Antigravity 2.23.0 adds a permissions picker and MCP repair
Google dated Antigravity 2.23.0 October 12 2026. The update adds a permissions picker, MCP repair controls and improved attachment handling.
The download page lists 2.23.0 under Antigravity 2.0, with macOS, Windows and Linux installers. The separate CLI is listed at 1.3.1. Check the product heading as well as the version number before downloading, since updating one client does not establish that another is current.
Understand the preset before switching
A picker in the message box selects the permissions preset. Use Global Settings returns a project with its own permissions to the global preset.
The current permission guide says the updated engine operates on macOS and Linux. Windows retains the previous system. This documentation explains the behavior behind the control, rather than establishing that the engine itself first shipped in this release.
On macOS and Linux, Default permits terminal work inside a sandbox scoped to the workspace and temporary directories. Work outside it requires approval unless a command rule covers the operation. Request Review disables the sandbox and asks before terminal commands. Turbo also disables it and grants broader file, command and tool access.
Explicit rules override presets. Deny takes priority over Ask, which takes priority over Allow. A broad Ask rule can therefore still trigger a prompt despite a narrower Allow rule. Before assuming a preset change failed, inspect the applicable rules and whether the project inherits the global choice. The visible preset alone does not explain every approval.
Separate server repair from tool access
Fix with Agent can diagnose and install missing dependencies when an MCP server fails to start. Server menus gain Restart, and Google reports fixing restarts that left servers stopped.
MCP connects an agent to external context and actions, such as database schemas or issue creation. The MCP guide places installed servers in Settings under Customizations. From there, users can add a server through the store, toggle it off or on, refresh it, or uninstall it. These management controls are documented capabilities, not all new additions in 2.23.0.
Connection status, authentication and permission to call a tool are separate checks. The guide documents OAuth authentication through the server settings and policy rules for an individual tool, an entire server or every MCP tool. Review the scope that matches the task. A server can expose both useful context and actions that modify a connected service.
For troubleshooting, first identify whether the server starts, whether it authenticates and whether the requested tool is allowed. That sequence helps distinguish an installation problem from an access decision. Repeatedly repairing a working server will not explain a policy rule that requires approval.
Attachments get more room
Prompts now accept ZIP archives and folders. The agent unpacks archives with its tools. Images and videos open in a full screen viewer, with image zoom and playback controls.
Check the installation that will run the task
The listed app requirements include macOS 12 or later and Windows 10 or later. Separate Intel and Apple Silicon downloads are available for Macs, while Windows and Linux list x64 and ARM64 builds. Select the package for the machine running the agent before checking whether the new controls appear.
Google says updates roll out gradually and may take several days to reach everyone.
Earlier ByteForward coverage of Windows sandbox changes in Antigravity CLI concerns the separate terminal client. Keep that product distinction when comparing instructions or release notes.
Illustrative coding photograph by Lisa Fotios via Pexels under the Pexels License. The scene is not an Antigravity screenshot. No endorsement is implied.
