FocusDragon asks for a few macOS permissions during setup. Each one unlocks a specific capability — none of them are blanket asks. Grant the ones your blocks need.
Background Service (Login Item)
This is the always-on daemon that enforces your blocks even when the FocusDragon window is closed or quit. Without it, blocks would stop the moment you quit the app — which is exactly the bail-out path FocusDragon exists to prevent. macOS asks once at setup and the daemon is registered through the macOS Login Items system.
Full Disk Access
Required. The background daemon needs Full Disk Access to modify /etc/hosts, which is how FocusDragon blocks domains at the DNS level — system-wide, across every browser, including ones we don't have an extension for. Without it, DNS-level blocking silently does nothing. The daemon executable ships inside the FocusDragon app bundle (at Contents/MacOS/FocusDragonDaemon), so granting Full Disk Access to FocusDragon.app covers it.
Accessibility
Used to read the frontmost app and window title, and to force-quit blocked apps when they open. Without it, website blocking still works via DNS and the browser extensions, but app blocking and some enforcement checks are weaker.
Notifications
Used for lock countdowns, session reminders, and setup prompts. Optional — if you deny, blocks still enforce, you just won't get the heads-up overlays.
How to grant or revoke
Open System Settings → Privacy & Security, then scroll to the specific pane (Full Disk Access, Accessibility, etc.), find FocusDragon, and toggle it on. You may be asked to restart FocusDragon afterwards. FocusDragon's Settings → Permissions (or the in-app guides) deep-link to the right pane.