Is there a way to disable JAN's ability to run terminal commands?

[wh33t]

I can't figure out which MCP tool allows this terminal command stuff to happen.

I do want JAN to be able to read/write files in the directory I have allowed, but I don't want it to be able to execute seemingly arbitrary commands like echo or date. What do I tweak to fine tune this behavior?

[usmanmateen]

It isn't one of your MCP tools. Besides the MCP servers you add, Jan's main chat has one built-in tool: a sandboxed shell, with no network access, writes only inside the chat's own workspace, and no access to your home folder. That's what runs echo and date.

Until recently there was no way to turn it off (#9222). Jan 0.8.7 (released 20 October) adds a switch for it (#9235):

1. Update to 0.8.7.
2. In the message box, click the terminal icon next to the web search toggle (tooltip Shell) so it turns grey.

With the switch off, the shell tool isn't offered to the model at all, and neither is the part of the system prompt that describes it. It applies from the next message without a restart, and the setting is kept after you relaunch. Your filesystem MCP server isn't affected, so reading and writing files in the directory you allowed keeps working.

Notes:

• The icon only appears for models with tool support, and only when an OS sandbox is available. Without one, Jan doesn't offer the shell at all.
• Cowork (in the nightly builds) has its own tool set and doesn't use this switch. There, Plan mode stops shell commands but also stops file edits.

[wh33t]

Thank you! A+ response.

[Dasharonii]

"In the message box, click the terminal icon next to the web search toggle..."

I don't have this option myself and yet, I should as the model I am using does support tools. Is this a CLI exclusive feature via its desktop chat agent or is something preventing it from showing up in 0.8.8?