accessFlow Code Agent only requires the minimum permissions needed to perform automated reviews. It doesn't modify your source code unless you choose to apply a suggestion in GitHub.

Required permissions

• Pull requests (read & write): Reads code changes in your pull requests (PRs) and posts inline accessibility suggestions and comments.
• Contents (read-only): Fetches the full content of modified files and resolves repository configuration files (like codeagent.yml).
• Checks (read & write): Creates and updates Check Run summaries on your PRs.
• Issues (read & write): Powers the interactive chat interface. GitHub treats top-level PR conversation comments as issues, which allows accessFlow Code Agent to read and respond to slash commands (for example, /codeAgent help).