Security
Control who can use your agent and how fast. These settings protect your agent from misuse and keep conversations appropriate.
Where to find it
Open your agent, go to Settings, then Security. Click Save after making changes.
Settings that protect your agent
| Setting | What it does |
|---|---|
| Enable Rate Limiting | Limits how many messages one visitor session can send in a time window. Set Maximum Requests (default 60) and Time Window in seconds (default 60). Visitors over the limit are asked to wait. |
| Allowed Domains | Only websites on your list can use your agent. Leave it empty to allow every website. Add a domain with Add Domain. |
| Blocked IP Addresses | Stop specific visitors by exact IP address with Block IP Address. Ranges are not supported. |
| Profanity Filter | Rejects messages that contain words from a built-in list of English profanity and asks the visitor to rephrase. |
| AI Content Moderation | Checks messages with an AI moderation service and blocks harmful content. If the check itself is unavailable, the message goes through. |
| Maximum Message Length | Caps how long a visitor's message can be, from 100 to 10,000 characters (default 2,000). |
Settings that are coming soon
Session Timeout, Require User Identification and Require HTTPS appear on the page, but they do not change how your agent behaves yet.
Tip: If your agent only appears on your own website, add that website under Allowed Domains. It stops other sites from using your agent and spending your credits.