Allow-lists and limits

You can narrow what your intern's agent may do beyond the token: who it may write to, which links it may use, and how many requests it may make in an hour. A request that breaks a rule is refused before it reaches you.

Who the agent may write to

Each connected Gmail or copy-and-paste inbox has a collapsible line starting "Who the agent may write to". Open it.

1. In "Allowed recipients", list who a message from this account may go to, one per line: a full email address, or a domain such as example.com, which covers its subdomains.
2. In "Allowed link domains", list the sites links in a message may point to.
3. Press "Save the lists".

A message to anyone else, or with a link elsewhere, is refused. Leave a list empty to allow anyone or any link; every message still waits for your approval.

Allow-lists do not apply to a web address connection, because every post to it already waits for you.

This agent's own limits

Our limits are per token, per kind of request, per hour: a number for each kind of read or draft, and a lower number for each kind of message. The card's "This agent's own limits" says what they are. You can set lower ones for one agent:

1. Fill in "Reads and drafts per hour" and "Messages per hour". Leave a box empty to use ours.
2. Press "Save the limits".

A request over the limit is refused with "too many requests in an hour", and you see it in the activity.

Never automated

What you said must never be automated, on your facts page, is enforced on every draft and message: the gateway refuses anything that mentions it, or a few words meaning the same. You do not need to repeat it here. See The facts page.