Safety controls

On top of the always-on governance model, the plugin offers four optional controls. All four stay off until you set them.

Per-minute rate limit

Set a per-minute cap on the Settings tab under “Rate limit (per minute)”. Each connection can make that many agent calls a minute, counted per agent user, and 0 turns the limit off. Calls over the cap are denied and logged on the Activity Log tab, so you can spot a connection that keeps hitting it.

IP allowlist

Restrict connections to a list of IP addresses you trust. Off until you set it.

Force-to-draft mode

Force new content the agent creates to draft, so nothing an agent writes goes live without a human publishing it.

Title-length cap

Cap the length of titles the agent can set, a small guard against runaway or malformed content.

Layer these on as you need them

None of these are required for the plugin to be safe: least privilege, off by default, capability gating, and the audit log do that work already. These four are extra guards for when you want a tighter box around a specific connection.

Next steps

• Governance concepts: the always-on model underneath.
• Troubleshooting: common connection snags and fixes.