Can a visitor talk the agent into doing something?

Messages that look like instructions are treated as data, nothing is written on such a turn, and card numbers are removed before the model sees them.

AI agents with your own model key

Run your chat, WhatsApp and voice agents on your own key from the AI provider you already use (or any compatible endpoint), while our rules decide what an agent may do.

Steps

Settings → AI keys: add a key. It is checked once, stored encrypted and never shown again (only its last four characters).
Choose per agent which model to use, and what happens if your key fails: answer on our model, or do not answer.
In the agent's Model and rules tab, choose its tools and limits. Every action the model proposes is checked against rules it cannot change.
Run the safety rehearsal: seven scripted difficult visitors, with a report quoting each reply.
Open any conversation to read "Why the agent did this": the tools it ran, what the rules refused, handoffs and fallbacks.

Questions

Can a visitor talk the agent into doing something?: Messages that look like instructions are treated as data, nothing is written on such a turn, and card numbers are removed before the model sees them.

Updated 2026-10-02 · llms-full.txt