Add your first project

Add or clone

Use RepoTunnel's local project picker to register an existing project, or use its GitHub workflow to clone a repository into a project location you control.

Choose access

• Read-only: inspection only
• Read/write + AI Review: writes wait for local approval
• Read/write + AI Auto: supported writes can apply automatically inside the existing security boundaries

Verify

Ask the connected AI client to list approved workspaces and inspect the selected project before allowing it to edit.

What exactly gets approved

A workspace is a real local folder registered by RepoTunnel. The AI uses an opaque workspace identifier instead of receiving an arbitrary host path. RepoTunnel resolves file operations within the approved root and applies protected-path and symlink rules.

Choose a normal development folder for your first run. You do not need to approve your entire home directory or an entire disk.

Test with a non-destructive request

After connecting your MCP client, ask it to list approved workspaces, then inspect the project structure and read a harmless README or source file. Check that the result matches your real project.

For a read-only workspace, an attempted write should be refused. For AI Review, file modifications should wait for local approval. For AI Auto, compatible allowed changes may apply immediately and appear in history.

• Workspace listing works
• Project tree or file read matches the selected project
• Protected credential paths remain inaccessible
• The effective write policy matches what the user selected

Avoid confusion with command policy

File permissions and command permissions are different. A project may allow reading/writing source files but still require a separate decision for running terminal commands. Inspect both policies when an AI reports a permission refusal.

Read the setup panel

Projects detects the selected repository’s framework, package manager, dependency readiness and development command. If preparation is needed, inspect the offered setup before using Prepare project.

Refresh the panel after dependencies or project configuration change. A detected preview address is a runtime observation, so verify that a service is actually listening before opening it.

Open files and save durable context

Use the project rail and explorer to select the intended project/file, then use editor or project search for the task. Removing a workspace registration does not delete the project’s contents.

Add a useful project summary, goals and settled decisions in the Project continuity panel so another AI can continue with the right context.