diff --git a/ostp-gui/src-tauri/capabilities/default.json b/ostp-gui/src-tauri/capabilities/default.json
index 4cdbf49..6a379ca 100644
--- a/ostp-gui/src-tauri/capabilities/default.json
+++ b/ostp-gui/src-tauri/capabilities/default.json
@@ -5,6 +5,7 @@
   "windows": ["main"],
   "permissions": [
     "core:default",
-    "opener:default"
+    "opener:default",
+    "allow-app-commands"
   ]
 }
diff --git a/ostp-gui/src-tauri/permissions/app-commands.toml b/ostp-gui/src-tauri/permissions/app-commands.toml
new file mode 100644
index 0000000..6a120e8
--- /dev/null
+++ b/ostp-gui/src-tauri/permissions/app-commands.toml
@@ -0,0 +1,13 @@
+[[permission]]
+identifier = "allow-app-commands"
+description = "Enables access to core OSTP commands"
+
+[permission.commands]
+allow = [
+  "start_tunnel",
+  "stop_tunnel",
+  "get_tunnel_status",
+  "get_metrics",
+  "get_config",
+  "save_config"
+]