Fine-grained controls over what agents' tools can access — file paths, network endpoints, and shell commands.
Restricts which file system paths agents can read from and write to. Prevents agents from accessing sensitive system files or other users' data.
| Setting | Description |
|---|---|
| Enable | Toggle path sandboxing |
| Allowed Paths | Directories agents can access (e.g., /home/agent/workspace, /tmp) |
| Blocked Paths | Directories that are always blocked (e.g., /etc/shadow, ~/.ssh) |
Prevents Server-Side Request Forgery — agents making network requests to internal services, cloud metadata endpoints, or private IP ranges.
| Setting | Description |
|---|---|
| Enable | Toggle SSRF protection |
| Block Private IPs | Block requests to 10.x.x.x, 172.16.x.x, 192.168.x.x, 127.x.x.x |
| Block Cloud Metadata | Block requests to 169.254.169.254 (AWS/GCP metadata endpoint) |
| Allowed Internal Hosts | Internal hosts that agents ARE allowed to reach (exceptions to the block rules) |
Controls which shell commands agents can execute via the exec tool.
| Setting | Description |
|---|---|
| Enable | Toggle command sanitization |
| Mode | Blocklist (block specific commands) or Allowlist (only allow specific commands) |
| Blocked Commands | Commands agents cannot run: rm -rf, shutdown, reboot, mkfs |
| Allowed Commands | In allowlist mode, only these commands can be executed |
Log all tool usage with optional API key redaction. Provides a trail of every tool invocation for forensics and compliance.
| Setting | Description |
|---|---|
| Enable | Toggle tool audit logging |
| Redact API Keys | Automatically redact API keys, tokens, and passwords from log entries |
Limits how frequently agents can invoke tools. Prevents runaway loops and resource exhaustion.
| Setting | Description |
|---|---|
| Enable | Toggle tool rate limiting |
| Calls per Minute | Max tool calls per agent per minute |
| Calls per Hour | Max tool calls per agent per hour |
Automatically disables tools that are failing repeatedly. Prevents agents from wasting tokens retrying broken operations.
| Setting | Description |
|---|---|
| Enable | Toggle circuit breaker |
| Failure Threshold | Number of consecutive failures before a tool is disabled |
| Recovery Time | How long before the tool is re-enabled for retry |
Collect anonymous usage metrics for tool performance monitoring.
| Setting | Description |
|---|---|
| Enable | Toggle telemetry collection |
| Metrics | Tool call counts, latency percentiles, error rates |