 

375Deletion removes your Cursor account and Grok Bot access; Grok Bot agents,

376chats, computers, and connected apps; and Cursor chat history and settings.

377All data is removed within 30 days. Files on your own computer stay there. An

378App Store or Google Play subscription, a linked SuperGrok subscription, and a

379linked X Premium+ subscription are separate: cancel each with Apple, Google,

380Grok, or X if you no longer want it.

381 

382On cursor.com, **Delete Account** appears for personal accounts. If you are on

383a Cursor Teams or Enterprise seat, ask a team admin or

384[contact support](/grok-bot/troubleshooting#before-contacting-support).

Details

19* HTML and email files19* HTML and email files

20* Jupyter notebooks20* Jupyter notebooks

21 21 

22The desktop composer accepts up to six attachments at a time. Documents,22In the desktop app, you can attach:

23images, and audio can be up to 25 MB each; videos can be up to 200 MB. Large,23 

24encrypted, damaged, or unusual files may not be readable; export an unusual24| Limit | Value |

25format as PDF, CSV, plain text, or an image.25| --- | --- |

26| Attachments per message | 20 |

27| Images | 25 MB each, 200 MB total per message |

28| Documents, audio, and other files | 250 MB each |

29| Video | 1 GB each |

30 

31If a file is over its limit, the composer says it is too large and leaves it

32out; send the rest in another message. Large, encrypted, damaged, or unusual

33files may not be readable; export an unusual format as PDF, CSV, plain text, or

34an image.

26 35 

27On iPhone, you can also share a photo, file, link, or text from another app36On iPhone, you can also share a photo, file, link, or text from another app

28into Grok Bot. Use the system share sheet, choose **Grok Bot**, pick a chat,37into Grok Bot. Use the system share sheet, choose **Grok Bot**, pick a chat,


48link card shows a preview first. Always check the destination before entering57link card shows a preview first. Always check the destination before entering

49credentials or approving an external action.58credentials or approving an external action.

50 59 

60## Move files to and from your apps

61 

62When you've connected Google Drive, OneDrive, SharePoint, Gmail, or Outlook, a

63Bot can move files between its computer and those accounts without pasting

64their contents into the chat:

65 

66* Save a file it made or downloaded to Google Drive, OneDrive, or SharePoint,

67 or attach it to a Gmail or Outlook draft.

68* Bring a Drive, OneDrive, or SharePoint file, or an email attachment, onto its

69 computer to work on it. Google Docs, Sheets, Slides, and Drawings arrive as

70 `.docx`, `.xlsx`, `.pptx`, and `.png` files.

71 

72Say where the file should go. Saving to Google Drive always creates a new file,

73even when one with the same name exists. OneDrive and SharePoint refuse a name

74that already exists unless you tell the Bot to overwrite it.

75 

51## Ask for a reviewable result76## Ask for a reviewable result

52 77 

53Specify the artifact and its acceptance criteria:78Specify the artifact and its acceptance criteria:


79> Update the report you just created. Add source links to the first two claims104> Update the report you just created. Add source links to the first two claims

80> and replace the final table with a CSV attachment.105> and replace the final table with a CSV attachment.

81 106 

107## Create images and videos

108 

109The Bot can create pictures and short video clips. It creates them only when

110you ask, from a description or from images you share in the conversation. It

111sends each image and video it makes to the conversation, and you can find them

112again in the Bot's [Library](#find-a-page-later). Images it creates still load

113in the conversation while its computer is asleep.

114 

115### Ask for an image

116 

117Describe what you want, such as the subject, style, and mood, in your own

118words. To build on pictures you already have, share them in the conversation and

119say how to use them. The Bot uses them as references.

120 

121Images can be square, wide, or tall: 1:1, 4:3, 3:4, 16:9, or 9:16. Image

122creation isn't used for charts, plots, or tables; for those, ask for a

123[page](#pages).

124 

125### Ask for a video

126 

127Ask for a video, an animation, or a clip. The Bot can make one from:

128 

129* A description of the scene

130* An image you share, which becomes the first frame

131* Two images you share, one for the start and one for the end. Use the same

132 image for both to make a loop.

133* Up to 14 reference images that show how people, objects, clothing, or

134 settings should look

135 

136You can also share up to 4 images that must appear at set moments in the clip.

137 

138* Clips run 1 to 15 seconds. The default is 6 seconds.

139* Clips are 480p unless you ask for 720p.

140* Aspect ratios are 1:1, 16:9, 9:16, 4:3, 3:4, 3:2, and 2:3. A clip made from

141 your image keeps that image's shape unless you ask for another.

142* Images you share for a video must be JPEG, PNG, or WebP, and all the images

143 for one clip can add up to about 35 MB.

144* The Bot saves each clip as an MP4 file.

145 

146Videos look filmed. They suit a live scene, a still photo brought to life, or a

147character from your reference images. They aren't made for motion graphics,

148title cards, slideshows, product or app demos, charts, or anything that needs

149exact text, timing, or brand assets. Creating a video can take a few minutes.

150 

151When the Bot hands work to a task, that task can create images and videos too,

152and the Bot then sends them to the conversation.

153 

154### If the Bot didn't create what you asked for

155 

156* To show you what a real person, place, or product looks like, the Bot finds a

157 real image instead of creating one.

158* Some requests are blocked by content rules, and the Bot tells you when that

159 happens. Naming trademarked characters, brands, or real people often causes a

160 block. Describe the subject in your own words and try again.

161* If image creation is busy, the Bot may ask you to try again in a moment.

162* If the Bot says image or video generation isn't available for your account,

163 creation is turned off for you. On a team, an admin's model settings or the

164 team's privacy settings can cause this. Ask your admin.

165 

166### View, save, and copy images and videos

167 

168In the desktop app:

169 

170* Click an image, or a video's thumbnail, to open it full screen. Click an

171 image there to zoom in. When there is more than one item, use the left and

172 right arrow keys or the thumbnails to move between them. Click the download

173 button at the top to save the item. Close the viewer with Escape, the close

174 button, or a click outside the image.

175* The video player has play and pause, a seek bar, and a speed menu with

176 **2×**, **1.5×**, **1×**, and **0.5×**.

177* Right-click an image and choose **Copy image** or **Save image…**, or

178 right-click a video and choose **Save video…**.

179* Hover over a message and click the three dots. Choose **Download**, or

180 **Download all** when the message has several items. For an image, you can

181 also choose **Copy**.

182 

183In the phone app:

184 

185* Tap an image to open it full screen. Open the viewer's menu and choose

186 **Forward** to send it to another chat, **Share**, or **Save**.

187* Touch and hold an image in the conversation for **Copy Image** and

188 **Save to Photos**.

189* Tap a video to play it in the conversation. Touch and hold it for

190 **Save to Photos**.

191 

82## Pages192## Pages

83 193 

84A Page is a styled report, dashboard, or tracker that the Bot builds for you.194A page is something a Bot builds for you to read, such as a report, a memo, a

85It is a very flexible structure that can include rich, interactive components like195dashboard, a tracker, or an explainer. It can hold text, tables, charts, and

86charting visuals, heat maps, flow charts, tables, and more.196controls like filters and switches. A page lives in the Bot's Library, so you

197can come back to it later and share it.

198 

199Pages is rolling out gradually, and it isn't available on Enterprise teams yet.

200If you don't see pages, update Grok Bot to version 0.60.0 or later on your

201computer and 1.14.0 or later on your phone.

202 

203To make a page, ask the Bot in chat. Say what the page is for and what should

204be on it, for example:

205 

206> Make a page that compares the three quotes in this thread, with a table and a

207> short recommendation.

208 

209> Build a dashboard of signups, trials, and conversions for the last 30 days.

210 

211> Create a launch tracker that organizes open tasks, owners, and statuses.

212 

213The Bot builds the page and posts it in the chat as a card with the page's

214title and **Open**. You can also ask a Bot to create or update a page from a

215[routine](/grok-bot/skills-routines-and-automations).

216 

217### Open a page

218 

219In the desktop app, click a page's card in the conversation to open it. The

220page fills the window, and the chat stays open in a smaller panel beside it, so

221you can keep talking to the Bot while you read.

222 

223When the Bot updates a page, the earlier card in the chat says **Updated

224below**. Click it to open the latest version.

87 225 

88Some examples of how to use pages:226In the phone app, tap a page's card to open it. Tap the close button to go

227back to the conversation.

89 228 

90> Ask Bot to make a Page that summarizes this week's support tickets by topic.229### Change a page

91 230 

92> Ask Bot to build a dashboard of signups, trials, and conversions for the last 30 days.231Ask the Bot. While the page is open, type in the chat panel beside it, labeled

232**Message about** and the page's title. The Bot edits the same page, so everyone

233who can open it sees the change.

93 234 

94> Ask Bot to create a launch tracker that organizes open tasks, owners, and statuses.235Filters, switches, and other controls on a page change what you see, not what

236the page holds. Nothing you do on the page is saved. To change the page itself,

237ask the Bot.

95 238 

96Users on self-serve plans can share pages with the broader public. Users on Enterprise plans239To rename a page you made, click its title at the top of the open page, type a

97can share Pages with specific users, groups, or teams.240new name, and press Enter. Press Escape to keep the old name.

98 241 

99You can ask Bots to update or create pages on Routines. You can also open a Page and chat242### Find a page later

100with your Bot to configure changes.

101 243 

102To go back to existing Pages, use Cmd+K search or open the right hand side panel. You244In the desktop app, press `Cmd/Ctrl+K` and type a page's title to find it.

103will see all past Pages in your Library and can pin any that you repeatedly return to.245 

246Each Bot also has a **Library**. Click the Bot's name at the top of the chat

247(**View conversation details**) and open the **Library** tab. It lists the

248pages, files, and apps the Bot has made and the images, videos, and links it

249sent in your conversation, newest first under **Today**, **This week**, and

250**Older**. Things you sent, including images you uploaded, and files a Cloud

251Agent returned aren't listed. Each group shows five items at a time; click

252**Show more** to see more. On the phone, tap the Bot's name at the top of the

253chat to open its profile, then tap **Library**.

254 

255* Click a page to open it. Click an image or video to view it full screen, a

256 file to preview it, or a link to open it in your browser.

257* A page you've shared with your team or with anyone who has the link shows a

258 mark on its row.

259* Click **More actions** (the three dots) on a row and choose **Pin** to keep

260 the item at the top of the Library under **Pinned**. Choose **Unpin** to

261 take it off. A page's menu also has **Open**, and **Share…** for pages you

262 own.

263 

264### Share a page

265 

266A new page is private to you until you share it. You can change who can view a

267page you own.

268 

269* In the desktop app, open the page and click **Share** at the top, or choose

270 **Share…** from the page's menu in the Library. Click the current setting

271 and choose who can view the page.

272* In the phone app, open the page, tap the share button, and choose an option

273 under **Who can view**.

274 

275| Option | Who can open the page |

276| --- | --- |

277| **People you invite** | You and the teammates and groups you add. Each one gets **Viewer** access; open it and choose **Remove** to take someone off. On a personal account, this option is **Only you**. |

278| Your team's name, or **Your team** | Everyone on your Cursor team. |

279| **Anyone with the link** | Anyone, with no sign-in needed. |

280 

281Some teams also see an option for everyone in their organization. People who

282open a team or invite link sign in with their Cursor account first. Everyone you

283share with can read the page and use its controls; only the Bot can change it.

284To share a page with fewer people, open **Share** again and choose a narrower

285option, or change it from your

286[dashboard](#see-pages-youve-shared).

287 

288When an option isn't available, the share menu says why:

289 

290| What you see | What it means |

291| --- | --- |

292| **Public sharing is off for Enterprise teams** | Your team is on the Enterprise plan. Share the page with your team or with people you invite instead. |

293| **Pages in your personal space can't be team-shared** | The page belongs to your personal account, not a team. Keep it private, or share it with anyone who has the link. |

294| **Couldn't update access** | The change didn't save. Try again. |

295| **This page's access changed. Make your change again.** | Someone changed who can view the page while you had the menu open. Make your change again. |

296 

297To send the link, use **Copy link** at the bottom of the desktop share menu or

298at the top of the phone's share screen. The desktop menu also has

299**Open in browser**. In the phone app, once someone besides you can open the

300page, the share screen also has **Share**, which opens your phone's share

301sheet, and **Open in browser**.

302 

303A page you share with anyone who has the link opens at its own address on

304`pages.grok.bot`, based on the page's title. Anyone with that address can open

305the page without signing in, so share a page this way only when it holds

306nothing private. The address stays the same when you rename the page, and you

307can't choose a custom address yet. In the phone app, the address is under

308**Address**; tap it to copy it. Public sharing is off on Enterprise teams; with

309a personal account, or on a team that isn't on the Enterprise plan, you can

310share a page with anyone who has the link.

311 

312If a change doesn't save, choose **Retry**.

313 

314### See pages you've shared

315 

316To see every page you've shared, open the

317[Cursor dashboard](https://cursor.com/dashboard/shared-canvases) and find

318**Grok Bot Pages**. Each row shows the **Page**, its **Visibility**, and the

319**Date**. Click a row to open the page, or use **Visibility** to change who can

320view it.

321 

322Click the three dots on a row for **Copy Link** or **Delete**. When you delete

323a page, anyone with the link loses access.

104 324 

105## Results from Cloud Agents325## Results from Cloud Agents

106 326 


111In the desktop app, the Cloud Agent's card in the conversation shows the same331In the desktop app, the Cloud Agent's card in the conversation shows the same

112files; open an image or video to view it full screen.332files; open an image or video to view it full screen.

113 333 

334In the phone app, the Cloud Agent's card shows the same files once the run is

335**Done**, **Error**, or **Expired**: images first, then videos, then other

336files. Tap an image to view it full screen, a video to play it, or another

337file to open your phone's share sheet. If a file doesn't load, tap **Retry**.

338If the run opened a pull request and hasn't expired, **View PR** opens it.

339**Open in Cursor** opens the run in the Cursor app or on the web.

340 

114## Preserve evidence341## Preserve evidence

115 342 

116A strong result should be independently reviewable. Depending on the task, ask343A strong result should be independently reviewable. Depending on the task, ask

get-started.md +80 −122

Details

1#### Start1#### Start

2 2 

3# Get started3# Get Started

4 4 

5Set up Grok Bot, create your first Bot, and hand it a useful task.5This guide takes you from install to your first finished task. You'll set up the

6desktop app, create a Bot with a clear job, and review its work.

6 7 

7## Before you begin8## Before you begin

8 9 

9You need:10You need an eligible plan: Premium, Super, or Ultra on The X Subscription, for

11an individual or a team seat. On a legacy Cursor plan, every paid individual

12plan and Cursor Teams include Grok Bot. You can also link an individual

13SuperGrok, SuperGrok Plus, SuperGrok Heavy, or X Premium+ subscription, or sign

14in with a seat on a self-serve Grok Business plan. See

15[Grok Bot on The X Subscription](/x-subscription/grok-bot) and

16[Plans and billing](https://cursor.com/help/grok-bot/plans).

10 17 

11* An eligible plan: every paid individual Cursor plan or the Cursor Teams plan,18Grok Bot needs cloud data storage, so accounts on Privacy Mode (Legacy) are

12 an individual SuperGrok, SuperGrok Plus, or SuperGrok Heavy subscription19prompted to switch to Privacy Mode before starting.

13 linked to your Cursor account, or a seat on a self-serve Grok Business plan

14 (see

15 [Plans and billing](https://cursor.com/help/grok-bot/plans))

16* The Grok Bot desktop app for macOS, Windows, or Linux

17* An app or website where your first Bot can do useful work

18 

19You can also [set up and use Grok Bot on mobile](/grok-bot/mobile).

20 

21> Grok Bot requires cloud data storage. Accounts using Legacy Privacy Mode

22> must move to a supported Cursor data setting before Grok Bot can start. Open

23> [Cursor privacy settings](https://cursor.com/dashboard/settings?openPrivacy=true)

24> to review the account setting.

25 20 

26## 1. Install the desktop app21## 1. Install the desktop app

27 22 

28Open the [Grok Bot downloads page](https://x.ai/bot) and choose the download23Get the installer from the Grok Bot page of the

29for your computer.24[Cursor dashboard](https://cursor.com/dashboard/bot): the **Download Grok Bot**

30 25setup row installs the desktop app or copies a link you can share. If you don't

31### macOS26have dashboard access, ask your admin for the download link. You can also

32 27download the app from [x.ai/bot](https://x.ai/bot). The app runs on macOS

331. Choose the Apple silicon or Intel download.28(Apple silicon and Intel), Windows (x64 and Arm64), and Linux (x64 and Arm64)

342. Open the downloaded disk image.29and checks for updates automatically. On a phone, install Grok Bot from the App

353. Drag **Grok Bot** to **Applications**.30Store or Google Play; see

364. Open Grok Bot. If macOS asks for confirmation, choose **Open**.31[Use Grok Bot on your phone](#use-grok-bot-on-your-phone).

37 

38To check which download you need, open **Apple menu → About This Mac**. A

39**Chip** field means Apple silicon; a **Processor** field means Intel.

40 

41### Windows

42 

431. Choose the x64 or Arm64 download.

442. Run the installer.

453. Open Grok Bot from the Start menu.

46 

47To check the architecture, open **Settings → System → About → System type**.

48 

49### Linux

50 

51Linux builds publish with every stable release. Get them under

52**More downloads** on [x.ai/bot](https://x.ai/bot).

53 

541. Choose the x64 or Arm64 download in the format your distribution uses: a

55 `.deb` package for Debian and Ubuntu, an `.rpm` package for Fedora and

56 RHEL, or an AppImage for other distributions.

572. Install the `.deb` or `.rpm` with your package manager, or make the

58 AppImage executable and run it.

593. Open Grok Bot from your application launcher.

60 

61To check the architecture, run `uname -m` in a terminal: `x86_64` means x64

62and `aarch64` means Arm64.

63 

64Grok Bot checks for updates automatically. You can also use **Check for

65Updates** from **Settings → Updates**.

66 32 

67## 2. Sign in33## 2. Sign in

68 34 

691. Choose **Sign in** on the welcome screen. If you are already in the app,35Choose **Sign in** on the welcome screen and finish authentication in your

70 use **Sign In with Cursor** from Settings.36browser. Grok Bot uses your Cursor account, and there is no separate Grok Bot

712. Finish authentication in the browser window that opens.37login. If your organization uses single sign-on, sign in through your normal

723. Return to Grok Bot after the browser confirms the sign-in.38company flow; your existing Cursor SSO configuration applies.

734. If your access comes from a SuperGrok subscription, link it when the app39 

74 asks. On iPhone and Android, the access screen offers **Link Grok Account**40If your access comes from a seat on a self-serve Grok Business plan, choose

75 and then **Finished Linking? Refresh My Status**; on desktop,41**Sign in with Grok** in the browser and use the Grok account that holds the

76 **Settings → Usage & Billing** offers **Get Access with Grok**.42seat. If your access comes from a SuperGrok or X Premium+ subscription, link it

43when the app asks. On iPhone and Android, the access screen offers **Link Grok

44Account** and then **Finished Linking? Refresh My Status**; on desktop,

45**Settings → Usage & Billing** offers **Get Access with Grok**. For sign-in

46problems, see [Sign-in does not complete](/grok-bot/troubleshooting#sign-in-does-not-complete).

77 47 

78Grok Bot uses your Cursor account. If your organization requires single sign-on48## 3. Meet your first Bot

79(SSO), complete the normal organization sign-in flow.

80 49 

81On first use, click through a short intro. Computer setup runs in the50After you sign in, click through a short intro. Grok Bot then sets up your first

82background, and Grok Bot sets up your first Bot, named **Grok Bot**, and opens51Bot, named **Grok Bot**, and opens a chat with it.

83a chat with it.

84 52 

85## 3. Create your first Bot53To add more Bots, choose the **+** button in the sidebar, then **Create a Bot**,

54name the Bot, and choose **Create**. On a Cursor team, share a Bot to let

55teammates chat with it, and choose **Browse shared Bots** under **+** to find

56Bots shared with you; see [Shared Bots](/grok-bot/shared-bots).

86 57 

87Give each Bot one primary job in its first message and ask it to remember how58Give each Bot one primary job in its first message and ask it to remember how

88it should work. To rename it, click its name at the top of the chat to open its59it should work. To rename it, click its name at the top of the chat to open its

89details. For example:60details. A focused Bot builds more useful context than one catch-all helper.

61For example:

90 62 

91> Your job is product performance. Investigate product-performance questions63> Your job is product performance. Investigate product-performance questions

92> with our observability tools. Preserve links and screenshots, separate64> with our observability tools. Preserve links and screenshots, separate

93> evidence from hypotheses, and lead with the highest-impact issue. Never65> evidence from hypotheses, and lead with the highest-impact issue. Never

94> change production settings. Remember this for future work.66> change production settings. Remember this for future work.

95 67 

96Focused Bots build more useful context than one catch-all Bot. You can add more

97Bots later with **New → Create new Bot** when work naturally splits into

98distinct roles. On a Cursor team, open the command palette and choose **Create

99new Team Bot** to make a Bot your teammates can chat with; see

100[Team Bots](/grok-bot/team-bots).

101 

102## 4. Give it a first task68## 4. Give it a first task

103 69 

104Type in the composer, or dictate with **Start voice input** (`Cmd/Ctrl+D` on70Type in the composer, or dictate with **Start voice input** (`Cmd/Ctrl+D` on

105desktop; **Start dictation** on iPhone and Android). You can also choose71desktop; **Start dictation** on iPhone and Android). You can also choose

106**Start voice chat** for a live conversation.72**Start voice chat** for a live conversation.

107 73 

108A strong request includes:74A strong request states the outcome, the sources that matter, the constraints,

109 75the deliverable, and where the Bot should stop for you. For a five-minute first

1101. **Outcome:** What should be finished?76result, attach a document and try:

1112. **Sources:** Which apps, websites, files, or conversations matter?

1123. **Constraints:** What must the Bot avoid or ask before doing?

1134. **Deliverable:** What should it return?

1145. **Review point:** When should it stop for you?

115 

116For a five-minute first result that needs no connector or website login, attach

117a document and try:

118 77 

119> Summarize this document in five bullets. List every date, decision, and open78> Summarize this document in five bullets. List every date, decision, and open

120> question in a separate section. Cite the page or section for each item. Do not79> question in a separate section, and cite the section for each item. Don't

121> change the source file.80> change the source file.

122 81 

123Then try a task in one of your tools:

124 

125> Open our analytics dashboard and compare new-user activation for this week

126> with the previous four weeks. Identify the largest step-level change and

127> draft a short investigation plan with links to the relevant charts. Do not

128> change any dashboards. Ask me to sign in if needed.

129 

130Before allowing external changes, review

131[Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy).

132 

133## 5. Sign in to the tools it needs82## 5. Sign in to the tools it needs

134 83 

135When the Bot reaches an app that requires authentication, it may ask you to84When the Bot reaches an app that requires authentication, it uses a login saved

136take over the computer.85in [Vault](/grok-bot/vault) or a connected password manager, or asks you for it

137 86with a [Secure Form](/grok-bot/vault#secure-forms). The Bot never sees the

1381. Choose **Take over** on the request in the conversation.87password, and the signed-in session persists on your computer for future tasks.

1392. Enter the password, passkey, two-factor code, or complete the CAPTCHA88For single sign-on, a passkey, or another step a form can't handle, it hands you

140 yourself.89the computer: click **Open computer**, finish that step, and return control. For

1413. Choose **I'm done** to hand control back.90supported services, you can also

91[connect an app](/grok-bot/computer-and-apps#connect-an-app) instead.

142 92 

143The Bot doesn't see your password. The browser session persists on your shared Grok Bot computer, so other Bots93## 6. Review the result and make it stick

144can use the same signed-in session when appropriate.

145 94 

146For supported services, you can also install a plugin from **Connect apps** in95Ask for revisions, and name lasting preferences explicitly, like a report

147the sidebar and authenticate it in your browser.96format you want reused. When the process is stable, save it as a

97[skill or routine](/grok-bot/skills-routines-and-automations).

148 98 

149## 6. Review the result99Before you let a Bot change external systems, read

100[Approvals and Auto Review](/grok-bot/security#approvals-and-auto-review). It

101covers approval prompts, the review model behind them, and how to keep

102credentials out of chat.

150 103 

151Ask the Bot to revise anything that is incomplete or formatted incorrectly.104## Use Grok Bot on your phone

152Name the lasting preference explicitly:

153 105 

154> Use this format for future weekly reports: five bullets, source links inline,106The iPhone app (iOS 18 or later) and the Android app (Android 9 or later)

155> and a final section called “Decisions needed.”107connect to the same Bots, conversations, routines, and cloud computer as

108desktop. Install Grok Bot from the App Store or Google Play and sign in with the

109same Cursor account; access from your plan or SuperGrok link carries over

110without a second purchase. From your phone you can message Bots, watch and take

111over the computer, approve actions, and pause or resume routines.

156 112 

157When the process is stable, ask the Bot to save it as a skill or113Some flows stay on desktop: teaching a workflow by demonstration, testing

158[create a routine](/grok-bot/skills-routines-and-automations).114routines, and updating the computer. See [Grok Bot on mobile](/grok-bot/mobile)

115for setup details and for subscribing from the mobile app if your account

116doesn't include access.

159 117 

160## If something doesn't work118## If something doesn't work

161 119 

162Most setup problems clear after you fully quit and reopen the app. For120Most setup problems clear after you fully quit and reopen the app. For

163symptom-by-symptom help with the computer, routines, plugins, and sign-in, see121symptom-by-symptom help with computers, routines, connected apps, and startup,

164[Troubleshooting](/grok-bot/troubleshooting), or122see [Troubleshooting](/grok-bot/troubleshooting), or

165[contact support](/grok-bot/troubleshooting#before-contacting-support).123[contact support](/grok-bot/troubleshooting#before-contacting-support).

166 124 

167## Next steps125## Related pages

168 126 

169* [Create and manage more Bots](/grok-bot/bots)127* [Work with Grok Bot](/grok-bot/bots)

170* [Use apps and the cloud computer](/grok-bot/computer-and-apps)128* [Grok Bot use cases](/grok-bot/use-cases)

171* [Attach files and review results](/grok-bot/files-and-results)129* [Deploy Grok Bot to your organization](/grok-bot/deployment)

172* [Set approval and privacy controls](/grok-bot/approvals-security-and-privacy)130* [Plans and billing](https://cursor.com/help/grok-bot/plans)

Details

6provider (IdP). It covers giving people outside your engineering organization6provider (IdP). It covers giving people outside your engineering organization

7access to Grok Bot through your Cursor team, and letting members sign in to7access to Grok Bot through your Cursor team, and letting members sign in to

8IdP-provisioned apps from the Bot's computer. For the broader security model,8IdP-provisioned apps from the Bot's computer. For the broader security model,

9see [Grok Bot security](/grok-bot/security); for rollout steps and the admin9see [Grok Bot security](/grok-bot/security).

10controls, see

11[Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises).

12 10 

13Grok Bot uses your Cursor account, so there is no separate Grok Bot app in Okta11Grok Bot uses your Cursor account, so there is no separate Grok Bot app in Okta

14or Entra ID. Everything in this guide happens on the Cursor app you already12or Entra ID. Everything in this guide happens on the Cursor app you already


216 214 

217## Related pages215## Related pages

218 216 

219* [Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises)

220* [Grok Bot security](/grok-bot/security)217* [Grok Bot security](/grok-bot/security)

221* [Connect to private networks](/grok-bot/private-networks)218* [Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises)

222* [Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy)

223* [SSO](https://cursor.com/docs/account/teams/sso)219* [SSO](https://cursor.com/docs/account/teams/sso)

224* [SCIM](https://cursor.com/docs/account/teams/scim)220* [SCIM](https://cursor.com/docs/account/teams/scim)

225* [Organizations](https://cursor.com/docs/enterprise/organizations)221* [Organizations](https://cursor.com/docs/enterprise/organizations)

Details

250 250 

251Other places show less:251Other places show less:

252 252 

253* **Shared Bots notify only the sender.** In a team Bot, the notice and its253* **Shared Bots notify only the sender.** In a shared Bot, the notice and its

254 buttons go only to the teammate who sent the blocked message, in their own254 buttons go only to the teammate who sent the blocked message, in their own

255 chat with the Bot, and Edit or Reset changes only that chat. The Bot's owner255 chat with the Bot, and Edit or Reset changes only that chat. The Bot's owner

256 isn't shown the deny reason or your Blocked Message. Rooms and group chats256 isn't shown the deny reason or your Blocked Message. Rooms and group chats


302 302 

303**Covered:** the model requests behind your team members' Grok Bot303**Covered:** the model requests behind your team members' Grok Bot

304conversations. That includes every step of a turn, subagents, the summaries304conversations. That includes every step of a turn, subagents, the summaries

305Grok Bot writes of long conversations, and routines. A team Bot or room follows305Grok Bot writes of long conversations, and routines. A shared Bot or room

306its team's inference hook. A personal Bot follows the team its owner has306follows its team's inference hook. A personal Bot follows the team its owner has

307selected. Each request gets its own frame with the conversation so far.307selected. Each request gets its own frame with the conversation so far.

308 308 

309**Not covered:**309**Not covered:**

mobile.md +241 −13

Details

12## Requirements12## Requirements

13 13 

14* iPhone with iOS 18 or later, or a phone with Android 9 or later14* iPhone with iOS 18 or later, or a phone with Android 9 or later

15* An eligible plan: every paid individual Cursor plan or the Cursor Teams plan,15* An eligible plan: Premium, Super, or Ultra on The X Subscription, for an

16 an individual SuperGrok, SuperGrok Plus, or SuperGrok Heavy subscription16 individual or a team seat. On a legacy Cursor plan, every paid individual

17 linked to your Cursor account, or a seat on a self-serve Grok Business plan17 plan and Cursor Teams include Grok Bot, and you can also link an individual

18 (see18 SuperGrok, SuperGrok Plus, SuperGrok Heavy, or X Premium+ subscription. See

19 [Plans and billing](https://cursor.com/help/grok-bot/plans))19 [Grok Bot on The X Subscription](/x-subscription/grok-bot) and

20 [Plans and billing](https://cursor.com/help/grok-bot/plans).

20* Internet connection21* Internet connection

21 22 

22The iOS app also runs on iPad (iPadOS 18 or later).23The iOS app also runs on iPad (iPadOS 18 or later).


30 31 

311. Open Grok Bot.321. Open Grok Bot.

322. Choose **Log In or Sign Up**.332. Choose **Log In or Sign Up**.

333. Complete Cursor authentication in the browser.343. Complete Cursor authentication in the browser with the **same Cursor

344. Return to the app. If your access comes from a SuperGrok subscription,35 account** you use on desktop or web.

35 choose **Link Grok Account** when the access screen asks, finish linking in364. Return to the app. If your access comes from a SuperGrok or X Premium+

36 the browser, then choose **Finished Linking? Refresh My Status**.37 subscription, choose **Link Grok Account** when the access screen asks,

38 finish signing in to Grok in the browser, then choose

39 **Finished Linking? Refresh My Status**. A link made on desktop or the web

40 also works on the phone with the same Cursor account.

37 41 

38New users can complete the first-run tour, choose a first Bot, and wait while42New users can complete the first-run tour, choose a first Bot, and wait while

39the shared computer is set up. Existing users go directly to their synced Bot43the shared computer is set up. Existing users go directly to their synced Bot


45[Control notifications](/grok-bot/settings-and-notifications#control-notifications)49[Control notifications](/grok-bot/settings-and-notifications#control-notifications)

46for when your phone is still notified.50for when your phone is still notified.

47 51 

52There is no setting that keeps your phone quiet only while the desktop app is

53open. To stop alerts for one Bot, tap the Bot's name at the top of its chat and

54turn off **Notifications**; the note there is

55**Get notified when this Bot finishes or is waiting for you**. Off means that

56Bot does not notify you, including on your phone. On desktop, ask the Bot to

57turn its notifications off. To stop phone alerts for

58every Bot, open **Settings** on the phone and turn off **Notifications**. If the

59phone says **Notifications are off**, choose **Open Settings** and allow

60notifications for Grok Bot there only if you want them back.

61 

62## Access and subscriptions

63 

64Grok Bot access carries into mobile when you sign in with the same Cursor

65account. This includes:

66 

67* **Premium**, **Super**, or **Ultra** on The X Subscription, including team

68 seats

69* Legacy **Cursor Ultra**, **Cursor Pro+**, or **Cursor Pro**

70* Legacy **Cursor Teams** (self-serve) seats

71* **SuperGrok**, **SuperGrok Plus**, or **SuperGrok Heavy** account links

72* **X Premium+** account links

73 

74You should not buy a second subscription through Apple or Google Play in these

75cases. You can still upgrade within your plans, such as **Pro+** to **Ultra**.

76A Cursor plan and a SuperGrok or X Premium+ link do not add together; Grok Bot

77uses whichever one grants more weekly usage. Your phone and desktop share the

78same usage on your Cursor account.

79 

80### Subscribe from the phone

81 

82If your Cursor account doesn't already include Grok Bot, subscribe from the

83mobile app:

84 

851. Open Grok Bot on your phone.

862. Choose a plan on the paywall screen.

873. Complete the in-app purchase through the App Store on iOS or Google Play on

88 Android.

89 

90Only monthly individual plans are available through the mobile app. For yearly

91billing, Teams, or Enterprise plans, subscribe on

92[cursor.com](https://cursor.com/dashboard/billing). If you subscribed in the

93app and want on-demand usage, enable it on the web.

94 

95### Manage or cancel a phone subscription

96 

97The store you bought through handles the subscription, including store free

98trials (intro offers). Cursor can't cancel an in-app plan or refund it for you.

99 

100* **iOS:** Apple handles in-app subscriptions. Cancel or change the plan in

101 **Apple ID → Subscriptions** before a trial ends if you do not want it to

102 convert to a paid subscription. For Apple billing questions and refunds, use

103 [Apple's subscription support](https://support.apple.com/billing).

104* **Android:** Google Play handles in-app subscriptions. Cancel or change the

105 plan in the Google Play app under

106 **Payments & subscriptions → Subscriptions**. For Google Play billing

107 questions and refunds, use

108 [Google Play's refund support](https://support.google.com/googleplay/answer/2479637).

109 Android has no in-app trial.

110 

111The Grok Bot usage-credit trial claimed on web or desktop is separate; see

112[Is there a free trial?](/grok-bot/faq#is-there-a-free-trial).

113 

48## Message a Bot114## Message a Bot

49 115 

50From a conversation, you can:116From a conversation, you can:


74When a Bot prepares an email or Slack message, the conversation can show a140When a Bot prepares an email or Slack message, the conversation can show a

75draft you can edit. Choose **Send** or **Discard**.141draft you can edit. Choose **Send** or **Discard**.

76 142 

143## Use Siri, Shortcuts, and Live Activities on iPhone

144 

145Grok Bot adds shortcuts you can run from Siri, Spotlight, or the Shortcuts app:

146**List Bots**, **Send Message**, **Start Dictation**, and **Start Voice Chat**.

147For example, say "Send a message in Grok Bot."

148 

149**Start Dictation** lets you dictate a message to a Bot without opening the

150app, as long as your iPhone is unlocked. While it runs, a Live Activity on the

151Lock Screen and in the Dynamic Island shows its progress, with buttons to

152cancel or send. A voice chat also shows a Live Activity while you're on the

153line.

154 

77## Create Bots and groups155## Create Bots and groups

78 156 

79Use the **+** control on the home screen to choose **New Bot** or **New Group157Use the **+** control on the home screen to choose **New Bot** or **New Group


91 169 

92The screen is the same shared computer used by every Bot on your account.170The screen is the same shared computer used by every Bot on your account.

93 171 

172Updating and recovering the computer aren't available on mobile. Use desktop

173Grok Bot to update or recover it, or to reconnect your phone when the computer

174won't connect; see

175[The computer cannot be reached](/grok-bot/troubleshooting#the-computer-cannot-be-reached).

176 

177## Let a Bot use your phone's apps

178 

179A Bot can use some apps on your phone when you ask, such as checking your

180calendar or setting a timer. This works only in your own chat with a Bot you

181own in the Grok Bot app. It doesn't work in group chats, in other apps such as

182Slack, or with a shared Bot someone else owns.

183 

184On iPhone and Android:

185 

186* **Calendar**: read your events, and add, change, or delete them. New events

187 go in your default calendar unless you name another one. The Bot can't change

188 or delete a repeating event, and it never invites anyone.

189* **Contacts**: look someone up by name for a phone number, email, address, or

190 birthday. The Bot only reads your contacts. If you shared only some contacts

191 with Grok Bot, it sees only those.

192* **Location**: read where your phone is right now. The Bot gets a position,

193 not an address or place name, and how precise it is depends on your phone's

194 location settings.

195* **Alarms**: set an alarm or start a timer. An alarm rings once, the next time

196 your phone's clock shows that time, so it can't be set more than 24 hours

197 ahead. A timer runs for up to 24 hours. The Bot can't list, change, or cancel

198 alarms and timers.

199 

200On iPhone only:

201 

202* **Reminders**: read your reminders, and add, change, check off, or delete

203 them. New reminders go in your default list unless you name another one.

204* **Home**: read your Apple Home accessories and change them, such as lights,

205 fans, blinds, thermostats, locks, garage doors, and security systems.

206 

207On iPhone, alarms and timers need a newer version of iOS than Grok Bot itself

208requires. If your iPhone can't set them, **Alarms** doesn't appear under

209**This iPhone**, and the Bot can't set alarms or timers on it. On Android, the

210phone passes alarms and timers to your Clock app, which may open. The Clock app

211doesn't confirm that it saved them, so the Bot asks you to check there.

212 

213### Keep Grok Bot open on your phone

214 

215The Bot can reach your phone only while Grok Bot is open on it. If the app is

216closed or in the background, the Bot can't use your phone's apps and asks you

217to open Grok Bot on your phone, then try again.

218 

219If Grok Bot is open on more than one phone, the Bot uses the phone you sent

220your message from when it can. Otherwise it prefers a phone that already has

221the permission it needs.

222 

223### Allow an app

224 

225Most apps need your phone's permission before the Bot can use them. To give it

226ahead of time, open **Settings → Connect apps** and choose **iPhone**,

227**iPad**, or **Android** next to **All**. Your apps are listed under

228**This iPhone**, **This iPad**, or **This device**:

229 

230* **Allow** asks your phone for the permission.

231* **Allowed** means the permission is on.

232* **Denied** means the permission was turned down. Choose **Open Settings** and

233 turn it on in your phone's settings.

234 

235An app that needs no permission, such as **Alarms** on Android, shows what it

236does instead. Choose an app to see its details.

237 

238If you haven't allowed an app yet, the Bot asks the first time it needs it. The

239chat shows a **Grok Bot needs permission** card with the app and the phone.

240Choose **Allow**, or **Open Settings** if the permission was turned down

241before. Answer on the phone the card names; your other devices show where to

242give permission. When the card shows **Allow**, the Bot waits up to five

243minutes for you to choose it. If you allow the app later, within an hour, the

244Bot can pick the request back up without you asking again.

245 

246### Approve what the Bot does

247 

248Your team's admin can limit what Bots do on your devices with

249[Execution on Local Computer](/grok-bot/teams-and-enterprises#execution-on-local-computer).

250When your team has set a limit, each phone's page in **Manage your devices**

251shows it under **Tools on this device**, with a note that says what your team's

252admin allows:

253 

254* **Ask every time**: each use shows an approval card with **Allow once** and

255 **Deny**. Answer it on the phone the card names; your other devices point you

256 to that phone.

257* **Never allow**: Bots can't use your phone's apps.

258* **Always allow**: the Bot uses your phone's apps without asking.

259 

260When there's no team limit, the page doesn't show **Tools on this device**. If

261Auto Review is on, it checks each use and can stop to ask whether the Bot may

262use a connected app. With Auto Review off, the Bot uses your phone's apps

263without asking. Locks, garage doors, and security systems follow the same rules

264as other Home changes. See

265[Review an action](/grok-bot/approvals-security-and-privacy#review-an-action).

266 

267### Manage your devices

268 

269Open **Settings → Bot → Manage your devices** to see the phones and computers

270where you use Grok Bot. The device you're holding comes first, then devices

271that are online. Each one shows **This device**, **Online now**, or when it was

272last opened.

273 

274Choose a device to open its page:

275 

276* Choose **Name** to rename it.

277* For a computer, **Execution on this device** sets whether Bots can run

278 commands on it: **Ask every time**, **Always allow**, or **Never allow**.

279 Your team's limit can rule out some choices.

280* To remove another computer, choose **Remove Computer** while it's offline.

281 Restarting Grok Bot on that computer adds it back. Phones can't be removed.

282 

283On desktop, the same list is under **Settings → Computer → Manage devices**.

284 

94## Manage recurring work285## Manage recurring work

95 286 

96Open a Bot's profile to review its routines. You can inspect the schedule, next287Open a Bot's profile to review its routines. You can inspect the schedule, next

97run, instruction, and **Run history**, use **Active** to pause or resume a288run, instruction, and **Run history**, use **Active** to pause or resume a

98routine, and delete a routine from the profile.289routine, and swipe a routine in the list to delete it.

99 290 

100Editing the schedule or instruction and testing a routine currently require the291To change a routine, open it and choose **Edit routine**. The Bot's chat opens

101desktop app.292with a draft that asks it to edit the routine; describe the change and send it.

293To start a new routine, choose **Add routine** under **Routines** on the Bot's

294profile. Testing a routine requires the desktop app.

102 295 

103## Search and review prior work296## Search and review prior work

104 297 


106**Group Chats**, **Files**, and **Routines**, or **All** at once. Conversation299**Group Chats**, **Files**, and **Routines**, or **All** at once. Conversation

107actions provide quick access to common controls such as pin and hide.300actions provide quick access to common controls such as pin and hide.

108 301 

302## Pages and the Library

303 

304Tap a page's card in a conversation to open it. To change who can view a page

305you own, tap the share button at the top of the open page; see

306[Share a page](/grok-bot/files-and-results#share-a-page). Renaming a page

307currently requires the desktop app. To change what's on a page, ask the Bot in

308the conversation.

309 

310Each Bot has a **Library**. Tap the Bot's name at the top of the chat to open

311its profile, then tap **Library**. It lists the pages linked in the

312conversation and the images, videos, files, and links in it, including ones

313you sent, newest first under **Today**, **This week**, and **Older**. Tap

314**Show more** to look further back in the conversation.

315 

316* A page you own shows whether it's **Private**, **Team**, or **Public** on

317 its row. Touch and hold the row for **Open**, **Share**, **Copy Link**, and

318 **Open in Web**. **Share** sends the page's link; to change who can view it,

319 open the page and tap the share button.

320* Tap an image to view it full screen, a video to play it, a file to preview

321 it, or a link to open it in your browser.

322 

323If the Library can't load, tap **Try Again**.

324 

109## Settings325## Settings

110 326 

111From **Settings**, you can:327From **Settings**, you can:


114* Install or review plugins330* Install or review plugins

115* Edit Bot settings331* Edit Bot settings

116* Configure Auto Review when available332* Configure Auto Review when available

333* Set your Bot's time zone: **Set Time Zone Automatically** follows this phone;

334 turn it off to pick a **Time Zone**

335* Reset the computer your Bots share from its last saved snapshot, or check its

336 disk space, under **Bot Computer**

337* Bring memory over from another AI assistant with **Import Memory**

338* See the phones and computers where you use Grok Bot under

339 **Manage your devices** (see

340 [Let a Bot use your phone's apps](#let-a-bot-use-your-phones-apps))

117* Choose an appearance341* Choose an appearance

118* Choose a **Language** (**System** follows the device; the list is shorter342* Choose a **Language** (**System** follows the device; the list is shorter

119 than on desktop)343 than on desktop)

344* Turn **Haptics** on or off

120* Review usage or manage an eligible App Store or Google Play subscription345* Review usage or manage an eligible App Store or Google Play subscription

121* Sign out or delete your account346* Report a problem with **Send Feedback**

347* Sign out, or delete your account: open your account, choose

348 **Delete Account**, and confirm again in the browser. Deleting the account

349 can't be undone.

122 350 

123Some advanced desktop controls and teach-by-demonstration workflows are not351Some advanced desktop controls and teach-by-demonstration workflows are not

124available on mobile. Use the desktop app when a flow requires them.352available on mobile. Use the desktop app when a flow requires them.

overview.md +27 −19

Details

9Bot, or read [how teams roll it out](/grok-bot/teams-and-enterprises).9Bot, or read [how teams roll it out](/grok-bot/teams-and-enterprises).

10 10 

11You work with a Bot by messaging it. Type, dictate, or start a voice chat.11You work with a Bot by messaging it. Type, dictate, or start a voice chat.

12Give it a task, the relevant context, and access to the tools it needs. It takes on multi-step work across apps and websites, keeps you12Give it a task, the relevant context, and access to the tools it needs. It

13updated in the conversation (including voice memos and drafts you approve13takes on multi-step work across apps and websites, keeps you updated in the

14before they are sent), and comes back when something needs your approval.14conversation, and comes back when something needs your approval.

15 15 

16Grok Bot runs on macOS, Windows, Linux, iOS, and Android, and is included with16Grok Bot runs on macOS, Windows, Linux, iOS, and Android. On The X

17every paid individual Cursor plan and with the Cursor Teams plan. You can also17Subscription, it's included with Premium, Super, and Ultra, for individuals and

18link an individual SuperGrok, SuperGrok Plus, or SuperGrok Heavy subscription,18team seats. On a legacy Cursor plan, it's included with every paid individual

19or sign in with a seat on a self-serve Grok Business plan. See19plan and with Cursor Teams. You can also link an individual SuperGrok,

20SuperGrok Plus, SuperGrok Heavy, or X Premium+ subscription, or sign in with a

21seat on a self-serve Grok Business plan. See

22[Grok Bot on The X Subscription](/x-subscription/grok-bot) and

20[Plans and billing](https://cursor.com/help/grok-bot/plans) for the full23[Plans and billing](https://cursor.com/help/grok-bot/plans) for the full

21matrix.24matrix.

22 25 


29 closed.32 closed.

30* **Setup is a message, not a workflow builder.** Create a Bot, describe the33* **Setup is a message, not a workflow builder.** Create a Bot, describe the

31 job, and grant access as it asks. The same Bot is reachable from the desktop34 job, and grant access as it asks. The same Bot is reachable from the desktop

32 app and the [mobile app](/grok-bot/mobile).35 app and the [iPhone and Android apps](/grok-bot/mobile).

33* **Bots coordinate with each other.** Your Bots can run in parallel, message36* **Bots coordinate with each other.** Your Bots can run in parallel, message

34 each other, share context in37 each other, share context in

35 [group chats](/grok-bot/chat-and-collaboration#start-a-group-chat), and pass38 [group chats](/grok-bot/chat-and-collaboration#start-a-group-chat), and pass


47computer belongs to your account, not to an individual Bot, so treat anything50computer belongs to your account, not to an individual Bot, so treat anything

48placed on it as available to every Bot you run; between users, isolation is51placed on it as available to every Bot you run; between users, isolation is

49strict. [The computer and apps](/grok-bot/computer-and-apps) covers the full52strict. [The computer and apps](/grok-bot/computer-and-apps) covers the full

50model. When you chat with a teammate's [Team Bot](/grok-bot/team-bots), it53model. When you chat with a teammate's [shared Bot](/grok-bot/shared-bots), it

51usually works on your computer too.54usually works on your computer too.

52 55 

53## A good first handoff56## A good first handoff


88### What does a Bot remember?91### What does a Bot remember?

89 92 

90Stable preferences, role context, and summaries of prior work. Conversations93Stable preferences, role context, and summaries of prior work. Conversations

91and learned context stay separate per Bot, while shared files, browser94and learned context stay separate per Bot, except for a few facts about you,

92sessions, and direct handoffs move context between them. For consequential95such as your name and time zone, that all your Bots share. Shared files,

93decisions, ask the Bot to check the current source instead of relying on96browser sessions, and direct handoffs move context between them. For

94memory.97consequential decisions, ask the Bot to check the current source instead of

98relying on memory. See

99[What a Bot remembers](/grok-bot/bots#what-a-bot-remembers).

95 100 

96### Can a Bot use any website?101### Can a Bot use any website?

97 102 


102### Which platforms are supported?107### Which platforms are supported?

103 108 

104The desktop app runs on macOS (Apple silicon and Intel), Windows (x64 and109The desktop app runs on macOS (Apple silicon and Intel), Windows (x64 and

105Arm64), and Linux (x64 and Arm64), and the mobile app runs on iPhone, iPad,110Arm64), and Linux (x64 and Arm64), and the mobile app runs on iPhone and

106and Android. The computers Bots work on run in Cursor's cloud.111Android. The computers Bots work on run in Cursor's cloud.

107 112 

108### How much does Grok Bot cost?113### How much does Grok Bot cost?

109 114 

110Access is included with every paid individual Cursor plan and with the Cursor115On The X Subscription, Grok Bot is included with Premium, Super, and Ultra and

111Teams plan, through an individual SuperGrok account link, or with a seat on a116draws from the same weekly usage pool as Cursor and the Grok apps. On a legacy

112self-serve Grok Business plan. Usage resets weekly. See [Plans and billing](https://cursor.com/help/grok-bot/plans).117Cursor plan, access comes with every paid individual plan and with Cursor

118Teams, through a linked individual SuperGrok or X Premium+ subscription, or

119with a seat on a self-serve Grok Business plan. Usage resets weekly. See

120[How much does Grok Bot cost?](/grok-bot/faq#how-much-does-grok-bot-cost).

113 121 

114## Next steps122## Next steps

115 123 

Details

4 4 

5Grok Bot computers run in Cursor's cloud and reach the internet through5Grok Bot computers run in Cursor's cloud and reach the internet through

6[shared static egress IP addresses](/grok-bot/security#static-egress-ips).6[shared static egress IP addresses](/grok-bot/security#static-egress-ips).

7If the systems your Bots need, such as internal APIs, source control, databases,7If the systems your Bots need live on a private network, route traffic through a

8or staging environments, live on a private network, route traffic through a

9member's desktop or install your organization's networking client on every team8member's desktop or install your organization's networking client on every team

10computer through **Team Setup Scripts**. Tailscale and Cloudflare Tunnel are common9computer through **Team Setup Scripts**.

11client choices, and this page has a worked example for each. Other VPN,

12zero-trust, or mesh clients that run on Linux follow the same pattern. Your

13services stay off the public internet, and access is governed by the access

14controls and identity provider you already use.

15 10 

16> **Team Setup Scripts is Enterprise only.** It does not appear on other plans.11> **Team Setup Scripts is Enterprise only.** It does not appear on other plans.

17> **Network Controls is also Enterprise only.** That12> **Network Controls is also Enterprise only.** That


21 16 

22## What you can do17## What you can do

23 18 

24* Route one member's traffic through their desktop, so Bots can reach services19* Route one member's traffic through their desktop, so destinations see that

25 available from that device and destinations see its IP address.20 device's IP address. Sites that resolve to a private or VPN address stay

21 blocked unless they have been allowed for your organization.

26* Install your networking client on every team computer automatically, from one22* Install your networking client on every team computer automatically, from one

27 admin-managed manifest, with no per-computer setup.23 admin-managed manifest, with no per-computer setup.

28* Let Bots reach services on your private network without exposing those24* Let Bots reach services on your private network without exposing those


34 30 

35| Method | Use it when |31| Method | Use it when |

36| --- | --- |32| --- | --- |

37| Route egress through a desktop | One member needs access through a network already available from their device |33| Route traffic through a desktop | One member needs public sites to see their device's IP address, such as a site that allowlists office IPs |

38| Install a networking client with Team Setup | Your Enterprise team needs a consistent connection on every hosted computer |34| Install a networking client with Team Setup | Your Enterprise team needs a consistent connection on every hosted computer |

39 35 

40### Route through a member's desktop36### Route through a member's desktop


44network and IP address. It stops when the setting is turned off or an Enterprise40network and IP address. It stops when the setting is turned off or an Enterprise

45admin disables **Allow Local Egress Routing**.41admin disables **Allow Local Egress Routing**.

46 42 

43The route does not open your private network to the Bot. Sites that resolve to

44a private or VPN address are blocked unless they have been allowed for your

45organization, and the setting shows how many sites were blocked this session.

46To reach private services,

47[install a networking client with Team Setup](#install-a-networking-client-with-team-setup).

48 

47Each member controls their own desktop route. Enterprise admins can remove this49Each member controls their own desktop route. Enterprise admins can remove this

48option for the whole team from50option for the whole team from

49[Grok Bot in the Cursor dashboard](https://cursor.com/dashboard/bot). See51[Grok Bot in the Cursor dashboard](https://cursor.com/dashboard/bot). See

proxies.md +3 −2

Details

133| Let member devices reach Cursor and their hosted computer through your gateway | This page |133| Let member devices reach Cursor and their hosted computer through your gateway | This page |

134| Limit which destinations the hosted computer may reach | [Network policy](/grok-bot/security#network-policy), Enterprise only |134| Limit which destinations the hosted computer may reach | [Network policy](/grok-bot/security#network-policy), Enterprise only |

135| Route hosted computer traffic through a member device | [Route traffic through your desktop](/grok-bot/settings-and-notifications#route-traffic-through-your-desktop) |135| Route hosted computer traffic through a member device | [Route traffic through your desktop](/grok-bot/settings-and-notifications#route-traffic-through-your-desktop) |

136| Install a networking client on every hosted computer | [Team Setup](/grok-bot/private-networks#install-a-networking-client-with-team-setup), Enterprise only |136| Install a networking client on every hosted computer | [Team Setup Scripts](/grok-bot/private-networks#install-a-networking-client-with-team-setup), Enterprise only |

137 137 

138By default, the hosted computer's own traffic leaves from Cursor's138By default, the hosted computer's own traffic leaves from Cursor's

139[shared static egress IPs](/grok-bot/security#static-egress-ips) and does not139[shared static egress IPs](/grok-bot/security#static-egress-ips) and does not


188* [Connect to private networks](/grok-bot/private-networks)188* [Connect to private networks](/grok-bot/private-networks)

189* [Network, proxy, and remote connections](https://cursor.com/help/troubleshooting/network)189* [Network, proxy, and remote connections](https://cursor.com/help/troubleshooting/network)

190 190 

191Contact your Cursor account team for help with your gateway configuration.191Need help with your gateway configuration? Contact your Cursor account team for

192deployment assistance and priority support.

security.md +76 −90

Details

5Use these controls and deployment details to decide whether Grok Bot is allowed5Use these controls and deployment details to decide whether Grok Bot is allowed

6in, and to limit what Bots can access, change, and retain. Rollout steps and6in, and to limit what Bots can access, change, and retain. Rollout steps and

7the dashboard settings list live on7the dashboard settings list live on

8[Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises), and8[Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises). Common

9common review questions are on the9review questions are on [Grok Bot security FAQ](/grok-bot/security-faq).

10[Grok Bot security FAQ](/grok-bot/security-faq).

11 10 

12> **Enterprise only** on the Grok Bot dashboard: the organization-wide enable11> **Enterprise only** on the Grok Bot dashboard: the organization-wide enable

13> switch, **Network Controls**, **Team Setup Scripts**,12> switch, **Network Controls**, **Team Setup Scripts**,


16> **Allow Sudo on Bot Computers**, **Enforce Auto-review** with its team rules,15> **Allow Sudo on Bot Computers**, **Enforce Auto-review** with its team rules,

17> **Inference Hooks**, and computer management for organization admins. Audit16> **Inference Hooks**, and computer management for organization admins. Audit

18> logs, OpenTelemetry Export, the MCP allowlist, and SCIM are also Enterprise17> logs, OpenTelemetry Export, the MCP allowlist, and SCIM are also Enterprise

19> only. Self-serve Teams do not see those settings. The full list is under18> only. Self-serve Teams do not see those settings. The full list is on

20> [admin controls](/grok-bot/teams-and-enterprises#admin-controls).19> [admin controls](/grok-bot/teams-and-enterprises#admin-controls).

21 20 

22## Architecture21## Architecture


25From there, work runs on the member's hosted computer, prompts go to model24From there, work runs on the member's hosted computer, prompts go to model

26providers, and tool calls reach third-party services through connected apps.25providers, and tool calls reach third-party services through connected apps.

27 26 

28A control sits on each of those paths, and each one has its own section on27A control sits on each of those paths. Each one links to its section on this

29this page.28page.

30 29 

31## Network policy30## Network policy

32 31 

33**Network Controls is Enterprise only.** Admins set a Grok Bot network policy32**Network Controls is Enterprise only.** Admins set a Grok Bot network policy

34under **Network** on the [Grok Bot page](https://cursor.com/dashboard/bot) of33under **Network** on the [Grok Bot page](https://cursor.com/dashboard/bot) of

35the Cursor dashboard, in **Grok Bot Network Access**. It controls which destinations team computers can reach. Self-serve34the Cursor dashboard, in **Grok Bot Network Access**. It controls which

36Teams do not see this panel and cannot set a destination allowlist. Teams35destinations team computers can reach. Self-serve Teams do not see this panel

37without a policy default to allow-all.36and cannot set a destination allowlist. Teams without a policy default to

37allow-all.

38 38 

39| Mode | Effect |39| Mode | Effect |

40| --- | --- |40| --- | --- |

41| **Allow All Network Access** | Allow all destinations (what teams without a policy get) |41| **Allow All Network Access** | All destinations. Teams without a policy get this. |

42| **Defaults + Team Allowlist** | Cursor's default destinations plus your list |42| **Defaults + Team Allowlist** | Cursor's default destinations plus your list |

43| **Team Allowlist Only** | Only your list, plus the destinations a computer needs to function |43| **Team Allowlist Only** | Only your list, plus the destinations a computer needs to function |

44 44 


46 connections, with no cap on the number of entries.46 connections, with no cap on the number of entries.

47* **Directory groups. Enterprise only, inside Network Controls.** Groups can47* **Directory groups. Enterprise only, inside Network Controls.** Groups can

48 set their own network policy, which replaces the team's for their members,48 set their own network policy, which replaces the team's for their members,

49 and a lock makes the team policy effective for everyone. A member of several49 and a lock makes the team policy effective for everyone.

50 groups gets the most restrictive group policy.

51* **The policy is separate from Cloud Agent network settings.** Running50* **The policy is separate from Cloud Agent network settings.** Running

52 computers apply changes automatically within about a minute. Sleeping51 computers apply changes automatically within about a minute. Sleeping

53 computers apply changes when they next wake. You do not need to recreate the52 computers apply changes when they next wake. You do not need to recreate the


56 the model against your own data loss prevention policy, use55 the model against your own data loss prevention policy, use

57 [inference hooks](#inference-hooks).56 [inference hooks](#inference-hooks).

58 57 

59Blocking an app does not block that service's website. The58Blocking an app does not block that service's website. The connector policy

60[connector policy](/grok-bot/teams-and-enterprises#connector-policy) and the59and the network policy are separate layers, and closing both paths takes both

61network policy are separate layers, and closing both paths takes both controls.60controls.

62 61 

63### MCP servers and the network policy62### MCP servers and the network policy

64 63 


134Cursor's domains and exempt them from inspection on every profile, including133Cursor's domains and exempt them from inspection on every profile, including

135off-network. See [Configure TLS-inspecting proxies](/grok-bot/proxies).134off-network. See [Configure TLS-inspecting proxies](/grok-bot/proxies).

136 135 

137Members can route traffic through their desktop to use its network and IP136Members can route traffic through their desktop to use its IP address; sites

138address. **Team Setup Scripts is Enterprise only.** Those teams can also137that resolve to a private or VPN address stay blocked on that route unless they

139install their own networking client on every team computer. Both paths are separate from the138have been allowed for your organization. **Team Setup Scripts** is Enterprise

140shared egress ranges. See139only. Those teams can also install their own networking client on every team

140computer. Both paths are separate from the shared egress ranges. See

141[Connect to private networks](/grok-bot/private-networks).141[Connect to private networks](/grok-bot/private-networks).

142 142 

143## Approvals and Auto Review143## Approvals and Auto Review


152 152 

153When an action needs approval, the conversation shows the proposed operation153When an action needs approval, the conversation shows the proposed operation

154and its inputs. **Allow once** lets the Bot continue with that action,154and its inputs. **Allow once** lets the Bot continue with that action,

155**Always allow** can save a matching rule, and **Deny** blocks it. The controls155**Always allow** can save a matching rule, and **Deny** stops the action; the

156are the same on iPhone. An approval controls the proposed action, not156Bot does not try it again until the member sends another message. The controls

157work already completed, and nobody should approve an action whose target or157are the same on iPhone. An approval controls the proposed action, not work

158effect they cannot identify.158already completed, and nobody should approve an action whose target or effect

159they cannot identify.

159 160 

160Auto Review is the review layer behind those prompts: an independent review161Auto Review is the review layer behind those prompts: an independent review

161model that evaluates risky Bot actions before they run, covering shell162model that evaluates risky Bot actions before they run, covering shell


167 on the Grok Bot page of the Cursor dashboard. When it is on, members cannot168 on the Grok Bot page of the Cursor dashboard. When it is on, members cannot

168 turn Auto-review off, unless a group they belong to lifts the lock with169 turn Auto-review off, unless a group they belong to lifts the lock with

169 **Don't enforce for this group**; see170 **Don't enforce for this group**; see

170 [Enforce Auto-review](/grok-bot/teams-and-enterprises#enforce-auto-review)171 [Group settings](/grok-bot/teams-and-enterprises#group-settings).

171 and [Group settings](/grok-bot/teams-and-enterprises#group-settings).

172* **Admins can add team Auto-review rules. Enterprise only.** These live on172* **Admins can add team Auto-review rules. Enterprise only.** These live on

173 the Grok Bot page too. They apply to every member's Bots, show up as locked173 the Grok Bot page too. They apply to every member's Bots, show up as locked

174 rows in the member settings table, and save automatically when an admin174 rows in the member settings table, and save automatically when an admin

175 adds, edits, or deletes a rule. If admins turn enforcement off, the team175 adds, edits, or deletes a rule. If admins turn enforcement off, the team

176 rules stop applying and members go back to their own rules only. See176 rules stop applying and members go back to their own rules only.

177 [Auto-review rules](/grok-bot/teams-and-enterprises#auto-review-rules).

178* **Members can add personal rules** under **Settings → General →177* **Members can add personal rules** under **Settings → General →

179 Auto-review**, in **Custom Rules**. **Ask first** rules always stop matching actions, and178 Auto-review**, in **Custom Rules**. **Ask first** rules always stop matching

180 **Allow automatically** rules let matching actions proceed only when the179 actions, and **Allow automatically** rules let matching actions proceed only

181 reviewer finds no other reason to stop. Members can add personal rules on180 when the reviewer finds no other reason to stop. Members can add personal

182 top of team rules, but they only make behavior stricter; **Ask first** wins181 rules on top of team rules, but they only make behavior stricter;

183 when rules conflict. Keep rules narrow and tied to a known action, like "ask182 **Ask first** wins when rules conflict. Keep rules narrow and tied to a known

184 first before sending any external email" or "allow automatically when183 action, like "ask first before sending any external email" or "allow

185 running `git status` in `/workspace/reports`". Avoid broad rules like "allow184 automatically when running `git status` in `/workspace/reports`". Avoid broad

186 everything in the browser". Personal rules are saved to the member's185 rules like "allow everything in the browser". Personal rules are saved to the

187 account, so they apply from every desktop and the mobile app.186 member's account, so they apply from every desktop and the mobile app.

188* **It does not review every side effect.** Memory writes and most settings187* **It does not review every side effect.** Memory writes and most settings

189 changes are examples. Treat it as a complement to explicit boundaries and188 changes are examples. Treat it as a complement to explicit boundaries and

190 least privilege, working alongside controls that do not depend on a model's189 least privilege, working alongside controls that do not depend on a model's

191 judgment: per-action approvals, the network policy, and per-user isolation.190 judgment: per-action approvals, the network policy, and per-user isolation.

192 191 

193For the member-facing walkthrough of these prompts and rules, see

194[Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy).

195 

196## Inference hooks192## Inference hooks

197 193 

198Inference hooks send each Grok Bot model request, signed, to an AI security194Inference hooks send each Grok Bot model request, signed, to an AI security


233 they may use team or service-account credentials.229 they may use team or service-account credentials.

234* **Connector tokens stay on Cursor's backend.** Bots invoke tools without230* **Connector tokens stay on Cursor's backend.** Bots invoke tools without

235 receiving OAuth tokens, and tokens are never stored on the computer.231 receiving OAuth tokens, and tokens are never stored on the computer.

236* **Credentials stay with the member.** For login, two-factor, and payment232* **Credentials stay out of the model.** To sign in, the Bot uses a login the

237 steps, the Bot hands the computer to the member rather than typing233 member saved in Vault, a connected password manager, or a value the member

238 credentials. For supported connections, a secure secret request masks the234 enters in a Secure Form. These values are filled into the page by reference:

239 entered value and keeps it out of the transcript and away from the model;235 the model never receives a saved password, card number, or security code, or

240 passwords and one-time codes never belong in ordinary chat. See236 what the member types in a Secure Form. The Bot can see which logins are

241 [Store secrets securely](https://cursor.com/help/grok-bot/secrets) and237 saved and the member's saved contact info. For single sign-on, passkeys, and

242 [Enter passwords and verification codes yourself](/grok-bot/approvals-security-and-privacy#enter-passwords-and-verification-codes-yourself).238 other steps a form cannot handle, the Bot hands the computer to the member.

239 For an API key or other secret, a secure secret card masks the value and

240 keeps it out of the transcript and away from the model. A card saved in Vault

241 fills at checkout without a separate approval each time, so members who want

242 to approve each payment should not save the card. Vault is not available on

243 shared Bots. Passwords and one-time codes never belong in ordinary chat. See

244 [Store secrets securely](/grok-bot/vault).

243 245 

244To end a member's current work, an organization admin terminates the member's246To end a member's current work, an organization admin terminates the member's

245computer from the dashboard; see247computer from the dashboard; see [Manage Grok Bot computers](/grok-bot/computers).

246[Manage Grok Bot computers](/grok-bot/computers). That control is Enterprise248That control is Enterprise only. It stops running Bots, keeps the durable disk,

247only. It stops running Bots, keeps the durable disk, and the member's next249and the member's next session starts a fresh computer. It does not remove

248session starts a fresh computer. It does not remove access. To remove access,250access. To remove access, remove the member from the team or turn off Grok Bot

249remove the member from the team or turn off Grok Bot for their group, and251for their group, and revoke their sessions in your identity provider.

250revoke their sessions in your identity provider. Application sessions persist252Application sessions persist only on the member's computer.

251only on the member's computer.

252 253 

253When a project or login should no longer be available, members clean up254When a project or login should no longer be available, members clean up

254directly: pause or delete related routines, sign out of websites on the255directly: pause or delete related routines, sign out of websites on the


274 Recording events do not appear on the Audit Log page. To receive the275 Recording events do not appear on the Audit Log page. To receive the

275 sanitized events in your own collector, configure276 sanitized events in your own collector, configure

276 [OpenTelemetry Export](https://cursor.com/docs/enterprise/opentelemetry-export),277 [OpenTelemetry Export](https://cursor.com/docs/enterprise/opentelemetry-export),

277 which is also Enterprise only. Exported records may include the member's278 which is also Enterprise only. Privacy Mode (Legacy) forces recording off.

278 email; it is not exported for teams on Privacy Mode (Legacy), which also

279 forces recording off.

280* **Conversation content export. Enterprise only, opt-in.** OpenTelemetry

281 Export can also send the text of user prompts and assistant responses, and

282 the arguments and results of hosted MCP tool calls. It is off until an admin

283 allows it for the team and turns it on for the destination. Known credential

284 shapes, PEM blocks, and email addresses are redacted before export, but

285 pattern matching cannot catch every secret. See

286 [Conversation content export](/grok-bot/teams-and-enterprises#logging-and-audit).

287 279 

288## Endpoint tooling280## Endpoint tooling

289 281 

290Grok Bot does not ship a built-in customer-facing telemetry or EDR feed. The282Grok Bot does not ship a built-in customer-facing telemetry or EDR feed. The

291computers are Cursor-operated infrastructure that Cursor monitors for283computers are Cursor-operated infrastructure that Cursor monitors for

292operational health and abuse, and that telemetry deliberately excludes customer284operational health and abuse, and that telemetry deliberately excludes customer

293data. **Team Setup Scripts is Enterprise only.** Those admins can install285data. **Team Setup Scripts** is Enterprise only. Those admins can install their

294their own tooling on every team computer.286own tooling on every team computer.

295 287 

296## Data retention and deletion288## Data retention and deletion

297 289 


306 from the desktop app. Like Recover, Reset rebuilds the computer from the298 from the desktop app. Like Recover, Reset rebuilds the computer from the

307 last saved data, and very recent changes can be lost if the computer cannot299 last saved data, and very recent changes can be lost if the computer cannot

308 be reached to save them. See300 be reached to save them. See

309 [Update, recover, or reset the computer](/grok-bot/computer-and-apps#update-recover-or-reset-the-computer).301 [Grok Bot computer](/grok-bot/computer-and-apps#update-recover-or-reset-the-computer).

310* **Deletion follows the DPA.** Under the302* **Deletion follows the DPA.** Under the

311 [Data Processing Agreement](https://cursor.com/terms/dpa), data is deleted or303 [Data Processing Agreement](https://cursor.com/terms/dpa), data is deleted or

312 returned within 30 days of written direction after the service ends.304 returned within 30 days of written direction after the service ends.


318 310 

319## Data residency311## Data residency

320 312 

321Grok Bot computers run in the United States today. That is not the same as313Grok Bot computers run in the United States. Grok Bot is also covered by

322Cursor's314Cursor's US-only data residency program. When it is enabled, inference, data

323[US-only data residency](https://cursor.com/docs/enterprise/privacy-and-data-governance#data-residency)315processing, and storage for Grok Bot stay in the US. Contact your account team

324program, which does not apply to Grok Bot by default. If your review needs a316to enroll. See

325written residency commitment, contact your account team.317[US data residency](https://cursor.com/docs/enterprise/privacy-and-data-governance#us-data-residency)

318for supported models, exclusions, and pricing.

326 319 

327## Models and data320## Models and data

328 321 

329Cursor manages model selection. There is no customer-facing model picker, and322Grok Bot manages model selection. There is no customer-facing model picker, and

330the serving mix can change over time with no fixed vendor set guaranteed. Each323the serving mix can change over time with no fixed vendor set guaranteed. Each

331request goes to a first-party model or a third-party model from a324request goes to a first-party SpaceXSI model or a third-party model from a

332provider on the [sub-processor list](https://trust.cursor.com/subprocessors).325provider on the [sub-processor list](https://trust.cursor.com/subprocessors).

333Usage and spending views record this activity as Grok Bot usage rather than by326Usage and spending views record this activity as Grok Bot usage rather than by

334model. See327model. See

335[Which AI models power Grok Bot?](https://cursor.com/help/grok-bot/models).328[Which AI models power Grok Bot?](https://cursor.com/help/grok-bot/models).

336 329 

337* **The team model allowlist does not govern Grok Bot.** Grok Bot uses330* **The team model allowlist does not govern Grok Bot.** Grok Bot uses

338 first-party {BRAND_NAME} models and may use third-party models regardless of331 SpaceXSI first-party models and may use third-party models regardless of your

339 your

340 [model access control](https://cursor.com/docs/enterprise/model-and-integration-management#model-access-control)332 [model access control](https://cursor.com/docs/enterprise/model-and-integration-management#model-access-control)

341 settings. Teams with a model allowlist see this acknowledgement when they333 settings. Teams with a model allowlist see this acknowledgement when they

342 enable Grok Bot.334 enable Grok Bot. If your contract restricts subprocessors, contact your

335 account team.

343* **Privacy Mode applies.** While a member is on your team, the team's privacy336* **Privacy Mode applies.** While a member is on your team, the team's privacy

344 mode governs them, and with Privacy Mode enabled, customer data is not used337 mode governs them, and with Privacy Mode enabled, customer data is not used

345 for training.338 for training.


348 control. Providers may run abuse and safety classifiers, and flagged data341 control. Providers may run abuse and safety classifiers, and flagged data

349 may be stored for investigation.342 may be stored for investigation.

350 343 

351If your contract limits which subprocessors can handle your data, contact your

352account team before rolling out Grok Bot.

353 

354## Local execution344## Local execution

355 345 

356Bots can act on a member's own machine through the desktop app: run commands,346Bots can act on a member's own machine through the desktop app: run commands,


362command. Members choose the policy under352command. Members choose the policy under

363**Settings → Computer → Your computer**, in **Execution on this computer**353**Settings → Computer → Your computer**, in **Execution on this computer**

364(**Execution on Local Computer** until the desktop is listed): **Ask every354(**Execution on Local Computer** until the desktop is listed): **Ask every

365time**, **Always allow**, or **Never allow**. Recommend **Never allow** unless a Bot has a355time**, **Always allow**, or **Never allow**. Recommend **Never allow** unless

366specific reason to work on local files. Admins can cap the policy for the356a Bot has a specific reason to work on local files. Admins can cap the policy

367whole team with357for the whole team with

368[Execution on Local Computer](/grok-bot/teams-and-enterprises#execution-on-local-computer)358[Execution on Local Computer](/grok-bot/teams-and-enterprises#execution-on-local-computer)

369on the Grok Bot page; a member's own setting still applies when it is359on the Grok Bot page; a member's own setting still applies when it is stricter.

370stricter. For the member-facing steps, see

371[Control access to your local computer](/grok-bot/approvals-security-and-privacy#control-access-to-your-local-computer).

372 360 

373## Hosting361## Hosting

374 362 


388the network policy, per-action approvals, and per-user isolation. Outside376the network policy, per-action approvals, and per-user isolation. Outside

389content is marked as untrusted data when presented to the model. With377content is marked as untrusted data when presented to the model. With

390[inference hooks](#inference-hooks), your own security server can also screen378[inference hooks](#inference-hooks), your own security server can also screen

391that content before the next model call. These controls379that content before the next model call. These controls reduce, but do not

392reduce, but do not eliminate, risk from malicious content, which is another380eliminate, risk from malicious content, which is another reason to keep

393reason to keep consequential actions behind approval.381consequential actions behind approval.

394 382 

395## Certifications383## Certifications

396 384 


410* [Configure identity and access](/grok-bot/identity-and-access)398* [Configure identity and access](/grok-bot/identity-and-access)

411* [Connect to private networks](/grok-bot/private-networks)399* [Connect to private networks](/grok-bot/private-networks)

412* [Configure TLS-inspecting proxies](/grok-bot/proxies)400* [Configure TLS-inspecting proxies](/grok-bot/proxies)

413* [Manage Grok Bot computers](/grok-bot/computers)

414* [Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy)

415* [Privacy and Data Governance](https://cursor.com/docs/enterprise/privacy-and-data-governance)401* [Privacy and Data Governance](https://cursor.com/docs/enterprise/privacy-and-data-governance)

416 402 

417Contact your Cursor account team about egress ranges, residency commitments,403Contact your Cursor account team about egress ranges, residency commitments,

security-faq.md +48 −59

Details

13 13 

14Each user gets a dedicated Firecracker microVM with its own kernel, memory, and14Each user gets a dedicated Firecracker microVM with its own kernel, memory, and

15virtual devices. One user cannot reach another user's computer. Within one15virtual devices. One user cannot reach another user's computer. Within one

16user, every Bot shares that computer, so treat a login or file on the computer16user, every Bot shares that computer. Treat a login or file on the computer as

17as available to every Bot that user runs. When a workload needs its own17available to every Bot that user runs. When a workload needs its own computer

18computer and credential set, give it its own Cursor user. A teammate's18and credential set, give it its own Cursor user. A teammate's

19[Team Bot](/grok-bot/team-bots) usually works on a user's computer during that19[shared Bot](/grok-bot/shared-bots) usually works on a user's computer during

20user's own chat with it.20that user's own chat with it.

21 21 

22### What can a Bot access?22### What can a Bot access?

23 23 

24Only accounts and connected apps the member or team grants. A Bot has no identity of24Only accounts and connected apps the member or team grants. A Bot has no

25its own and cannot hold more access than the signed-in member. Connector tokens25identity of its own and cannot hold more access than the signed-in member.

26stay on Cursor's backend, and login, two-factor, and payment steps are handed26Connector tokens stay on Cursor's backend. Logins and cards saved in Vault, and

27to the member. See27values entered in a Secure Form, are filled without the model seeing them.

28Steps a form cannot handle, such as single sign-on or a passkey, are handed to

29the member. See

28[identity and sign-ins](/grok-bot/security#identity-and-sign-ins).30[identity and sign-ins](/grok-bot/security#identity-and-sign-ins).

29 31 

30### If we block an app, can a Bot still reach that service in the browser?32### If we block an app, can a Bot still reach that service in the browser?

31 33 

32Yes. Blocking an app does not block that service's website. The34Yes. Blocking an app does not block that service's website. The connector

33[connector policy](/grok-bot/teams-and-enterprises#connector-policy) and the35policy and the [network policy](/grok-bot/security#network-policy) are separate

34[network policy](/grok-bot/security#network-policy) are separate layers.36layers. Closing the website path takes **Network Controls**, which is

35Closing the website path takes **Network Controls**, which is Enterprise only.37Enterprise only.

36 38 

37### Can admins push connectors to members?39### Can admins push connectors to members?

38 40 


45 47 

46**Network Controls is Enterprise only.** Admins set a Grok Bot network policy48**Network Controls is Enterprise only.** Admins set a Grok Bot network policy

47from that panel on the Grok Bot page of the dashboard. Self-serve Teams do not49from that panel on the Grok Bot page of the dashboard. Self-serve Teams do not

48see it and cannot set a destination allowlist, and teams without a policy50see it and cannot set a destination allowlist. Teams without a policy default

49default to allow-all. See [network policy](/grok-bot/security#network-policy).51to allow-all. See [network policy](/grok-bot/security#network-policy).

50 

51### Does an allowlist turn off web search?

52 

53Yes. When the network policy in effect is **Defaults + Team Allowlist** or

54**Team Allowlist Only**, or a group's allowlist mode, Grok Bot's web search is

55off, because a search sends the query to an outside search provider. Web fetch

56stays on and follows the allowlist.

57 52 

58### Do admin controls apply per group, or only org-wide?53### Do admin controls apply per group, or only org-wide?

59 54 


64public template sharing apply to the whole team on Teams and Enterprise.59public template sharing apply to the whole team on Teams and Enterprise.

65Enforce Auto-review and Auto-review rules are Enterprise only and also apply60Enforce Auto-review and Auto-review rules are Enterprise only and also apply

66to the whole team. Allow Local Egress Routing is Enterprise only and applies to61to the whole team. Allow Local Egress Routing is Enterprise only and applies to

67the whole team. On Enterprise, a group's Grok Bot tab can widen Cloud Agents, agent62the whole team. On Enterprise, a group's Grok Bot tab can widen Cloud Agents,

68email, local execution, local egress, Auto-review, rules, and setup scripts for that group's63agent email, local execution, local egress, Auto-review, rules, and setup

69members, never tighten them. See64scripts for that group's members, never tighten them. See

70[Group settings](/grok-bot/teams-and-enterprises#group-settings).65[Group settings](/grok-bot/teams-and-enterprises#group-settings).

71 66 

72### Why do some websites block Bots?67### Why do some websites block Bots?


77 72 

78### Are dedicated egress IPs available?73### Are dedicated egress IPs available?

79 74 

80No. Computers use shared static egress IP addresses, and dedicated per-customer75No. Computers use shared static egress IP addresses. Dedicated per-customer

81IPs are not available. Current ranges are available from your account team.76IPs are not available. Current ranges are available from your account team.

82See [static egress IPs](/grok-bot/security#static-egress-ips).

83 77 

84### Can traffic run through our own network?78### Can traffic run through our own network?

85 79 

86Yes. A member can route a Grok Bot computer's web traffic through their80Yes. A member can route a Grok Bot computer's web traffic through their

87desktop, using its network and IP address. Enterprise teams can also install a81desktop, using its network and IP address. On that route, sites that resolve to

88networking client on every hosted computer through **Team Setup Scripts**. See82a private or VPN address are blocked unless they have been allowed for your

83organization. Enterprise teams can also install a networking client on every

84hosted computer through **Team Setup Scripts**. See

89[Connect to private networks](/grok-bot/private-networks).85[Connect to private networks](/grok-bot/private-networks).

90 86 

91### Grok Bot hangs at computer setup from our network. Why?87### Grok Bot hangs at computer setup from our network. Why?


104With enforcement on, Auto Review evaluates shell commands, app calls,100With enforcement on, Auto Review evaluates shell commands, app calls,

105computer use, automation writes, and delegation such as Cloud Agent and101computer use, automation writes, and delegation such as Cloud Agent and

106subagent launches. It can let an action proceed, require approval, or deny it.102subagent launches. It can let an action proceed, require approval, or deny it.

107It does not review every side effect, such as memory writes and most settings103On Enterprise, team admins can enforce Auto-review from the Grok Bot page and

108changes. On Enterprise, team admins can enforce Auto-review from the Grok Bot104add team Auto-review rules that every member inherits. Members can add stricter

109page and add team Auto-review rules that every member inherits. Members can add105personal rules on top, and **Ask first** wins when rules conflict. If an admin

110stricter personal rules on top, and **Ask first** wins when rules conflict. If106turns enforcement off, members go back to their own rules only. It does not

111an admin turns enforcement off, members go back to their own rules only. See107review every side effect, such as memory writes and most settings changes.

112[approvals and Auto Review](/grok-bot/security#approvals-and-auto-review).

113 108 

114### Can our own security tooling check what Grok Bot sends to models?109### Can our own security tooling check what Grok Bot sends to models?

115 110 


130setting, off by default. When enabled, it records Bot actions internally.125setting, off by default. When enabled, it records Bot actions internally.

131**OpenTelemetry Export is Enterprise only.** Configure it to receive those126**OpenTelemetry Export is Enterprise only.** Configure it to receive those

132events in your own collector, tagged `cursor.surface=grok_bot`. They do not127events in your own collector, tagged `cursor.surface=grok_bot`. They do not

133appear on the Audit Log page. To also receive user prompts, assistant128appear on the Audit Log page.

134responses, and the arguments and results of hosted MCP tool calls, opt in to

135[conversation content export](/grok-bot/teams-and-enterprises#logging-and-audit).

136See [logging and audit](/grok-bot/security#logging-and-audit).

137 129 

138### Can I restrict which models Grok Bot uses?130### Can I restrict which models Grok Bot uses?

139 131 

140No. The team model allowlist does not govern Grok Bot. It uses first-party132No. The team model allowlist does not govern Grok Bot. It uses SpaceXSI

141&#x20;models and may use third-party models from providers on the133first-party models and may use third-party models from providers on the

142[sub-processor list](https://trust.cursor.com/subprocessors) regardless of that134[sub-processor list](https://trust.cursor.com/subprocessors) regardless of that

143setting. Teams with a model allowlist see this acknowledgement when they enable135setting. Teams with a model allowlist see this acknowledgement when they enable

144Grok Bot. Cursor manages model selection, and there is no customer-facing model136Grok Bot. Grok Bot manages model selection, and there is no customer-facing

145picker. If your contract restricts subprocessors, contact your account team.137model picker. If your contract restricts subprocessors, contact your account

146See [models and data](/grok-bot/security#models-and-data) and138team. See

147[Which AI models power Grok Bot?](https://cursor.com/help/grok-bot/models).139[Which AI models power Grok Bot?](https://cursor.com/help/grok-bot/models).

148 140 

149### Where do Grok Bot computers run?141### Where do Grok Bot computers run?

150 142 

151In the United States today. That is not the same as Cursor's143In the United States. Grok Bot is also covered by Cursor's

152[US-only data residency](https://cursor.com/docs/enterprise/privacy-and-data-governance#data-residency)144[US-only data residency](https://cursor.com/docs/enterprise/privacy-and-data-governance#us-data-residency)

153program, which does not apply to Grok Bot by default. If your review needs a145program, which keeps inference, data processing, and storage in the US for

154written residency commitment, contact your account team. See146enrolled customers. Contact your account team to enroll. See

155[data residency](/grok-bot/security#data-residency).147[data residency](/grok-bot/security#data-residency).

156 148 

157### Can we run Grok Bot on-premises or from our own image?149### Can we run Grok Bot on-premises or from our own image?

158 150 

159No. Grok Bot runs only on Cursor-hosted cloud computers. On-premises151No. Grok Bot runs only on Cursor-hosted cloud computers. On-premises

160deployment, deployment inside your own perimeter, and bring-your-own-image152deployment, deployment inside your own perimeter, and bring-your-own-image

161deployment are not supported today. See [hosting](/grok-bot/security#hosting).153deployment are not supported today.

162 154 

163### Can we install our own security tooling on team computers?155### Can we install our own security tooling on team computers?

164 156 

165**Team Setup Scripts is Enterprise only.** Those admins can install their own157**Team Setup Scripts** is Enterprise only. Those admins can install their own

166tooling on every team computer. Grok Bot does not ship a built-in customer-facing EDR158tooling on every team computer. Grok Bot does not ship a built-in

167feed. See [endpoint tooling](/grok-bot/security#endpoint-tooling).159customer-facing EDR feed.

168 160 

169### Why do members have to sign in to company tools again?161### Why do members have to sign in to company tools again?

170 162 


174 166 

175### What happens to data when an admin terminates a computer?167### What happens to data when an admin terminates a computer?

176 168 

177Computer management is Enterprise only. Organization admins and team admins on169Computer management is Enterprise only. Organization admins and Enterprise team

178an Enterprise team can terminate a member's computer. The durable disk is kept,170admins can terminate a member's computer. The durable disk is kept, and the

179and the member's next session starts a fresh computer on that disk. Terminating171member's next session starts a fresh computer on that disk. Terminating a

180a computer is separate from the Enterprise-only enable switch. See172computer is separate from the Enterprise-only enable switch.

181[data retention and deletion](/grok-bot/security#data-retention-and-deletion).

182 173 

183### What certifications apply to Grok Bot?174### What certifications apply to Grok Bot?

184 175 


193* [Grok Bot inference hooks](/grok-bot/inference-hooks)184* [Grok Bot inference hooks](/grok-bot/inference-hooks)

194* [Configure identity and access](/grok-bot/identity-and-access)185* [Configure identity and access](/grok-bot/identity-and-access)

195* [Connect to private networks](/grok-bot/private-networks)186* [Connect to private networks](/grok-bot/private-networks)

196* [Configure TLS-inspecting proxies](/grok-bot/proxies)

197* [Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy)

198* [Privacy and Data Governance](https://cursor.com/docs/enterprise/privacy-and-data-governance)187* [Privacy and Data Governance](https://cursor.com/docs/enterprise/privacy-and-data-governance)

Details

2 2 

3# Settings and notifications3# Settings and notifications

4 4 

5Use Grok Bot settings for app-wide and desktop-local behavior, and conversation5Grok Bot settings cover app-wide and desktop-local behavior. Each Bot's name,

6details for one Bot's profile and notifications.6picture, and label live in its conversation details.

7 7 

8## Open Grok Bot settings8## Open Grok Bot settings

9 9 


12conversation details, see12conversation details, see

13[Keyboard shortcuts](/grok-bot/chat-and-collaboration#keyboard-shortcuts).13[Keyboard shortcuts](/grok-bot/chat-and-collaboration#keyboard-shortcuts).

14 14 

15The **Grok Bot settings** dialog has **General**, **Computer**, **Usage &15The **Grok Bot settings** dialog has **General**, **Computer**, **Vault**,

16Billing**, and **Updates** panes. Sections depend on your account and rollout,16**Usage & Billing**, and **Updates** panes. Sections depend on your account and

17so some options described below may not appear.17rollout, so some options described below may not appear.

18 18 

19## General19## General

20 20 


32 32 

33Choose **Follow System**, **Light**, or **Dark**.33Choose **Follow System**, **Light**, or **Dark**.

34 34 

35**Accent** colors your 1:1 Bot messages and cards with each Bot's color

36(**Bot color**, the default) or keeps them **Black**.

37 

35Use **Language** to choose **Follow System** or one of more than 20 app38Use **Language** to choose **Follow System** or one of more than 20 app

36languages, including English, Spanish, French, German, Japanese, Korean,39languages, including English, Spanish, French, German, Japanese, Korean,

37Simplified Chinese, and Traditional Chinese. On iPhone and Android the40Simplified Chinese, and Traditional Chinese. On iPhone and Android the

38follow-device option is labeled **System**, and the list is shorter. See41follow-device option is labeled **System**, and the list is shorter. See

39[Grok Bot for Mobile](/grok-bot/mobile).42[Grok Bot for Mobile](/grok-bot/mobile).

40 43 

44**Check Spelling While Typing** underlines misspelled words as you type. It's

45on by default.

46 

47### System

48 

49* **Microphone** picks the microphone Grok Bot listens to when you talk to it:

50 **System Default** or a specific device.

51* **Use hardware acceleration** lets your graphics card draw the app. Turn it

52 off if the window flickers or stays blank, then choose **Restart Now**. It's

53 on by default on macOS and Windows and off on Linux.

54 

41### Bot55### Bot

42 56 

43Configure shared and local Bot behavior:57Configure shared and local Bot behavior:


45* **Timezone**, which routines use for schedules59* **Timezone**, which routines use for schedules

46* Your Auto-review switch and **Custom Rules**60* Your Auto-review switch and **Custom Rules**

47 61 

48Cursor manages model selection, so there is no model picker.62Grok Bot manages model selection, so there is no model picker.

63 

64### Import

65 

66**Import Memory to Grok Bot** brings your preferences and context over from

67another AI assistant. Choose **Start Import**, copy the prompt into a chat with

68your other assistant, paste its answer into the second box, and choose

69**Add to Memory**. Grok Bot sends the import to your primary Bot and opens that

70chat. See [What a Bot remembers](/grok-bot/bots#what-a-bot-remembers).

49 71 

50### Auto-review72### Auto-review

51 73 

52Manage your personal Auto Review rules, plus any team rules your admin74Manage your personal Auto-review rules, plus any team rules your admin

53requires.75requires.

54 76 

55Auto Review rules shape which actions stop for your approval. When your77Auto-review rules shape which actions stop for your approval. When your

56admin enforces Auto Review for the team, the same table also shows locked team78admin enforces Auto-review for the team, the same table also shows locked team

57rules with `Required by your admin. You can't edit or delete this rule.` You79rules with `Required by your admin. You can't edit or delete this rule.` You

58can add your own rules on top, but they only make behavior stricter; **Ask80can add your own rules on top, but they only make behavior stricter; **Ask

59first** wins when rules conflict. If your admin turns enforcement off, you only81first** wins when rules conflict. If your admin turns enforcement off, the

60see and use your own rules. Your personal rules are saved to your account, so82locked team rules go away and your own rules apply, unless your team shares

61the same rules apply on every desktop and on iPhone. Read83Auto-review instructions from the Cursor dashboard; then those apply to your

62[Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy)84Bots instead of your own rules, and the section says so. Your personal rules

85are saved to your account, so the same rules apply on every desktop and on

86iPhone. Read [Approvals and Auto Review](/grok-bot/security#approvals-and-auto-review)

63before changing them.87before changing them.

64 88 

65## Computer89## Computer

66 90 

67**Computer** has two sections. **Your computer** holds settings for the91**Computer** has two sections. **Your computer** holds settings for the

68desktops signed in to your account. **Bot's computer** holds the update and92desktops signed in to your account. **Bot's computer** holds the update and

69reset controls for the cloud computer your Bots share.93reset controls for the cloud computer your Bots share; see

94[Update or reset Bot's computer](#update-or-reset-bots-computer).

95 

96**Manage devices** lists the computers and phones where you use Grok Bot. You

97can rename any of them there, change another computer's execution setting, or

98remove another computer while it's offline. Phones can't be removed.

70 99 

71### Run commands on your desktop100### Run commands on your desktop

72 101 


74desktop. Each listed desktop under **Your computer** has its own setting. Until103desktop. Each listed desktop under **Your computer** has its own setting. Until

75a desktop is listed, the page shows **Execution on Local Computer** instead.104a desktop is listed, the page shows **Execution on Local Computer** instead.

76Per-command approval is the default, and the setting applies to that desktop105Per-command approval is the default, and the setting applies to that desktop

77alone. Read106alone. Read [Approvals and Auto Review](/grok-bot/security#approvals-and-auto-review)

78[Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy#control-access-to-your-local-computer)107before changing it. For what local execution can reach, see

79before changing it.108[Control access to your local computer](/grok-bot/approvals-security-and-privacy#control-access-to-your-local-computer).

80 109 

81### Route traffic through your desktop110### Route traffic through your desktop

82 111 

83Under **Your computer**, turn on **Route traffic through this computer** to112Under **Your computer**, turn on **Route traffic through this computer** to

84send your Grok Bot computer's web traffic through the current desktop. The113send your Grok Bot computer's web traffic through the current desktop. The route

85route applies to new connections. Destinations see your desktop's IP address,114applies to new connections, and destinations see your desktop's IP address.

86and the Bot can reach networks available from that device.115Sites that resolve to a private or VPN address are blocked unless your

116organization has allowed them, and the setting shows how many it blocked this

117session. Only one of your computers routes at a time; if another one is

118routing, send a message from this computer to route through it instead. If the

119setting asks you to **Update Bot's computer**, do that first.

87 120 

88The setting applies to one desktop. If your Enterprise admin turns off **Allow121The setting applies to one desktop. If your Enterprise admin turns off **Allow

89Local Egress Routing**, the toggle turns off and locks. The setting reads122Local Egress Routing**, the toggle turns off and locks. The setting reads


107last saved data, the same as **Recover computer**; if the computer can't be140last saved data, the same as **Recover computer**; if the computer can't be

108reached to save first, very recent changes don't come back.141reached to save first, very recent changes don't come back.

109 142 

110See [Troubleshooting](/grok-bot/troubleshooting) for the least destructive143See

111recovery order.144[Update, recover, or reset the computer](/grok-bot/computer-and-apps#update-recover-or-reset-the-computer)

145for the least destructive recovery order.

112 146 

113## Plugins147## Vault

114 148 

115Plugins are not a settings section. Open **Connect apps** from the sidebar to149**Vault** holds the logins, cards, and contact info your Bots use to sign in and

116discover plugins and packaged skills. To manage installed plugins and private150check out without seeing the secret values. Use **New item** to add one, select

117skills, select the connected count next to the **Connect apps** title.151an item to edit or remove it, and import logins from another password manager

152with **New item → Import**. See [Vault and secure sign-in](/grok-bot/vault).

118 153 

119An installed plugin may still need browser authentication. Individual plugin154## Connected apps

120tools can be enabled or disabled. On the Teams plan and the Enterprise plan,

121team-provided plugins may be required or restricted by an admin.

122 155 

123See [Connect plugins](/grok-bot/computer-and-apps#connect-an-app) for the156Apps aren't in settings. Open **Connect apps** in the sidebar to find apps and

124connection flow.157packaged skills. Select the connected count next to the title to manage

158installed apps and private skills. An installed app may still need browser

159authentication, and individual app tools can be enabled or disabled. On the

160Teams plan and the Enterprise plan, an admin may restrict which apps members can

161use. See [Connect an app](/grok-bot/computer-and-apps#connect-an-app).

125 162 

126## Usage and billing163## Usage and billing

127 164 


147Update** to install a new one. To update or reset Grok Bot's computer, see184Update** to install a new one. To update or reset Grok Bot's computer, see

148[Update or reset Bot's computer](#update-or-reset-bots-computer).185[Update or reset Bot's computer](#update-or-reset-bots-computer).

149 186 

150## Edit one Bot187**Automatic Updates**, in the same pane, is on by default. When it's on, a

188downloaded update installs and the app restarts while you're away: your screen

189is locked or the screensaver is on, the computer has been idle for at least 10

190minutes, and Grok Bot isn't busy. Turn it off to install only when you choose

191**Restart to Update**. Linux `.deb` and `.rpm` installs update through the

192system package manager and don't show the switch.

193 

194## Per-Bot settings

151 195 

152Click the Bot's name at the top of the chat (**View conversation details**) to196Click the Bot's name at the top of the chat (**View conversation details**) to

153open its details. Click the name or the label to edit it, and click the Bot's197open its details. Click the name or the label to edit it, and click the Bot's

154picture to change its avatar. These belong to that Bot alone. Personal Bots198picture to change its avatar. These belong to that Bot alone. Personal Bots

155don't have a description; to change what a Bot does, tell it in chat.199don't have a description; to change what a Bot does, tell it in chat. See

200[Edit a Bot](/grok-bot/bots#edit-a-bot).

156 201 

157**Execution on this computer** is set per desktop, and your personal202**Execution on this computer** is set per desktop, and your personal

158Auto-review rules are saved to your account.203Auto-review rules are saved to your account.


170 215 

171## Control notifications216## Control notifications

172 217 

173Turn on **Notifications** for a Bot to receive an operating-system or mobile218Turn on **Notifications** for a Bot to get a system or mobile notification when

174notification when that Bot finishes or needs input. On the phone, the switch is219that Bot finishes or is waiting for you. On the phone, the switch is

175in the Bot's profile. On desktop, ask the Bot to turn its notifications on or220in the Bot's profile. On desktop, ask the Bot to turn its notifications on or

176off. Group chats do not have the same per-Bot notification switch.221off. Group chats do not have the same per-Bot notification switch.

177 222 

178While you use the desktop app on macOS or Windows, notifications from Bots you223While you use the desktop app on macOS or Windows, notifications from Bots you

179own go to the desktop instead of your phone. The app counts as in use while it224own go to the desktop instead of your phone. The app counts as in use while it

180is open and signed in, the screen is unlocked, you have used the computer in225is open and signed in, the screen is unlocked, you have used the computer

181the last 5 minutes, and your system settings let Grok Bot show banners or226recently, and your system settings let Grok Bot show banners or alerts. A focused window stays quiet only for the Bot on screen; other Bots

182alerts. A focused window stays quiet only for the Bot on screen; other Bots

183still show a desktop notification. Finished replies skip your phone. When a Bot227still show a desktop notification. Finished replies skip your phone. When a Bot

184needs your input, your phone is notified about 3 minutes later unless you open228needs your input, your phone is notified about 3 minutes later unless you open

185that Bot, turn off its **Notifications**, or hide it from your sidebar first.229that Bot, turn off its **Notifications**, or hide it from your sidebar first.


208* [Use the computer and apps](/grok-bot/computer-and-apps)252* [Use the computer and apps](/grok-bot/computer-and-apps)

209* [Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy)253* [Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy)

210* [Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises)254* [Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises)

255* [Grok Bot security](/grok-bot/security)

211* [Plans and billing](https://cursor.com/help/grok-bot/plans)256* [Plans and billing](https://cursor.com/help/grok-bot/plans)

257* [Delete your Grok Bot account](https://cursor.com/help/grok-bot/delete-account)

212* [Remove access and working data](/grok-bot/approvals-security-and-privacy#remove-access-and-working-data)258* [Remove access and working data](/grok-bot/approvals-security-and-privacy#remove-access-and-working-data)

shared-bots.md +238 −0 created

Details

1#### Work with Grok Bot

2 

3# Shared Bots

4 

5A Bot is either personal or shared. Share a Bot with your Cursor team the way

6you'd share a doc: with everyone on the team, or only with certain people and

7groups. Sharing doesn't make a copy, and each person's chat with a shared Bot is

8private.

9 

10Shared Bots always run in the cloud. A Bot that runs on your own computer can't

11be shared.

12 

13## Who can use shared Bots?

14 

15Shared Bots are for members of a Cursor team who have Grok Bot. Choose **+** in

16the sidebar to see **Create a Bot** and **Browse shared Bots**. If **Browse

17shared Bots** isn't there, you aren't on a Cursor team, or your Grok Bot app

18needs an update.

19 

20## How do I create a Bot for my team?

21 

221. Choose **+** in the sidebar, then **Create a Bot**, and give it a name.

232. Tell the Bot what it should help the team with. A sentence is enough.

243. Follow its setup steps for apps, secrets, skills, and files. Only add keys

25 and files you're happy for everyone you share it with to use.

264. Share it. See [How do I share a Bot with my

27 team?](#how-do-i-share-a-bot-with-my-team)

28 

29You can also share a Bot you already have. Sharing doesn't duplicate it. Before

30you share, check its apps, secrets, skills, and files, since they work in every

31teammate's chat.

32 

33## How do I share a Bot with my team?

34 

35Click the Bot's name at the top of the chat and choose **Share**. In **Share

36this Bot**:

37 

38* Under **Who has access**, choose your team to share the Bot with everyone on

39 the team, or **People you invite** to share it only with the people and

40 groups you add. Limiting it asks you to confirm with **Limit access**. The

41 owner and Managers can always use the Bot.

42* Choose **Add people or groups** to add someone. Under **Add as**, pick

43 **Collaborator** to let them chat with the Bot, or **Manager** to let them

44 also change how it works: its instructions, skills, memory, and apps.

45 

46To stop sharing, open **Share** again and remove access.

47 

48## How do teammates find a shared Bot?

49 

50* Choose **+** in the sidebar, then **Browse shared Bots**. The list shows Bots

51 shared with you, and each one shows who made it. Choose **Add** to keep a Bot

52 in your sidebar.

53* On your phone, tap **+**, then **Browse shared Bots**.

54* Open a link a teammate sent you, then choose **Start a chat**.

55 

56A shared Bot's link opens the same Bot for everyone. It's different from

57[sharing a Bot template](/grok-bot/bots#share-a-bot), which gives each person

58their own copy.

59 

60## Can the owner see my chats with a shared Bot?

61 

62No. Each person's chat with a shared Bot is private. The owner and Managers

63can't read your chats, and you can't read the owner's or anyone else's.

64 

65The Bot can save things it learns for the whole team, and it tells you when it

66does. It doesn't save anything about you personally for the team. What it

67remembers about working with you stays between you and the Bot.

68 

69## Whose apps and secrets does a shared Bot use?

70 

71A shared Bot uses the apps and secrets its owner added. Those work the same for

72everyone who chats with it.

73 

74In your own chat with a shared Bot, it can also use your apps. It asks before it

75uses one of your personal accounts. The card says **Allow**, then the app name:

76 

77* **Allow once** lets it use that account this time.

78* **Always allow** remembers your answer. Its menu has **Always allow for your

79 messages to this Bot** and **Always allow for your messages to every Shared

80 Bot**.

81* **Skip** means it doesn't use that account this time.

82 

83In Slack channels, threads, and group chats, a shared Bot uses only its owner's

84apps, and asks before it uses your accounts.

85 

86A connected account always acts as the person the Bot is answering. One

87teammate's connection is never used for someone else.

88 

89To make every shared Bot ask again, open **Settings** > **General** > **Shared

90Bots** and choose **Clear** next to **Clear connector preferences**.

91 

92## Which computer does a shared Bot use?

93 

94In your own chat with a teammate's shared Bot, the Bot usually works on your

95Grok Bot computer. That means it can use the files there and the sites you're

96signed in to there. Sometimes it uses a separate computer just for that

97conversation, for example when your privacy mode is stricter than the owner's.

98 

99When you DM a shared Bot in Slack, it also works on your own computer. In Slack

100channels, threads, group DMs, and group chats, a shared Bot uses one shared

101computer of its own.

102 

103## Whose usage pays for a shared Bot chat?

104 

105A shared Bot reply uses the Grok Bot usage of the person it's answering. That's

106true in your own chat, in Slack, and in group chats. Your own limits apply. The

107owner's usage pays for the owner's own messages, and for Slack posts from apps

108or workflows that aren't linked to a Cursor account. See [How much does Grok Bot

109cost?](/grok-bot/faq#how-much-does-grok-bot-cost)

110 

111## How do approvals work on a shared Bot?

112 

113A shared Bot asks the person it's answering before risky actions.

114 

115* In your own chat with a shared Bot, you answer its approval cards.

116* In a Slack thread, the Bot posts a **Review an action** card with **Allow

117 once**, **Deny**, and **View details**. Only the person who asked can answer

118 it.

119* In a group chat, only the person whose message the Bot is answering can

120 answer.

121 

122It also asks before it uses your personal accounts. See [Whose apps and secrets

123does a shared Bot use?](#whose-apps-and-secrets-does-a-shared-bot-use) For the

124rest of the approval model, see [Approvals, security, and

125privacy](/grok-bot/approvals-security-and-privacy).

126 

127## How do I add a shared Bot to Slack?

128 

129The owner or a Manager adds it, after sharing:

130 

1311. Click the Bot's name at the top of the chat.

1322. Find **Bring to your team's Slack** and choose **Connect**.

1333. If it says **Awaiting admin approval**, a Slack workspace admin needs to

134 approve the app.

135 

136Once it says **Connected**, teammates can message the Bot directly or mention it

137in channels.

138 

139In a channel thread or a DM, the shared Bot acts for the teammate who mentioned

140it. It can hand work to that person's own Bots, and their replies are posted

141back into the same thread. A personal Bot doesn't hand work to other Bots from a

142channel thread. See [Let Bots hand work

143off](/grok-bot/chat-and-collaboration#let-bots-hand-work-off).

144 

145Bots record who asked for each message they post in Slack, so anyone in the

146thread can ask the Bot who requested it. When a shared Bot's routine replies in a

147Slack thread, the Bot follows that thread and answers later replies without an

148@mention.

149 

150Each teammate needs to link their Slack account first. Open **Settings** >

151**General** > **Shared Bots** and choose **Link**. If you message the Bot before

152you link, it replies with steps to link your account.

153 

154## How do I edit or delete a shared Bot?

155 

156The owner and the Bot's Managers can change a shared Bot. Click the Bot's name

157at the top of the chat to open its details, or choose the wrench at the top

158right to open **Bot settings**:

159 

160* **Plugins** (the Bot's connected apps), **Secrets**, **Skills**, and

161 **Files** hold what the Bot uses for everyone.

162* Click the name to rename the Bot. Edit the description under **About**.

163* **Share** controls who can use the Bot and who manages it.

164 

165The owner can also rename the Bot by right-clicking it in the sidebar and

166choosing **Rename Bot**.

167 

168Only the owner can delete a shared Bot. Right-click the Bot in the sidebar and

169choose **Delete**. This deletes the Bot for your whole team. Teammates lose it,

170along with their chats and routines on it. It can't be undone.

171 

172## How do I remove a shared Bot from my sidebar?

173 

174Right-click the Bot and choose **Hide from sidebar**. To add it back, choose

175**+** in the sidebar, then **Browse shared Bots**, and choose **Add** next to

176it.

177 

178If your admin added the Bot to your sidebar for you, **Hide from sidebar** isn't

179in its menu, and you can't remove it.

180 

181## Can I use shared Bots on my phone?

182 

183Yes. Shared Bots you've added appear in the [phone app](/grok-bot/mobile). To

184find another, tap **+**, then **Browse shared Bots**. You can chat with shared

185Bots and answer their **Allow** cards. A shared Bot can't be your [primary

186Bot](/grok-bot/bots#your-primary-bot).

187 

188## Can I voice chat with a teammate's shared Bot?

189 

190Yes, on desktop. In your own chat with the Bot, choose **Start voice chat**. See

191[Start a voice chat](/grok-bot/chat-and-collaboration#start-a-voice-chat).

192 

193## Can a shared Bot join a group chat?

194 

195Yes. You can add a Bot a teammate shared with you to your own group chat. It

196can't share a group with Bots that run on your own computer. See [Start a group

197chat](/grok-bot/chat-and-collaboration#start-a-group-chat).

198 

199## How do admins manage shared Bots?

200 

201On the Grok Bot page of the [Cursor dashboard](https://cursor.com/dashboard/bot),

202open **Manage Shared Bots** under **Shared Bots**.

203 

204* **Access** shows who can use each shared Bot. Click it to change who can use

205 the Bot.

206* **Auto-add** puts the Bot in members' sidebars automatically. Pick **All

207 team** or one or more groups. Those members can't hide it. Auto-add only

208 applies to groups that have access.

209 

210See [Grok Bot for teams and

211enterprises](/grok-bot/teams-and-enterprises#manage-shared-bots).

212 

213## Why can't I see or use a shared Bot?

214 

215| What you see | What it means |

216| --- | --- |

217| **Browse shared Bots** isn't under **+** | You aren't on a Cursor team, or your Grok Bot app needs an update. |

218| **Shared Bots Not Available** | Your account doesn't have access to shared Bots. |

219| **Bot Not Found** | The Bot may have been removed, or it isn't shared with you. |

220| **No Access to This Bot** | The Bot is shared only with certain people. Ask its owner or a Manager for access. |

221| A teammate's Bot isn't in **Browse shared Bots** | The owner hasn't shared it with you yet. |

222| **Your usage limit has been reached** | Your Grok Bot usage ran out. Your chats with a teammate's shared Bot use your usage. See [How much does Grok Bot cost?](/grok-bot/faq#how-much-does-grok-bot-cost) |

223| **This Bot's owner has reached their usage limit** | This reply was billed to the owner's account, and the owner's usage ran out. Ask the owner to check their plan. |

224| **This conversation can't run on your computer because your privacy mode is stricter than the bot owner's.** | Your privacy mode setting is stricter than the owner's, so this chat can't use your computer. |

225| In Slack, the Bot asks you to link a Cursor account | Link your Slack account under **Settings** > **General** > **Shared Bots**, using the Cursor account on the Bot's team. |

226 

227If none of these match, [contact support](/grok-bot/troubleshooting) with the

228Bot's name, the exact message, and your Grok Bot version.

229 

230## Related pages

231 

232* [Create and manage Bots](/grok-bot/bots)

233* [Message and collaborate](/grok-bot/chat-and-collaboration)

234* [Use the computer and apps](/grok-bot/computer-and-apps)

235* [Vault and secure sign-in](/grok-bot/vault)

236* [Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy)

237* [Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises)

238* [Troubleshooting](/grok-bot/troubleshooting)

Details

6blocks:6blocks:

7 7 

8* A **skill** is a reusable set of instructions for how to do a task.8* A **skill** is a reusable set of instructions for how to do a task.

9* A **routine** tells one Bot when to run a workflow—on a schedule or, where9* A **routine** tells one Bot when to run a workflow: on a schedule, or when

10 supported, after an event.10 something happens, such as a Slack message, a GitHub, Linear, Sentry, or

11 PagerDuty event, an email, or a webhook call.

11 12 

12Start with a one-time task. Make it reliable, save the method as a skill, and13Start with a one-time task. Make it reliable, save the method as a skill, and

13only then automate it.14only then automate it.


346. What requires approval356. What requires approval

35 36 

36Use **Connect apps** in the sidebar to discover and install supported apps and37Use **Connect apps** in the sidebar to discover and install supported apps and

37packaged skills. Type `/` in the desktop composer to reference a saved skill;38packaged skills. To use a skill, ask the Bot for it by name; use `@` for Bots,

38use `@` for Bots, groups, routines, and apps.39groups, routines, and apps.

39 40 

40Private skills are one library shared by all your Bots. If a skill does not41Private skills are one library shared by all your Bots. If the Bot can't find a

41appear in the `/` menu, open **Connect apps** in the sidebar, select the42private skill, open **Connect apps** in the sidebar, select the connected count

42connected count next to the title, and enable it for the current Bot under43next to the title, and enable it for the current Bot under **Private skills**.

43**Private skills**.44 

45### Share a skill with your team

46 

47If you belong to a team, you can publish a private skill so your teammates can

48use it. On desktop, open **Connect apps**, select the connected count next to

49the title, and open the skill. Choose **Publish** in its header. If you belong

50to more than one team, choose the team under **Publish to**.

51 

52A skill needs a description before you can publish it, because teammates and

53their Bots use the description to decide when it applies. After you publish,

54the button reads **Published**. Its menu offers **Sync** to push your later edits

55to the team's copy, **Copy link**, and **Unpublish**.

56 

57If publishing is refused, the message says why: you need to join a team first,

58or your team admin has turned off publishing for members, in which case ask an

59admin to publish the skill. Skills that came with the app or with a Bot's

60template can't be published.

44 61 

45## Teach a workflow by demonstration62## Teach a workflow by demonstration

46 63 


82* The approval boundary99* The approval boundary

83* What should happen when a source is missing100* What should happen when a source is missing

84 101 

85The Bot creates the routine and shows its next run. Background routines can run102The Bot creates the routine, and it appears in the Bot's routines. Routines run

86while your laptop is closed.103in the cloud while your laptop is closed.

104 

105On the phone, you can also open the Bot's profile and tap **Add routine** under

106**Routines**. Grok Bot starts a message that begins “Set up a routine to”;

107finish the sentence and send it.

108 

109### Schedules and time zones

110 

111Schedules use the time zone in **Settings**, under **Bot**, labeled

112**Timezone**. **Auto-detect** follows this computer. Pick a zone when the

113routine should follow a different one, such as the office where the work

114belongs.

115 

116Ask for a schedule in plain words, like “every weekday at 8:00 AM” or “every 2

117hours.” Then open the routine and check **When to run**, which shows the saved

118schedule in words. If it doesn't match what you meant, choose **Edit** and tell

119the Bot what to fix.

120 

121A new routine waits for its next scheduled time; it doesn't run when it's

122created. If you set up “every day at 8:00 AM” at 8:05, the first run is

123tomorrow at 8:00 AM. To try it right away, use **Test**.

87 124 

88## Trigger work from an event125## Trigger work from an event

89 126 

90Cursor account integrations can start a routine from an event, such as a Slack127A routine can start when something happens instead of on a schedule: a Slack

91message or a GitHub notification. They are separate from the Slack or GitHub128message, a GitHub, Linear, Sentry, or PagerDuty event, an email to your

92apps and may require their own connection flow.129[Bot's own address](/grok-bot/computer-and-apps#give-your-bots-an-email-address),

130or a webhook call. Cursor account integrations start these routines; they're

131separate from the Slack or GitHub apps and may need their own connection. Ask

132the Bot for the trigger you want; the routine's **When to run** shows it in

133words, such as “When a Linear issue is created.” Only new activity counts:

134events from before the trigger existed don't start a run.

93 135 

94Define a narrow matching rule and a clear response:136Define a narrow matching rule and a clear response:

95 137 


101Avoid broad listeners such as “every new message.” They create noise, consume143Avoid broad listeners such as “every new message.” They create noise, consume

102usage, and increase the chance of acting on irrelevant input.144usage, and increase the chance of acting on irrelevant input.

103 145 

146### Slack triggers

147 

148A Slack trigger is part of a routine, not the Slack app. The app lets a Bot post

149and read as the Slack user you connected; a trigger starts the routine when

150something happens in Slack. Connect Slack on the Cursor account that owns the

151Bot before you rely on it.

152 

153A routine can start when the Bot is mentioned, when a word or phrase is

154mentioned, when you react to a message, or on any message. It can watch one

155channel or all of Slack, and **When to run** shows the trigger in words, such

156as a phrase and a channel. Keep the channel and phrase narrow: a trigger on any

157message in a busy channel runs often and spends usage on messages that don't

158need the Bot.

159 

160### Webhooks

161 

162Ask the Bot to add a webhook trigger to the routine, then open the routine on

163desktop. The **Webhook** section shows three fields:

164 

165* **POST to** is the URL.

166* **key** is the secret. Senders include it as `Authorization: Bearer <key>`.

167* **header** is that full header, ready to copy.

168 

169Click a field to copy it. Send an HTTP POST to that URL with the header and,

170optionally, a JSON body; the Bot receives the body with the routine

171instruction. A `200` response means Grok Bot accepted the call and started a

172run, not that the Bot has finished; check the Bot's chat for the result. Any

173other response means a run didn't start, so confirm that the routine isn't

174paused and that the request uses the current key.

175 

104## Test before enabling176## Test before enabling

105 177 

106Use **Test** after creating or editing a routine.178If the routine shows **Test**, use it after creating or editing the routine:

179open the routine on desktop and choose **Test**. The button says **Running…**

180until the run finishes, and the result shows up in the Bot's chat. If the test

181can't start, you see **Couldn't start a test run**, or a message that explains

182why.

183 

184Some routines don't show **Test**; they still run on their schedule or trigger.

185For those, ask the Bot to do the same work once in chat with a safe input before

186you rely on the routine, then check the first scheduled run.

107 187 

108> A test run performs real work. It can navigate websites, change files, and188> A test run performs real work. It can navigate websites, change files, and

109> call connected tools. Use safe inputs and keep write actions behind approval.189> call connected tools. Use safe inputs and keep write actions behind approval.


120 200 

121Create and change routines by asking the Bot in chat. To review them on201Create and change routines by asking the Bot in chat. To review them on

122desktop, click the Bot's name at the top of the chat to open its details.202desktop, click the Bot's name at the top of the chat to open its details.

123Routines are on the **Details** tab. Open a routine to read its203Routines are on the **Details** tab. Each row shows the routine's name and when

124**Instruction** and **When to run**, and to:204it runs, or **Paused**; use the switch on the row to pause or resume it. If the

125 205Bot has no routines, you see **Ask in chat to set a routine**.

126* **Pause** or **Resume** it206 

127* **Test** it207Open a routine to read its **Instruction** (what the Bot does on each run) and

128* **Edit** its schedule or instructions208**When to run** (the schedule and the events that start it). A routine that a

129* Delete it209webhook call starts also shows **Webhook**. The buttons at the bottom are:

130 210 

131On the phone, the Bot's profile lists its routines with **Run history**. For211* **Pause** or **Resume**

132schedules, Slack triggers, and webhooks, see212* **Test**, when the routine offers it

133[Routines](https://cursor.com/help/grok-bot/routines).213* **Edit**, which starts a message to the Bot that begins “Edit your routine:”

214 with the routine's name; add what should change and send it

215* **Delete routine** (the trash icon), which asks you to confirm

216 

217You can also right-click a routine to **Pause** or **Resume** it, **Test** it,

218**Edit** it in chat, or **Delete** it.

219 

220On the phone, open the Bot's profile and find **Routines**. Tap a routine to see

221**Active**, **Schedule**, **Next run**, **Instruction**, and **Run history**.

222Turn off **Active** to pause the routine, and swipe the routine's row to delete

223it. **Run history** shows each recent run as **Running**, **Succeeded**, or

224**Failed**, with the reason for a failed run; **No runs yet** means nothing has

225started the routine yet.

134 226 

135A Bot can own up to 50 routines, and the app keeps the 20 most recent run227A Bot can own up to 50 routines, and the app keeps the 20 most recent run

136records for each routine. Routine schedules must be at least five minutes228records for each routine. Routine schedules must be at least five minutes

137apart. Deleting a routine is immediate and has no undo. Deleting a Bot also229apart. Deleting a routine stops its future runs and can't be undone. Deleting a

138removes routines owned by that Bot.230Bot also removes routines owned by that Bot.

231 

232### If a routine hasn't run

233 

234* The routine isn't **Paused**. On the phone, **Active** is on.

235* **When to run** shows the schedule or trigger you expect, in the right time

236 zone.

237* A new schedule waits for its next time. Use **Test** to run it now.

238* For Slack, the message is new, in the channel the trigger watches, and

239 matches its phrase.

240* For a webhook, the call returned `200` and used the current key.

241 

242### Rate limits

243 

244Routines have hourly limits: all of your routines together can run up to 300

245times an hour, and each routine up to 200 times an hour. A run past either limit

246fails with `Automation run rate limit exceeded`. If one routine keeps hitting

247its limit, ask the Bot to narrow its trigger or widen its schedule.

248 

249Some runs can also fail with this error because of a limit all Grok Bot routines

250share, even when your own routines run less than that. This is a known issue

251that is being fixed. A run that fails with this error isn't retried

252automatically, so rerun the routine yourself: use **Test** to run it now, or for

253a webhook, send the call again.

254 

255### Routines and usage

256 

257Each run spends usage, so a routine that runs often spends more than one that

258runs rarely. An hourly schedule, a short interval, or a Slack trigger on a busy

259channel can use a week of usage in a day. If your **Weekly usage limit** is

260running out faster than you expect, pause routines you don't need, then ask the

261Bot to widen schedules and narrow Slack triggers before you raise a plan or an

262on-demand limit. A routine that never runs doesn't spend usage; **Test** does,

263because it performs the work. See [Plans and

264billing](https://cursor.com/help/grok-bot/plans) for weekly usage and the

265on-demand monthly limit.

139 266 

140To control unattended usage, Grok Bot may ask whether to keep routines running267To control unattended usage, Grok Bot may ask whether to keep routines running

141after a long period away and pause them if there is no response. Review paused268after a long period away and pause them if there is no response. Review paused


152* Tell the Bot where to report partial completion.279* Tell the Bot where to report partial completion.

153* Re-test after a website, app, or source format changes.280* Re-test after a website, app, or source format changes.

154 281 

155See [Settings and notifications](/grok-bot/settings-and-notifications) for time zone282For more on schedules, Slack triggers, and webhooks, see

283[Routines](https://cursor.com/help/grok-bot/routines). See [Settings and notifications](/grok-bot/settings-and-notifications) for time zone

156and usage controls, and [Approvals, security, and284and usage controls, and [Approvals, security, and

157privacy](/grok-bot/approvals-security-and-privacy) for automation boundaries.285privacy](/grok-bot/approvals-security-and-privacy) for automation boundaries.

team-bots.md +0 −425 deleted

File Deleted View Diff

1#### Work with Grok Bot

2 

3# Team Bots

4 

5A Team Bot is one Bot that your whole team talks to. Its owner sets it up once,

6with the plugins, secrets, skills, and files it needs, and publishes it to the

7team. Every teammate can then chat with it in the Grok Bot app or in Slack

8without starting from scratch.

9 

10## Why use Team Bots?

11 

12A Bot becomes useful as you teach it: the tools it can reach, the way your team

13works, and the details it keeps getting wrong. On a personal Bot, that work

14helps one person. A Team Bot shares it:

15 

16* **You set it up once, and everyone uses it.** The plugins, secrets, skills, and files

17 the owner adds are available in every teammate's conversation.

18* **It learns from the team.** When someone tells the Bot something the whole

19 team should know, it saves it to team memory, which every teammate's

20 conversation reads.

21* **Every conversation stays private.** Each teammate gets their own chat. The

22 owner can't read teammates' chats, and teammates can't read the owner's.

23* **It acts as the person asking.** A plugin that needs a sign-in uses the

24 account of whoever is talking to the Bot. A Team Bot never lends one

25 person's access to another.

26* **It can have its own Slack app.** Teammates DM it or @mention it, and it

27 posts as itself.

28 

29Team Bots suit one shared job, such as answering metrics questions from your

30data warehouse, keeping docs current as PRs ship, triaging requests posted in

31a Slack channel, or answering internal helpdesk questions from a knowledge

32base. For an everyday assistant that works from your own accounts and

33memories, keep a personal Bot.

34 

35### Team Bots, personal Bots, and public templates

36 

37| | Personal Bot | Public template | Team Bot |

38| --- | --- | --- | --- |

39| Who talks to it | Only you | Each person who adds it talks to their own copy | Everyone on your team, each in their own chat |

40| Who maintains it | You | Each copy's new owner, separately | The owner and any managers, and changes reach everyone |

41| Memory | Yours | Starts from what the template shares, then separate per copy | Team memory, plus private notes with each person |

42 

43## How to access

44 

45Team Bots are available to members of a team. Create, set up, and

46publish them in the Grok Bot desktop app. Teammates can use a published Team

47Bot from the desktop app, the [mobile app](/grok-bot/mobile), and Slack.

48 

49If your account can't use Team Bots, opening a Team Bot link shows **Team Bots

50Not Available**.

51 

52## Create a Team Bot

53 

541. Choose **New chat** in the sidebar or press `Cmd/Ctrl+N`.

552. In **New chat**, choose **Create new Team Bot**.

563. The Bot opens its own chat, asks what the team needs it for, and walks you

57 through plugins, secrets, skills, and files.

584. Give it a concrete job and try it on real tasks. Correct it as you go.

59 

60Until you [publish it](#publish-a-team-bot), only you can see the Team Bot.

61Each teammate who opens it later gets their own chat. That chat starts

62without this conversation and includes the plugins, secrets, skills, files,

63and memory you saved for the team.

64 

65### Start from a Bot you already have

66 

67If a personal Bot already does work the team would share, make a team copy of

68it:

69 

701. Open the Bot's **Share** menu and choose **Publish to Team**.

712. The Bot checks what a copy would start from: this chat and its own

72 memories.

73 * If most of those memories are personal facts about you, such as your

74 family, health, or schedule, or the chat is about your own life or

75 individual work, it asks **How should your Team Bot start?** Choose

76 **Copy** *Bot name* to start with the Bot's chat and memories, or

77 **Start fresh** to create a new Team Bot without them.

78 * Otherwise, including when the Bot is new, it makes the copy right away and

79 replies **Done. Your team copy is in the sidebar.**

803. In the team copy's chat, work through the setup cards. For each one, choose

81 what the team copy gets: plugins, secrets, memories, skills, files, and

82 routines. Memories you don't pick stay private; choose **Keep private** to

83 share none.

844. For routines, choose whether each one moves to the team copy or stays on

85 your personal Bot. Either way, a routine only runs for you, and teammates

86 never see it.

87 

88Your personal Bot stays private and keeps working for you, and teammates can't

89see the team copy until you publish it. If most of what a Bot knows is about

90you personally, a copy won't do much for your team. Create a new Team Bot

91instead.

92 

93## Set up what the Bot needs

94 

95The Bot's info pane shows a **Setup** section with cards for **Plugins**,

96**Secrets**, **Skills**, and **Files**. Each card shows what you added, or

97**None**. Choose a card to add to it or manage what it holds, or ask the Bot in

98chat. Only the owner and the Bot's [managers](#add-managers) can change this

99setup, and every change reaches all teammates.

100 

101### Plugins

102 

103Plugins you add to a Team Bot are shared: the Bot can use them in every

104conversation, including Slack channels and group chats, without asking anyone

105first. Each teammate still uses their own account where a plugin needs one, so

106how a plugin signs in decides whose access the Bot uses:

107 

108| Plugin | Whose access the Bot uses | Required setup for teammates |

109| --- | --- | --- |

110| Signs in with an account (OAuth) | The person talking to the Bot | Each teammate connects their own account the first time they need it |

111| Configured with a key or token | The Bot's own credential, the same for everyone | None |

112| Custom MCP server, **Remote HTTPS** | The Bot's own credential, or each person's sign-in if the server uses OAuth | None, or a one-time sign-in |

113| Custom MCP server, **Command** | Runs on the computer each conversation uses | None. A command that needs secrets works only in the owner's own chat |

114 

115For example, a Bot that reads Datadog alerts and files Linear tickets could

116use a Datadog plugin configured with a read-only key, so nobody signs in, and

117a Linear plugin that each teammate connects, so tickets are created by the

118person who asked.

119 

120A **Command** server runs on whichever computer the conversation uses; see

121[Where the work runs](#where-the-work-runs). Teammates can use the shell on

122those computers and read the server's command and arguments, so never put a

123credential in either. A Command server that needs environment variables, or

124whose arguments look like a credential, runs only in your own chat. For a

125custom server that needs secrets, choose **Remote HTTPS**.

126 

127Teammates can also bring their own connectors. A teammate who needs a service

128the Bot doesn't have can add it as a personal plugin from their own chat, and

129the Bot's shared plugins don't change. The Bot uses a person's own connectors

130in their 1:1 chat, in the app or a Slack DM, without asking. In a shared

131conversation, such as a Slack thread or a group chat, it asks that person

132first; see [Personal connectors and approvals](#personal-connectors-and-approvals).

133 

134Your team's [connector policy](/grok-bot/teams-and-enterprises#connector-policy)

135applies to Team Bots the same way it applies to other Bots.

136 

137### Secrets

138 

139Add a secret when a plugin or a script the Bot runs needs a key that has no

140plugin sign-in. Each secret has a name, description, and value. Names use

141uppercase letters, digits, and underscores and start with a letter, such as

142`DATADOG_API_KEY`.

143 

144* Values are encrypted when stored, and the app shows only each secret's name

145 and description. Teammates never see a value.

146* The Bot can't see a value either. It uses a secret by name, and the value is

147 replaced with `[REDACTED]` in the output of the commands it runs, the files it

148 reads, and its plugin calls.

149* The Bot can use every secret in any teammate's conversation, so treat a

150 secret as access you are giving the whole team.

151* Use scoped, read-only service-account keys instead of personal credentials.

152* A Team Bot holds up to 25 secrets. Each value is at least 8 characters, so

153 it can be redacted reliably, and at most 4,096 bytes.

154 

155When the Bot needs a key it doesn't have, it sends a secret request in the

156owner's or a manager's own chat in the Grok Bot app. Any other teammate who

157needs one hears that the owner or a manager adds it.

158 

159### Skills and files

160 

161**Skills** are the team's repeatable how-tos: how to qualify a lead, how to

162triage an alert, how your team writes release notes. Add them from your skill

163library or write new ones. Each team skill applies in every teammate's

164conversation.

165 

166**Files** give the Bot shared reference material, such as playbooks, FAQs, or

167schemas. Choose the **Files** card, then choose **Upload file** or drag files

168in. Supported formats are .txt, .md, .markdown, .csv, .json, .yaml, and .yml,

169up to 256,000 characters per file.

170 

171Only the owner or a manager saves a team skill. When another teammate teaches

172the Bot a new process in their own chat, the Bot keeps it in its notes with that

173person and tells them the owner or a manager can make it a team how-to.

174 

175### Memory

176 

177A Team Bot keeps two kinds of memory:

178 

179* **Team memory** is read by every teammate's conversation. The Bot saves a

180 fact there only when someone says the whole team should have it, and it

181 tells you when it does.

182* **Notes with each person** are private to that person. They hold that

183 person's preferences and context and follow them across their app chat and

184 Slack DMs with the Bot. No other teammate's conversation reads them.

185 

186To see what the Bot has saved for the team, ask it in chat. To correct or

187remove something, tell it.

188 

189## Publish a Team Bot

190 

191When setup is done, the sidebar shows **You built a Bot. Now your whole team

192gets a teammate.** Choose **Publish to team**, or ask the Bot to publish.

193 

194After you publish:

195 

196* Teammates find the Bot under **New chat → Team Bots**.

197* Choose **Copy link** to send it to someone directly.

198* You can [add it to Slack](#add-a-team-bot-to-slack).

199 

200To take the Bot away from teammates for a while, choose **Unpublish** in its

201details. Teammates lose access until you publish it again. Their chats and

202routines come back when you do.

203 

204To change the Bot's **Name** or **Description**, edit them in the Bot's

205details; the description is under **About**. The description is up to 140 characters and is what teammates read

206when they find the Bot, so write it in the Bot's own voice: “I answer

207questions about our Datadog alerts.”

208 

209### Add managers

210 

211Once the Bot is published, you can make teammates its managers. In the Bot's

212details, the **Managers** section sits under **Setup**. Choose **Add**, pick a

213teammate, then choose **Add manager**. A manager can change the Bot's setup,

214like its profile, skills, plugins, secrets, and Slack app, and every change

215reaches the whole team. Publishing, unpublishing, and deleting the Bot stay

216with you.

217 

218To remove a manager, choose the trash icon (**Remove manager**) next to their

219name, then **Remove**.

220 

221## Use a Team Bot

222 

2231. Choose **New chat**, then **Team Bots** at the bottom of it.

2242. Find the Bot. In the desktop app, type at least three characters in

225 **Search Team Bots** to search Bots you haven't added.

2263. Choose **Add**, then **Start a chat**.

227 

228You can also open a link a teammate sends you. A Team Bot shows its owner's

229name next to its own.

230 

231Your chat with a Team Bot is yours alone and starts fresh. The Bot knows what

232is saved on it for the team and what it has learned about you, not what other

233teammates said to it.

234 

235As a teammate, you can pin a Team Bot, hide it from your sidebar, and set up

236your own routines with it. You can't delete it, and you can't change its setup

237unless the owner makes you a [manager](#add-managers). Ask the owner or a

238manager for changes to shared plugins, secrets, skills, or files.

239 

240### Routines on a Team Bot

241 

242Routines are personal. A routine belongs to whoever set it up with the Bot, in

243their own chat. It runs as them, reports in their chat, and only they can see

244or change it. No routine runs for the whole team at once.

245 

246To give the whole team the output of a routine, have the routine post its

247result somewhere shared, such as a Slack channel. See

248[Skills, routines, and automations](/grok-bot/skills-routines-and-automations).

249 

250## Where the work runs

251 

252A Team Bot works on a Grok Bot computer, like any Bot. Which computer depends

253on the conversation:

254 

255| Conversation | Computer |

256| --- | --- |

257| The owner's own chat | The owner's computer |

258| A teammate's chat in the app, or their 1:1 Slack DM with the Bot | That teammate's own computer |

259| Slack channels, group DMs, and threads | One shared computer for that Bot, separate from the owner's and every teammate's |

260 

261Files you upload in your own chat land on your computer, not the owner's.

262Because Slack channel conversations share one computer, don't share anything

263in a channel thread that shouldn't be visible to everyone in that channel.

264 

265## Personal connectors and approvals

266 

267In a shared conversation, such as a Slack thread or a group chat, a Team Bot

268asks before it uses one of your own connectors. Plugins on the Bot don't need

269this, and neither does your 1:1 chat with the Bot. The card reads **Allow** and

270the plugin's name, and says which account it will use:

271 

272* **Allow once** lets the Bot use it for this reply and your next message,

273 unless someone else writes in between.

274* **Always allow for this Bot** remembers your answer for this Team Bot.

275* **Always allow for all Team Bots** remembers your answer for every Team Bot

276 on your team.

277* **Skip** leaves the plugin unused for this reply.

278 

279If you haven't connected the plugin yet, the Bot asks you to sign in. In

280Slack, it sends you a sign-in link.

281 

282To undo remembered answers, go to **Settings → General → Team Bots** and choose

283**Clear**. Team Bots ask again the next time they need one of your connectors.

284 

285The rest of the approval model, including Auto-review, applies to Team Bots as

286it does to every Bot, with one difference. In a conversation where nobody can

287answer an approval card, the Bot runs without Auto-review and stays within the

288permissions it was set up with, unless your team requires Auto-review. See

289[Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy).

290 

291## Add a Team Bot to Slack

292 

293A published Team Bot can have its own Slack app, named after the Bot and using

294its avatar. Teammates can DM it or @mention it in channels, and it answers

295with the same plugins, context, and memories it has in the Grok Bot app. It

296posts as itself, not as the owner.

297 

298The owner adds a Team Bot to Slack, and the Bot must be published first. A

299[manager](#add-managers) can add it too. The setup then uses the owner's Slack

300connection, so the owner connects Slack first.

301 

3021. In the Bot's details, choose **Bring to your team's Slack**.

3032. Choose **Connect Slack workspace** and approve Cursor in the Slack page

304 that opens.

3053. Pick the workspace and choose **Connect**. Pick a workspace you can install

306 apps in.

3074. Grok Bot creates the Slack app and installs it. The Bot sends you a welcome

308 DM in Slack when it is ready.

3095. Invite the Bot to the channels where it should work, for example with

310 `/invite @BotName`.

311 

312Each Team Bot is its own Slack app, separate from the Cursor app in Slack.

313 

314### Slack admin approval

315 

316If your Slack workspace requires approval for new apps, choosing **Connect**

317opens Slack's approval request page, where you submit the request. Once Slack

318has it, the setup shows **Awaiting admin approval** and the date you last

319submitted. Choose **Check approval** once an admin approves, **Resubmit** to

320open Slack's request page again, or **Cancel request** to stop the install.

321 

322If an admin denied the last request, the setup shows when, and choosing

323**Connect** again starts a new request.

324 

325Slack admins can approve Team Bots automatically with Slack's app-approval

326automations. See [How to set it up](https://cursor.com/bot/slack-auto-approve).

327 

328If Slack asks an admin to approve Cursor itself, the admin approves it, and

329then you connect again.

330 

331### How the Bot behaves in Slack

332 

333* **Direct messages:** the Bot answers every message. A DM is one conversation.

334* **Channels and group DMs:** the Bot answers when someone @mentions it in a

335 conversation it has been added to. After that, it follows the thread, so

336 later replies wake it without another mention. Each thread is its own

337 conversation.

338* **Other channel messages:** the Bot ignores top-level messages that don't

339 mention it. Use a Slack channel listener routine to have it respond to every

340 message in a channel.

341 

342### Link your Slack account

343 

344The Bot answers only people who have linked their Slack account to Cursor, so

345it knows who is asking and whose accounts to use. Posts from Slack workflows

346and other apps are the exception; see [Usage](#usage). Each teammate links once

347under **Settings → General → Team Bots**. When someone who hasn't linked

348messages the Bot, it shows them a private **Link Account** button and posts a

349short reminder in the thread pointing to it.

350 

351If a linked account isn't on the Bot's Cursor team, the Bot tells that person

352privately and doesn't answer.

353 

354Unlinking stops Team Bots, and Cloud Agents started from Slack, from answering

355you there until you link again.

356 

357### Remove a Team Bot from Slack

358 

359In the Bot's details, choose **Remove from Slack**. This deletes the app from

360the Slack workspace, and teammates can't reach the Bot from Slack until you

361add it again. The Team Bot keeps working in the Grok Bot app.

362 

363## Usage

364 

365When a teammate talks to a Team Bot, in the app or in Slack, the usage counts

366against that teammate's own Grok Bot allowance, not the owner's. A routine

367counts against the allowance of the person who set it up. Messages in Slack

368that don't come from a linked teammate, such as posts from a Slack workflow,

369count against the owner.

370 

371If a teammate is out of usage, the Bot tells them in the chat or Slack thread

372instead of using the owner's. See

373[Plans and billing](https://cursor.com/help/grok-bot/plans).

374 

375## For admins

376 

377Team Bots follow the same team controls as every Bot, including your connector

378policy, Team Rules, and Auto-review settings. See

379[Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises).

380 

381### Add Team Bots for members by default

382 

383On the Grok Bot page of the

384[Cursor dashboard](https://cursor.com/dashboard/bot), under **Team Bots**,

385choose **Manage Team Bots**. For each Team Bot, choose who gets it in their

386sidebar automatically: **All team**, **None**, or specific groups. Groups come

387from the **Members & Groups** page.

388 

389Members who get a Team Bot this way see **Required by your admin. You can't

390turn this off.**

391 

392Admins choose who gets a Team Bot by default. Only the Bot's owner and its

393managers change its plugins, secrets, skills, and files.

394 

395### Delete a Team Bot as an admin

396 

397In **Manage Team Bots**, choose the trash icon on the Bot's row. Type the Bot's

398exact name to confirm, then choose **Delete**. The Bot is deleted for everyone

399on your team, and its Slack app is removed from Slack. If the Slack app can't be

400removed, a Slack workspace admin can remove it in Slack.

401 

402### Audit logs

403 

404On Enterprise, [audit logs](/grok-bot/teams-and-enterprises#audit-logs) record

405Team Bot events, including when a Bot is created, published, unpublished, or

406deleted, changes to its skills, and Slack account links.

407 

408## Delete a Team Bot

409 

410The owner can delete a Team Bot, and so can a team admin from

411[Manage Team Bots](#delete-a-team-bot-as-an-admin). Deleting it removes the Bot

412for your whole team: teammates lose it, along with their chats and routines on

413it. This can't be undone.

414 

415If you may need the Bot again, choose **Unpublish** instead.

416 

417## Related pages

418 

419* [Create and manage Bots](/grok-bot/bots)

420* [Message and collaborate](/grok-bot/chat-and-collaboration)

421* [Use the computer and apps](/grok-bot/computer-and-apps)

422* [Skills, routines, and automations](/grok-bot/skills-routines-and-automations)

423* [Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy)

424* [Grok Bot for teams and enterprises](/grok-bot/teams-and-enterprises)

425* [Troubleshooting](/grok-bot/troubleshooting)

Details

43page. Existing Cursor users on your team get an email with a download link. New43page. Existing Cursor users on your team get an email with a download link. New

44users get an invitation to your Cursor team, by email or invite link, that also44users get an invitation to your Cursor team, by email or invite link, that also

45points them to Grok Bot. Teams that manage membership through SCIM see only the45points them to Grok Bot. Teams that manage membership through SCIM see only the

46existing-users option. To install the apps on member devices with your own46existing-users option.

47device management tools, see47 

48To install the desktop app on managed devices yourself and plan updates, see

48[Deploy Grok Bot to your organization](/grok-bot/deployment).49[Deploy Grok Bot to your organization](/grok-bot/deployment).

49 50 

50## Before you roll out51## Before you roll out


83 an independent review model called Auto Review.84 an independent review model called Auto Review.

84* Administrative control. Team admins can set Team Rules, Cloud Agent85* Administrative control. Team admins can set Team Rules, Cloud Agent

85 delegation, template sharing, and the local execution ceiling. Network86 delegation, template sharing, and the local execution ceiling. Network

86 Controls, Team Setup, Team Secrets, Allow Local Egress Routing, Allow Sudo on87 Controls, Team Setup Scripts, Team Secrets, Allow Local Egress Routing, Allow

87 Bot Computers, Action Recording, Enforce Auto-review, Auto-review rules, and88 Sudo on Bot Computers, Action Recording, Enforce Auto-review, Auto-review

88 the organization-wide enable switch are Enterprise only.89 rules, and the organization-wide enable switch are Enterprise only.

89 90 

90The pieces fit together like this:91The pieces fit together like this:

91 92 


98 page of the [Cursor dashboard](https://cursor.com/dashboard/bot). Team99 page of the [Cursor dashboard](https://cursor.com/dashboard/bot). Team

99 Rules, Cloud Agent delegation, public template sharing, and Execution on100 Rules, Cloud Agent delegation, public template sharing, and Execution on

100 Local Computer are available to team admins. Enterprise only on that page:101 Local Computer are available to team admins. Enterprise only on that page:

101 the organization-wide enable switch, Network Controls, Team Setup, Team102 the organization-wide enable switch, Network Controls, Team Setup Scripts,

102 Secrets, Allow Local Egress Routing, Allow Sudo on Bot Computers, Action103 Team Secrets, Allow Local Egress Routing, Allow Sudo on Bot Computers,

103 Recording, Enforce Auto-review, Auto-review rules, and computer management104 Action Recording, Enforce Auto-review, Auto-review rules, and computer

104 for organization admins. Members never see this page.105 management. Members never see this page.

1053. The Bot. Shell, browser, and computer use inside the hosted computer. A Bot1063. The Bot. Shell, browser, and computer use inside the hosted computer. A Bot

106 has no access by default and acts only with accounts the member signs it107 has no access by default and acts only with accounts the member signs it

107 into. It hands login, two-factor authentication, and payment steps to the108 into. It fills logins and cards from the member's Vault, a connected

108 member.109 password manager, or a Secure Form without seeing the values, and hands

1094. Connected apps. Your team's Cursor MCP (Model Context Protocol) policy applies in110 steps such as single sign-on and passkeys to the member.

110 full, allowing or blocking each connector. OAuth tokens stay on Cursor's1114. Connected apps. Your team's Cursor MCP (Model Context Protocol) policy

111 connector backend, and Bots invoke tools without receiving them.112 applies in full, allowing or blocking each connector. OAuth tokens stay on

113 Cursor's connector backend, and Bots invoke tools without receiving them.

1125. Cloud Agents. Grok Bot can delegate coding tasks to separate computers under1145. Cloud Agents. Grok Bot can delegate coding tasks to separate computers under

113 your existing [Cloud Agent](https://cursor.com/docs/cloud-agent) controls.115 your existing [Cloud Agent](https://cursor.com/docs/cloud-agent) controls.

114 Admins can disable spawning.116 Admins can disable spawning.


129temporary files when work completes. When a workload needs its own computer and131temporary files when work completes. When a workload needs its own computer and

130credential set, give it its own Cursor user.132credential set, give it its own Cursor user.

131 133 

132[Team Bots](/grok-bot/team-bots) are the exception to one Bot per user. A134[Shared Bots](/grok-bot/shared-bots) are the exception to one Bot per user. A

133member shares a cloud-hosted Bot with everyone on the team, or only with135Bot is either personal or shared: a member shares a cloud-hosted Bot with

134certain people and groups, and those members can chat with it. Each member's136everyone on the team, or only with certain people and groups, and those members

135chat is private, including from the owner and the Bot's Managers. In a member's137can chat with it. Each member's chat is private, including from the owner and

136own chat or Slack DM, the Bot usually works on that member's computer, uses138the Bot's Managers. In a member's own chat or Slack DM, the Bot usually works

137that member's connected accounts after asking, and uses that member's Grok Bot139on that member's computer, uses that member's connected accounts after asking,

138usage. In Slack channels, threads, group DMs, and group chats, a Team Bot uses140and uses that member's Grok Bot usage. In Slack channels, threads, group DMs,

139one computer of its own. Secrets, apps, and files the owner or a Manager adds141and group chats, a shared Bot uses one computer of its own. Secrets, apps, and

140to a Team Bot are available in every teammate's chat.142files the owner or a Manager adds to a shared Bot are available in every

143teammate's chat.

141 144 

142## Admin controls145## Admin controls

143 146 


159The organization-wide switch on the Grok Bot page, with **Manage Group Access**162The organization-wide switch on the Grok Bot page, with **Manage Group Access**

160beside it. Turning it on opens a setup modal that covers privacy mode, billing,163beside it. Turning it on opens a setup modal that covers privacy mode, billing,

161and model availability, offers to turn on Cloud Agents when they are off, and164and model availability, offers to turn on Cloud Agents when they are off, and

162asks you to accept the Grok Bot Terms. Turning it off blocks every member without deleting165asks you to accept the Grok Bot Terms. Turning it off blocks every member

163their computers. See166without deleting their computers. See

164[Enabling Grok Bot for your team](#enabling-grok-bot-for-your-team).167[Enabling Grok Bot for your team](#enabling-grok-bot-for-your-team).

165 168 

166Available on the Enterprise plan.169Available on the Enterprise plan.


176 179 

177Available on the Enterprise plan.180Available on the Enterprise plan.

178 181 

179### Bot Capabilities182#### Team icon

183 

184The image Grok Bot shows for your whole team, such as when a member shares a

185Bot with everyone. Admins upload, change, or remove it from the

186**Team Profile** section of Team Settings. Use a PNG, JPEG, or WebP up to 2 MB.

187 

188### Agent capabilities

180 189 

181What Bots may do on behalf of members. Each control applies to every member's190What Bots may do on behalf of members. Each control applies to every member's

182Bots.191Bots.


189on separate computers under your existing Cloud Agent controls. Turn it off198on separate computers under your existing Cloud Agent controls. Turn it off

190when your team does not need delegation.199when your team does not need delegation.

191 200 

201#### Public template sharing

202 

203Controls whether members can publish Bot templates outside your team. Off keeps

204sharing team-only, and Cursor enforces the policy on its servers, including for

205templates that are already public. Enterprise teams start with public sharing

206off; other teams start with it allowed. For what a shared template contains,

207see [Share a Bot](/grok-bot/bots#share-a-bot).

208 

209#### Manage Shared Bots

210 

211Controls who can use each [shared Bot](/grok-bot/shared-bots) and adds shared

212Bots to members' sidebars automatically. Open **Manage Shared Bots** under

213**Shared Bots** on the Grok Bot page. The **Access** column shows who can use

214each shared Bot, such as the whole team, certain people or groups, or only its

215owner. Click it to change who has access. In a Bot's **Auto-add** column, pick

216**All team** or one or more groups, or clear it. Auto-add only applies to

217groups that have access. Members who get a Bot this way cannot hide it from

218their sidebar. Admins can also delete a shared Bot here. Deleting it removes it

219for everyone on the team, removes its Slack app, and cannot be undone. Groups

220are managed on the Members & Groups page.

221 

222#### Page sharing

223 

224Controls how members can share [Pages](/grok-bot/files-and-results#pages)

225inside your team. Find **Page sharing** under **Sharing** on the Grok Bot page

226and pick **Anyone on the team**, **Specific teammates**, or **Off**.

227**Anyone on the team** is the default. Pages already shared stay shared when you

228tighten it. The control appears as Pages reach your team.

229 

192#### Agent Email230#### Agent Email

193 231 

194Lets members claim a `mail.grokbot.com` address that their Bots can read and232Lets members claim a `mail.grokbot.com` address that their Bots can read and

195send mail from. The switch is under **Bot Capabilities** on the Grok Bot page233send mail from. The switch is under **Bot Capabilities** on the Grok Bot page

196and is off by default, and members get no email tools until it is on. Every234and is off by default; members get no email tools until it is on. When a member

197outbound email waits as a draft until the member presses **Send**, including235asks for an email in chat, it sends once Auto-review allows it or the member

198mail from routines and replies. Newsletters and first-contact emails include an236approves it. Email the Bot writes on its own, including from routines, waits as

199unsubscribe link, and incoming mail acts only through routines the member sets237a draft until the member presses **Send**. Newsletters and first-contact emails

200up. If you turn it off later, Bots lose their email tools and email routines238include an unsubscribe link, and incoming mail acts only through routines the

201stop; existing addresses keep receiving mail. See239member sets up. Turning it off removes the Bots' email tools and stops email

240routines; existing addresses keep receiving mail. See

202[Give your Bot an email address](https://cursor.com/help/grok-bot/agent-email).241[Give your Bot an email address](https://cursor.com/help/grok-bot/agent-email).

203 242 

204#### Public template sharing

205 

206Controls whether members can publish Bot templates outside your team. Off

207keeps sharing team-only, and Cursor enforces the policy on its servers,

208including for templates that are already public. Enterprise teams start with

209public sharing off; other teams start with it allowed. For what a shared

210template contains, see [Share a Bot](/grok-bot/bots#share-a-bot).

211 

212#### Manage Team Bots

213 

214Controls who can use each [Team Bot](/grok-bot/team-bots) and adds Team Bots

215to members' sidebars automatically. Open **Manage Team Bots** under **Team

216Bots** on the Grok Bot page. The **Access** column shows who can use each Team

217Bot, such as the whole team, certain people or groups, or only its owner. Click

218it to change who has access. In a Team Bot's **Auto-add** column, pick **All

219team** or one or more groups, or clear it. Auto-add only applies to groups that

220have access. Members who get a Bot this way cannot hide it from their sidebar.

221Admins can also delete a Team Bot here. Deleting it removes it for everyone on

222the team, removes its Slack app, and cannot be undone. Groups are managed on

223the Members & Groups page.

224 

225#### Connector policy243#### Connector policy

226 244 

227Grok Bot inherits your team's Cursor connector policy. There is no separate245Grok Bot inherits your team's Cursor connector policy. There is no separate

228Grok Bot connector list, and members find permitted connectors under **Connect246Grok Bot connector list, and members find permitted connectors under **Connect

229apps** in Grok Bot. Set which247apps** in Grok Bot. Set which servers members can use from your Team

230servers members can use from your Team Marketplace on the dashboard's248Marketplace on the dashboard's

231[Plugins & MCPs page](https://cursor.com/dashboard/plugins), not on the Grok249[Plugins & MCPs page](https://cursor.com/dashboard/plugins), not on the Grok

232Bot page. The MCP allowlist is Enterprise only; see250Bot page. The MCP allowlist is Enterprise only; see

233[MCP server trust management](https://cursor.com/docs/enterprise/model-and-integration-management#mcp-server-trust-management).251[MCP server trust management](https://cursor.com/docs/enterprise/model-and-integration-management#mcp-server-trust-management).


254 272 

255Let members route Grok Bot's web traffic through their own computer. Off273Let members route Grok Bot's web traffic through their own computer. Off

256disables the option in Grok Bot. The switch is under **Bot Computers** on the274disables the option in Grok Bot. The switch is under **Bot Computers** on the

257Grok Bot page and is on by default. Turning it off275Grok Bot page and is on by default. Turning it off stops active routes within

258stops active routes within five minutes. Turning it back on restores each276five minutes. Turning it back on restores each member's previous choice. See

259member's previous choice. See

260[Route traffic through your desktop](/grok-bot/settings-and-notifications#route-traffic-through-your-desktop).277[Route traffic through your desktop](/grok-bot/settings-and-notifications#route-traffic-through-your-desktop).

261 278 

262Available on the Enterprise plan.279Available on the Enterprise plan.

263 280 

264#### Allow Sudo on Bot Computers

265 

266Lets Bots run commands as root on their own computer. The switch is on by

267default and sits next to **Allow Local Egress Routing** in the **Bot

268Computers** section of the Grok Bot page. Existing computers must be restarted

269before a change takes effect; see

270[Restart after a settings change](/grok-bot/computers#restart-after-a-settings-change).

271 

272Available on the Enterprise plan.

273 

274### Rules and approvals281### Rules and approvals

275 282 

276Guidance Bots follow, and the review layers that stop actions and model283Guidance Bots follow, and the review layers that stop actions and model


280 287 

281Rules that every member's Bots follow. Add them from the Grok Bot page and288Rules that every member's Bots follow. Add them from the Grok Bot page and

282scope each rule to Cursor, Grok Bot, or both. Rules applied to Grok Bot are289scope each rule to Cursor, Grok Bot, or both. Rules applied to Grok Bot are

283always required, so members cannot turn them off. Keep them short and few, like290always required, so members cannot turn them off. Keep them short and few,

284"never move company data to personal accounts." Rules guide a Bot; for approval291like "never move company data to personal accounts." Rules guide a Bot; for

285behavior, use [Auto-review rules](#auto-review-rules). For guidance that292approval behavior, use [Auto-review rules](#auto-review-rules). For guidance

286belongs to one cohort, add Group Rules under [Group settings](#group-settings).293that belongs to one cohort, add Group Rules under

294[Group settings](#group-settings).

287 295 

288#### Enforce Auto-review296#### Enforce Auto-review

289 297 

290Prevents members from turning Auto-review off. The switch is on the Grok Bot298Prevents members from turning Auto-review off. The switch is on the Grok Bot

291page and is off by default. When it is on, Bots always check risky actions299page and is off by default. When it is on, Bots always check risky actions

292before running them and ask for approval when needed. This includes Team Bots300before running them and ask for approval when needed. This includes shared

293in chats where nobody can answer an approval, which otherwise run without301Bots in chats where nobody can answer an approval, which otherwise run without

294Auto-review. Turn it on before you302Auto-review. Turn it on before you rely on team Auto-review rules. A group can

295rely on team Auto-review rules. A group can lift the lock for its own members303lift the lock for its own members with **Don't enforce for this group**; see

296with **Don't enforce for this group**; see [Group settings](#group-settings).304[Group settings](#group-settings).

297 305 

298Available on the Enterprise plan.306Available on the Enterprise plan.

299 307 


329 337 

330#### Network Controls338#### Network Controls

331 339 

332Restricts which destinations team computers can reach. On the dashboard the340Restricts which destinations team computers can reach. Find it under

333section is **Network** and the control is **Grok Bot Network Access**. Pick one341**Network** on the Grok Bot page as **Grok Bot Network Access**. Pick

334of three modes, from allow-all to a team allowlist of domains and IP ranges:342**Allow All Network Access**, **Defaults + Team Allowlist**, or

335**Allow All Network Access**, **Defaults + Team Allowlist**, or **Team343**Team Allowlist Only**, and list domains and IP ranges for the allowlist

336Allowlist Only**. Directory groups can carry their own344modes. Directory groups can carry their own policy, and a lock makes the team

337policy as **Group Network Access**, and **Lock for All Groups** makes the team

338policy apply to everyone. Teams without a policy default to allow-all. See345policy apply to everyone. Teams without a policy default to allow-all. See

339[network policy](/grok-bot/security#network-policy) for the modes and how a346[network policy](/grok-bot/security#network-policy) for the modes and how a

340new policy reaches running computers.347new policy reaches running computers.


344including built-in connectors such as GitHub, X, and Origin, must match an351including built-in connectors such as GitHub, X, and Origin, must match an

345allowed destination by the hosts it sends requests to, and a Bot's connection352allowed destination by the hosts it sends requests to, and a Bot's connection

346to one that does not match is refused. Command servers are unaffected. See353to one that does not match is refused. Command servers are unaffected. See

347[MCP servers and the network policy](/grok-bot/security#mcp-servers-and-the-network-policy).354[MCP servers and the network policy](/grok-bot/security#mcp-servers-and-the-network-policy)

355for the hosts each built-in connector needs.

348 356 

349Available on the Enterprise plan.357Available on the Enterprise plan.

350 358 


355Computers** on the Grok Bot page. Keep secret values out of setup scripts; when363Computers** on the Grok Bot page. Keep secret values out of setup scripts; when

356a script needs a credential, store it as a [Team Secret](#team-secrets) and364a script needs a credential, store it as a [Team Secret](#team-secrets) and

357read it from the environment. Members do not see these scripts in the app. For365read it from the environment. Members do not see these scripts in the app. For

358how manifests run, and to366how manifests run, and to install a networking client that reaches private

359install a networking client that reaches private services, see367services, see [Connect to private networks](/grok-bot/private-networks). To

360[Connect to private networks](/grok-bot/private-networks). To run extra368run extra scripts on one cohort's computers only, add them under

361scripts on one cohort's computers only, add them under

362[Group settings](#group-settings).369[Group settings](#group-settings).

363 370 

364Available on the Enterprise plan.371Available on the Enterprise plan.


397runtime reserves, such as `PATH`, `HOME`, and anything starting with `SAND_`404runtime reserves, such as `PATH`, `HOME`, and anything starting with `SAND_`

398or `LD_`, are rejected when you save. Team Secrets are for scripts you control.405or `LD_`, are rejected when you save. Team Secrets are for scripts you control.

399They do not make a value available to Bots directly, and they are separate from406They do not make a value available to Bots directly, and they are separate from

400the [secrets members store on a Bot](https://cursor.com/help/grok-bot/secrets).407the [secrets members store on a Bot](/grok-bot/vault). They are not available

401They are not available through the Admin API.408through the Admin API.

409 

410Available on the Enterprise plan.

411 

412#### Allow Sudo on Bot Computers

413 

414Lets Bots run commands as root on their own computer. The switch is under

415**Bot Computers** on the Grok Bot page and is on by default. Existing computers

416pick up a change after they restart.

402 417 

403Available on the Enterprise plan.418Available on the Enterprise plan.

404 419 

405#### Manage Member Computers and Data420#### Manage Member Computers and Data

406 421 

407Lets organization admins recreate, terminate, or permanently delete the422Lets admins recreate, terminate, or permanently delete the computers of many

408computers of many members at once, or delete all of their Grok Bot data, with a423members at once, or delete all of their Grok Bot data, with a result for each

409result for each member. Team admin rights are not enough, because one computer424member. Find it under **Security & Compliance** on the Grok Bot page.

410spans every team the member belongs to. Find it under **Security & Compliance**425**Recreate** moves members to the latest image and Team Setup Scripts while

411on the Grok Bot page. **Recreate** moves members to the latest image and Team426keeping their Bots, files, and logins. **Terminate** ends the member's current

412Setup Scripts while keeping their Bots, files, and logins. **Terminate** ends427work and keeps the durable disk; the member's next session starts a fresh

413the member's current work and keeps the durable disk; the member's next session428computer on it. **Delete** removes the computer and its stored files, and the

414starts a fresh computer on it. **Delete** removes the computer and its stored429member's next session starts an empty computer.

415files, and the member's next session starts an empty computer.

416**Terminate Inactive Computers**, under **Bot Computers**, does the terminate430**Terminate Inactive Computers**, under **Bot Computers**, does the terminate

417for you when a computer goes 30 days without use.431for you when a member's Bots go 30 days without a message. It is off by

418It is off by default. None of these remove432default. None of these remove access: to do that, remove the member from the

419access: to do that, remove the member from the team or turn off Grok Bot for433team or turn off Grok Bot for their group, and revoke their sessions in your

420their group, and revoke their sessions in your identity provider. See434identity provider. See [Manage Grok Bot computers](/grok-bot/computers).

421[Manage Grok Bot computers](/grok-bot/computers).

422 435 

423Available on the Enterprise plan.436Available on the Enterprise plan.

424 437 


438with the title but strip query strings and credentials; computer use sessions451with the title but strip query strings and credentials; computer use sessions

439record action and screenshot counts and the session duration, without the452record action and screenshot counts and the session duration, without the

440screenshots, clicks, or typed text; every other event carries ids, outcomes,453screenshots, clicks, or typed text; every other event carries ids, outcomes,

441and durations. Tool arguments and results, file paths and names, and message454and durations, never tool arguments, file paths, or message content. The

442bodies are never exported on these events; MCP arguments and results ship only

443through the opt-in conversation content export described below. The

444switch is on the Grok Bot page and is off by default. Recorded events do not455switch is on the Grok Bot page and is off by default. Recorded events do not

445appear on the Audit Log page. To receive them in your own collector, configure456appear on the Audit Log page. To receive them in your own collector, configure

446[OpenTelemetry Export](https://cursor.com/docs/enterprise/opentelemetry-export),457[OpenTelemetry Export](https://cursor.com/docs/enterprise/opentelemetry-export),


451 462 

452Available on the Enterprise plan.463Available on the Enterprise plan.

453 464 

454#### Conversation content export

455 

456An opt-in addition to OpenTelemetry Export that streams the text of user

457prompts and assistant responses from Grok Bot, and the arguments and results of

458Grok Bot MCP tool calls. It is off by default. In **Team Settings →

459OpenTelemetry Export**, turn on **Allow conversation content export**, then

460turn on **Conversation content** on your destination. That turns on

461**Prompts** and **Responses** and leaves **Tool I/O** off; turn on **Tool I/O**

462to also receive MCP tool arguments and results. Keep Action Recording on as

463well, so every tool I/O record has an MCP tool call record to join to. Turning

464a toggle off stops that export; turning it back on does not backfill earlier

465messages or tool calls.

466 

467Tool I/O covers hosted connector calls only: MCP calls Cursor runs, such as

468Jira, Slack, and Linear. `stdio` servers on the Bot's computer and built-in

469tools report no payloads yet.

470 

471Cursor scrubs the content before export: known credential shapes, PEM blocks,

472and email addresses become `[REDACTED: ...]` markers. Pattern matching cannot

473recognize every secret or every piece of personal data, and your team owns that

474residual risk. Teams on Privacy Mode (Legacy) cannot turn on conversation

475content export. See

476[Conversation content](https://cursor.com/docs/enterprise/opentelemetry-export#conversation-content)

477and [MCP tool I/O](https://cursor.com/docs/enterprise/opentelemetry-export#mcp-tool-io).

478 

479Available on the Enterprise plan.

480 

481#### Audit logs465#### Audit logs

482 466 

483Admin, security, and authentication events, plus Grok Bot control-plane467Admin, security, and authentication events, plus Grok Bot control-plane


494#### OpenTelemetry Export478#### OpenTelemetry Export

495 479 

496Streams Cursor usage metrics and logs, including recorded Grok Bot actions, to480Streams Cursor usage metrics and logs, including recorded Grok Bot actions, to

497a collector you run. It is the customer path for Action Recording events and,481a collector you run. It is the customer path for Action Recording events.

498when you opt in, conversation content. Records may include the member's email482Configure it under **Team Settings → OpenTelemetry Export**. Endpoint

499(`cursor.user.email`); it is optional and not exported for teams on Privacy

500Mode (Legacy). Configure it under **Team Settings → OpenTelemetry Export**.

501Endpoint

502requirements and the event schema are on483requirements and the event schema are on

503[OpenTelemetry Export](https://cursor.com/docs/enterprise/opentelemetry-export).484[OpenTelemetry Export](https://cursor.com/docs/enterprise/opentelemetry-export).

504 485 


509The controls above set the team-wide baseline. To widen that baseline for one490The controls above set the team-wide baseline. To widen that baseline for one

510cohort, open a group your team owns from491cohort, open a group your team owns from

511[Members > Groups](https://cursor.com/dashboard/members?subtab=groups) and use492[Members > Groups](https://cursor.com/dashboard/members?subtab=groups) and use

512its **Grok Bot** tab. Group settings only widen: a group can grant its members493its **Grok Bot** tab. Except for network policy, group settings only widen: a

513more than the team allows, never less, and a member in several groups gets the494group can grant its members more than the team allows, never less, and a

514most permissive result. This is the same rule as495member in several groups gets the most permissive result. This is the same

496rule as

515[group model access](https://cursor.com/docs/enterprise/model-and-integration-management#how-team-and-group-model-access-combine).497[group model access](https://cursor.com/docs/enterprise/model-and-integration-management#how-team-and-group-model-access-combine).

516A group control left at the team's value changes nothing, so tighten controls498A group control left at the team's value changes nothing, so tighten controls

517on the Grok Bot page and widen them per group.499on the Grok Bot page and widen them per group.

518 500 

519Network is the exception: a group's network policy replaces the team's for its

520members, whether looser or tighter, **Lock for All Groups** keeps the team

521policy for everyone, and a member of several groups gets the most restrictive

522policy.

523 

524The tab has four sections:501The tab has four sections:

525 502 

526* **Bot Capabilities.** Allow [Cloud Agents](#cloud-agents),503* **Bot Capabilities.** Allow [Cloud Agents](#cloud-agents),


528 [Allow Local Egress Routing](#allow-local-egress-routing), or raise the505 [Allow Local Egress Routing](#allow-local-egress-routing), or raise the

529 [Execution on Local Computer](#execution-on-local-computer) ceiling, for506 [Execution on Local Computer](#execution-on-local-computer) ceiling, for

530 group members when the team has them off or stricter. For Auto-review,507 group members when the team has them off or stricter. For Auto-review,

531 **Don't enforce for this group**508 **Don't enforce for this group** lifts the team's

532 lifts the team's [Enforce Auto-review](#enforce-auto-review) lock so group509 [Enforce Auto-review](#enforce-auto-review) lock so group members can turn

533 members can turn Auto-review off, and group Auto-review rules combine with510 Auto-review off, and group Auto-review rules combine with the team's

534 the team's [Auto-review rules](#auto-review-rules), with **Ask first**511 [Auto-review rules](#auto-review-rules), with **Ask first** winning when

535 winning when rules conflict.512 rules conflict.

536* **Network.** The group's own network policy, as described under513* **Network.** The group's own network policy, as described under

537 [Network Controls](#network-controls). A locked team policy applies to514 [Network Controls](#network-controls). It replaces the team policy for group

538 everyone. A member of several groups gets the most restrictive one.515 members, whether looser or tighter, and a member of several groups gets the

516 most restrictive one. A locked team policy applies to everyone.

539 **Apply to MCP servers** is set on the team's Grok Bot page only; a group517 **Apply to MCP servers** is set on the team's Grok Bot page only; a group

540 inherits it and cannot turn it off.518 inherits it and cannot turn it off.

541* **Group Rules.** Rules for the group's Bots, combined with519* **Group Rules.** Rules for the group's Bots, combined with

542 [Team Rules](#team-rules). Members cannot turn them off.520 [Team Rules](#team-rules). Members cannot turn them off.

543* **Setup Scripts.** Manifests that run on group members' computers alongside521* **Setup Scripts.** Manifests that run on group members' computers alongside

544 [Team Setup Scripts](#team-setup-scripts). They use the same structure and run the same way,522 [Team Setup Scripts](#team-setup-scripts). They use the same structure and

545 the same no-secrets rule applies, and they read the same523 run the same way, the same no-secrets rule applies, and they read the same

546 [Team Secrets](#team-secrets) as the team's manifests; there are no524 [Team Secrets](#team-secrets) as the team's manifests; there are no

547 group-level secrets. See525 group-level secrets. See

548 [how Team Setup runs your scripts](/grok-bot/private-networks#how-team-setup-runs-your-scripts).526 [how Team Setup runs your scripts](/grok-bot/private-networks#how-team-setup-runs-your-scripts).


560 538 

561## Admin API539## Admin API

562 540 

563Enable Grok Bot and manage capabilities, Enforce Auto-review, group access,541Enable Grok Bot and manage capabilities, Enforce Auto-Review, group access,

564network policy, team rules, and setup scripts through the542network policy, team rules, and setup scripts through the

565[Admin API](https://cursor.com/docs/account/teams/admin-api#grok-bot).543[Admin API](https://cursor.com/docs/account/teams/admin-api#grok-bot).

566[Team Secrets](#team-secrets) are managed from the dashboard only. To recreate,544[Team Secrets](#team-secrets) are managed from the dashboard only.

567terminate, or delete members' computers, or delete all of their Grok Bot data,545 

568from a script, see546To recreate, terminate, or delete members' computers, or delete all of their

569[Run operations through the API](/grok-bot/computers#run-operations-through-the-api).547Grok Bot data, from a script, use the

548[Organization API](https://cursor.com/docs/account/organizations/organization-admin-api#grok-bot-computers).

549It takes an Organization API key with the `admin:*` scope, because one computer

550serves every team a member belongs to.

570 551 

571## Security552## Security

572 553 

573The security model, network policy, approvals and Auto Review, identity,554The security model, network policy, approvals and Auto Review, identity,

574logging, data handling, and certifications live on555logging, data handling, and certifications live on

575[Grok Bot security](/grok-bot/security). Common review questions are on the556[Grok Bot security](/grok-bot/security). Common review questions are on

576[Grok Bot security FAQ](/grok-bot/security-faq). To have your own AI security557[Grok Bot security FAQ](/grok-bot/security-faq). To have your own AI security

577server check each model request, see558server check each model request, see

578[Grok Bot inference hooks](/grok-bot/inference-hooks).559[Grok Bot inference hooks](/grok-bot/inference-hooks).


588 mode and want it to cover connected apps too, add the hosts your connectors569 mode and want it to cover connected apps too, add the hosts your connectors

589 use (for example `api.github.com`, `api.x.com`, `api.origin.cursor.com`) to570 use (for example `api.github.com`, `api.x.com`, `api.origin.cursor.com`) to

590 the list, then turn on **Apply to MCP servers**; it is off until you do. See571 the list, then turn on **Apply to MCP servers**; it is off until you do. See

591 [MCP servers and the network policy](/grok-bot/security#mcp-servers-and-the-network-policy).572 [Grok Bot security](/grok-bot/security#network-policy).

5922. Audit connector policy in Teams Marketplace before enabling Grok Bot. Any5732. Audit connector policy in Teams Marketplace before enabling Grok Bot. Any

593 permitted connector is available to every Bot a member runs.574 permitted connector is available to every Bot a member runs.

5943. Turn on Enforce Auto-review before you rely on team rules. Enterprise only.5753. Turn on Enforce Auto-review before you rely on team rules. Enterprise only.


637### Can I set a Grok Bot spend cap?618### Can I set a Grok Bot spend cap?

638 619 

639A separate Grok Bot spend cap is not available today. Account-level on-demand620A separate Grok Bot spend cap is not available today. Account-level on-demand

640controls apply, and the per-product split is on the621controls apply, and the per-product split is on the dashboard usage page.

641[dashboard usage page](https://cursor.com/dashboard/usage).

642 622 

643### Why does a member see an app as Disabled by team admin?623### Why does a member see an app as Disabled by team admin?

644 624 


648members with a vendor-side permission error, check the provider's628members with a vendor-side permission error, check the provider's

649requirements; some vendors restrict their MCP endpoints to their own629requirements; some vendors restrict their MCP endpoints to their own

650administrators. See630administrators. See

651[Connect an app](/grok-bot/computer-and-apps#connect-an-app).631[Connect apps](/grok-bot/computer-and-apps#connect-an-app).

652 632 

653### How do members request access?633### How do members request access?

654 634 


659 639 

660### Can I see what kind of work my team does with Grok Bot?640### Can I see what kind of work my team does with Grok Bot?

661 641 

662Yes, on all Enterprise teams. The Conversation Insights642Yes, on all Enterprise teams. The Conversation Insights page of the Analytics

663page of the Analytics dashboard has a **Grok Bot** source that groups Bot643dashboard has a **Grok Bot** source that groups Bot conversations by Type of

664conversations by Type of Work and Level of Automation. See644Work and Level of Automation. See

665[Grok Bot Conversation Insights](https://cursor.com/docs/account/teams/analytics#grok-bot-conversation-insights).645[Grok Bot Conversation Insights](https://cursor.com/docs/account/teams/analytics#grok-bot-conversation-insights).

666 646 

667Isolation, egress, approvals, logging, and data-handling questions are on the647Isolation, egress, approvals, logging, and data-handling questions are on

668[Grok Bot security FAQ](/grok-bot/security-faq).648[Grok Bot security FAQ](/grok-bot/security-faq).

669 649 

670## Related pages650## Related pages

671 651 

652* [Deploy Grok Bot to your organization](/grok-bot/deployment)

672* [Grok Bot security](/grok-bot/security)653* [Grok Bot security](/grok-bot/security)

673* [Grok Bot security FAQ](/grok-bot/security-faq)654* [Grok Bot security FAQ](/grok-bot/security-faq)

674* [Grok Bot inference hooks](/grok-bot/inference-hooks)655* [Grok Bot inference hooks](/grok-bot/inference-hooks)

675* [Deploy Grok Bot to your organization](/grok-bot/deployment)

676* [Configure identity and access](/grok-bot/identity-and-access)656* [Configure identity and access](/grok-bot/identity-and-access)

677* [Connect to private networks](/grok-bot/private-networks)657* [Connect to private networks](/grok-bot/private-networks)

678* [Configure TLS-inspecting proxies](/grok-bot/proxies)658* [Configure TLS-inspecting proxies](/grok-bot/proxies)

679* [Manage Grok Bot computers](/grok-bot/computers)659* [Manage Grok Bot computers](/grok-bot/computers)

680* [Create and manage Bots](/grok-bot/bots)660* [Create and manage Bots](/grok-bot/bots)

681* [Team Bots](/grok-bot/team-bots)

682* [Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy)

683* [Admin API](https://cursor.com/docs/account/teams/admin-api#grok-bot)661* [Admin API](https://cursor.com/docs/account/teams/admin-api#grok-bot)

684* [Grok Bot Conversation Insights](https://cursor.com/docs/account/teams/analytics#grok-bot-conversation-insights)662* [Grok Bot Conversation Insights](https://cursor.com/docs/account/teams/analytics#grok-bot-conversation-insights)

685* [Plans and billing](https://cursor.com/help/grok-bot/plans)663* [Plans and billing](https://cursor.com/help/grok-bot/plans)

troubleshooting.md +349 −54

Details

3# Troubleshooting3# Troubleshooting

4 4 

5Start with the least destructive step. A Bot's cloud work can continue even5Start with the least destructive step. A Bot's cloud work can continue even

6when the desktop or mobile app is disconnected.6when the desktop or mobile app is disconnected. Most problems clear with a full

7restart: fully quit Grok Bot (on Mac, choose **Quit** from the menu bar, not

8just closing the window), reopen it, and try again before anything else.

7 9 

8## Sign-in does not complete10## Sign-in does not complete

9 11 


155. Confirm that your account has Grok Bot access.175. Confirm that your account has Grok Bot access.

16 18 

17If your organization uses SSO, complete the organization login rather than19If your organization uses SSO, complete the organization login rather than

18signing in with a different personal account.20signing in with a different personal account. If your access comes from a seat

21on a self-serve Grok Business plan, choose **Sign in with Grok** in the browser

22and use the Grok account that holds the seat.

23 

24If you are stuck in a sign-in loop or see a persistent authentication error:

25 

261. Update the desktop app to the latest version, then sign out and sign back

27 in.

282. Clear browser cache and cookies for cursor.com and x.ai, then sign in again

29 in a private or incognito window.

303. On desktop, also try signing in at [x.ai/bot](https://x.ai/bot) with the

31 same Cursor account. If the phone loops, sign in on desktop first.

324. If the error started recently, wait 30 to 60 minutes and retry. Some

33 authentication errors clear on their own as your session refreshes.

34 

35Reinstalling the app usually does not fix this. Some session and account-link

36failures, including looped sign-in flows, and access blocks caused by a phone

37verification failure can't be fixed from your side.

38[Contact support](#before-contacting-support) with the exact error text, the

39steps you already tried, and whether the problem started during SuperGrok or

40X Premium+ linking; for a phone verification block, include a screenshot of

41the access-blocked screen.

19 42 

20An error about Legacy Privacy Mode means the account is using a data mode that43An error about Legacy Privacy Mode means the account is using a data mode that

21does not permit Grok Bot's required storage. Update the Cursor account data44does not permit Grok Bot's required storage. Update the Cursor account data

22setting or contact your organization administrator.45setting or contact your organization administrator.

23 46 

24## The computer is still setting up47## Is Grok Bot down?

25 48 

26Initial setup and an image update can take several minutes. Keep the app open49Check [status.cursor.com](https://status.cursor.com) and look at the

27until **Starting your computer** or **Updating your computer** completes.50**Grok Bot** row. The app doesn't show service status, so the status page is

51the place to check. You can subscribe to updates there.

28 52 

29If progress is still changing, wait. If it fails or stops changing:53If the status page shows a Grok Bot incident, wait for it to be resolved, then

54send your message again. Don't **Reset** the computer or reinstall the app.

55Neither fixes a service problem, and **Reset** can lose very recent changes if

56the computer can't be reached to save them.

30 57 

311. Retry from the error state.58If the status page shows no incident and the Bot says **Bot failed to respond**

322. Restart Grok Bot.59or **Model provider is overloaded**, wait a moment and send the message again.

333. Check for a Grok Bot app update.60If the Bot still doesn't reply, fully quit and reopen Grok Bot. A Bot also can't finish a turn while the computer says **Reconnecting** or

344. If the computer remains unreachable, open **Settings → Computer** and choose61**Couldn't Reach Grok Bot's Computer**; see

35 **Update Bot's Computer**.62[The computer cannot be reached](#the-computer-cannot-be-reached). If the

63computer is connected and the same prompt still fails,

64[contact support](#before-contacting-support) with the error title, the

65request ID, and a screenshot of the computer status.

66 

67## The computer is still setting up

68 

69First setup and a computer update can take several minutes. Keep the app open

70while it shows progress, such as **Setting up your Grok Bot…** during first

71setup or **Updating Grok Bot's Computer** during an update. On your phone, the

72home screen shows **Starting your computer…**. A slow update may say

73**Update still running** or **Taking longer than usual**; **Keep waiting** is

74the safe choice unless the update looks stuck. An update can take a few

75minutes when it is downloading a large image or transferring data.

76 

77If progress is still changing, wait. If it fails or stops changing, follow

78[The computer cannot be reached](#the-computer-cannot-be-reached). Choose

79**Recover** only if the update appears stuck and the app offers

80**Recover computer**; if recovery is not available, keep waiting.

81 

82If the computer's files aren't backed up yet, **Update** says they aren't ready

83and nothing changes. Wait a moment and try again; do not **Reset** to force it.

84If it keeps saying the files aren't ready,

85[contact support](#before-contacting-support).

86If **Settings** says

87**An agent couldn't pause in time, so the computer was not updated**, let that

88Bot finish, then choose **Update** again.

36 89 

37## The computer cannot be reached90## The computer cannot be reached

38 91 

39Your Bot profiles and saved conversations are not necessarily lost when the92Your Bot profiles and saved conversations are not lost when the computer is

40computer is temporarily unreachable.93temporarily unreachable. Chats are stored separately from the computer, and

94Bots, files, and logins are safe while it reconnects.

41 95 

42Recover in this order:96Recover in this order:

43 97 

441. Choose **Retry** or reopen the conversation.981. If the computer says **Reconnecting** or

452. Restart the Grok Bot app.99 **Couldn't Reach Grok Bot's Computer**, wait, then choose **Retry**. Do not

463. Choose **Recover computer** from the unreachable-computer state when offered100 **Reset** during this.

47 (the confirmation dialog calls it **Recover Grok Bot's Computer**).1012. Fully quit Grok Bot and reopen it.

484. If recovery is not available, open **Settings → Computer** and choose1023. If an update is offered, open **Settings → Computer** and choose

49 **Update Bot's Computer**. On iPhone and Android, **Settings → Bot → Bot103 **Update Bot's Computer**.

50 Computer** has **Reset Computer**.1044. Choose **Recover computer** if it still cannot reconnect, or if an update

515. Wait for the replacement computer to become available.105 looks stuck and **Recover computer** is shown (the confirmation dialog calls

526. Use **Reset** only if recovery and update fail and you accept losing recent106 it **Recover Grok Bot's Computer**).

53 unsynced work.1075. Use **Reset** only after those steps. On iPhone and Android,

54 108 **Settings → Bot → Bot Computer** has **Reset Computer**; updating and

55**Recover computer** and **Update** preserve durable files and logins.109 recovering the computer require the desktop app.

56**Reset** restores the last saved snapshot and can lose recent or unsynced110 

57work.111**Reconnecting** and **Recover** usually take a few minutes; you can choose

112**Continue in Background**. Do not start a second Update or Reset while one is

113already running. Repeated resets can interrupt a restore that is still

114finishing. If **Recover** or **Reset** fails, use **Retry Recovery** or

115**Retry Reset** once, then stop and

116[contact support](#before-contacting-support).

117 

118The text under **Update Bot's Computer** says which kind of update is waiting.

119A software update keeps everything, including installed apps. A full computer

120update keeps your Bots, files, and logins but removes installed apps and

121packages, and you may be able to schedule it for later. **Recover computer**

122saves what it can, then builds a new computer on the latest version from your

123saved data: saved Bots, files, and logins stay, installed apps and packages are

124removed, running work is interrupted, and very recent changes can be lost if

125the computer couldn't be reached to save them. **Reset** builds a new computer

126from your last saved data with the same losses. If Bots recently disappeared,

127or saving failed, contact support before you use either one.

128 

129Project folders such as `node_modules` or a Python virtual environment are not

130saved. Reinstall them after a computer update, **Recover**, or **Reset**.

131 

132## Chats or Bots look missing

133 

134They are usually not deleted. Chats are stored separately from the computer, so

135a computer problem does not delete conversation history by itself. Check before

136you do anything else:

137 

1381. Fully quit Grok Bot and reopen it.

1392. Open the same account on another device, including the phone app. Bots and

140 conversations are shared across devices signed in to that account.

1413. In the sidebar, open **Hidden Bots** on desktop or **Show Hidden Bots** on

142 the phone. **Hide from sidebar** removes a Bot from the list only; hidden

143 Bots stay active and keep their history. To show one again, choose

144 **Show in sidebar** on desktop or **Unhide** on the phone.

1454. Confirm you are in the same Cursor account, not a different login.

146 

147Don't use **Recover** or **Reset** to look for them. If they are still missing

148on every device after these checks,

149[contact support](#before-contacting-support) with the Bot name and a

150screenshot of the sidebar.

151 

152## Files are missing from the computer

153 

154Conversation history is stored outside the computer, so deleting files inside

155it, including `rm -rf`, does not delete chats. Grok Bot keeps a durable copy of

156synced computer data, and reopening the computer restores from that copy, so

157synced files usually come back. If the computer is still empty after

158**Recover**, stop making changes inside it and

159[contact support](#before-contacting-support).

160 

161Files that exist only on your Mac or Windows machine are not covered. Keep your

162own backups for those.

163 

164## The computer is low on disk space

165 

166This is about your Bots' cloud computer, not your laptop. When it's almost full,

167your Bot tells you once in chat, names the biggest files or folders with their

168sizes, and offers to delete them. Nothing is deleted unless you say yes, and

169saying no leaves those files in place. Cleanup applies only to computer files,

170not to chats. Low disk space is not data loss.

58 171 

59## A Bot appears stuck172## A Bot appears stuck

60 173 


67A computer-use task already active on that Bot's screen may need to finish or180A computer-use task already active on that Bot's screen may need to finish or

68be redirected before another one can start.181be redirected before another one can start.

69 182 

70If usage is exhausted or an on-demand spending limit is reached, review usage183## Your usage limit is reached

71and billing from the account access page or **Usage & Billing** when that184 

72section is available.185If the Bot stopped replying and says you hit your usage limit, it isn't broken:

186your weekly usage is used up. It resets each week. To keep going now, add

187prepaid credit (The X Subscription), turn on on-demand usage (legacy Cursor

188plans), or move to a bigger plan. If on-demand is on, the

189**On-demand monthly limit** caps it; a Bot already working can finish past

190that limit. See

191[How much does Grok Bot cost?](/grok-bot/faq#how-much-does-grok-bot-cost) and

192[Usage and billing](/grok-bot/settings-and-notifications#usage-and-billing).

73 193 

74## A website keeps asking for login194## A website keeps asking for login

75 195 


82expire sessions or require verification for each sensitive action; this cannot202expire sessions or require verification for each sensitive action; this cannot

83always be avoided.203always be avoided.

84 204 

205Fingerprint, Face ID, Windows Hello, and passkeys saved on your laptop or phone

206don't work on the Bot's computer. For a work app that uses Okta or single

207sign-on, choose **Take over** on the **Computer** card marked

208**Action needed**, sign in with a method your company allows there, such as a

209password with a code or a push approval on your phone, then choose

210**I'm done**. On Mac and Windows, you can also use a hardware security key: in

211**Settings → General**, under **Security Key**, turn on

212**Use hardware security keys**.

213 

214## A website times out or won't connect

215 

216The Bot's computer reaches the internet through Cursor's shared network. Some

217sites and services drop connections from it, even when the same address opens

218on your own device. The Bot may report a timeout, a secure connection error, or

219a page that never loads. **Update**, **Recover**, and **Reset** don't change

220this, so skip them.

221 

222Two settings under **Settings → Computer → Your computer** send the work

223through your own device instead:

224 

225* **Route traffic through this computer.** The Bot's browser uses your

226 desktop's connection, so the site sees your network and IP address. It

227 applies to new connections and works while the Grok Bot desktop app is open.

228 If the row asks you to update the Bot's computer first, choose **Update**. If

229 your team admin has turned off local routing, the switch is locked. See

230 [Route traffic through your desktop](/grok-bot/settings-and-notifications#route-traffic-through-your-desktop).

231* **Execution on this computer.** The Bot runs commands and scripts, including

232 API calls, on your desktop instead of its cloud computer. Choose

233 **Ask every time** or **Always allow**.

234 

235If neither fits, [contact support](#before-contacting-support) with the site

236address and a screenshot of the error.

237 

85## A plugin will not install or authenticate238## A plugin will not install or authenticate

86 239 

240A Bot shows a connect card only when an app needs you to sign in. Don't wait for

241one:

242 

871. Open **Connect apps** from the sidebar, select the connected count next to2431. Open **Connect apps** from the sidebar, select the connected count next to

88 the title, and confirm the plugin is listed as installed.244 the title, and confirm the plugin is listed as installed.

892. Reopen its detail page and choose the authentication action.2452. Open the app and choose **Authenticate** (**Authorize** on the phone).

903. Complete authorization with the intended account in the browser.2463. Complete authorization with the intended account in the browser within

247 about 10 minutes.

914. Return to Grok Bot and retry the task.2484. Return to Grok Bot and retry the task.

925. Check whether the connector requires an organization-provided variable or

93 administrator configuration.

94 249 

95If authentication was revoked in the source service, remove and reconnect the250If a connect card says it is waiting for authorization, choose **Reopen** to

96plugin.251bring the sign-in page back. If it says authorization didn't finish or failed,

252choose **Retry**. If the app's button changes to **Reconnect**, choose it.

253 

254**Added** means the app is installed, not that you are signed in. Check its

255status in **Connect apps**:

256 

257* **Needs auth** or **Disconnected**: choose **Authenticate** and finish the

258 sign-in.

259* **Disabled by team admin**: ask your Cursor team admin to turn it on.

260* **Connected**: send the Bot a new message and ask it to try the app again.

261 

262If it still doesn't work, or authentication was revoked in the source service,

263choose **Remove**, add the app again, and sign in. Also check whether the

264connector requires an organization-provided variable or administrator

265configuration. If re-authorizing completes but the app still shows

266disconnected, [contact support](#before-contacting-support) with the app name.

267 

268## The X plugin is connected, but private X requests fail

269 

270Public X is built in. Grok Bot can search posts, profiles, mentions, trends, and

271news without connecting X and without X API credits. The X plugin is only for

272account-private data: your DMs, bookmarks, home timeline, and who liked your

273posts. It runs on your own X developer account, which needs X API credits.

274 

2751. Open [console.x.com](https://console.x.com) and sign in with the same X

276 account you connected in Grok Bot.

2772. Check your X API credit balance. If it shows $0.00, add prepaid credits

278 there. You buy these from X.

2793. Retry the request in Grok Bot. You don't need to reconnect the plugin.

280 

281Reconnecting the plugin and changing your Grok Bot or Cursor plan do not add X

282API credits. Connecting X does not always apply starter X API credits yet, so

283console.x.com can show $0.00 until you add credits.

284 

285## A secret value seems missing

286 

287A saved value is not shown again, including in Shell. On a shared Bot, if the

288name is still listed under **Secrets**, it is still stored. See

289[Vault](/grok-bot/vault).

97 290 

98## An attachment cannot be read291## An attachment cannot be read

99 292 

100Check that:293Check that:

101 294 

102* The file is no larger than 25 MB, or 200 MB for video295* The file is within its limit: 25 MB for an image, 250 MB for a document,

103* No more than six attachments were selected at once on desktop296 audio, or other file, and 1 GB for a video. Images also count toward 200 MB

297 per message.

298* No more than 20 files are attached to one message on desktop

104* The file is not encrypted or password-protected299* The file is not encrypted or password-protected

105* The upload finished before sending300* The upload finished before sending

106* The file type is supported301* The file type is supported


113 308 

114Open the routine and verify:309Open the routine and verify:

115 310 

116* It is enabled311* It is enabled, not **Paused**

117* Its schedule and time zone are correct312* **When to run** shows the schedule and time zone you expect

118* The owning Bot still exists313* The owning Bot still exists

119* Required plugins remain authenticated314* Required plugins remain authenticated

120* The computer can reach the source system315* The computer can reach the source system

121* Usage or account access has not been paused316* Usage or account access has not been paused

122 317 

123Inspect recent run history for a failure. Use **Test run** only with safe input;318Inspect recent run history for a failure. If the routine shows **Test** in the

124testing can perform real external actions.319desktop app, use it only with safe input; a test run can perform real external

320actions. Many routines don't show **Test**; for those, ask the Bot to do the

321same work once in chat with a safe input.

125 322 

126For an event-triggered routine, confirm the source channel, repository, and323For an event-triggered routine, confirm the source channel, repository, and

127matching rule are still valid.324matching rule are still valid. If a routine isn't paused but hasn't run for 24

325hours or more with no error shown,

326[report a bug](https://cursor.com/help/troubleshooting/reporting-bugs) with the

327Bot name and routine details.

128 328 

129## An approval is blocked329## A run fails with an error

130 330 

131Read the proposed target and arguments. If the card is no longer actionable:331Copy the request ID from the message, then try the task again. If the same

332prompt fails on a fresh run,

333[report a bug](https://cursor.com/help/troubleshooting/reporting-bugs) and

334include the error text and request ID.

335 

336## An approval expired or is blocked

337 

338An approval from a chat you are in waits for you. An approval from work that

339started without you, like a routine, a trigger, or a message from another Bot,

340expires after about 30 minutes. The card then shows **Expired**, and the action

341doesn't run. To catch approvals in time, turn on **Notifications** for Bots that

342run routines, choose **Always allow** for actions you trust, and ask the Bot to

343try the task again after an approval expires.

344 

345If a card is no longer actionable, read the proposed target and arguments,

346then:

132 347 

1331. Reject or cancel it if that control is available3481. Reject or cancel it if that control is available

1342. Send the Bot a replacement instruction3492. Send the Bot a replacement instruction


149Keep local access disabled unless the task specifically requires files or364Keep local access disabled unless the task specifically requires files or

150commands on the computer in front of you.365commands on the computer in front of you.

151 366 

367A Bot may say "Local tools are turned off. The user has set local tool access

368to Never." even though **Execution on this computer** is set to

369**Always allow** or **Ask every time**. This is a known issue on Cursor's side.

370Your setting is correct, and restarting or reinstalling Grok Bot, or changing

371the setting, won't clear the error.

372 

373## A Bot can't use your phone's apps

374 

375Keep Grok Bot open on your phone while the Bot works, and ask from your own

376chat with a Bot you own. On the phone, open **Settings → Connect apps** and

377choose **iPhone** or **Android** next to **All**. If the app shows **Denied**,

378choose **Open Settings** and turn it on. See

379[Let a Bot use your phone's apps](/grok-bot/mobile#let-a-bot-use-your-phones-apps).

380 

152## @bot did not reply on X381## @bot did not reply on X

153 382 

154Tagging @bot isn't available in every region yet, and @bot also stays quiet383Tagging @bot isn't available in every region yet, and @bot also stays quiet


156moderation. [Tag @bot on X](/grok-bot/tag-on-x#when-bot-stays-quiet) lists the385moderation. [Tag @bot on X](/grok-bot/tag-on-x#when-bot-stays-quiet) lists the

157common causes and what each @bot reply means.386common causes and what each @bot reply means.

158 387 

388## The app hangs on launch

389 

390Fully quit and relaunch. On Mac, use **Quit** from the menu bar. If it hangs on

391every launch, [contact support](#before-contacting-support) with your platform

392and Grok Bot version.

393 

394## Grok Bot says Update required

395 

396Grok Bot requires an update when your version is more than 14 days old and a

397newer version is out. It covers its window with **Update required** and says

398your version is no longer supported. Choose **Update** and wait for the

399download, then choose **Restart to update**. Your Bots keep running in the

400cloud the whole time. If the download fails, choose **Try again** or

401**Download the latest version** and install it yourself.

402 

403On Linux, the screen may show a command to run instead. Choose

404**Copy command**, run it in a terminal, then restart Grok Bot:

405 

406* Debian or Ubuntu: `sudo apt update && sudo apt install --only-upgrade grok-bot`

407* Fedora or other RPM systems: `sudo dnf upgrade --refresh grok-bot`

408 

409If the screen asks you to download and install the latest package, do that,

410then restart Grok Bot.

411 

412On iPhone and Android, choose **Update Grok Bot** to get the new version from

413the App Store or Google Play.

414 

159## Update Grok Bot415## Update Grok Bot

160 416 

161The Grok Bot app and Grok Bot's computer have separate updates.417The Grok Bot app and Grok Bot's computer have separate updates.

162 418 

163* To update the app, open **Settings → Updates → Check for Updates**. If an419* The desktop app checks for updates on its own. When one is ready, the account

164 update is ready, choose **Restart to Update**.420 menu shows **New update available**. Choose **Install**, then

421 **Restart to update**.

422* To check yourself, open **Settings → Updates → Check for Updates**. If an

423 update is ready, choose **Restart to Update**. With **Automatic Updates** on,

424 the default, a downloaded update also installs while you're away.

425* On a Linux `.deb` or `.rpm` install, **Check for Updates** only tells you a new

426 version is out. Update with your package manager, for example

427 `sudo apt update && sudo apt install --only-upgrade grok-bot` or

428 `sudo dnf upgrade --refresh grok-bot`.

429* Phone updates come from the App Store or Google Play.

165* To rebuild the cloud computer, open **Settings → Computer** and choose430* To rebuild the cloud computer, open **Settings → Computer** and choose

166 **Update Bot's Computer**.431 **Update Bot's Computer**.

167 432 

168Updating the desktop app does not reset the cloud computer.433Updating the desktop app does not reset the cloud computer. Product changes are

434listed on the [changelog](https://cursor.com/changelog).

435 

436If Grok Bot closed to update but is still on the old version, check the version

437under **Support → About** in the account menu, fully quit and reopen Grok Bot,

438then choose **Check for Updates** and **Restart to Update** again. If the

439version still hasn't changed, download the latest version from

440[cursor.com/dashboard/bot](https://cursor.com/dashboard/bot) and install it

441over the current app. Your Bots and chats belong to your account, so they are

442still there after you reinstall. On Linux, run the update command for your

443system. If the old version keeps coming back,

444[contact support](#before-contacting-support) with the version and your

445platform.

169 446 

170## Before contacting support447## Before contacting support

171 448 

449To report a problem from the desktop app, open the account menu and choose

450**Support → Send Feedback**. On a Mac, you can also choose

451**Help → Send Feedback** in the menu bar. Make sure

452**Include current conversation ID** is selected when the problem is in the open

453conversation. In the phone app, open **Settings** and tap **Send Feedback**;

454if the problem is with one Bot, choose it and keep **Include Bot ID** on.

455 

456For help from the support team, email [support@x.ai](mailto:support@x.ai)

457from the email on your Grok Bot account. Billing and cancellation questions go

458to the same address with a quick summary of the issue.

459 

460To find your version, open the account menu and choose **Support → About**,

461then **Copy version info**, which copies the version, release track, and OS. To

462copy a request ID, right-click the message and choose **Copy request ID**, or

463hover the message, open **More message actions**, and choose

464**Copy request ID**. If the menu doesn't offer it, that message has no request

465ID; include the error text and a screenshot instead.

466 

172Collect:467Collect:

173 468 

174* Grok Bot version469* The email on your Grok Bot account

175* Operating system and version470* Grok Bot version and platform: Mac, Windows, Linux, iOS, or Android

176* The exact error message471* What you were trying to do, and the Bot or routine name

177* The Bot or routine name472* The exact error message or a screenshot of the error or plan screen

178* The approximate time and time zone473* The approximate time and time zone

179* The full request ID or conversation ID if one is shown474* The full request ID or conversation ID if one is shown

180* Whether retry, app restart, or updating Grok Bot's computer changed the475* The troubleshooting steps you already tried, such as retry, app restart, or

181 result476 updating Grok Bot's computer

182 477 

183Do not include passwords, one-time codes, private keys, or secret values.478Do not include passwords, one-time codes, private keys, or secret values.

use-cases.md +70 −94

Details

1#### Start1#### Start

2 2 

3# Use cases3# Use Cases

4 4 

5The best Grok Bot roles own a repeatable outcome, not a loose category of5The best Bot roles own a repeatable outcome, not a loose category of questions.

6questions. Start with read-and-prepare work, review the result, then add6Start each role with read-and-prepare work, review the result, and only then add

7approved actions or a routine.7approved actions or a [routine](/grok-bot/skills-routines-and-automations).

8 8 

9Every starter prompt below ends at a review point on purpose. Keep sending,9Every starter prompt below ends at a review point on purpose. Keep sending,

10publishing, purchasing, and production changes behind10publishing, purchasing, and production changes behind

11[approval](/grok-bot/approvals-security-and-privacy#review-an-action).11[approval](/grok-bot/security#approvals-and-auto-review).

12 12 

13## Sales Outbound13## Sales outbound

14 14 

15**Owns:** account research, contact prioritization, and review-ready outreach.15Owns account research, contact prioritization, and review-ready outreach.

16 16Connect your CRM, product-intent sources, and email.

17**Connect:** customer relationship management (CRM), product-intent sources,

18company websites, email, and professional networks as permitted by their terms.

19 

20**Start with:**

21 17 

22> Research the 25 accounts in this CRM view. Score them against our ideal18> Research the 25 accounts in this CRM view. Score them against our ideal

23> customer profile (ICP) and recent intent, identify up to three relevant19> customer profile and recent intent, identify up to three relevant contacts

24> contacts per account, and draft email and LinkedIn outreach in the style20> per account, and draft email and LinkedIn outreach in the style examples

25> examples attached. Skip anyone already in an active sequence. Return a review21> attached. Skip anyone already in an active sequence. Return a review list;

26> list; do not send or enroll anyone.22> do not send or enroll anyone.

27 23 

28After the output is reliable, create a nightly research routine that stops at24Once the output is reliable, schedule a nightly research routine that stops at

29the review list.25the review list.

30 26 

31## Talent Scout27## Talent scout

32 

33**Owns:** sourcing, candidate research, outreach drafts, and scheduling

34preparation.

35 28 

36**Connect:** applicant tracking system (ATS), approved sourcing tools, email,29Owns sourcing, candidate research, and outreach drafts. Connect your applicant

37and calendar.30tracking system, approved sourcing tools, email, and calendar.

38 31 

39**Start with:**32> For this role description, find 20 candidates who meet the must-have

40 

41> For this role description, find 20 potential candidates who meet the must-have

42> criteria. Exclude anyone already in our ATS, explain the evidence for each33> criteria. Exclude anyone already in our ATS, explain the evidence for each

43> match, and draft personalized outreach in my voice. Do not contact anyone.34> match, and draft personalized outreach in my voice. Do not contact anyone.

44 35 

45Add approvals before external outreach, and have the Bot respect candidate36Keep external outreach behind approval, and have the Bot respect candidate

46privacy, regional requirements, and source terms.37privacy and each source's terms.

47 

48## Paid Media

49 38 

50**Owns:** campaign monitoring and budget recommendations.39## Paid media

51 40 

52**Connect:** advertising platforms, analytics, budget spreadsheet, and Slack.41Owns campaign monitoring and budget recommendations. Connect your advertising

53 42platforms, analytics, budget spreadsheet, and Slack.

54**Start with:**

55 43 

56> Pull current spend and performance by campaign. Compare it with the monthly44> Pull current spend and performance by campaign. Compare it with the monthly

57> budget and target customer acquisition cost (CAC), then recommend45> budget and target customer acquisition cost, then recommend reallocations

58> reallocations with the supporting46> with the supporting numbers. Draft a Slack update for the growth team. Do not

59> numbers. Draft a Slack update for the growth team. Do not change budgets or47> change budgets or send the message.

60> send the message.

61 48 

62Keep campaign changes behind approval even after the analysis becomes a49Keep campaign changes behind approval even after the analysis becomes a

63routine.50routine.

64 51 

65## Expense Manager52## Expense manager

66 

67**Owns:** weekly expense reconciliation and missing-information follow-up.

68 53 

69**Connect:** expense system, email, shared drive, and finance spreadsheets.54Owns weekly expense reconciliation and missing-information follow-up. Connect

55your expense system, email, and finance spreadsheets.

70 56 

71**Start with:**57> Build this week's expense summary from the expense system and the attached

72 

73> Build this week's expense summary from the expense system and attached

74> policy. Match receipts from the finance inbox, flag missing categories or58> policy. Match receipts from the finance inbox, flag missing categories or

75> policy exceptions, and draft one follow-up per owner. Return the summary and59> policy exceptions, and draft one follow-up per owner. Return the summary and

76> drafts; do not send messages or change reimbursements.60> drafts; do not send messages or change reimbursements.

77 61 

78Ask for policy citations on every exception and totals that reconcile back to62Ask for a policy citation on every exception and totals that reconcile back to

79the source.63the source.

80 64 

81## Product Performance65## Product performance

82 

83**Owns:** targeted performance investigations with evidence.

84 66 

85**Connect:** observability, analytics, incident tooling, and source-control67Owns targeted performance investigations with evidence. Connect observability,

86links.68analytics, and incident tooling.

87 

88**Start with:**

89 69 

90> Investigate the checkout latency increase since yesterday's release. Review70> Investigate the checkout latency increase since yesterday's release. Review

91> dashboards, traces, and flamegraphs; identify the highest-confidence hotspot;71> dashboards and traces, identify the highest-confidence hotspot, and return a

92> and return a short write-up with screenshots and direct links. Separate facts72> short write-up with screenshots and direct links. Separate facts from

93> from hypotheses. Do not change alerts or production settings.73> hypotheses. Do not change alerts or production settings.

94 74 

95Use a routine for a recurring health report, not for unsupervised production75Use a routine for a recurring health report, not for unsupervised production

96changes.76changes.

97 77 

98## Bug Reproduction78## Bug reproduction

99 

100**Owns:** turning reports into reliable reproduction packs.

101 79 

102**Connect:** issue tracker, staging environment, browser, and network tools.80Owns turning reports into reliable reproduction packs. Connect your issue

81tracker and a staging environment.

103 82 

104**Start with:**83> Read this bug report and reproduce it in staging with a fresh test account.

105 

106> Read this bug report and reproduce it in staging using a fresh test account.

107> Return exact steps, expected and actual behavior, screenshots, browser and OS84> Return exact steps, expected and actual behavior, screenshots, browser and OS

108> details, relevant console or network notes, and a minimal test case if85> details, and a minimal test case if possible. Do not use production customer

109> possible. Do not use production customer data.86> data.

110 

111Provide approved test credentials through a secure handoff, not chat.

112 87 

113## Account Health88Provide test credentials through a

89[secure handoff](/grok-bot/computer-and-apps#take-over-for-a-sensitive-step),

90not chat.

114 91 

115**Owns:** risk and expansion signals across a customer portfolio.92## Account health

116 93 

117**Connect:** CRM, product usage, support, billing, and customer-success notes.94Owns risk and expansion signals across a customer portfolio. Connect your CRM,

118 95product usage, support, and billing sources.

119**Start with:**

120 96 

121> Review the accounts in this portfolio. Combine recent usage, support97> Review the accounts in this portfolio. Combine recent usage, support

122> escalations, renewal timing, and stakeholder activity into a ranked watch98> escalations, renewal timing, and stakeholder activity into a ranked watch

123> list. For each account, include the evidence, why it matters, and a suggested99> list. For each account, include the evidence, why it matters, and a suggested

124> next step. Do not contact customers or edit the CRM.100> next step. Do not contact customers or edit the CRM.

125 101 

126Define risk thresholds in the Bot description so the weekly result stays102Define risk thresholds in the Bot's description so the weekly result stays

127consistent.103consistent.

128 104 

129## Chief of Staff105## Chief of staff

130 

131**Owns:** a source-linked digest of what changed and what needs attention.

132 106 

133**Connect:** Slack, email, calendar, meeting notes, and planning documents.107Owns a source-linked digest of what changed and what needs your attention.

134 108Connect Slack, email, calendar, and your planning documents.

135**Start with:**

136 109 

137> Review activity since yesterday across my approved channels, inbox, calendar,110> Review activity since yesterday across my approved channels, inbox, calendar,

138> and meeting notes. Return only items that map to the priorities in this111> and meeting notes. Return only items that map to the priorities in this

139> document. For each item, include the source, why it matters, the proposed next112> document. For each item, include the source, why it matters, the proposed next

140> step, and whether I owe a decision. Do not send messages or change meetings.113> step, and whether I owe a decision. Do not send messages or change meetings.

141 114 

142Tune the Bot by marking what was useful and what was noise. Then schedule the115Mark what was useful and what was noise, then schedule the digest for a time you

143digest for a time you can review it.116can review it.

144 

145## Turn an example into a durable Bot

146 117 

147For any role:118## Turn a role into a durable Bot

148 119 

1491. Put the job, source systems, output format, and standing boundaries in the1201. Put the job, source systems, output format, and standing boundaries in the

150 Bot description.121 [Bot's description](/grok-bot/bots#edit-a-bot).

1512. Run one real task with a safe scope.1222. Run one real task with a safe scope.

1523. Correct the result until it is reviewable.1233. Correct the result until it's reviewable without you.

1534. Save the successful process as a skill.1244. Save the working process as a

1545. Test it on a second input.125 [skill](/grok-bot/skills-routines-and-automations#save-a-skill), and test it

1556. Create a routine only when retries and failure cases are defined.126 on a second input.

1567. Keep consequential external actions behind approval.1275. Create a

157 128 [routine](/grok-bot/skills-routines-and-automations#create-a-routine) only

158Continue with [Get started](/grok-bot/get-started), then review129 after retries and failure cases are defined.

159[files and results](/grok-bot/files-and-results) and1306. Keep consequential external actions behind approval.

160[approval boundaries](/grok-bot/approvals-security-and-privacy).131 

132## Related pages

133 

134* [Get started with Grok Bot](/grok-bot/get-started)

135* [Work with Grok Bot](/grok-bot/bots)

136* [Grok Bot for Teams and Enterprise](/grok-bot/teams-and-enterprises)

vault.md +217 −0 created

Details

1#### Work with Grok Bot

2 

3# Vault and secure sign-in

4 

5Keep passwords, cards, API keys, and other credentials out of chat and ordinary

6files. Save logins, cards, and contact info in **Vault** so your Bots can sign

7in and check out for you, and use the secure secret card for API keys. After

8you save a secret, Grok Bot does not show the value again; a blank field later

9is not proof the secret was deleted.

10 

11## What Vault holds

12 

13Vault keeps your logins, cards, and contact info so your Bots can sign in to

14websites and check out for you without seeing the secret values. Open it from

15**Settings → Vault** in the desktop app or on your phone, where you can add,

16edit, or remove anything. Vault needs Grok Bot 0.75.2 or later.

17 

18* **Logins:** a website, a username or email, and a password. A Bot uses a

19 saved login to sign in on that website.

20* **Cards:** the number, expiry, security code, name on card, and billing

21 address.

22* **Contact info:** names, addresses, phone numbers, and emails for shipping and

23 billing.

24 

25A Bot never sees a saved password, card number, or security code. It can see

26your contact info and which logins you saved, so it can pick the right entry

27and type contact details for you.

28 

29Vault covers your whole account: everything you save is available to every Bot

30on your account, and you can't limit an item to one Bot. Vault isn't supported

31on [shared Bots](/grok-bot/shared-bots); add keys to a shared Bot under

32**Secrets** instead. See [API keys and other

33secrets](#api-keys-and-other-secrets).

34 

35## Add, import, and change items

36 

371. Open **Settings → Vault** and choose **New item**.

382. Pick **Login**, **Card**, or **Contact info**.

393. Fill in the details and save.

40 * For a login, enter the **Website**, **Username or email**, and

41 **Password**, then choose **Save login**.

42 * For a card, choose **Scan with camera** or **Upload a photo** to fill it

43 from the card, or type it in. Then choose **Save card**.

44 * For contact info, enter the name, address, phone, and email, then choose

45 **Save contact info**.

46 

47Under **Hints**, tell your Bots when to use an entry, such as “Use for work

48purchases.” A Bot follows the hint when it chooses between entries.

49 

50You can also save from a chat. When a Bot asks for a login, card, or address

51with a [Secure Form](#secure-forms), check **Securely save to Bot's vault** to

52keep it for next time; if you leave it unchecked, the value is kept only for

53that chat and expires on its own. When you attach a photo of a card, Grok Bot

54offers **Save to Vault** so your Bot can pay with it later.

55 

56To move logins from another password manager on desktop:

57 

581. Export your passwords as a CSV file from 1Password, Chrome or Edge, Safari or

59 Apple Passwords, Firefox, Bitwarden, or LastPass.

602. In **Settings → Vault**, choose **New item**, then **Import from CSV…**.

613. Select **Choose CSV file** and pick the export. The file is read on your

62 computer and never uploaded, and it must be under 5 MB.

634. Review the list. Items already in your vault are skipped. Rows with an

64 error, such as a missing password or a website that isn't https, aren't

65 imported.

665. Choose the import button, which shows how many items are ready.

67 

68LastPass exports bring cards along too. The export holds your passwords

69unencrypted, so delete it once the import finishes.

70 

71To change or delete an item, select it in **Settings → Vault** and edit it, or

72choose **Remove**. After you remove a login, Grok Bot can no longer sign in to

73that site with it; after you remove a card, Grok Bot can no longer pay with it.

74To change a card's number, remove the card and add it again. On the phone,

75saved cards can't be edited yet.

76 

77A Bot can change contact info, and an entry's nickname and hints, when you ask.

78Passwords, usernames, websites, card numbers, and security codes change only in

79**Settings → Vault**, and logins and cards are removed only there.

80 

81## How a Bot uses Vault

82 

83To sign in, a Bot uses a login saved in Vault first, then a connected password

84manager such as

85[1Password](/grok-bot/computer-and-apps#connect-1password), then asks you

86with a Secure Form. Values from Vault and from a Secure Form are filled into the

87page without the Bot seeing them. When a site emails a one-time code, the Bot

88can read it from a connected Gmail or Outlook account or from

89[its own inbox](/grok-bot/computer-and-apps#give-your-bots-an-email-address).

90 

91* **New accounts:** if you let a Bot choose the password when it signs up for a

92 site, Vault generates the password and saves the login, and the Bot never

93 sees it.

94* **Checkout:** saved cards fill in at checkout, and contact info fills in

95 shipping and billing details. See [Pay for things](#pay-for-things).

96* **Details you share in chat:** when you give a Bot a name, address, phone

97 number, or email, it saves it as contact info once the task is done and tells

98 you what it saved. Tell it if you don't want something kept.

99 

100The Bot hands you the computer when a form can't do the step, such as single

101sign-on, a passkey, a CAPTCHA it couldn't get past, an approval on another

102device, a QR code, or a bank card verification. Choose **Take over** on the

103request, or open the computer and choose **Take control**, complete only that

104step, then choose **I'm done** and tell the Bot to continue. The signed-in

105session stays on the computer for future tasks and is shared across your Bots.

106 

107## Secure Forms

108 

109When a page needs something only you should provide, the Bot shows a **Secure

110Form** in the chat, one form per step. The form names the site it fills, such

111as “Never shown to your Bot. Filled directly to example.com.” Your answers go

112straight into the page and are never shown to the Bot.

113 

114If a form for a login, card, or contact info has **Securely save to Bot's

115vault**, check it to keep the value in Vault. Leave it unchecked to use the

116value only for that chat. A form without that checkbox saves straight to Vault.

117 

118A filled form says **Filled into the page. Secret values were never shown to

119your Bot.** If it says **Could not fill into the page**, the page may have moved

120before the form could fill it; the values still weren't shown to the Bot. Submit

121a new form if the Bot asks again.

122 

123## API keys and other secrets

124 

125For an API key or another secret that isn't a login or card, use the **secure

126secret card** when a Bot asks for one. The field is masked. Choose **Save

127securely**, and the card then says **Saved** and **Saved securely and kept

128private**. The value isn't written into the chat or shown to the Bot.

129 

130On a [shared Bot](/grok-bot/shared-bots) you own or manage, you can also add a

131secret from the Bot's details. Open **Secrets**, choose **Add secret**, enter an

132environment variable name, a short description, and the value, then choose

133**Save secret**. The description is visible to the Bot; the value is not.

134Secrets on a shared Bot are used in every teammate's chat, so only add keys

135you're happy for everyone who can chat with the Bot to use.

136 

137A credential your company's setup scripts need, such as a license key for a

138tool installed on every team computer, is stored by a team admin as a [Team

139Secret](/grok-bot/teams-and-enterprises#team-secrets) on the Enterprise

140dashboard instead. Those never reach your Bots directly.

141 

142Never paste a password, one-time code, or API key into ordinary chat, a Shell

143command, or a file on the computer, and don't type secrets into a demonstration

144when you use [Teach a

145task](/grok-bot/skills-routines-and-automations#teach-a-workflow-by-demonstration).

146 

147### Why you can't see a saved value

148 

149Saved values are write-only:

150 

151* In **Settings → Vault**, saved passwords stay hidden, and cards show only

152 their last four digits.

153* The secure secret card does not show the value after **Saved**. The footer

154 says **Stored securely, never shown to your Bot**.

155* On a shared Bot, **Secrets** lists the name and description only. It never

156 shows the value again, including in Shell.

157* To change a value there, choose **Replace**, paste the new value, and choose

158 **Replace value**. You can't read the old value back.

159 

160If a save fails, the form says **The secret was not saved. Try again.** If a

161shared Bot's **Secrets** list says **Something went wrong. Try again.**, choose

162**Try Again**. **No secrets yet** means that Bot has no saved names, not that a

163value is hidden.

164 

165### Did an update delete my secrets?

166 

167**Recover**, **Reset**, and computer updates remove installed apps and packages,

168so a secret you typed into a file, a shell profile, or an installed tool on the

169computer can disappear with them. That is separate from secrets you saved with

170the secure card, under **Secrets**, or in Vault. See [Update, recover, or reset

171the computer](/grok-bot/computer-and-apps#update-recover-or-reset-the-computer).

172 

173Shell not printing a secret does not mean it was wiped. On a shared Bot, if the

174name is still listed under **Secrets**, the value is still stored. If a shared

175Bot's secret name is gone and you did not choose **Remove**:

176 

1771. Fully quit Grok Bot and reopen it. On Mac, choose **Quit** from the menu bar,

178 not just close the window.

1792. Open the same Bot on another device signed into the same Cursor account.

1803. If the list says **Something went wrong. Try again.**, choose **Try Again**

181 before you add anything.

182 

183If the name is still missing on every device, add it again; don't put it in a

184file to keep a copy on the computer. If names keep disappearing, [contact

185support](/grok-bot/troubleshooting) with your account email and a screenshot of

186**Secrets**, but never the secret value.

187 

188## Pay for things

189 

190A card saved in Vault fills in at checkout without asking you each time, and no

191setting requires your approval for each use. If you want to approve every

192payment yourself, don't save the card:

193 

194* When a Bot asks for a card with a Secure Form at checkout, leave **Securely

195 save to Bot's vault** unchecked. The card is used only in that chat. A form

196 without that checkbox saves straight to Vault, so don't submit it.

197* If you already saved a card, open **Settings → Vault**, select it, and choose

198 **Remove**.

199 

200**Settings → Vault** also lists **Payment accounts**, wallets you can connect,

201such as Link or X Money, and **Default payment method**, which Grok Bot pays

202with first.

203 

204With a Link account connected, a Bot can ask you to approve a one-time card for

205a single purchase. The request shows the merchant, the items, and the total.

206Choose the **Pay** button, which shows the amount, to approve; choose **Pay

207another way** to skip the card, or **Deny**. After you approve, finish

208authorizing on the Link page that opens. Nothing is charged if you decline or

209the request expires. If the card says your Link account isn't connected,

210reconnect Link, then ask the Bot again.

211 

212## Related pages

213 

214* [Use the computer and apps](/grok-bot/computer-and-apps)

215* [Shared Bots](/grok-bot/shared-bots)

216* [Approvals, security, and privacy](/grok-bot/approvals-security-and-privacy)

217* [Store secrets securely](https://cursor.com/help/grok-bot/secrets)