Safety
The guard rails around agents.
- Plans before paying. Planning is free; rendering needs drafts from a plan. Paid tools state their cost.
- Cannot post or delete. Nothing reaches TikTok or Instagram, and nothing can be deleted, so an agent mistake never destroys work. Waiting videos can be cancelled and their credits come back.
- Same limits as the app. Credits, the waiting queue, storage, uploads and AI writes are checked by the same database functions.
- Disconnect any time. Each connection is a key in Settings › Connect to AI; revoking it stops the next call.
- No credentials in URLs. OAuth for chat apps, Bearer headers for everything else.
- Workspace walls. A key reads and writes only its own workspace; ids from another workspace answer
not_found. - AI personas stay labelled. Persona objects carry
ai_made: true; posts should keep each platform's AI label on.
What an agent reads (videos, lines, captions) goes to that agent's provider under the founder's own account with it. Getuser sends nothing to them on its own.