Google Gemini could gain broader access to Mac files, apps and the web

Google appears to be testing a desktop-control feature for its Gemini app on macOS that could let the AI work with files, websites and native apps. The feature is not live, and Google has not confirmed it, according to BleepingComputer, which cited references found by TestingCatalog on X.

A hidden “Additional sandbox options” setting in Gemini Desktop reportedly describes access that could allow Gemini to read, create, modify or delete files beyond folders a user has connected. A pop-up also suggests it could communicate with Mail, Safari and Messages and take actions through those apps. The wording says some actions may happen without asking for permission first, depending on the settings enabled.

The report says users would still be asked to confirm certain sensitive actions, including buying products, transferring money, creating an online account, accepting legal terms on their behalf or changing sensitive personal information. The feature’s precise safeguards and how users would grant access remain unclear.

The setting appears connected to Google’s broader plans for Gemini to operate across a computer rather than only in a chat window. It is unclear when Google might release the feature, which the report calls “Full Access,” or which Gemini model would power it. BleepingComputer also notes that Apple is considering making it harder for AI agents to access personal files and data on Mac.