Customize Permissions
Beyond the default owner lock mechanism, you can customize your Bot's permission behavior through allowlists and configuration files.
Allowlist Management (allowFrom)
The owner can add other users to the allowlist, enabling them to privately chat with the Bot. Allowlisted users have the same private chat permissions as the owner.
// Tell the Bot in private chat:"Add user 123456789 to the allowlist""Remove user 123456789 from the allowlist"Configure via AGENTS.md
The AGENTS.md file can define more granular permission rules. For example, restricting certain tool usage, setting auto-reply rules, etc.
Modifying AGENTS.md requires asking the Bot to edit the file in private chat. AGENTS.md has the highest priority and overrides other configurations.
Tip: Manage the allowlist carefully. Allowlisted users have full private chat permissions, including code execution and file operations.