Google Tests Gemini Mac Controls That Could Reach Files and Apps
Hidden Gemini Desktop settings point to broader Mac access for files, apps and web actions, though Google has not confirmed a launch plan.
BleepingComputer reported that Google is testing Gemini Desktop controls that could let the AI reach beyond connected folders on a Mac, opening the prospect of file, app and web access from inside the assistant.
The capability is not live, and Google has not confirmed a launch plan.
The evidence comes from hidden interface references to “Additional sandbox options” in the Gemini Desktop app, a setting that would expand what the assistant can do on macOS.
If enabled, the controls could allow Gemini to read, create, modify or delete files anywhere on a user's computer rather than only inside folders that have been explicitly connected to the assistant.
That shift would move Gemini closer to a computer-use agent, not just a chat tool with limited file attachments.
The same hidden interface points to app-level actions.
Gemini could communicate with apps such as Mail, Safari or Messages and perform actions through them, creating a wider path between the assistant, local data and web activity.
The access would still have guardrails.
Gemini is expected to ask for confirmation before buying products, transferring money, creating an online account, accepting legal terms or modifying sensitive personal information.
Those controls would make the experience closer to agent systems that require explicit user approval for higher-risk actions.
The unresolved issue is how much operating-system permission Apple will allow.
Apple is considering ways to make it harder for AI agents to reach personal files and data on the Mac, which could limit how broadly a desktop assistant can operate even if Google exposes the setting.
The feature appears to fit Google's broader plan to move Gemini across files, websites and native apps rather than keeping the assistant inside a standalone chat window.
A desktop agent with that reach could help users complete multi-step tasks, but it also raises the stakes for permission prompts, sandboxing and clear boundaries around personal data.
Google has not disclosed when the Full Access option might roll out or which Gemini model would power it.
Until those details are confirmed, the material question is whether Google can give Gemini useful desktop control without making ordinary Mac files and app actions feel permanently exposed.
