A known owner
Create a stable assistant record tied to an owner so connected tools recognize approved assistants.
Set clear limits before assistants act.
Register an assistant, set limits approved by its owner, and require that receipt before protected work runs in development or production.
What agent permissions includes
Clear limits
Allowed and denied actions, spend caps, and expiration live on the permission receipt.
A check before action
Connected assistant tools, developer tools, and production services check status again before each protected action.
Agent and assistant permissions in the NEUS productHow it works
Register, limit, connect, check
- 1Create the agent in NEUSOpen Agents and register the assistant or automation under its owner.
- 2Set approved limitsSet allowed tools, denied actions, spend cap, and expiry on the receipt.
- 3Connect the tool that will enforce the limitsConnect NEUS so the tool checks the latest approval before protected work runs.
- 4Block actions outside the limitsProtected work runs only while the permission receipt stays current.
Agent permission
Approved
Agentops-assistant
OwnerAcme Ops
Allowedread, draft, notify
Deniedtransfer, delete
Spend cap$25.00
Expires7 days
Connected tools confirm limits before a protected action runs.
Integration options
Use the path closest to your first protected decision.
- Hosted check
- Start without building a custom screen
- JavaScript
- Add the check to a product backend
- HTTP
- Check a receipt from any service
- React
- Drop the flow into an existing interface
- Assistant setup
- Bring trust checks into developer tools
Give every agent authority with limits
Persistent context is dangerous without persistent identity and constrained authority. Register the agent, attach trusted receipts as context, delegate exact permissions, then check those limits before a sensitive action.
Agent permission
Approved
Agentops-assistant
OwnerAcme Ops
Allowedread, draft, notify
Deniedtransfer, delete
Spend cap$25.00
Expires7 days
Connected tools confirm limits before a protected action runs.
- Private by default
- Owners choose what each connected product can see.
- Checked when used
- Status, limits, and expiration are confirmed before the action.
- Reversible control
- Expired or revoked receipts stop approval immediately.
Agent permissions questions
Plain answers about setup, limits, and connected tools.