224 224
225### Zero Data Retention225### Zero Data Retention
226 226
227227ZDR is enforced at the team level. When enabled for a team or enterprise, zero data retention occurs when using Grok Build.ZDR is enforced at the team level. When enabled for a team or enterprise, zero data retention occurs when using Grok Build. Video tools under ZDR require user-supplied output storage — see [Video Output Storage under ZDR](/build/settings/zdr-video-storage).
131* [Modes and Commands](/build/modes-and-commands)131* [Modes and Commands](/build/modes-and-commands)
132* [Headless & Scripting](/build/cli/headless-scripting)132* [Headless & Scripting](/build/cli/headless-scripting)
133* [Enterprise Deployments](/build/enterprise)133* [Enterprise Deployments](/build/enterprise)
134* [Grok Bot](/grok-bot/overview) — AI teammates on a cloud computer
161| Setting | Section | Values / default | Description |161| Setting | Section | Values / default | Description |
162| --- | --- | --- | --- |162| --- | --- | --- | --- |
163| `respect_gitignore` | `[tools]` | `true` / `false` (default `false`) | When `true`, search and read tools skip gitignored files. |163| `respect_gitignore` | `[tools]` | `true` / `false` (default `false`) | When `true`, search and read tools skip gitignored files. |
164| `disable_zdr_incompatible_tools` | `[tools]` | `true` / `false` (default `false`) | Restrict tools needing xAI-hosted output (video) under ZDR; without a configured output bucket they return setup guidance instead of generating. |
165| `zdr_video_output_s3` | `[tools.zdr_video_output_s3]` | table | User-supplied S3 bucket for ZDR video output — see [Video Output Storage under ZDR](/build/settings/zdr-video-storage). |
164| `file_toolset` | `[toolset]` | `standard` (default) | `hashline` | File edit tool scheme. |166| `file_toolset` | `[toolset]` | `standard` (default) | `hashline` | File edit tool scheme. |
165| `timeout_secs` | `[toolset.bash]` | seconds (default `120`) | Foreground bash command timeout. |167| `timeout_secs` | `[toolset.bash]` | seconds (default `120`) | Foreground bash command timeout. |
166| `output_byte_limit` | `[toolset.bash]` | bytes (default `20000`) | Max captured bash output. |168| `output_byte_limit` | `[toolset.bash]` | bytes (default `20000`) | Max captured bash output. |
1#### Settings
2
3# Video Output Storage under ZDR
4
5Under Zero Data Retention (ZDR), generated videos must be stored in user-supplied storage. Until storage is configured, the video tools in Grok Build will return an error.
6
7To set this up, configure an S3-compatible bucket and set the following in `~/.grok/managed_config.toml`. Grok Build presigns an upload URL for each generation and passes it to the API, so the video lands directly in your bucket and is never stored by xAI:
8
9```toml
10[tools.zdr_video_output_s3]
11bucket = ""
12endpoint = ""
13region = ""
14
15[tools.zdr_video_output_s3.read_write]
16access_key_id = ""
17secret_access_key = ""
18
19[tools.zdr_video_output_s3.read_only]
20access_key_id = ""
21secret_access_key = ""
22```
23
24| Key | Required | Description |
25| --- | --- | --- |
26| `bucket` | yes | Bucket name for generated videos. |
27| `endpoint` | yes | S3-compatible endpoint URL (AWS S3, Cloudflare R2, MinIO, …). |
28| `region` | yes | Bucket region. |
29| `key_prefix` | no | Object key prefix (default `grok-videos/`). |
30| `expires_secs` | no | Presigned-URL lifetime in seconds (default `900`, minimum enforced). |
31| `read_write` | yes | Credentials used to presign the upload URL. |
32| `read_only` | no | Optional credentials used to presign a playback/download URL; omit to manage retrieval yourself. |
33
34Only the presigned URLs leave the machine — the credentials themselves are never sent to xAI. Restart Grok Build after changing the config for it to take effect.
35
36Note: Video tools will be enabled if the privacy setting is off (`/privacy`).
