Governance & Security

Use approvals to configure human review of sensitive tool calls, and audit logs to investigate requests. The guides below also explain conversation sessions, per-connection IP restrictions, and rate limits, which apply to Bearer API key connections.

• Human-in-the-Loop Approvals
  • When to use approvals
  • Configure approvals per connection
  • The approval workflow
    • Step 1 — The AI tries a risky action
    • Step 2 — The approver reviews the request
    • Step 3 — Approve or reject
    • Step 4 — The AI surfaces the result
  • Approval lifecycle
  • Cron behaviour
  • Best practices
• Audit Logs
  • Where to find it
  • What is recorded
  • Search and filter
  • Payload logging
  • Retention and cleanup
  • Cannot edit, cannot delete
  • Use cases
• Sessions
  • Where to find it
  • What a session record contains
  • Manual control
  • How sessions interact with connections
  • Tools that use the session
  • Cleanup cron
  • Search filters
• Rate Limits
  • Defaults
  • Per-connection overrides
  • How it is enforced
  • What happens when a connection hits the limit
• IP Restrictions
  • Where to configure them
  • Supported formats
  • How the rules combine
  • Trusting your reverse proxy
  • Typical use cases
  • What the user sees