Continue

Coding agent (IDE) · Continue · Last checked 2026-10-16

Per-tool policies: ask first, automatic, or excluded. Ask first is the default. Headless CLI runs drop ask tools entirely.

Overall: Unverified (fewer than 3 criteria confirmed)

Lock this down first

Leave write and terminal tools on Ask First, and exclude what you never use.

Scorecard

Criterion	Rating	Notes
Permission granularity	2/3
Human approval gates	2/3
Sandboxing	Unverified	Not confirmed in the docs we checked.
Secrets handling	Unverified	Not confirmed in the docs we checked.
Audit logs	Unverified	Not confirmed in the docs we checked.
Kill switch / interrupt	Unverified	Not confirmed in the docs we checked.
Network egress control	Unverified	Not confirmed in the docs we checked.

Unverified: Sandboxing, Secrets handling, Audit logs, Kill switch / interrupt, Network egress control. That means we could not confirm it in public docs, not that it is missing.

Sources

https://docs.continue.dev/ide-extensions/agent/how-to-customize
https://docs.continue.dev/cli/tool-permissions