Settings & Guardrails
Scope and rate controls
Bound what an agent and its credentials can do
The new Builder enforces scope through agent instructions, narrow subagent routing, attached knowledge, connector audiences and allowed fields, MCP grants, and enabled deployment channels. Sandbox publishable keys also have usage limits.
Test out-of-scope requests and repeated messages in Playground. Keep application-level rate limiting and abuse controls in front of server API integrations.