Last updated
Keep private keys in a server-side secret store or isolated signer.
Set per-request, hourly and daily limits.
Restrict networks, assets, hosts and capability types.
Check payment state before retrying an ambiguous request.
Remove details that the selected tool does not need.
Treat retrieved pages and model output as untrusted.
Sanitize content before rendering it as HTML.
Require approval for transfers, orders and other actions.
Log status, timing and payment state instead of prompt bodies.
Redact authorization headers, cookies and wallet secrets.
Keep diagnostic capture disabled by default.
Document access and retention for operational logs.
Last updated